last executing test programs: 3m44.986364949s ago: executing program 1 (id=59): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/icmp6\x00') signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigsuspend(&(0x7f00000000c0)={[0x7e44]}, 0x8) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x400000000000004, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000040)=0x2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ec00000010000108000000008100000000000000", @ANYRES32=r3, @ANYBLOB="0b00000000000000cc001a8018000a80140007"], 0xec}}, 0x44000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3m43.525181401s ago: executing program 1 (id=71): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) (async, rerun: 32) r1 = eventfd2(0x0, 0x0) (async, rerun: 32) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r1}]) (async) shutdown(r0, 0x0) 3m43.156160195s ago: executing program 1 (id=76): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8}, 0x94) (async) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='hi', 0x2) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)="31303030f5", 0x5) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'caif0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x7, 0xae2, 0x9, @remote, @mcast1, 0x40, 0x7, 0x1, 0xfffffffa}}) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="2000000005060300000000003b555d550d0100000900030073797a3200000000"], 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x880) (async) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0xffe6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x884}, 0x40) (async) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000b00)=ANY=[@ANYBLOB="00000000000000004333e40151935100007f1ae322f43f74ea5119cd2eb791a0a367108813b4454036d9698b3816121646e40554863b2def4dbad255b3c3659f0b92b90b8d41c3623805dad11468167e9f4c2d6ee867169cecdfac970d75903b9eaaad4451a8a63564d85a957153aad177cc", @ANYRES16=r9, @ANYBLOB="00042dbd7000fbdbdf250800000006000b0010000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x710, 0x1, 0x2, 0x315d, {{0x11, 0x4, 0x0, 0x3c, 0x44, 0x66, 0x0, 0xbd, 0x29, 0x0, @multicast1, @multicast1, {[@cipso={0x86, 0x2d, 0x1, [{0x2, 0x7, "8cab4ff412"}, {0x5, 0x9, "b8d23ac920bf6b"}, {0x2, 0x8, "5526d8548b73"}, {0x0, 0x5, "9e8d2c"}, {0x5, 0x8, "0744f287e3eb"}, {0x0, 0x2}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x8, 0x8, 0x3, 0x4, {{0x24, 0x4, 0x2, 0x5, 0x90, 0x65, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@cipso={0x86, 0x26, 0x2, [{0x7, 0xe, "a70b44a29e590f2533d9c1d3"}, {0x2, 0x12, "d91dce33ad4626c200a282bbbf2b9187"}]}, @ssrr={0x89, 0x17, 0x1c, [@empty, @remote, @local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0xa, [@empty, @multicast1]}, @noop, @rr={0x7, 0x1b, 0x79, [@loopback, @dev={0xac, 0x14, 0x14, 0x3e}, @empty, @local, @empty, @local]}, @generic={0x86, 0x8, "c53bf9e9c55d"}, @noop, @generic={0x83, 0x8, "7cabb6a0960e"}]}}}}}) r12 = syz_open_dev$sg(&(0x7f0000005980), 0x0, 0x80201) write(r12, &(0x7f00000002c0)="19718f3d24000000a50c0000ed4a46b1ca9534b61f6aff497b583a578124db953db7a8c61275ff93e0ed", 0x2a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'pim6reg1\x00', 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r15 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="50020000", @ANYRES16=r15, @ANYBLOB="000228bd7000fddbdf250d000000880001801400020064766d7270300000000000000000000008000300060000001400020076657468305f746f5f7465616d000000140002006772653000000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="1400020070696d726567310000000000000000001400020076657468315f746f5f6272696467650008000100", @ANYRES32=r5, @ANYBLOB="080003000300000078000180140002000000000000000000000000000000000008000300010000001400020076657468305f746f5f626f6e64000000140002006e6963766630000000000000000000001400020067656e6576653100000000000000000008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f746f5f7465616d0000003000018008000100", @ANYRES32=r8, @ANYBLOB="14000200766c616e310000000000000000000000080003000200000008000100", @ANYRES32=r10, @ANYBLOB="6c0001801400020070696d36726567310000000000000000140002006261746164765f736c6176655f30000008000100", @ANYRES32=0x0, @ANYBLOB="1400020069703667726574617030000000000000140002006261746164765f736c6176655f31000008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="880001801400020076657468305f766972745f776966690008000300020000001400020074756e6c30000000000000000000000008000100", @ANYRES32=r14, @ANYBLOB="1400020064766d7270300000000000000000000008000300010000001400020064756d6d7930000000000000000000001400020070696d36726567000000010000000000080003000100000018000180140002007663616e3000c68265b47a4255f0356d078d4e550000000000000000008ff7cefc064ddbe05bd5fa1b85b2807e89c60b263541af0d4ccd41cb5bd9235d5b43ba0702e24a0d8832ba415c4b64ab7de25de4ae5dd299dc307bc783cb85d01d653862ef8a200f0257ccfc6e0ac2a6aa7471eaf82ac59039e916c3a2fa355f7959cfa8d88f615524"], 0x250}, 0x1, 0x0, 0x0, 0x1}, 0x4000050) 3m42.811011422s ago: executing program 1 (id=80): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x17, &(0x7f0000000100)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, 0x0}, 0x388b) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') execve(&(0x7f0000000500)='./my_configfs/target/core/rd_mcp_0\x00', &(0x7f0000000600)={[&(0x7f0000000540)='syz0\x00', &(0x7f0000000580)='-\\\x00', &(0x7f00000005c0)='GPL\x00']}, &(0x7f0000000840)={[&(0x7f0000000640)='upperdir', &(0x7f0000000680)='/^%@\x00', &(0x7f00000006c0)='+\x00', &(0x7f0000000740)='\x00', &(0x7f0000000780)='security.capability\x00', &(0x7f00000007c0)='workdir']}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xffe, &(0x7f00000014c0)=""/4094, 0x0, 0x1}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x4002010, 0xffffffffffffffff, 0xbef8f000) chdir(&(0x7f0000000000)='./bus\x00') r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast2, @in6=@ipv4={""/10, ""/2, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000380)=0xe8) r5 = syz_open_dev$sndctrl(&(0x7f0000003f40), 0x1, 0x109800) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000004000)={{0x4, 0x6, 0x4, 0x9, 'syz0\x00', 0x7ff}, 0x0, 0x3, 0x8, 0x0, 0x0, 0x6ca, 'syz1\x00', 0x0}) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x0, 0x10) lsetxattr$security_capability(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), &(0x7f00000003c0)=@v3={0x3000000, [{0xffff0001, 0x1}, {0xff, 0x9}], r4}, 0x18, 0x1) unlink(&(0x7f0000000100)='./file0\x00') 3m42.230989132s ago: executing program 1 (id=88): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)={0x29, 0x4, 0x0, {0x1, 0xb4a, 0x1, 0x0, [0x0]}}, 0x29) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_io_uring_setup(0x4ec5, &(0x7f0000000140)={0x0, 0xf9ca, 0x2, 0x3, 0x224}, &(0x7f0000000080), 0x0, 0x0) geteuid() syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m41.136814512s ago: executing program 1 (id=94): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x103, 0x5, {0x0, 0x3, 0xffffffff, 0x7ff}}) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x7}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x68, {0x2, 0x8}, {0x5}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x0, 0x1}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000f00", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) bind(r0, &(0x7f0000000740)=@nfc_llcp={0x27, r4, 0x1, 0x3, 0x9, 0x5, "375d9934562837c33c626a247e0384e7193e6a31840fec4203e12956924fc06ddb86e69ccbb63666ae8abdd81d29f3f70175f7cffd7a6abacbf38d5eb5fc38", 0x5}, 0x80) 3m40.841566591s ago: executing program 32 (id=94): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x103, 0x5, {0x0, 0x3, 0xffffffff, 0x7ff}}) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x7}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x68, {0x2, 0x8}, {0x5}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x0, 0x1}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000f00", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) bind(r0, &(0x7f0000000740)=@nfc_llcp={0x27, r4, 0x1, 0x3, 0x9, 0x5, "375d9934562837c33c626a247e0384e7193e6a31840fec4203e12956924fc06ddb86e69ccbb63666ae8abdd81d29f3f70175f7cffd7a6abacbf38d5eb5fc38", 0x5}, 0x80) 2m51.454882114s ago: executing program 2 (id=538): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev, @initdev}, &(0x7f0000000c80)=0xc) (async) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x250, 0x3a8, 0x3a8, 0x250, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0x0, 0x0, 0xffffffff], [], 'vlan1\x00', 'veth0_to_team\x00', {0xff}}, 0x0, 0xa8, 0xf0, 0x700}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000206, 'syz1\x00'}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x87, 0x80, 0x2, 0xfe, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private0, @empty, [0x49fc5045ed3ae8ef, 0xff000000, 0x6675841787364651, 0xff], [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0x8000007f, 0xff], 0x202, 0x8}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f0000000340)={0xa, 0xf5, 0x3fffb, @dev}, 0x1c, 0x0}, 0x20000b10) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000240)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./tracing/dynamic_events\x00', 0x1, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r2}, 0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f00000002c0)=0x803, 0x4) (async) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@link_local, @random=' u\b\x00', @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x14, 0x8, 0x1, 0x8, [{@private=0x4a010100, 0x6a9d2469}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x2a5b}]}]}}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "8e118b91368e5fcee44c2afd6f146d7a77f4936c9987c0b0", "e5e9186df61e7497c9d79a65bbeb111b2d21e95a312bd1795cccaa4cd188de61"}}}}}}, 0x0) (async) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x10000}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000100000000000004100010018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085200000040000001800000001000100000000000900000018400000040000000000000000000000850000000f0000008520000003000000877300010100000018260000", @ANYRES32=r5, @ANYBLOB="0000fc999c2535b78791d93170000007000000181b00008dfb739a58a1347c38f6a201310cf08d1f1e94fff30c5804b9c4b873f84312c2c0c67026e1fd2c36", @ANYRES32=r5, @ANYBLOB="0000000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x3b0, 0x178, 0x178, 0xffffffff, 0x178, 0xa8, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, &(0x7f0000000180), {[{{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @remote, @loopback, @gre_key=0x9, @gre_key=0x3ff}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x21}, 0xff, 0xff, 'dvmrp0\x00', 'geneve1\x00', {0xff}, {0xff}, 0x67, 0x1, 0x60}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="f008921253b9", 0x9, 0xb, [0x29, 0xb, 0x38, 0x22, 0x12, 0x24, 0x21, 0x1c, 0x35, 0x1a, 0x23, 0x1d, 0x28, 0x22, 0x40, 0x26], 0x1, 0x8001, 0x5}}}, {{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x0, 0x7, 0x3], 0x1, 0x5}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x6, @dev={0xac, 0x14, 0x14, 0x10}, @rand_addr=0x64010100, @icmp_id=0x64, @icmp_id=0x64}}}}, {{@ip={@empty, @rand_addr=0x64010102, 0xff, 0xff000000, 'ip6gre0\x00', 'sit0\x00', {0xff}, {0xff}, 0x62, 0x1, 0x24}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x9, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@loopback, @port=0x4e20, @gre_key=0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) (async) lsetxattr$security_selinux(&(0x7f0000000280)='./tracing\x00', &(0x7f00000002c0), &(0x7f0000000300)='system_u:object_r:tmpreaper_exec_t:s0\x00', 0x26, 0x0) 2m51.388219629s ago: executing program 2 (id=542): socket$inet6(0xa, 0x1, 0x8010000000000084) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000340)=r1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0xfcff, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m51.319670339s ago: executing program 2 (id=544): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) (async) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r2, 0x504c3, 0x40}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x40}}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="dc297bf1ce66483446d8201c47351c48446d35092c264952b8f5dc29101250a70dd587d7ce50b9d0498d730e2ebab5f00af36c7140005940a14d8ab9b12d393c3d0c4ee11a4d7387a436eae3fdf34c3066886a8e313cc51eb9b9202e0dfa69ff22f804a605555a9229ba5cf9a481032d85f29f418f14be1c5a5068f0e59e7dca13596a93002b768a2a9162dc177d1b696f0a20d8249cb3241b2cf5952a014e7ec0efbedcb8a132773999003dd76838", 0xaf}, {&(0x7f0000000800)="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", 0x509}], 0x2, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @broadcast}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}], 0x38}, 0x200000e0) 2m51.189795384s ago: executing program 2 (id=546): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, @short={0x2, 0x2, 0xffff}}, 0x14, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20002090}, 0x804) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f0000001100)=""/4096, &(0x7f0000000040)=0x1000) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x138, 0x1a, 0x803, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0xe23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x4, 0x10001, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x20000000000000, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r4, &(0x7f0000000540)="28286d5f73638f33952a8fbf3318c5f56f6df3ae4b291d6e0cc9e7961db414a8914f6df033df38d627d906f474a6aed40310ef326e2d98a5d1ba7ac41ffd68ab3ad8dd0c808f64e3f4bc5be6513ef1ac66a6aaa17bd4918a20c7ed9fbf12b64c6d27", 0x62) chdir(&(0x7f0000000080)='./file0\x00') r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x21, &(0x7f00000004c0)={0x1f, 0x13, 0x4, 0x3}, 0x8, 0x20000000, 0x5, 0x0, 0x0, 0x20, 0x0}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregs(0xe, r6, 0x0, &(0x7f0000000480)=""/114) ptrace$setregset(0x4205, r6, 0x202, &(0x7f00000006c0)={&(0x7f00000005c0)="447f2453215e5d209faef9d9b08472ec246658fd87b9acd8a51e948bc04f51a388bbca7a8de610150f2bd1cd86b111043a7ad63c17429ee57a8da435c9821a2dd02a0eb151b8c932919ff5a36666012bc207e3ee2d18b695c5f0674ca73730fb850b7eb8b43090ef55f8eb73cb2c7c176ebe8257205e03e37e0f816c3784b917cb35e93513875d22704978e8bd9e95f1760ce1fe2dd2cfcd2b57f36ae78232a85078fd5d0e76d15fbcbb2c2c543b57eca5a59c0a8292e39aef7d6d02e88d1c64be7f76a993539ef9c8f71fa4eafc", 0xce}) ioctl$USBDEVFS_REAPURB(r5, 0x4004550d, 0x0) creat(&(0x7f0000000080)='./file1\x00', 0xec) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x20, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 2m51.08021353s ago: executing program 2 (id=547): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000100)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000001000, 0x4, 0x1b3f, 0x5, 0x42000000000001a, 0x6, 0x6, 0xb, 0x8}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000100)) mkdirat(r1, &(0x7f0000000280)='./file1\x00', 0x80) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%-010d \x00'}, 0x20) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000240)) 2m50.559917852s ago: executing program 2 (id=549): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@ng={0x4, 0xb}, 0x2, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x0, 0x200001, 0x801, 0x4, 0x7}) prctl$PR_SET_TSC(0x1a, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_open_dev$loop(&(0x7f00000004c0), 0x4, 0x101000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f00000fd000/0x2000)=nil, 0x2000, 0x2, 0x28012, r2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) writev(r3, &(0x7f0000000600)=[{&(0x7f0000000540)="a5c2dac60fe0c6744a87872a3136431d1525e68d464fd95777e20970ab6689fdae4a1fd16d296e9b628071d386cc1dd3cbce114d9f5ca47574bb8c0e34b970df4345a585896e57dfeddbadd08bf7ca8309a6072a65e41df369996604da11f70c17f1cdbcb87578533964cba23f3b5d19198475ac8eab8c29d9ed926c60e85ae3510f6e3f8d8d0fad1c29c5c573e7ab18d418", 0x92}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='0000:00:03.0', 0xc) recvmsg$unix(r4, &(0x7f0000000480)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f0000000340)=""/216, 0xd8}], 0x2}, 0x100) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2m50.492696917s ago: executing program 33 (id=549): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@ng={0x4, 0xb}, 0x2, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x0, 0x200001, 0x801, 0x4, 0x7}) prctl$PR_SET_TSC(0x1a, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_open_dev$loop(&(0x7f00000004c0), 0x4, 0x101000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f00000fd000/0x2000)=nil, 0x2000, 0x2, 0x28012, r2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) writev(r3, &(0x7f0000000600)=[{&(0x7f0000000540)="a5c2dac60fe0c6744a87872a3136431d1525e68d464fd95777e20970ab6689fdae4a1fd16d296e9b628071d386cc1dd3cbce114d9f5ca47574bb8c0e34b970df4345a585896e57dfeddbadd08bf7ca8309a6072a65e41df369996604da11f70c17f1cdbcb87578533964cba23f3b5d19198475ac8eab8c29d9ed926c60e85ae3510f6e3f8d8d0fad1c29c5c573e7ab18d418", 0x92}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='0000:00:03.0', 0xc) recvmsg$unix(r4, &(0x7f0000000480)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f0000000340)=""/216, 0xd8}], 0x2}, 0x100) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2m46.856201431s ago: executing program 0 (id=584): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000)) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x40502) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x4f5, 0x7d, 0x20}) 2m46.690654989s ago: executing program 0 (id=587): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x48080) flistxattr(r0, &(0x7f0000000040)=""/167, 0xa7) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x0, 0x1, 0x8, 0x40, r1}, &(0x7f00000001c0)=0x10) lseek(r0, 0x80000000, 0x7) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3f2, 0x1, 0xd, 0x25dfdbff, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = dup(r0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000340)) ioctl$KVM_RUN(r0, 0xae80, 0x0) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000380)=0x9, &(0x7f00000003c0)=0x2) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000400)={0x1, 0x0, @ioapic={0x1, 0x6, 0x3, 0x6, 0x0, [{0x8, 0x81, 0x2, '\x00', 0x30}, {0x3, 0x6, 0x5b, '\x00', 0x3}, {0x5, 0x8, 0xb, '\x00', 0x78}, {0x8, 0x8, 0x8, '\x00', 0x40}, {0x7, 0x5, 0x7, '\x00', 0x4}, {0x3, 0x7, 0x9, '\x00', 0x6}, {0x1, 0x4, 0x3, '\x00', 0xf}, {0x9, 0xc, 0x0, '\x00', 0x1}, {0x81, 0x1, 0x3, '\x00', 0x80}, {0x1, 0xb2, 0xad, '\x00', 0x3}, {0x4, 0x0, 0x0, '\x00', 0x5}, {0x5, 0x8, 0xa0, '\x00', 0x9}, {0x8, 0x7, 0x40, '\x00', 0xc7}, {0x2, 0x8, 0x2, '\x00', 0xf2}, {0x6, 0x40, 0x4, '\x00', 0x6}, {0x4, 0x6, 0xa, '\x00', 0xaa}, {0x0, 0x3c, 0xfa, '\x00', 0x5e}, {0xaa, 0x6a, 0xf9, '\x00', 0x1}, {0x6b, 0x1, 0x5, '\x00', 0x8}, {0x5, 0x8, 0x3, '\x00', 0xff}, {0x0, 0x7, 0x5, '\x00', 0x5}, {0x6, 0x6, 0x9, '\x00', 0xe}, {0x5, 0x54, 0x2, '\x00', 0x9}, {0x0, 0x33, 0x3, '\x00', 0x5}]}}) pipe2(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) tee(r4, r2, 0x7fffffffffffffff, 0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r7, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x9ac84909f9b6a0cd}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3ff}]}, 0x38}}, 0x24000095) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f00000007c0)=0x6) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000800)={{r4}, "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"}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x20, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008080}, 0xc0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001940)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)=@deltclass={0x58, 0x29, 0x10, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x3, 0x1}, {0x3, 0xa}, {0x2}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x846134f}}}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0xf, 0x2}}, @tclass_kind_options=@c_multiq={0xb}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f0000001a80)=0x1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000001d40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b00)={0x1f8, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0xfff7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0xe008}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xd}, {0x6, 0x11, 0xfff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfffffff7}, {0x6}}]}, 0x1f8}}, 0x4000010) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x18) openat$hpet(0xffffffffffffff9c, &(0x7f0000001d80), 0x204a06, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000001dc0), 0x4) 2m46.541082151s ago: executing program 0 (id=591): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="04f761ff503c7f21000000000000000011000101c0ce073e6feeb3d54b07aee7e472a4c86d077f6f2ded214ae0622ae8d9c0f0f56a2a20365dbd2358eedc4d89ff8e6f4d688d159618f0a90c8af9014f655664483aaf4db2a6a766", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00ff010000"], 0x28}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) timer_create(0x7, &(0x7f0000000080)={0x0, 0x29}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r3, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x2003) mkdir(&(0x7f0000000000)='./tracefs\x00', 0x196) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f00000000c0)='tracefs\x00', 0x40080, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/trace_options\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r7, 0x4068aea3, &(0x7f00000003c0)={0xcc, 0x0, 0x1}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x2004, 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94) openat(0xffffffffffffffff, 0x0, 0x80000, 0x84) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000200)="420f01c90f013fd35a00460f00921ea100000f09400f01df66b892000f00d8ffe66736260f74dc6466460f0b", 0x2c}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m46.230860489s ago: executing program 0 (id=598): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00', 0x800}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x44, 0x2e, 0x100, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0xb}, {0xb, 0x1}, {0x6, 0x7}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0xfffffffe}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x8001}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4c045) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x4, 0x1}, 0x6) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000200)="b13993f442bacb240d8bd9c58c1f2d38c67bdb46ed1bec62037b85e215adba671701708b93aac447dff9120cbcb26b372b89efa4b8f7bcd7e1acd6812b7fc3aa1b126d07717370924bb1faaa95f69e2077f18532a8416e31f2f2900efe62dff601b64c37b33d19c33a9b2279ac5e13f879aa4119735dd800f81a9f2bfe77e875cff67c54bb01a9d142e1f24e3e79adc6acea5b718d0da254dc8f21c6119de163e8bedb3c777d95d0744e294190492183070d64584fbf4b4ae8c7d09dd572f324e199f86156cc89f11092a8d80e4d3e4d1d") ioctl$TCSETS(r1, 0x5402, &(0x7f0000000300)={0x4, 0x4, 0xffffffff, 0x3, 0x17, "8d5ed4d9525876763814ec212f8f859f6d8a7b"}) (async) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000340)) (async) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000380)={0x8, 0x9, 0x7, 0x3, 0x5}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f00000003c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @private=0xa010102}}, 0x24) socket$rxrpc(0x21, 0x2, 0x2) ioctl$TIOCSBRK(r1, 0x5427) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x68, r5, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xffff, @link='syz0\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c080) readv(r0, &(0x7f0000000880)=[{&(0x7f0000000580)=""/25, 0x19}, {&(0x7f00000005c0)=""/242, 0xf2}, {&(0x7f00000006c0)=""/229, 0xe5}, {&(0x7f00000007c0)=""/83, 0x53}, {&(0x7f0000000840)=""/21, 0x15}], 0x5) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040800}, 0x4810) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000a40)=r6) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r4) sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, r7, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x2f}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000bc0)={0x0, 0x8, 0x20, 0xf2a2, 0x7}, &(0x7f0000000c00)=0x18) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000c40)={r8, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f0000000d00)=0x84) (async, rerun: 32) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000d40)={{0x0, 0x1cf6, 0x8000000000000000, 0x8, 0x733, 0x0, 0x4, 0x4, 0x8bd0, 0x7d26, 0x5, 0x8001, 0x8000000000000001, 0x200, 0x8000}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (rerun: 32) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000e00)={r9, 0x2}) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x64, 0x7, 0x6, 0xc03, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x400c041}, 0x4000000) (async, rerun: 64) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002480)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002440)={&(0x7f0000002080)={0x3a8, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x168, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x91, 0x4, "6e9d370e11f5685f06f991973409518d6579132bc2f367f9830ae9dce5ef43fa33c49aeada87c74e1ab6e89550cc47ba958a4967b6b4fabd6929b2122961a8c09ab9a06dda802d263f91277be067c619147247067ec624dcb4eb71903409e748daa9c1a0544b62680fb088cd546af3f42d962dc86ddbeee768a6ff624f597074ae6ba5f42c8d91753145c888a0"}, @ETHTOOL_A_BITSET_VALUE={0xd0, 0x4, "ec7dfe349e8ecd98e279bd50c78229c429c1370072203c03f89953f898d3959a3555675a42bcd6cf26b71d1b496cc28a067d87a602fd21cb1e9baa7b050a18a7b17e47b06aa8021ca0c84a47906efc5f85d366b86054126646ca4348030a21db9a83a38344cb0bfc33d743a3055a19a4f11b61662ca4fb582885f58f92a698c6a2c5b52e11be7722b705d414a72ec7e8c04f73756083343844eeaa7502b9d14d8d896169ce2b9e4d2ba64b39822b3a5a4258702106eb88599f9f6a2f0d9c84ce353a28554caef06c64acbd92"}]}, @ETHTOOL_A_FEATURES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x188, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa0, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '/\\#!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'udp:syz0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff7ab}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xa7[-[(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x1a, 0x5, "315a536367c942bcc07b8a333d99778dde17a82665e0"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3ff}, @ETHTOOL_A_BITSET_VALUE={0x32, 0x4, "fbfec57513ec8a6d99a6ec6bbfd2ec3b606ea53a7b205e04fbafccf2c96a0901af7fecd77dd9fa7207cb5e65a46e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x7e, 0x4, "0aa6b0464cb0affaa627c149f5eef0f4e1bb9bf94db92148f72d08e6f8fdcd434437d76da8c8e9fce0c53dddc63fc15d9f43453e722b77305b8ae29c4b170e71707159526c09a70b57fece1366bd969e367176589559b445d468f88c7582a579bfbf66188412b099f25eaf42441345bbdbe3d6f8c80638070a01"}]}, @ETHTOOL_A_FEATURES_WANTED={0x48, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x35, 0x5, "82cd93399b8d26c291e50bcbcc851307e138b827fc615115ec24a4c8963d9e5b336497a90f01636fa0136a45079fd5caeb"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) (rerun: 64) 2m46.160634783s ago: executing program 0 (id=599): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x804, 0x0, 0x0, {0x6cb1e8afcb3f5fa2, 0x0, 0x9}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x800) 2m46.159195541s ago: executing program 0 (id=600): r0 = open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x9a) r1 = socket$key(0xf, 0x3, 0x2) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000180)) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xa, 0xff, 0x8, 0x2, 0x0, 0x70bd26, 0x25dfdbfd}, 0x10}}, 0x4) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={{r0}, 0x6, 0x19af, 0x80}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000010c0)=@newtclass={0x24, 0x28, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xa}, {0xe, 0xfff5}, {0x5, 0xfff2}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=0xffffffffffffffff, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xfffffff8}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r3) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000700)={0x2, 0x4e24, @empty}, 0x10) listen(r5, 0x5) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000800)={0x2, 0x4e24, @loopback}, 0x10) mknod(&(0x7f00000002c0)='./file0\x00', 0x1000, 0x761) r7 = open(&(0x7f0000000400)='./file0\x00', 0x80002, 0x1ae) r8 = creat(&(0x7f0000000000)='./bus\x00', 0x16) write$binfmt_misc(r7, &(0x7f0000000040)="dd5c24662b", 0x5) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x2204000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_9p2000}, {@msize={'msize', 0x3d, 0x76f2b80}}]}}) accept4(r5, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x38}}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRESDEC=r2, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000c000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x61, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m31.103821085s ago: executing program 34 (id=600): r0 = open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x9a) r1 = socket$key(0xf, 0x3, 0x2) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000180)) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xa, 0xff, 0x8, 0x2, 0x0, 0x70bd26, 0x25dfdbfd}, 0x10}}, 0x4) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={{r0}, 0x6, 0x19af, 0x80}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000010c0)=@newtclass={0x24, 0x28, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xa}, {0xe, 0xfff5}, {0x5, 0xfff2}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=0xffffffffffffffff, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xfffffff8}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r3) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000700)={0x2, 0x4e24, @empty}, 0x10) listen(r5, 0x5) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000800)={0x2, 0x4e24, @loopback}, 0x10) mknod(&(0x7f00000002c0)='./file0\x00', 0x1000, 0x761) r7 = open(&(0x7f0000000400)='./file0\x00', 0x80002, 0x1ae) r8 = creat(&(0x7f0000000000)='./bus\x00', 0x16) write$binfmt_misc(r7, &(0x7f0000000040)="dd5c24662b", 0x5) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x2204000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_9p2000}, {@msize={'msize', 0x3d, 0x76f2b80}}]}}) accept4(r5, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x38}}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRESDEC=r2, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000c000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x61, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m16.167449365s ago: executing program 6 (id=925): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f00000001c0), 0x8000000000000001, 0x81401) (async) r3 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x8000000000000001, 0x81401) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000200)=0xd67) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1ff, 0xb}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x8) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc) (async) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 2m16.050617809s ago: executing program 6 (id=927): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111240b000000008510000002000000850000000e00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41dcb50400000000b9800000c00f320908660fc7b20a0000000f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x5c}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000003c0)="66b9800000c00f326635001000000f3066b94108000066b8c500000066ba000000000f30f23e0f0966b9bb03000066b81400000066ba000000000f30660f3880add19366b8330000000f23c00f21f86635010006000f23f80ff5c53e650f18fbbaa10066b8250e000066ef0f07", 0x6d}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtaction={0x60, 0x30, 0x3, 0x0, 0x2000000, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x3e, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x4, 0xffffffffffffffff, 0x12, 0xe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3c0022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800d30ea8d41b9507c2fe6f18ed9e00"], 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000007c0)={0xffbd, 0x2, r5, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1020800}) close(r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m15.638282074s ago: executing program 6 (id=937): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x2a0, 0x2a0, 0xffffffff, 0x188, 0xe0, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x19, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id, @port=0xfffc}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) socket$inet_udp(0x2, 0x2, 0x0) 2m15.551053965s ago: executing program 6 (id=938): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)='|') ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f00000000c0)={0x2, 0x3, 0x8, 0x0, 0x7ff, 0x479, 0x2, 0x1a}) 2m15.459768143s ago: executing program 6 (id=939): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000580)='./file1\x00', 0x42) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='raid5', 0x5) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000380)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000001d00)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x4800, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000001100)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0xcc00000}}], 0x30}}], 0x1, 0x4040) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x2}}, 0x20) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) ioctl$XFS_IOC_GETBMAPX(r5, 0xc0205838, &(0x7f0000000280)={0x8, 0x3ff, 0x7, 0x100, 0x6, 0x1, 0x5}) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r2, 0x40106e80, &(0x7f0000000100)={0x1}) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) 2m15.360890291s ago: executing program 6 (id=941): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@random="0f539af21094", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x1, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc}}]}]}}}}}}}, 0x0) 1m40.445264474s ago: executing program 35 (id=941): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@random="0f539af21094", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x1, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc}}]}]}}}}}}}, 0x0) 1m2.720050124s ago: executing program 4 (id=1824): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback=r0, 0x5, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) syz_emit_vhci(&(0x7f0000000480)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x0, 0xa}, {0x3ff, 0xd, 0x4, 0x1, 0x1}}}}, 0x17) 1m2.719055302s ago: executing program 4 (id=1825): setrlimit(0xe, &(0x7f0000000280)={0x8, 0xffffffff00000001}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000001680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) bind$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r2 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7543, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) (async, rerun: 32) r4 = syz_open_dev$I2C(&(0x7f0000000200), 0x6, 0x60680) (rerun: 32) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000580)=0xe545) (async, rerun: 32) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async, rerun: 32) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000300)={0x0, 0x2, "4cf90fba85c830e42a3ca4b10f01bbcb15f3806c4853e7c44a6974759d9f643905a56baa4195fb396d9bfa306999f1586e5d1ca49add100a36b751a7d9fe0b182ebf2c8a0e66f72c1c08260030752f07cd4089473e52885a3c85bbcf3ccfac5bb9435fe036dcfccd7254bbd8bce90e2284d29e1f17d6652270fd0abcb8729f16ff602b438bd122a9e09984e2799d0dbfef7533d1a930ea4f4b57605ace45f5815450693650ae000034aa0c5ca5e793516d156e5a5b34d6c17c40d753426a3d8e15e726d0f2622e873e0cbe63751bb62c68594d4cb0a21b92ad2e80f24a9b290a9eee6779022a0b7f5223e4e8c9f53f501ec8c439724078fdc076a51d50760566"}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'rose0\x00'}) (rerun: 32) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x24) (async) close(r5) (async) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) (async, rerun: 64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x9) (async, rerun: 64) write$dsp(r7, &(0x7f0000000340)="e10a3252", 0x4) (async, rerun: 64) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r8, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = socket$packet(0x11, 0x3, 0x300) close_range(r3, r6, 0x0) (async) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async, rerun: 64) setsockopt$packet_int(r9, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000ff0f0000000000000000004073111f00e66fc8eb6c880af21c000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m1.899441694s ago: executing program 4 (id=1841): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x702, 0xce0, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0xa001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, r2, 0x5, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x38}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7026, 0x50}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x44010}, 0xc0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x702, 0xce0, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0xa001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, r2, 0x5, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x38}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7026, 0x50}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x44010}, 0xc0) (async) 1m1.815184858s ago: executing program 4 (id=1844): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) mount(&(0x7f00000004c0)=@nullb, &(0x7f0000000440)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x2401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x34, 0x3, "64000000746573745f6c6162656c000000000000050000000000000000000000000100"/48}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xe4}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) sendmsg$sock(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@nl=@kern={0x10, 0x0, 0x0, 0x2000000}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)="99ee9195da99c650c617075501bb515172374cd9b2642d23519374ed4a9ced3ebbd5df6406727934d449c95d49a4ecf3e6d56ec0365deae2272bd95784dd282b09c8dc2b98bbaf4b02fbcd20645f356a83", 0x51}, {&(0x7f0000000240)="62e08e782eca961b624e11a3f73c1f8b6be2868e58ef93c27d1dd2056884f11965adb73337469ddefcd96443dac21a77e14a54a23eeba717790440ef689ed9dd", 0x40}], 0x2, &(0x7f0000000300)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x55}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0xa8}, 0x4000000) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x10d000) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) (async) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x83c0550b, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000400)={0x0, 0x1, 0x1, 0xfffe}) (async) fcntl$lock(r1, 0x7, &(0x7f0000000400)={0x0, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) 58.75012097s ago: executing program 4 (id=1895): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000640)='measure #', 0x9) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x61) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) r2 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x0, 0x0}}, './security\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './cgroup/../file0\x00'}) io_uring_setup(0x798b, &(0x7f0000000500)={0x0, 0x3cb8, 0x800, 0x3, 0x1b0, 0x0, r4}) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000380)=0x0) r7 = geteuid() mount$bpf(0x0, &(0x7f0000000140)='./security\x00', &(0x7f0000000180), 0x1000, &(0x7f00000003c0)=ANY=[@ANYBLOB='mode=00000000000040000000001,uid=', @ANYRESHEX=r1, @ANYBLOB=',gid=', @ANYRESHEX=r2, @ANYBLOB=',gid=', @ANYRESHEX=r3, @ANYBLOB=',gid=', @ANYRESHEX=r5, @ANYBLOB="2c7365636c6162656c2c6c617a7974696d652c646f6e745f6d656173757266e3b4d619dd652c66736d616769633d305b303030303030303030303030303030362c6d616e002c66", @ANYRESDEC=r6, @ANYBLOB=',fowner>', @ANYRESDEC=r7, @ANYBLOB=',smackfsroot=!],smackfsfloor=/dev/nvme-fabrics\x00,\x00']) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r9, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery,reconnect_delay=1\x00', 0xb3) ioctl$DRM_IOCTL_RM_MAP(r9, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000bdc000/0x1000)=nil}) syz_clone3(&(0x7f0000000040)={0x2a0a00300, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) 58.657923191s ago: executing program 4 (id=1899): r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000000c0), 0x430000, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x814}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040040}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$ndctl0(0xffffffffffffff9c, &(0x7f00000000c0), 0x430000, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x814}, 0x20004000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040040}, 0x4048840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 43.621528216s ago: executing program 36 (id=1899): r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000000c0), 0x430000, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x814}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040040}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$ndctl0(0xffffffffffffff9c, &(0x7f00000000c0), 0x430000, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x814}, 0x20004000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040040}, 0x4048840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 2.746494998s ago: executing program 7 (id=2569): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8032, 0xffffffffffffffff, 0x28f41000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000), 0x4) shutdown(r1, 0x1) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) ppoll(&(0x7f0000000000)=[{r2, 0x1000}], 0x1, 0x0, 0x0, 0x0) write$sndseq(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000001140)={0x80, 0x21, 0x3, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r3, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x70) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, r6, {0x7, 0x1f, 0x40b5, 0x34808421, 0x401, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0xa4001f7a}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffff7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x36) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r8, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r7, &(0x7f00000000c0)='!', 0x1, 0x3000000000000000, 0x0, 0x0, r4}]) dup3(r7, r5, 0x0) socket$inet6(0xa, 0x3, 0x7ff) listen(r0, 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090d22322"], 0x0) 2.048120502s ago: executing program 8 (id=2578): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd9a1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x7}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x24, &(0x7f0000000000)=r6, 0x4) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffff689}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x32, 0x1}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0) 1.83940341s ago: executing program 3 (id=2584): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x2, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x4288}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x5}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x26040090) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r3 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x76, 0x2, 0x3, "4c4d75fffbbe7ba9f03bec81c6ea4d9838f497b6e85888fc5eae1105347c1358", 0x38414261}) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0xc0884123, &(0x7f0000000080)) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/8, 0x8}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x10, 0x114, 0xc, 0x1}], 0x10, 0x4000000}, 0x4000000) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r5, &(0x7f0000000280)=ANY=[], 0x10) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r5, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af83, &(0x7f0000000200)) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBLED(r8, 0x4b64, &(0x7f0000000000)) 1.793796669s ago: executing program 7 (id=2585): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/../file0/file0\x00', 0x200) rmdir(&(0x7f0000000180)='./cgroup/../file0\x00') mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x800, 0x0) select(0x40, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0) 1.779196277s ago: executing program 3 (id=2587): r0 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc1}, &(0x7f0000000140)={0x0, "ae07591f595e82e9461b965eebee0b48efbfcc869a1a01e3a1b18606c6d9e188d43c1e872de145ace723dbaf7bacad963f2161245252538d2a3b4ed92041d072", 0x21}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000000900)='big_key\x00', &(0x7f0000000940)={'syz', 0x0}, &(0x7f0000000980)='enc=', r0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="170000001400030400000000000000542d"], 0x44}}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r4, 0x89e7, &(0x7f0000000440)={0x4b}) 1.737309662s ago: executing program 3 (id=2588): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x61) rmdir(&(0x7f0000000100)='./cgroup/../file0\x00') (async) r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0', [{0x20, '\x00'}, {0x20, 'ip6_vti0\x00'}, {0x20, '-{'}, {0x20, 'ip6_vti0\x00'}], 0xa, "489d9c06c344a4017ca0932663e65d6f5fa1979a9fe9d0f0c63a2e83f01a6ce911245949a1ae8b20bf219fcdaee036913e4ce363b58feae1256512982f"}, 0x61) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x2, 0xb007}, 0x4) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 1.687965497s ago: executing program 3 (id=2589): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="2ef26f0f3566b842000f00d8b805000000b9a00000000f01c166baf80cb8b7351187ef66bafc0cb000ee0fde460b0f0130670f01c28fe868cfe20a", 0x3b}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000040)="baf80c66b846dac98c66efbafc0cb06aeebad104ec0f01cbbad004b80078ef260fc7af0d000f225764f3360f2053baf80c66b860293a8c66efbafc0c66ed0f00980500ba4300ed", 0x47}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0xc0045543, &(0x7f0000000000)=0xe) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x90e00, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600000014004000"/28]) 1.676649228s ago: executing program 7 (id=2590): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x401100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000004c0)={0x0, "09e6498cd7b70000b56a00000000000100000000f3ffffffffffffff0500", 0xffffffffffffffff}) ppoll(&(0x7f0000000040)=[{r2, 0x9200}], 0x1, &(0x7f0000000100), 0x0, 0x0) r3 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x9721, 0x1, 0x1, 0x20080}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r9, 0x1, 0x6, @multicast}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r10, 0x3}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000040)=@IORING_OP_WRITEV={0x2, 0x40, 0x2007, @fd=r7, 0x1, 0x0, 0x0, 0x4, 0x0, {0x2, 0x0, 0x3, '\x00', 0x0, 0xb07}}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000100)="f3af66b8010000000f01c12e670f01c3660fc77002f20f1c006766c74424006a0000006766c7442402f9ffffff6766c744240600000000670f011424660f38806600640fc7acae00ba4000ec0fa7c0"}], 0x1, 0x82, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r14 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r15, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000020380)={0x1c, r0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 859.410476ms ago: executing program 7 (id=2591): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004800}, 0x40) 856.578935ms ago: executing program 7 (id=2592): syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="bbaaaa0011fcbc0040b35ccb595a964ffecc1aeb7af9c48f0100007ac3b63dbc64803a260d82ae138384d06ff65f34545dda40d823d281d2ce"], 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000001a00)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r1, 0x3b8b, &(0x7f0000000240)={0x10, 0x1, r4}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2be27de13db01225280012800b0001006d616373656300001800028005000f00020000000c000600000000000000000008000500", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2be27de13db01225280012800b0001006d616373656300001800028005000f00020000000c000600000000000000000008000500", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) openat$kvm(0xffffff9c, 0x0, 0x40300, 0x0) (async) r7 = openat$kvm(0xffffff9c, 0x0, 0x40300, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno', 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r8, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000ac0)="a19168e24152c670ecff4e0ee89533187a9206e8b223bed2e89af6709b054a05bafbd8bdb01fe87a3b63a17eff007ee93b40c121e355801159a45e36111175f8d8453960c864bdcf3826be3ffadaa7dba08508123324e0a45a93818ebf5c0fbac285cd0f399da8e4257170efbebf704e", 0x70}], 0x1}}], 0x1, 0x4000000) sendmsg$nl_route_sched_retired(r8, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001200)=@deltclass={0x574, 0x29, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x6}, {0x7, 0x4}, {0x6, 0x8}}, [@c_cbq={{0x8}, {0x54, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x11, 0x1, 0x1a, 0x5, 0xcc6, 0x10001, 0x8, 0x2}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x5, 0x2}, 0x845, 0x1}}, @TCA_CBQ_RATE={0x10, 0x5, {0x7, 0x2, 0x7, 0x401, 0x3, 0x871}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x3c, 0x3, 0xf, 0x7, 0x3, 0x4, 0xff, 0x4}}]}}, @c_cbq={{0x8}, {0xa4, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x30, 0x0, 0x3, 0x6, 0x1fd, 0x5, 0x5}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x1d, 0x0, 0x1, 0x80, 0x1, 0x9}}, @TCA_CBQ_RATE={0x10, 0x5, {0x4, 0x2, 0x3bb7, 0x5, 0xef4, 0x30ab}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xf, 0x3, 0x6, 0xfc, 0x8, 0x80000001}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xa, 0x5, 0x5, 0x4, 0x4237, 0x400}}, @TCA_CBQ_RATE={0x10, 0x5, {0x16, 0x0, 0x9, 0x2, 0x90e5, 0x7}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x10, 0x8}, 0xff, 0x1}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x3f, 0x2, 0x14, 0xff, 0x6, 0xc48b, 0x5, 0x7}}, @TCA_CBQ_RATE={0x10, 0x5, {0x5e, 0x0, 0x2, 0xfc01, 0x4, 0xfff}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x1}}}, @c_cbq={{0x8}, {0x428, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x4, 0xd}, 0x2, 0x1}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x5768, 0x4, 0x6, 0xf8, 0x40, 0x8, 0x40, 0x80000001, 0x5222, 0x1, 0x4, 0x5, 0x100, 0x2, 0xa6, 0x2, 0xcab5, 0x6, 0x0, 0x8, 0x5, 0x7, 0x40, 0x1, 0x5, 0x5, 0xf, 0x2, 0x0, 0x3d, 0xaf4f, 0x3, 0xe, 0x0, 0x5, 0x8, 0x3, 0x399, 0xc, 0x1ff, 0xc, 0x7, 0x6, 0x6, 0x4, 0x7ff, 0x2c, 0x401, 0x0, 0x4, 0x8, 0x8, 0x356, 0x7fffffff, 0xfc65, 0x6, 0x1, 0x4, 0x7, 0x1, 0x3, 0x7, 0x9, 0x8, 0x1, 0x5, 0xfffffff9, 0x7, 0x262, 0x6, 0x60b, 0x204, 0x6, 0x2, 0xd, 0x6a71, 0x5, 0x0, 0x5, 0x400, 0x6, 0xb, 0x8001, 0x10000, 0x6, 0x2, 0xe, 0xc, 0x0, 0x0, 0x1155, 0x1, 0x7, 0xde1, 0x5, 0x8, 0x0, 0x4, 0x89, 0x7, 0xfffffffc, 0x9, 0x2, 0x1, 0x4, 0x4, 0xfff, 0x9, 0x401, 0x4, 0x4d, 0xffffffdc, 0x6, 0x9, 0x9, 0x10000000, 0xc, 0x1000, 0x1, 0x9, 0x1, 0x80000001, 0x2, 0x7, 0x1, 0x8, 0x1d, 0x9f, 0x5, 0x88, 0x8, 0x5, 0x8001, 0x6962, 0x800, 0x1000, 0x3, 0x325, 0x8, 0x1, 0xc, 0x8, 0x4, 0x4, 0x5, 0x4, 0x68f1, 0x4de, 0x4, 0xe4, 0x3, 0x7, 0x3, 0x8, 0x69484c88, 0xfffffff8, 0x9, 0x1, 0x1000, 0x9, 0x7, 0x6, 0x5, 0x5abc, 0x275, 0x10001, 0xc787, 0x9, 0xa, 0xd659, 0xfff, 0x10001, 0x7fff, 0x6, 0xfffffffe, 0x7, 0x581, 0x7, 0x4, 0x789, 0xe95d, 0x8, 0x8, 0x8, 0x41d5806b, 0x9, 0xe, 0x10, 0x7ff, 0x4af9, 0x6bf070d4, 0x80000000, 0xcf4, 0xc796, 0x1, 0x2, 0x4, 0x1c4, 0x5, 0x7, 0x8, 0x7fffffff, 0x3, 0x0, 0x8, 0x9, 0x87, 0x0, 0x2, 0x1000, 0x0, 0x297e419b, 0x80000001, 0xffffff39, 0x7, 0x200, 0xb21c, 0x80, 0x4, 0x8, 0x6703, 0xc7b, 0xf48, 0x6, 0x8, 0x1, 0x2, 0x3, 0x100, 0xe0b, 0x1, 0x502f, 0x1, 0x4, 0x9, 0xfffffff7, 0x3, 0x9, 0x3, 0xdfc7, 0x0, 0x9, 0x8, 0x2, 0x7fff, 0x10001, 0x4, 0x73f, 0xcfc6, 0xd, 0xd3a, 0xc, 0xc2f3, 0x8, 0x3]}, @TCA_CBQ_RATE={0x10, 0x5, {0x9, 0x0, 0x1000, 0x4, 0x2, 0x3}}]}}]}, 0x574}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendto$inet(r8, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async) sendto$inet(r8, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) (async) r10 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) write$tun(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000010141eefcff060005000308fb78a650f0f941fcdc300c52e2019f7deb50ab20d1bf83c1875d6d5b3a5e6cb82ebdbfa88e4d5a7c4447f0e0ddcbd9aa5f5f29d45666654d3cbdb88c1336acd811f04fb5ddf48d058c4c81bc5deca58203"], 0x11) 855.551597ms ago: executing program 8 (id=2593): ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040)={0x2}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0xfffffffffffffffa) (async) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r4, 0x8004af70, &(0x7f0000000280)) (async) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CAP_XEN_HVM(r5, 0x4068aea3, &(0x7f0000000300)={0x26, 0x0, 0x10}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000380)={0x1f, 0x335, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xdc}, 0xe) ioctl$int_in(r1, 0x5452, &(0x7f00000003c0)=0x2) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000400)={0x0, 0x0, 0x7fffffff, 0xfffff706, 0xdf, 0x3, 0x200}) (async) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$XFS_IOC_GETBMAP(r7, 0xc0205826, &(0x7f0000000480)={0x8000, 0x6, 0x3, 0x5, 0xd35}) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f00000004c0)={@rand_addr, @local, 0x0}, &(0x7f0000000500)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000540)={@private0, 0x41, r8}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000580)={@empty, @private=0xa010100, 0x1, 0x1b}}) sendmsg$rds(r5, &(0x7f00000007c0)={&(0x7f0000000600)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000640)=""/95, 0x5f}, {&(0x7f00000006c0)=""/101, 0x65}, {&(0x7f0000000740)=""/52, 0x34}], 0x3, 0x0, 0x0, 0x4008000}, 0x20000040) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r1) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, r9, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x24}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000940)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000980)={0x48, 0x1, r10, 0x0, 0x5, 0x59}) (async) r11 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000a00), 0x400, 0x0) setsockopt$MRT6_ADD_MFC(r11, 0x29, 0xcc, &(0x7f0000000a40)={{0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x16}, 0x3}, {0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x0, {[0x81, 0xf4, 0x2, 0x6e1a, 0x0, 0x1, 0x0, 0x3]}}, 0x5c) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r9, 0x0, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x42}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x20000000) 853.543209ms ago: executing program 3 (id=2595): keyctl$instantiate(0xc, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723a73797a20303030303030303030303030303030303430393300eea8ccce6971f371b86ca431136a1def2bdbcaa101b1a4f96903d914d45dea36afde2c34ff3eda07302d62dac9edf502c068672e2eeeac0747744ea8ccd4f7fdf16b73885f7a544da334996c116e3ac5f69e91da0ba8f4bdffe8902585d67166b4d71b21eca931c6280b"], 0x2a, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000b00)={0x0, 0x42474752, 0x3, @stepwise={0x9, 0xff, 0x7, 0x1ff, 0x5, 0x9}}) keyctl$revoke(0x3, 0x0) (async) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x100) (async) mount(&(0x7f0000000580)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./file0\x00', &(0x7f00000000c0)='autofs\x00', 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r2, 0x0, 0x0, 0x80800) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f00000014c0)=0x2, 0x4) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@assoc={0x0, 0x117, 0x4, 0x4}], 0xffffffffffffff25, 0x40}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) syz_usb_disconnect(r0) (async) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[], 0x0) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ff}]}) close_range(r4, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf19, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) write(r5, 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) (async) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000300)=ANY=[]) 749.415398ms ago: executing program 8 (id=2597): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c0007800800050002"], 0x38}}, 0x0) (async) recvmmsg(r3, &(0x7f0000001100)=[{{&(0x7f0000000140)=@ax25={{0x3, @rose}, [@remote, @null, @null, @bcast, @netrom, @netrom, @null, @netrom]}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/145, 0x91}, {&(0x7f0000000280)=""/248, 0xf8}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f0000000440)=""/98, 0x62}], 0x4, &(0x7f0000000500)=""/191, 0xbf}, 0x8000}, {{&(0x7f00000005c0)=@phonet, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000640)=""/193, 0xc1}, {&(0x7f0000000740)=""/42, 0x2a}, {&(0x7f0000000780)=""/56, 0x38}, {&(0x7f00000007c0)=""/248, 0xf8}], 0x4}, 0x6}, {{&(0x7f0000000900)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/19, 0x13}, {&(0x7f00000009c0)=""/57, 0x39}, {&(0x7f0000000a00)=""/47, 0x2f}, {&(0x7f0000000a40)=""/62, 0x3e}, {&(0x7f0000000a80)=""/87, 0x57}, {&(0x7f0000000b00)=""/205, 0xcd}], 0x6, &(0x7f0000000c80)=""/102, 0x66}, 0x800}, {{&(0x7f0000000d00)=@caif, 0x80, &(0x7f0000001080)=[{&(0x7f0000000d80)=""/144, 0x90}, {&(0x7f0000000e40)=""/115, 0x73}, {&(0x7f0000000ec0)=""/212, 0xd4}, {&(0x7f0000000fc0)=""/158, 0x9e}], 0x4, &(0x7f00000010c0)=""/5, 0x5}, 0x9}], 0x4, 0x100, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x4801}, 0x80) (async, rerun: 32) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (rerun: 32) 670.180512ms ago: executing program 8 (id=2599): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x82801, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd25, 0x25dfdbfc, {0x2, 0x10, 0x14, 0x1, 0x9, 0x0, 0x0, 0x3, 0x10013}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x8000}]}, 0x34}}, 0x40800) r2 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$USERFAULTFD_IOC_NEW(r2, 0xaa00) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) (async) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) ioctl$UFFDIO_POISON(r3, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) (async) ioctl$UFFDIO_POISON(r3, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) r4 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW', 0x6) fcntl$addseals(r4, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x200, 0xf24}) (async) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x200, 0xf24}) write$sequencer(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="81040808f9ffffff940f32f0411976ec9402ff"], 0x20) (async) write$sequencer(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="81040808f9ffffff940f32f0411976ec9402ff"], 0x20) 669.544203ms ago: executing program 5 (id=2600): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000005c0), 0x8000, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4}}}, 0x88) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$FBIOBLANK(r2, 0x4611, 0x2) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000d40)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x7a, 0x2}) r7 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x3, &(0x7f0000004280)=""/4087, &(0x7f00000001c0)=0xff7) close(r0) syz_emit_ethernet(0xb7, &(0x7f0000000340)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "68e0b7", 0x81, 0x3a, 0x0, @remote, @private0, {[@srh={0xc, 0x8, 0x4, 0x4, 0x7, 0x20, 0x9, [@loopback, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2, @private1]}], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1, @dev={0xfe, 0x80, '\x00', 0x24}, [{0x4, 0x2, "938b64b208b83aa56c79a034cd7d1f"}]}}}}}}, 0x0) 668.291777ms ago: executing program 7 (id=2601): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200000000100905"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500192340", 0x9}], 0x1) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000020c0)=0x1, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400074100000000000000000000000000000001050004000100000008000a00", @ANYRES32=r4], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 610.224691ms ago: executing program 8 (id=2602): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080)={0x6}, 0x4) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x8000, 0x9, 0x0, 0x1ff}, 0x8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0df617311f474feaa0256b00000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4c050}, 0x800) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe15, 0x51}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8880}, 0x4008040) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) 529.647361ms ago: executing program 8 (id=2603): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x15, 0x0, &(0x7f00000008c0)="e3ef7f670000ec6789b42415449400000000000000", 0x0, 0x9ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x89882) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="24002d800e0000003ccf2effd8a100000a0200000001"], 0x40}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = open(&(0x7f0000000180)='./file0\x00', 0x140800, 0x28) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$P9_RLERROR(r7, &(0x7f00000001c0)=ANY=[], 0xa) sendmmsg$inet(r7, &(0x7f00000029c0)=[{{&(0x7f0000000a00)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000480)='R', 0x1}], 0x1}}, {{&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000002180)=[{&(0x7f0000000e80)="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", 0xea1}], 0x1}}], 0x2, 0x4040040) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110e0000006a00000f0007000000", @ANYRES32=r8, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x1d, r8, 0x0, {0x0, 0x0, 0x3}, 0xff}, 0x18, &(0x7f00000003c0)={&(0x7f0000000300)="de3269da4a9b5ed05330fe75ba07ec6fd56ad076e427ef8f75355c61989814af54bfd65b463fc52ab0c8d6ccd36f83907b9f60f156ff23faa87d4e7539ae6cdbb19160343abfb3530e9d2fa5671e7161987108e00f553b8cd9d6535e3330289cd3e8e89f7a361ada40978bc562586aba78b8b0abc408a5472b2aaf73d9900a3ec120abf3dc4a7e98c505e7a6530a", 0x8e}, 0x1, 0x0, 0x0, 0x4000850}, 0x800) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffe0, 0xa}, {0xa, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) 290.466651ms ago: executing program 5 (id=2604): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0x40, 0xe, 0x8, 0x2, @private1, @loopback, 0x8, 0x10, 0x7, 0x1}}) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4000}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0xd, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000182d0000", @ANYRES32=r1, @ANYBLOB='\x00\x00@\x00\x00'], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0xf}, 0x94) 198.665986ms ago: executing program 5 (id=2605): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket(0x2d, 0x2, 0x0) connect$netlink(r1, &(0x7f0000000140)=@unspec={0x2d}, 0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000200)=[{0x20, 0xff, 0x0, 0xffff7038}, {0x6, 0x0, 0x83, 0xfffffffd}]}, 0x10) write$bt_hci(r2, &(0x7f0000000000)=ANY=[], 0x6) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0xfffffff4, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 126.078175ms ago: executing program 5 (id=2606): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000700)={"0300", 0x9, 0x6, 0xff, 0x0, 0x8, "f700194000", "e3ffffff", "083d5a16", '\x00', ["39000000000400030800", "800400", "1c436d743c97c443084000"]}) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_dev$video(&(0x7f0000000200), 0x7, 0x0) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f0000000240)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000410001002a0070000400000001000000040044"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x16) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 57.976356ms ago: executing program 5 (id=2607): openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000026c0)=0x3d) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000240)={0x3, 0x2, 0x8, 0x401, 0x1a, "65f688dae1b96e6a"}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xffffffff, 0xee0, 0x9, 0x80000000, 0x90, "9900010000000000111300"}) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x2, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'sane-20000\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xb8}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x100}, @CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x466c}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x4c0d5) 57.667633ms ago: executing program 5 (id=2608): r0 = fsopen(&(0x7f0000000040)='cifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000180)) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000280)={'sit0\x00', @ifru_data=&(0x7f0000000000)="77aa17a39a7a645242e1ce12b1b09976503f05ee36ef6246b6d4808aedf1cea4"}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r7, 0xae78, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fd, &(0x7f0000000040)="647798feb3") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r4}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x21, 0x7ff, 0x4, 0x0, 0x44000, r8, 0xb78, '\x00', r3, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f00000006c0)="cc", &(0x7f0000000000)=""/3, 0x2}, 0x20) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001700)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x58}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r9, &(0x7f0000000380), &(0x7f0000000500)=""/166}, 0x20) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r11, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) r12 = socket(0x2, 0x80805, 0x0) setsockopt$bt_hci_HCI_FILTER(r12, 0x0, 0x2, &(0x7f0000000100)={0xae, [0xfb, 0x5], 0x6}, 0x10) 0s ago: executing program 3 (id=2609): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write(r0, &(0x7f0000000180)='transport=tcp,traddr=127.0.0.1,trsvcid=8000,nqn=n', 0x31) file_getattr(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x18, 0x100) socket(0xa, 0x3, 0x2) (async) r1 = socket(0xa, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1000080, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'geneve1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/usb/drivers/usbip-host\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/usb/drivers/usbip-host\x00', 0x0, 0x0) r5 = openat(r4, &(0x7f0000000100)='match_busid\x00', 0x2, 0x0) write(r5, &(0x7f0000000180)='del 1-1\x00', 0x8) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="30000000120001000008000000000000140000000c00000000000000000000000d0003"], 0x30}], 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x80, 0x7, 0x401, 0x6, {{0x5, 0x4, 0x1, 0x4, 0x14, 0x66, 0x0, 0x0, 0x4, 0x0, @private=0xa0104fe, @multicast2}}}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c03d2353f154d00b0e5003604"]) (async) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c03d2353f154d00b0e5003604"]) read$FUSE(r6, &(0x7f000000a3c0)={0x2020}, 0x2020) (async) read$FUSE(r6, &(0x7f000000a3c0)={0x2020, 0x0, 0x0}, 0x2020) socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r8, 0x0) shutdown(r8, 0x0) (async) shutdown(r8, 0x0) accept(r8, 0x0, 0x0) write$FUSE_INIT(r6, &(0x7f0000000080)={0x50, 0x0, r7, {0x7, 0x29, 0x9, 0xa175018c4f8997a1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0xfffffffffffffff5, 0x5, {0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r9, 0x0, 0x0) (async) getdents64(r9, 0x0, 0x0) kernel console output (not intermixed with test programs): nfs: Unknown parameter 'pMrt' [ 296.045083][T14267] bond10: entered promiscuous mode [ 296.046924][T14267] 8021q: adding VLAN 0 to HW filter on device bond10 [ 296.052768][T14266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1701'. [ 296.057684][T14266] ip_vti0: entered allmulticast mode [ 296.066459][T14267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1701'. [ 296.161826][T14279] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1704'. [ 296.164515][T14280] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1704'. [ 296.364690][T14299] can: request_module (can-proto-0) failed. [ 296.407195][T14311] overlayfs: failed to resolve './file2': -2 [ 296.475332][ T5754] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 296.594310][T14333] could not allocate digest TFM handle cryptd(blake2b-160) [ 296.597020][T14342] overlayfs: failed to resolve './cgroup': -2 [ 296.616910][T14333] overlayfs: failed to clone upperpath [ 296.636776][T14345] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1719'. [ 296.820007][T14366] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1724'. [ 296.829302][T14358] syzkaller0: entered promiscuous mode [ 296.831140][T14358] syzkaller0: entered allmulticast mode [ 297.064280][T14386] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 297.310341][T14405] input: syz1 as /devices/virtual/input/input17 [ 297.333354][T14408] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14408 comm=syz.4.1732 [ 297.443685][T14413] input: syz1 as /devices/virtual/input/input18 [ 297.468573][T14413] validate_nla: 69 callbacks suppressed [ 297.468598][T14413] netlink: 'syz.4.1733': attribute type 1 has an invalid length. [ 297.494251][T14413] 8021q: adding VLAN 0 to HW filter on device bond4 [ 297.562889][T14428] IPv6: NLM_F_CREATE should be specified when creating new route [ 297.570159][T14428] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 297.572695][T14428] IPv6: NLM_F_CREATE should be set when creating new route [ 297.577499][T14428] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 297.579888][T14428] IPv6: NLM_F_CREATE should be set when creating new route [ 297.624955][T14434] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 297.740317][T14448] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1740'. [ 297.812392][T14452] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1741'. [ 297.860618][T14460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14460 comm=syz.3.1743 [ 297.883923][T14463] netlink: 6060 bytes leftover after parsing attributes in process `syz.5.1745'. [ 297.929153][T14468] netlink: 'syz.3.1747': attribute type 4 has an invalid length. [ 298.124375][T14493] fuse: fd is not a fuse device [ 298.147112][T14495] netlink: 'syz.3.1754': attribute type 1 has an invalid length. [ 298.150518][T14497] random: crng reseeded on system resumption [ 298.191865][T14495] bond12: entered promiscuous mode [ 298.193998][T14495] 8021q: adding VLAN 0 to HW filter on device bond12 [ 298.259857][T14502] 8021q: adding VLAN 0 to HW filter on device bond4 [ 298.321552][T14502] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 298.348461][T14515] trusted_key: encrypted_key: insufficient parameters specified [ 298.562386][T14553] overlayfs: failed to clone upperpath [ 298.664161][T14567] overlayfs: failed to clone upperpath [ 298.757598][T14581] netlink: 'syz.7.1773': attribute type 1 has an invalid length. [ 298.855042][ T41] kauditd_printk_skb: 69 callbacks suppressed [ 298.855074][ T41] audit: type=1400 audit(1786011471.557:16986): avc: denied { write } for pid=14584 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.944503][ T41] audit: type=1400 audit(1786011471.647:16987): avc: denied { write } for pid=14602 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.058094][ T41] audit: type=1400 audit(1786011471.757:16988): avc: denied { write } for pid=14615 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.128594][ T41] audit: type=1400 audit(1786011471.827:16989): avc: denied { write } for pid=14624 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.153965][ T41] audit: type=1400 audit(1786011471.857:16990): avc: denied { connect } for pid=14625 comm="syz.4.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 299.168390][T14626] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 299.215205][T14632] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 299.271529][ T41] audit: type=1400 audit(1786011471.977:16991): avc: denied { write } for pid=14634 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.362249][ T41] audit: type=1400 audit(1786011472.067:16992): avc: denied { write } for pid=14645 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.385546][ T41] audit: type=1400 audit(1786011472.067:16993): avc: denied { write } for pid=14646 comm="syz.4.1790" name="functions" dev="configfs" ino=26051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 299.418142][ T41] audit: type=1400 audit(1786011472.067:16994): avc: denied { write } for pid=14646 comm="syz.4.1790" name="mjpeg" dev="configfs" ino=43878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 299.425582][ T41] audit: type=1400 audit(1786011472.067:16995): avc: denied { setattr } for pid=14646 comm="syz.4.1790" name="g1" dev="configfs" ino=26050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 299.635940][T14666] loop5: detected capacity change from 0 to 7 [ 299.682233][T14666] Dev loop5: unable to read RDB block 7 [ 299.685378][T14666] loop5: AHDI p2 [ 299.686994][T14666] loop5: partition table partially beyond EOD, truncated [ 299.804471][T14681] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 299.944766][T14697] bond5: entered promiscuous mode [ 299.953512][T14697] 8021q: adding VLAN 0 to HW filter on device bond5 [ 300.057809][T14702] could not allocate digest TFM handle cbcmac(des) [ 300.060801][T14707] could not allocate digest TFM handle cbcmac(des) [ 300.136694][T14720] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 300.258511][T14737] dvmrp0: entered allmulticast mode [ 300.973220][T14792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=14792 comm=syz.4.1823 [ 300.977938][T14792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=14792 comm=syz.4.1823 [ 301.222669][T14815] overlayfs: failed to clone upperpath [ 301.329202][ T5900] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 301.345934][T14823] __nla_validate_parse: 8 callbacks suppressed [ 301.345953][T14823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1830'. [ 301.438192][T14832] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 301.512154][ T5900] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.518075][ T5900] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 301.539470][ T5900] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 301.544159][ T5900] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.547030][ T5900] usb 9-1: Product: syz [ 301.548458][ T5900] usb 9-1: Manufacturer: syz [ 301.553974][ T5900] usb 9-1: SerialNumber: syz [ 301.567402][ T5900] cdc_mbim 9-1:1.0: skipping garbage [ 301.595042][T14851] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1836'. [ 301.685457][T14856] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1837'. [ 301.692581][T14856] 9pnet_fd: Insufficient options for proto=fd [ 301.766583][T14863] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 301.806235][ T5900] cdc_mbim 9-1:1.0: bind() failure [ 301.817487][T14869] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1840'. [ 301.841181][ T5900] cdc_ncm 9-1:1.1: probe with driver cdc_ncm failed with error -71 [ 301.860809][ T5900] cdc_mbim 9-1:1.1: probe with driver cdc_mbim failed with error -71 [ 301.873822][ T5900] usbtest 9-1:1.1: probe with driver usbtest failed with error -71 [ 301.888390][ T5900] usb 9-1: USB disconnect, device number 8 [ 301.951450][T14883] qnx4: no qnx4 filesystem (no root dir). [ 301.990949][T14882] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 302.044256][T14891] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1843'. [ 302.156684][T14901] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1846'. [ 302.160338][T14903] tmpfs: Bad value for 'mpol' [ 302.181888][T14904] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1846'. [ 302.301301][T14912] xt_bpf: check failed: parse error [ 302.339249][ T5900] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 302.401216][T14920] netlink: 'syz.7.1851': attribute type 1 has an invalid length. [ 302.446650][T14920] 8021q: adding VLAN 0 to HW filter on device bond4 [ 302.477957][T14920] bond4: (slave geneve2): making interface the new active one [ 302.481157][ T5900] usb 9-1: device descriptor read/64, error -71 [ 302.485523][T14920] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 302.732602][ T5900] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 302.852924][T14939] gretap1: entered promiscuous mode [ 302.879294][ T5900] usb 9-1: device descriptor read/64, error -71 [ 302.994130][ T5900] usb usb9-port1: attempt power cycle [ 303.207037][ T5754] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 303.360582][ T5900] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 303.401778][ T5900] usb 9-1: device descriptor read/8, error -71 [ 303.461317][T14983] overlayfs: failed to clone upperpath [ 303.640385][ T5900] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 303.644443][T15006] netlink: 'syz.3.1870': attribute type 9 has an invalid length. [ 303.659818][ T5900] usb 9-1: device descriptor read/8, error -71 [ 303.723937][T15010] bond6: Removing last arp target with arp_interval on [ 303.766904][T15010] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1872'. [ 303.776586][T15010] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1872'. [ 303.781476][ T5900] usb usb9-port1: unable to enumerate USB device [ 303.923159][ T41] kauditd_printk_skb: 57 callbacks suppressed [ 303.923191][ T41] audit: type=1400 audit(1786011476.627:17053): avc: denied { write } for pid=15037 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.047852][T15056] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 304.054270][ T41] audit: type=1400 audit(1786011476.757:17054): avc: denied { write } for pid=15051 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.178590][ T41] audit: type=1400 audit(1786011476.877:17055): avc: denied { write } for pid=15064 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.185749][T15066] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1887'. [ 304.321649][ T41] audit: type=1400 audit(1786011477.027:17056): avc: denied { write } for pid=15074 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.356565][T15066] lo speed is unknown, defaulting to 1000 [ 304.395118][ T41] audit: type=1400 audit(1786011477.097:17057): avc: denied { write } for pid=15080 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.500246][ T41] audit: type=1400 audit(1786011477.207:17058): avc: denied { write } for pid=15087 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.569172][ T41] audit: type=1400 audit(1786011477.267:17059): avc: denied { write } for pid=15091 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.583212][ T5754] Bluetooth: hci1: unexpected event for opcode 0x0c46 [ 304.706151][ T41] audit: type=1400 audit(1786011477.407:17060): avc: denied { write } for pid=15096 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.744962][ T41] audit: type=1400 audit(1786011477.437:17061): avc: denied { write } for pid=15101 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.753545][ T41] audit: type=1400 audit(1786011477.457:17062): avc: denied { accept } for pid=15098 comm="syz.3.1892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 304.774493][T15103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15103 comm=syz.3.1892 [ 305.031395][T15119] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 305.084697][T15129] tipc: Started in network mode [ 305.088605][T15129] tipc: Node identity 1000001, cluster identity 4369 [ 305.098524][T15129] tipc: Node number set to 16777217 [ 305.105030][T15129] tipc: Cannot configure node identity twice [ 305.207322][T15135] CIFS: Attempting to mount //127.0.0.1/share [ 305.210559][T15138] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 305.338550][T15148] geneve4: entered promiscuous mode [ 305.340570][T15148] geneve4: entered allmulticast mode [ 305.436881][T15126] ima: policy update completed [ 305.557657][T15167] fuse: fd is not a fuse device [ 305.932004][T15135] CIFS: VFS: Error connecting to socket. Aborting operation. [ 305.939135][T15135] CIFS: VFS: cifs_mount failed w/return code = -4 [ 306.109929][T15197] openvswitch: netlink: Message has 8 unknown bytes. [ 306.298913][T15203] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 306.624386][T15228] fuse: fd is not a fuse device [ 306.627779][T15228] netlink: 'syz.5.1918': attribute type 32 has an invalid length. [ 306.873267][T15249] __nla_validate_parse: 4 callbacks suppressed [ 306.873280][T15249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1920'. [ 306.878373][T15249] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1920'. [ 307.249416][T15290] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.5.1929:15290 [ 307.384773][T15306] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1932'. [ 307.400037][T15308] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1934'. [ 307.430045][T15310] netlink: 'syz.3.1935': attribute type 20 has an invalid length. [ 308.388587][T15374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.418013][T15377] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 308.948151][ T41] kauditd_printk_skb: 54 callbacks suppressed [ 308.948166][ T41] audit: type=1400 audit(1786011481.647:17117): avc: denied { write } for pid=15408 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.050221][ T41] audit: type=1400 audit(1786011481.747:17118): avc: denied { write } for pid=15412 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.136302][ T41] audit: type=1400 audit(1786011481.837:17119): avc: denied { write } for pid=15417 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.345816][ T41] audit: type=1400 audit(1786011482.047:17120): avc: denied { write } for pid=15427 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.365852][T15435] xt_socket: unknown flags 0x4c [ 309.409309][ T41] audit: type=1400 audit(1786011482.107:17121): avc: denied { write } for pid=15436 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.469138][ T41] audit: type=1400 audit(1786011482.167:17122): avc: denied { write } for pid=15442 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.537795][ T41] audit: type=1400 audit(1786011482.237:17123): avc: denied { write } for pid=15445 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.672224][ T41] audit: type=1400 audit(1786011482.377:17124): avc: denied { write } for pid=15448 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.734598][ T41] audit: type=1400 audit(1786011482.437:17125): avc: denied { write } for pid=15451 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.808349][ T41] audit: type=1400 audit(1786011482.507:17126): avc: denied { write } for pid=15453 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.457836][T15469] lo speed is unknown, defaulting to 1000 [ 310.516083][T15482] fuse: fd is not a fuse device [ 310.597475][T15482] bond13: option downdelay: invalid value (18446744073709551615) [ 310.600684][T15482] bond13: option downdelay: allowed values 0 - 2147483647 [ 310.618132][T15482] bond13 (unregistering): Released all slaves [ 310.654265][T15483] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 311.013356][T15523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1969'. [ 311.371869][T15547] usb usb8: usbfs: process 15547 (syz.7.1972) did not claim interface 0 before use [ 311.426727][ T5900] logitech-hidpp-device 0005:046D:B012.0007: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 311.483388][T15557] fido_id[15557]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 311.620318][T15576] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1977'. [ 311.695484][T15583] IPVS: Scheduler module ip_vs_sip not found [ 311.996027][T15613] fuse: fd is not a fuse device [ 312.011319][T15613] fuse: fd is not a fuse device [ 312.028120][T15613] fuse: fd is not a fuse device [ 312.032514][T15613] fuse: fd is not a fuse device [ 312.034446][T15613] fuse: fd is not a fuse device [ 312.039527][T15613] fuse: fd is not a fuse device [ 312.042363][T15613] fuse: fd is not a fuse device [ 312.046369][T15613] fuse: fd is not a fuse device [ 312.048087][T15613] fuse: fd is not a fuse device [ 312.053863][T15613] fuse: fd is not a fuse device [ 312.058318][T15613] fuse: fd is not a fuse device [ 312.064635][T15613] fuse: fd is not a fuse device [ 312.068634][T15613] fuse: fd is not a fuse device [ 312.073272][T15613] fuse: fd is not a fuse device [ 312.076139][T15613] fuse: fd is not a fuse device [ 312.082983][T15613] fuse: fd is not a fuse device [ 312.091065][T15613] fuse: fd is not a fuse device [ 312.106772][T15613] fuse: fd is not a fuse device [ 312.114736][T15613] fuse: fd is not a fuse device [ 312.124476][T15613] fuse: fd is not a fuse device [ 312.133385][T15613] fuse: fd is not a fuse device [ 312.140823][T15613] fuse: fd is not a fuse device [ 312.151602][T15613] fuse: fd is not a fuse device [ 312.156739][T15613] fuse: fd is not a fuse device [ 312.158533][T15613] fuse: fd is not a fuse device [ 312.174747][T15613] fuse: fd is not a fuse device [ 312.176973][T15613] fuse: fd is not a fuse device [ 312.182799][T15613] fuse: fd is not a fuse device [ 312.185026][T15613] fuse: fd is not a fuse device [ 312.187192][T15613] fuse: fd is not a fuse device [ 312.190484][T15613] fuse: fd is not a fuse device [ 312.192734][T15613] fuse: fd is not a fuse device [ 312.194877][T15613] fuse: fd is not a fuse device [ 312.213548][T15629] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1987'. [ 312.223810][T15629] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 312.226146][T15629] IPv6: NLM_F_CREATE should be set when creating new route [ 312.228431][T15629] IPv6: NLM_F_CREATE should be set when creating new route [ 312.337009][ T34] libceph: connect (1)[c::]:6789 error -101 [ 312.341901][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 312.346650][T15638] vcan0: tx address claim with dest, not broadcast [ 312.376857][T15638] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1989'. [ 312.436644][T15634] ceph: No mds server is up or the cluster is laggy [ 312.603832][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1992'. [ 312.618894][T15657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1992'. [ 312.736891][T15671] netlink: 'syz.7.1995': attribute type 2 has an invalid length. [ 313.242814][T15718] netlink: Invalid conntrack timeout [ 313.244512][T15718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.276597][T15722] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2003'. [ 313.559686][T15740] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 313.568442][T15740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2006'. [ 313.577372][T15740] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2006'. [ 313.615732][T15740] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2006'. [ 313.688245][T15745] overlayfs: failed to clone upperpath [ 313.942585][T15761] netlink: 'syz.5.2010': attribute type 18 has an invalid length. [ 313.951994][T15761] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2010'. [ 313.962591][T15761] netlink: 'syz.5.2010': attribute type 18 has an invalid length. [ 313.976909][T15761] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2010'. [ 314.002106][ T41] kauditd_printk_skb: 55 callbacks suppressed [ 314.002119][ T41] audit: type=1400 audit(1786011486.707:17182): avc: denied { write } for pid=15762 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.016402][T15761] dvmrp0: left allmulticast mode [ 314.017811][T15756] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 314.031539][ T41] audit: type=1800 audit(1786011486.727:17183): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=243590 res=0 errno=0 [ 314.094336][ T41] audit: type=1400 audit(1786011486.797:17184): avc: denied { write } for pid=15766 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.193252][ T41] audit: type=1326 audit(1786011486.897:17185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15770 comm="syz.7.2011" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48b99e0d9 code=0x7ffc0000 [ 314.218894][ T41] audit: type=1326 audit(1786011486.897:17186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15770 comm="syz.7.2011" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48b99e0d9 code=0x7ffc0000 [ 314.241351][ T41] audit: type=1326 audit(1786011486.897:17187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15770 comm="syz.7.2011" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48b99e0d9 code=0x7ffc0000 [ 314.261748][ T41] audit: type=1326 audit(1786011486.907:17188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15770 comm="syz.7.2011" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa48b99e0d9 code=0x7ffc0000 [ 314.282015][ T41] audit: type=1326 audit(1786011486.907:17189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15770 comm="syz.7.2011" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48b99e0d9 code=0x7ffc0000 [ 314.319065][ T41] audit: type=1326 audit(1786011486.907:17190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15770 comm="syz.7.2011" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48b99e0d9 code=0x7ffc0000 [ 314.326566][ T41] audit: type=1326 audit(1786011486.907:17191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15770 comm="syz.7.2011" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48b99e0d9 code=0x7ffc0000 [ 314.391289][T15787] IPv6: NLM_F_REPLACE set, but no existing node found! [ 314.538918][ T5842] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 314.701862][ T5842] usb 12-1: Using ep0 maxpacket: 8 [ 314.710304][ T5842] usb 12-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.716170][ T5842] usb 12-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.725095][ T5842] usb 12-1: config 0 interface 0 has no altsetting 0 [ 314.734834][ T5842] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 314.740644][ T5842] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.749788][ T5842] usb 12-1: config 0 descriptor?? [ 314.887636][T15802] netlink: 'syz.5.2016': attribute type 2 has an invalid length. [ 315.185881][ T5842] hid_parser_main: 7 callbacks suppressed [ 315.185896][ T5842] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 315.198232][ T5842] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 315.203722][ T5842] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 315.206569][ T5842] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 315.211766][ T5842] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 315.214827][ T5842] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 315.375179][T15781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.389251][T15781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.450949][ T5842] usb 12-1: USB disconnect, device number 5 [ 315.457117][T15819] fuse: fd is not a fuse device [ 315.980846][T15871] fuse: fd is not a fuse device [ 316.073264][T15879] SET target dimension over the limit! [ 316.159596][T15885] binder: 15884:15885 ioctl c0306201 200000000080 returned -14 [ 316.165421][T15885] binder: 15884:15885 ioctl c0306201 2000000003c0 returned -14 [ 316.435351][T15899] kvm: Disabled LAPIC found during irq injection [ 316.524397][T15899] pci_bus 0000:01: busn_res: [bus 01] is released [ 316.669999][T15905] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 316.719143][T15905] pci 0000:00:04.0: PCI bridge to [bus 01] [ 316.724449][T15905] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 316.741750][T15905] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 316.749708][T15905] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3807ffffffff 64bit pref] [ 316.779570][T15905] pci 0000:00:04.0: enabling Extended Tags [ 316.850561][T15905] pci 0000:00:04.0: Adding to iommu group 4 [ 316.876089][T15922] overlayfs: failed to clone upperpath [ 317.068161][T15905] pci 0000:00:04.0: PCI bridge to [bus 01] [ 317.124879][T15905] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 317.149795][T15905] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 317.161466][T15905] pci 0000:00:04.0: bridge window [mem 0x80900000-0x80afffff]: assigned [ 317.166373][T15905] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref]: assigned [ 317.176064][T15905] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 317.193978][T15905] pci 0000:00:04.0: PCI bridge to [bus 01] [ 317.195868][T15905] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 317.207174][T15905] pci 0000:00:04.0: bridge window [mem 0x80900000-0x80afffff] [ 317.220052][T15905] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref] [ 317.430975][T15905] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 317.494232][T15905] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 317.701379][T15971] fuse: fd is not a fuse device [ 317.946161][ C3] vxcan1: j1939_tp_rxtimer: 0xffff888027ff4000: rx timeout, send abort [ 318.446265][ C3] vxcan1: j1939_tp_rxtimer: 0xffff88802b1a7000: rx timeout, send abort [ 318.451592][ C3] vxcan1: j1939_tp_rxtimer: 0xffff888027ff4000: abort rx timeout. Force session deactivation [ 318.523375][T16010] syzkaller1: entered promiscuous mode [ 318.537763][T16010] syzkaller1: entered allmulticast mode [ 318.949254][ C3] vxcan1: j1939_tp_rxtimer: 0xffff88802b1a7000: abort rx timeout. Force session deactivation [ 319.017755][T16028] __nla_validate_parse: 4 callbacks suppressed [ 319.017769][T16028] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2057'. [ 319.029320][ T41] kauditd_printk_skb: 96 callbacks suppressed [ 319.029333][ T41] audit: type=1400 audit(1786011491.737:17288): avc: denied { write } for pid=16031 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.039301][T16028] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2057'. [ 319.049801][T16029] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2057'. [ 319.068866][T16029] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2057'. [ 319.104009][T16028] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2057'. [ 319.114649][T16028] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2057'. [ 319.174164][ T41] audit: type=1400 audit(1786011491.877:17289): avc: denied { write } for pid=16036 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.229862][ T41] audit: type=1400 audit(1786011491.937:17290): avc: denied { write } for pid=16042 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.284360][T16046] IPVS: set_ctl: invalid protocol: 60 172.20.20.65:20004 [ 319.312994][T16046] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20003 [ 319.402420][ T41] audit: type=1400 audit(1786011492.107:17291): avc: denied { write } for pid=16049 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.487050][ T41] audit: type=1400 audit(1786011492.187:17292): avc: denied { write } for pid=16052 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.622991][ T41] audit: type=1400 audit(1786011492.327:17293): avc: denied { write } for pid=16054 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.705588][ T41] audit: type=1400 audit(1786011492.407:17294): avc: denied { write } for pid=16057 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.870964][ T41] audit: type=1804 audit(1786011492.577:17295): pid=16064 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2063" name="kvm" dev="tmpfs" ino=1239 res=1 errno=0 [ 319.906846][ T41] audit: type=1400 audit(1786011492.607:17296): avc: denied { write } for pid=16067 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.990634][ T41] audit: type=1400 audit(1786011492.697:17297): avc: denied { write } for pid=16073 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 320.005533][T16078] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 320.020247][T16078] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 320.029517][T16078] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 320.063881][T16085] overlayfs: failed to clone upperpath [ 320.239924][ T5766] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 320.257414][ T5766] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 320.261173][ T5766] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 320.266081][ T5766] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 320.271423][ T5766] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 320.743897][T16114] lo speed is unknown, defaulting to 1000 [ 321.003321][T16097] lo speed is unknown, defaulting to 1000 [ 321.003811][T16156] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2080'. [ 321.687607][ T5822] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.705200][ T5822] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.769119][T16097] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.771601][T16097] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.774000][T16097] bridge_slave_0: entered allmulticast mode [ 321.776871][T16097] bridge_slave_0: entered promiscuous mode [ 321.785508][T16097] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.789767][T16097] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.795463][T16097] bridge_slave_1: entered allmulticast mode [ 321.802361][T16097] bridge_slave_1: entered promiscuous mode [ 321.817078][ T5822] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.820634][ T5822] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.902689][T16097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.920803][T16097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.942298][ T5822] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.946610][ T5822] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.983708][T16097] team0: Port device team_slave_0 added [ 321.990005][T16097] team0: Port device team_slave_1 added [ 322.013911][T16097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.016225][T16097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.029164][T16097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.040050][T16097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.043150][T16097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.055861][T16097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.070979][ T5822] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.074331][ T5822] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.121968][T16097] hsr_slave_0: entered promiscuous mode [ 322.126677][T16097] hsr_slave_1: entered promiscuous mode [ 322.130984][T16097] debugfs: 'hsr0' already exists in 'hsr' [ 322.135113][T16097] Cannot create hsr debugfs directory [ 322.369230][ T5754] Bluetooth: hci5: command tx timeout [ 322.481321][ T5822] bridge_slave_1: left allmulticast mode [ 322.483836][ T5822] bridge_slave_1: left promiscuous mode [ 322.487077][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.513639][ T5822] bridge_slave_0: left allmulticast mode [ 322.523737][ T5822] bridge_slave_0: left promiscuous mode [ 322.529745][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.640849][ T5842] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 322.760389][ T5822] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 322.803163][ T5822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.812326][ T5822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.821484][ T5822] bond0 (unregistering): Released all slaves [ 322.831163][ T5822] bond1 (unregistering): Released all slaves [ 322.838464][ T5822] bond2 (unregistering): Released all slaves [ 322.847214][ T5822] bond3 (unregistering): Released all slaves [ 322.854804][ T5822] bond4 (unregistering): Released all slaves [ 323.162401][ T5822] tipc: Left network mode [ 323.202727][ T5822] rxrpc: Leaked peer 1d7 {1} 127.0.0.1:7003 [ 323.268192][T16097] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 323.268517][T16229] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2092'. [ 323.278768][T16097] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 323.282190][T16097] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 323.286794][T16097] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 323.290718][T16097] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 323.298626][T16097] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 323.330307][T16097] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 323.348358][T16097] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 323.353643][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881156e1400: rx timeout, send abort [ 323.357923][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881156e1400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 323.446181][T16097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.480763][T16248] jffs2: notice: (16248) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 323.523461][T16248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=16248 comm=syz.7.2094 [ 323.537408][T16097] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.567599][T16097] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 323.573330][T16097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 323.591388][T12090] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.593751][T12090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.597211][T12090] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.599563][T12090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.015845][T16275] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2099'. [ 324.083041][ T5822] hsr_slave_0: left promiscuous mode [ 324.099164][ T5822] hsr_slave_1: left promiscuous mode [ 324.117960][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.126577][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.131824][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.134626][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.155640][ T5822] veth1_macvtap: left promiscuous mode [ 324.157965][ T5822] veth0_macvtap: left promiscuous mode [ 324.198966][ T10] SELinux: failure in sel_netif_sid_slow(), invalid network interface (51) [ 324.300208][T16291] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2109'. [ 324.330527][T16290] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2103'. [ 324.352815][ T5822] team0 (unregistering): Port device team_slave_1 removed [ 324.361707][ T5822] team0 (unregistering): Port device team_slave_0 removed [ 324.397645][T16297] netlink: 'syz.3.2104': attribute type 1 has an invalid length. [ 324.449090][ T5754] Bluetooth: hci5: command tx timeout [ 324.555254][T12073] smbdirect: ib_dev[syz0] removed [ 324.572434][ T5445] 8021q: adding VLAN 0 to HW filter on device eth13 [ 324.582428][T16097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.586197][ T5900] lo speed is unknown, defaulting to 1000 [ 324.593572][ T5900] syz0: Port: 1 Link DOWN [ 324.608381][T16291] 8021q: adding VLAN 0 to HW filter on device bond5 [ 324.628712][T16295] macvlan2: entered promiscuous mode [ 324.630928][T16295] macvlan2: entered allmulticast mode [ 324.633375][T16295] bond5: entered promiscuous mode [ 324.635454][T16295] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 324.650545][T16295] bond5: left promiscuous mode [ 324.682960][T16297] 8021q: adding VLAN 0 to HW filter on device bond14 [ 324.841750][T16324] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2110'. [ 324.918227][ T41] kauditd_printk_skb: 59 callbacks suppressed [ 324.918242][ T41] audit: type=1400 audit(1786011497.617:17357): avc: denied { write } for pid=16325 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.950711][T16097] veth0_vlan: entered promiscuous mode [ 324.956757][T16097] veth1_vlan: entered promiscuous mode [ 324.972750][T16097] veth0_macvtap: entered promiscuous mode [ 324.980337][T16097] veth1_macvtap: entered promiscuous mode [ 325.024168][T16097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.039788][T16097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.046970][ T41] audit: type=1400 audit(1786011497.747:17358): avc: denied { write } for pid=16330 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.098824][ T41] audit: type=1800 audit(1786011497.797:17359): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=258393 res=0 errno=0 [ 325.129024][ T5549] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.132057][ T5549] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.134909][ T5549] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.137697][ T5549] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.144660][ T5822] IPVS: stop unused estimator thread 0... [ 325.160955][ T5445] 8021q: adding VLAN 0 to HW filter on device eth14 [ 325.212707][ T7848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.221996][ T41] audit: type=1800 audit(1786011497.917:17360): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=258519 res=0 errno=0 [ 325.232481][ T7848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.265181][T12073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.275696][T12073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.309549][ T41] audit: type=1400 audit(1786011498.007:17361): avc: denied { mounton } for pid=16097 comm="syz-executor" path="/syzkaller.BuQhbP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=48960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 325.364005][ T41] audit: type=1400 audit(1786011498.067:17362): avc: denied { write } for pid=16336 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.429867][ T41] audit: type=1800 audit(1786011498.137:17363): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0 [ 325.458279][ T41] audit: type=1800 audit(1786011498.157:17364): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0 [ 325.466983][ T41] audit: type=1400 audit(1786011498.167:17365): avc: denied { write } for pid=16339 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.544957][ T5445] 8021q: adding VLAN 0 to HW filter on device eth15 [ 325.556633][T16342] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2068'. [ 325.558056][T16347] binder: 16346:16347 ioctl c0306201 200000000080 returned -14 [ 325.579857][T16349] binder: BINDER_SET_CONTEXT_MGR already set [ 325.584421][T16347] binder: 16346:16347 ioctl c0306201 200000000080 returned -14 [ 325.590582][T16349] binder: 16346:16349 ioctl 4018620d 200000003280 returned -16 [ 325.635875][ T41] audit: type=1400 audit(1786011498.337:17366): avc: denied { write } for pid=16353 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.650839][T16357] MTD: Couldn't look up './dev/mtdblock0': -2 [ 325.764644][ T5445] 8021q: adding VLAN 0 to HW filter on device eth16 [ 325.784630][T16379] netlink: 'syz.7.2117': attribute type 1 has an invalid length. [ 325.980702][T16398] netlink: 'syz.7.2120': attribute type 1 has an invalid length. [ 326.041450][T16398] 8021q: adding VLAN 0 to HW filter on device bond7 [ 326.045623][T16410] xt_socket: unknown flags 0x48 [ 326.159193][T16420] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2128'. [ 326.206712][ T5754] Bluetooth: Frame is too long (len 12, expected len 4) [ 326.539331][ T5754] Bluetooth: hci5: command tx timeout [ 327.474215][T16529] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2144'. [ 327.481327][T16527] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2144'. [ 327.487974][T16527] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2144'. [ 327.620565][T16542] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 327.812828][T16563] trusted_key: encrypted_key: insufficient parameters specified [ 327.871942][T16568] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2150'. [ 327.884226][T16568] netlink: 'syz.3.2150': attribute type 4 has an invalid length. [ 327.890089][T16571] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2150'. [ 328.054535][T16591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4200 sclass=netlink_route_socket pid=16591 comm=syz.3.2155 [ 328.182653][T16602] fuse: fd is not a fuse device [ 328.515948][T16619] hugetlbfs: syz.7.2161 (16619): Using mlock ulimits for SHM_HUGETLB is obsolete [ 328.609602][ T5754] Bluetooth: hci5: command tx timeout [ 329.010928][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 329.013039][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.299036][ T63] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 329.449046][ T63] usb 12-1: Using ep0 maxpacket: 8 [ 329.452313][ T63] usb 12-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 179, changing to 11 [ 329.455905][ T63] usb 12-1: config 1 interface 0 has no altsetting 0 [ 329.461469][ T63] usb 12-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 329.464504][ T63] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.467571][ T63] usb 12-1: Product: syz [ 329.469447][ T63] usb 12-1: Manufacturer: syz [ 329.471064][ T63] usb 12-1: SerialNumber: syz [ 329.761565][T16738] ubi16: attaching mtd0 [ 329.800974][T16738] ubi16: scanning is finished [ 329.813547][T16738] ubi16 error: ubi_read_volume_table: the layout volume was not found [ 329.851830][T16744] __nla_validate_parse: 5 callbacks suppressed [ 329.851851][T16744] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2184'. [ 329.937926][ T41] kauditd_printk_skb: 75 callbacks suppressed [ 329.937954][ T41] audit: type=1800 audit(1786011758.631:17442): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0 [ 329.953848][T16758] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2187'. [ 329.966926][T16761] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 329.986305][ T41] audit: type=1400 audit(1786011758.691:17443): avc: denied { write } for pid=16759 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.992309][T16758] netlink: 'syz.8.2187': attribute type 29 has an invalid length. [ 330.020450][T16765] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2189'. [ 330.033035][T16766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2189'. [ 330.036989][ T41] audit: type=1800 audit(1786011758.741:17444): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0 [ 330.076549][T16738] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 330.080141][ T41] audit: type=1400 audit(1786011758.791:17445): avc: denied { write } for pid=16769 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.131641][ T41] audit: type=1400 audit(1786011758.841:17446): avc: denied { write } for pid=16775 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.138723][ T41] audit: type=1800 audit(1786011758.841:17447): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0 [ 330.191821][T16779] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2191'. [ 330.195424][T16779] Line length is too long: Should be less than 4094 [ 330.202710][ T41] audit: type=1400 audit(1786011758.911:17448): avc: denied { ioctl } for pid=16778 comm="syz.8.2191" path="/15/tracing/uprobe_events" dev="tracefs" ino=12 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 330.237556][ T41] audit: type=1800 audit(1786011758.941:17449): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0 [ 330.256885][ T41] audit: type=1800 audit(1786011758.961:17450): pid=16782 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2192" name="crash_size" dev="sysfs" ino=1215 res=0 errno=0 [ 330.290326][T16782] netlink: 'syz.8.2192': attribute type 1 has an invalid length. [ 330.294387][ T41] audit: type=1400 audit(1786011759.001:17451): avc: denied { read } for pid=16781 comm="syz.8.2192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 330.680278][T16799] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2193'. [ 330.946341][T16808] bond15: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 330.949344][T16808] bond15: entered allmulticast mode [ 330.957411][T16808] ip6erspan0: entered promiscuous mode [ 330.963085][T16808] ip6erspan0: entered allmulticast mode [ 330.965340][T16808] bond15: (slave ip6erspan0): Enslaving as an active interface with an up link [ 330.970124][T16808] fuse: fd is not a fuse device [ 331.074172][T16818] netlink: 'syz.3.2196': attribute type 21 has an invalid length. [ 331.077305][T16818] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2196'. [ 331.089316][ T5766] Bluetooth: hci2: command 0x0406 tx timeout [ 331.100502][T16818] overlayfs: failed to clone upperpath [ 331.168684][T16822] xt_ecn: cannot match TCP bits for non-tcp packets [ 331.224079][T16828] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.260091][T16831] fuse: fd is not a fuse device [ 331.302548][T16828] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2198'. [ 331.377902][T16843] overlayfs: failed to clone lowerpath [ 331.384900][T16843] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2203'. [ 331.451365][T16850] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2204'. [ 331.528050][T16863] cgroup: Invalid name [ 331.573748][T16870] bridge1: entered promiscuous mode [ 331.576233][T16870] bridge1: entered allmulticast mode [ 331.583081][T16870] netlink: 'syz.5.2209': attribute type 7 has an invalid length. [ 331.723420][T16886] netlink: 'syz.3.2212': attribute type 1 has an invalid length. [ 332.088128][ T63] usbhid 12-1:1.0: can't add hid device: -71 [ 332.090145][ T63] usbhid 12-1:1.0: probe with driver usbhid failed with error -71 [ 332.115090][ T63] usb 12-1: USB disconnect, device number 6 [ 332.338971][ T5754] Bluetooth: hci4: Dropping invalid advertising data [ 332.343892][ T5754] Bluetooth: hci4: Malformed LE Event: 0x02 [ 332.357475][T16923] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 332.577907][T16947] pim6reg: entered allmulticast mode [ 332.767574][T16960] tipc: New replicast peer: 172.30.0.6 [ 332.779032][T16960] tipc: Enabled bearer , priority 10 [ 333.057941][T16989] 8021q: adding VLAN 0 to HW filter on device bond7 [ 333.092567][ T5766] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 333.100804][ T5766] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 333.105493][ T5766] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 333.109470][ T5766] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 333.117238][ T5766] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 333.855553][T17049] overlayfs: failed to get inode (-116) [ 333.858374][T16994] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.858523][T17049] overlayfs: failed to get inode (-116) [ 333.861278][T16994] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.865503][T16994] bridge_slave_0: entered allmulticast mode [ 333.868148][T17050] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 333.871565][T16994] bridge_slave_0: entered promiscuous mode [ 333.874725][T17049] SET target dimension over the limit! [ 333.876308][T16994] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.879032][T16994] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.881497][T16994] bridge_slave_1: entered allmulticast mode [ 333.882384][T17050] SET target dimension over the limit! [ 333.884380][T16994] bridge_slave_1: entered promiscuous mode [ 333.910866][T16994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.915536][T16994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.973923][T16994] team0: Port device team_slave_0 added [ 333.987950][T16994] team0: Port device team_slave_1 added [ 334.023740][T16994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.026000][T16994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.034968][T16994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.041322][T16994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.043696][T16994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.053858][T16994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.122864][T16994] hsr_slave_0: entered promiscuous mode [ 334.128427][T16994] hsr_slave_1: entered promiscuous mode [ 334.135117][T16994] debugfs: 'hsr0' already exists in 'hsr' [ 334.138974][T17068] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 334.143314][T16994] Cannot create hsr debugfs directory [ 334.394755][T16994] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.400471][T16994] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.436770][T12077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.442277][T12077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.680515][T17092] 9p: Unknown uid 00000000004294967295 [ 334.711142][T16994] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.714525][T16994] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.733412][T17095] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=17095 comm=syz.5.2248 [ 334.839968][T16994] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.854863][T16994] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.866980][T17109] : renamed from veth0 (while UP) [ 334.960363][T17122] binder: BINDER_SET_CONTEXT_MGR already set [ 334.963350][T17122] binder: 17121:17122 ioctl 4018620d 200000000040 returned -16 [ 334.966910][ T41] kauditd_printk_skb: 76 callbacks suppressed [ 334.966920][ T41] audit: type=1400 audit(1786011763.671:17528): avc: denied { write } for pid=17117 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.985748][T16994] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.989424][T16994] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.001959][ T41] audit: type=1800 audit(1786011763.711:17529): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0 [ 335.030099][T17129] kernel read not supported for file /policy (pid: 17129 comm: syz.8.2257) [ 335.038162][ T41] audit: type=1800 audit(1786011763.741:17530): pid=17129 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2257" name="policy" dev="selinuxfs" ino=20 res=0 errno=0 [ 335.050611][T17129] kernel read not supported for file /policy (pid: 17129 comm: syz.8.2257) [ 335.063303][ T41] audit: type=1400 audit(1786011763.761:17531): avc: denied { module_load } for pid=17128 comm="syz.8.2257" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 335.081388][ T41] audit: type=1400 audit(1786011763.791:17532): avc: denied { write } for pid=17130 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 335.159032][ T41] audit: type=1800 audit(1786011763.861:17533): pid=16994 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=27717 res=0 errno=0 [ 335.184268][ T41] audit: type=1400 audit(1786011763.881:17534): avc: denied { write } for pid=17138 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 335.205796][ T41] audit: type=1800 audit(1786011763.881:17535): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0 [ 335.219073][ T41] audit: type=1800 audit(1786011763.881:17536): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=277443 res=0 errno=0 [ 335.250714][ T5766] Bluetooth: hci0: command tx timeout [ 335.298691][ T41] audit: type=1800 audit(1786011764.001:17537): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0 [ 335.335764][T17158] netlink: zone id is out of range [ 335.347835][T17158] netlink: get zone limit has 4 unknown bytes [ 335.356891][T16994] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 335.365764][T16994] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 335.369866][T16994] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 335.379647][T16994] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 335.383622][T16994] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 335.390397][T17163] device-mapper: ioctl: device name cannot contain '/' [ 335.390627][T16994] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 335.396889][T16994] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 335.413990][T16994] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 335.488401][T17163] syz.8.2264 (17163): drop_caches: 2 [ 335.518516][T16994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.557200][T16994] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.581496][ T7856] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.583839][ T7856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.610363][T12077] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.612908][T12077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.735742][T17191] __nla_validate_parse: 9 callbacks suppressed [ 335.735755][T17191] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2268'. [ 335.756445][T17191] bridge_slave_0: left allmulticast mode [ 335.758300][T17191] bridge_slave_0: left promiscuous mode [ 335.761802][T17191] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.766612][T17191] bridge_slave_1: left allmulticast mode [ 335.768421][T17191] bridge_slave_1: left promiscuous mode [ 335.776809][T17191] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.787291][T17191] bond0: (slave bond_slave_0): Releasing backup interface [ 335.795171][T17191] bond0: (slave bond_slave_1): Releasing backup interface [ 335.817990][T17195] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 335.821203][T17195] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 335.822932][T17191] team0: Port device team_slave_0 removed [ 335.832442][T17191] team0: Port device team_slave_1 removed [ 335.835727][T17191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.840629][T17191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.845113][T17191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.848286][T17191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.855592][T17191] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 336.051866][ T9] bridge0: entered promiscuous mode [ 336.101368][T17204] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2270'. [ 336.143359][T17214] netlink: 'syz.7.2271': attribute type 23 has an invalid length. [ 336.161926][T16994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.176178][T17214] netlink: 'syz.7.2271': attribute type 23 has an invalid length. [ 336.195832][T17216] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2272'. [ 336.222554][T16994] veth0_vlan: entered promiscuous mode [ 336.242477][T16994] veth1_vlan: entered promiscuous mode [ 336.275025][T16994] veth0_macvtap: entered promiscuous mode [ 336.289652][T16994] veth1_macvtap: entered promiscuous mode [ 336.296858][T17224] sctp: [Deprecated]: syz.7.2274 (pid 17224) Use of struct sctp_assoc_value in delayed_ack socket option. [ 336.296858][T17224] Use struct sctp_sack_info instead [ 336.307843][T16994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.320928][T16994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.393041][ T5549] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.397415][ T5549] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.401633][ T5549] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.404232][ T5549] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.417242][T17231] netlink: 240 bytes leftover after parsing attributes in process `syz.8.2273'. [ 336.455922][T12074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.460417][T12074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.480834][T17235] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2275'. [ 336.483905][T17235] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2275'. [ 336.487366][T12074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.494479][T12074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.498213][T17240] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2275'. [ 336.503760][T17240] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2275'. [ 336.563689][T17239] binder_alloc: binder_alloc_mmap_handler: 17236 200000ffd000-200001000000 already mapped failed -16 [ 336.576603][T17239] binder: BINDER_SET_CONTEXT_MGR already set [ 336.586274][T17248] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2231'. [ 336.586562][T17245] 9pnet: Found fid 0 not clunked [ 336.595343][T17239] binder: 17236:17239 ioctl 4018620d 200000000040 returned -16 [ 336.601288][T17239] binder_alloc: 17236: binder_alloc_buf, no vma [ 336.661747][T17258] overlayfs: cannot append lower layer [ 336.708664][T17261] UBIFS error (pid: 17261): cannot open "ubi0_0", error -19 [ 336.712598][T17261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2280'. [ 337.049769][ T5898] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 337.200902][ T5898] usb 8-1: unable to get BOS descriptor or descriptor too short [ 337.207848][T17306] fuse: fd is not a fuse device [ 337.208215][ T5898] usb 8-1: not running at top speed; connect to a high speed hub [ 337.217517][ T5898] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 337.217616][T17306] lo speed is unknown, defaulting to 1000 [ 337.221266][ T5898] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 337.223748][T17306] lo speed is unknown, defaulting to 1000 [ 337.226391][ T5898] usb 8-1: config 14 has no interface number 0 [ 337.226405][ T5898] usb 8-1: config 14 has no interface number 1 [ 337.226443][ T5898] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 337.226457][ T5898] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 337.230009][T17306] lo speed is unknown, defaulting to 1000 [ 337.236087][ T5898] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 337.239993][T17306] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 337.246497][ T5898] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 337.251273][T17306] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 337.259798][ T5898] usb 8-1: config 14 interface 57 has no altsetting 0 [ 337.264460][T17306] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 337.266954][ T5898] usb 8-1: config 14 interface 228 has no altsetting 0 [ 337.270026][ T5898] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 337.277372][ T5898] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.279839][T17306] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 337.280971][ T5898] usb 8-1: Product: syz [ 337.285317][ T5898] usb 8-1: Manufacturer: syz [ 337.287200][ T5898] usb 8-1: SerialNumber: syz [ 337.313126][T17306] lo speed is unknown, defaulting to 1000 [ 337.316866][T17306] lo speed is unknown, defaulting to 1000 [ 337.321283][T17306] lo speed is unknown, defaulting to 1000 [ 337.329867][ T5766] Bluetooth: hci0: command tx timeout [ 337.339750][T17306] lo speed is unknown, defaulting to 1000 [ 337.348087][T17306] lo speed is unknown, defaulting to 1000 [ 337.375010][T17306] lo speed is unknown, defaulting to 1000 [ 337.630219][T17335] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 337.697393][ T5898] legousbtower 8-1:14.57: interrupt endpoints not found [ 337.805149][T17357] netlink: 'syz.7.2300': attribute type 21 has an invalid length. [ 338.050661][T17372] SELinux: unknown common [ 338.053741][T17372] SELinux: invalid class [ 338.060958][T17372] SELinux: failed to load policy [ 338.067366][T17372] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 338.100940][ T5898] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 51.63 build 1747 [ 338.114826][ T5898] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 338.128108][T17391] 8021q: adding VLAN 0 to HW filter on device bond8 [ 338.216379][T17398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.289152][ T958] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 338.386633][T17409] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 338.386633][T17409] The task syz.7.2309 (17409) triggered the difference, watch for misbehavior. [ 338.395836][T17407] netlink: 'syz.7.2309': attribute type 21 has an invalid length. [ 338.400459][T17407] Bluetooth: ISO socket layer initialized [ 338.446773][ T958] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.450915][ T958] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.454948][ T958] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 338.462307][ T958] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 338.465371][ T958] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.469618][ T958] usb 13-1: config 0 descriptor?? [ 338.666184][T17420] overlayfs: workdir and upperdir must be separate subtrees [ 338.864594][ T5898] usb 8-1: USB disconnect, device number 12 [ 338.878020][ T5898] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 338.879734][ T958] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 338.890359][ T958] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 338.892684][ T958] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 338.899780][ T958] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 338.902281][ T958] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 338.904634][ T958] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 338.906970][ T958] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 338.911984][ T958] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 338.914436][ T958] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 338.916784][ T958] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 338.943851][ T958] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 339.294821][T17478] tmpfs: Unknown parameter 'quo/a' [ 339.420989][ T5766] Bluetooth: hci0: command tx timeout [ 339.439995][T17499] xt_policy: neither incoming nor outgoing policy selected [ 339.478555][T17495] netlink: 'syz.3.2322': attribute type 7 has an invalid length. [ 339.482901][T17495] netlink: 'syz.3.2322': attribute type 8 has an invalid length. [ 339.506010][T17504] netlink: 'syz.5.2324': attribute type 1 has an invalid length. [ 339.509992][T17504] netlink: 'syz.5.2324': attribute type 1 has an invalid length. [ 339.727542][T17526] fuse: fd is not a fuse device [ 339.763785][ T5737] usb 13-1: USB disconnect, device number 2 [ 339.928008][T17541] syzkaller0: entered promiscuous mode [ 339.930109][T17541] syzkaller0: entered allmulticast mode [ 339.936503][T17541] netlink: 'syz.3.2333': attribute type 1 has an invalid length. [ 339.982785][ T41] kauditd_printk_skb: 115 callbacks suppressed [ 339.982800][ T41] audit: type=1800 audit(1786011768.691:17653): pid=11096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=279549 res=0 errno=0 [ 339.984951][ T5754] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.991367][ T41] audit: type=1800 audit(1786011768.691:17654): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=279560 res=0 errno=0 [ 340.006937][ T5754] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.010739][ T5754] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.014970][ T5754] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.022402][ T5754] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.046121][ T41] audit: type=1800 audit(1786011768.751:17655): pid=11096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=279579 res=0 errno=0 [ 340.054357][ T41] audit: type=1800 audit(1786011768.761:17656): pid=11096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=279590 res=0 errno=0 [ 340.085466][ T41] audit: type=1400 audit(1786011768.791:17657): avc: denied { write } for pid=17550 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.134140][ T41] audit: type=1400 audit(1786011768.841:17658): avc: denied { write } for pid=17555 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.144404][ T41] audit: type=1800 audit(1786011768.851:17659): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 340.228327][ T41] audit: type=1400 audit(1786011768.931:17660): avc: denied { write } for pid=17561 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.303364][T17570] loop0: detected capacity change from 0 to 8 [ 340.308271][ T41] audit: type=1800 audit(1786011769.011:17661): pid=11096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 340.326738][ T41] audit: type=1800 audit(1786011769.021:17662): pid=17570 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2336" name="block2mtd" dev="sysfs" ino=62375 res=0 errno=0 [ 340.345933][T17570] block2mtd: erasesize must be a divisor of device size [ 340.384265][T10152] bond0: (slave syz_tun): Releasing backup interface [ 340.387217][T17570] Bluetooth: MGMT ver 1.23 [ 340.391449][T17570] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 340.392367][T10152] syz_tun (unregistering): left allmulticast mode [ 340.578760][ T5549] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.586281][ T5549] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.606976][T17548] lo speed is unknown, defaulting to 1000 [ 340.664602][T17582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=17582 comm=syz.7.2338 [ 340.743516][ T5549] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.768872][ T5549] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.898233][ T5549] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.902630][ T5549] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.918672][T17548] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.927496][T17548] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.933221][T17548] bridge_slave_0: entered allmulticast mode [ 340.938343][T17548] bridge_slave_0: entered promiscuous mode [ 340.946220][T17548] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.949411][T17548] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.952541][T17548] bridge_slave_1: entered allmulticast mode [ 340.956810][T17548] bridge_slave_1: entered promiscuous mode [ 341.029675][ T5549] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.035465][ T5549] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.076758][T17548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.084559][T17548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.106184][T17548] team0: Port device team_slave_0 added [ 341.109714][T17548] team0: Port device team_slave_1 added [ 341.125569][T17548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.127954][T17548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.136346][T17548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.141192][T17548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.143495][T17548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.151857][T17548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.181243][T17548] hsr_slave_0: entered promiscuous mode [ 341.183692][T17548] hsr_slave_1: entered promiscuous mode [ 341.185940][T17548] debugfs: 'hsr0' already exists in 'hsr' [ 341.187859][T17548] Cannot create hsr debugfs directory [ 341.420433][ T5549] pim6reg: left allmulticast mode [ 341.489411][ T5766] Bluetooth: hci0: command tx timeout [ 341.625003][ T5549] bond0 (unregistering): Released all slaves [ 341.634212][ T5549] bond1 (unregistering): Released all slaves [ 341.646650][ T5549] bond2 (unregistering): Released all slaves [ 341.660963][ T5549] bond3 (unregistering): Released all slaves [ 341.682800][ T5549] bond4 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 341.687695][ T5549] bond4 (unregistering): Released all slaves [ 341.697213][ T5549] bond5 (unregistering): Released all slaves [ 341.704922][ T5549] bond6 (unregistering): Released all slaves [ 341.709225][T17626] netlink: 'syz.7.2344': attribute type 1 has an invalid length. [ 341.715261][ T5549] bond7 (unregistering): Released all slaves [ 341.715986][T17626] netlink: 'syz.7.2344': attribute type 1 has an invalid length. [ 341.726691][ T5549] bond8 (unregistering): Released all slaves [ 341.745176][T17625] syzkaller0: entered promiscuous mode [ 341.746989][T17625] syzkaller0: entered allmulticast mode [ 341.928560][ T5549] : left promiscuous mode [ 342.052109][ T5766] Bluetooth: hci1: command tx timeout [ 342.082450][T17634] __nla_validate_parse: 10 callbacks suppressed [ 342.082464][T17634] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2346'. [ 342.176331][ T5549] tipc: Disabling bearer [ 342.190292][ T5549] tipc: Left network mode [ 342.349462][T17645] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2348'. [ 342.421929][T17662] jffs2: notice: (17662) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 342.850622][T17692] syzkaller0: entered promiscuous mode [ 342.852500][T17692] syzkaller0: entered allmulticast mode [ 342.857670][T17548] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 342.864513][T17679] netlink: 'syz.8.2353': attribute type 1 has an invalid length. [ 342.866217][T17548] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 342.870259][T17548] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 342.887361][T17548] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 342.911057][T17548] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 342.915382][T17548] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 342.918143][T17548] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 342.927718][T17548] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 342.987454][T17548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.049733][T17711] overlayfs: missing 'lowerdir' [ 343.122043][T17713] binder: Unknown parameter 'statqPa' [ 343.160399][T17720] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2360'. [ 343.212152][T17720] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2360'. [ 343.275076][T17548] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.297897][T12081] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.300371][T12081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.312498][T12081] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.315620][T12081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.350733][T17730] veth1_macvtap: left promiscuous mode [ 343.497557][ T5549] veth1_macvtap: left promiscuous mode [ 343.500888][ T5549] veth0_macvtap: left promiscuous mode [ 343.502743][ T5549] veth1_vlan: left promiscuous mode [ 343.504374][ T5549] veth0_vlan: left promiscuous mode [ 343.550735][T17743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2366'. [ 343.798030][T12082] smbdirect: ib_dev[syz0] removed [ 344.059955][T17759] usb3503 0-0008: unknown mode is requested [ 344.062318][T17759] usb3503 0-0008: usb3503_probe: probed in standby mode [ 344.082806][T17759] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 344.087893][T17759] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 344.128997][ T5766] Bluetooth: hci1: command tx timeout [ 344.157098][T17548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.193106][T17776] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 344.226052][ T5549] IPVS: stop unused estimator thread 0... [ 344.375359][T17787] jffs2: notice: (17787) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 344.379821][T17548] veth0_vlan: entered promiscuous mode [ 344.382709][T17787] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2371'. [ 344.385548][T17787] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2371'. [ 344.394579][T17548] veth1_vlan: entered promiscuous mode [ 344.415126][T17548] veth0_macvtap: entered promiscuous mode [ 344.422849][T17548] veth1_macvtap: entered promiscuous mode [ 344.447949][T17548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.454385][T17548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.576824][ T7861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.587479][ T7861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.631538][T12081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.634159][T12081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.659425][T17725] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.664637][T17725] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.674417][T17725] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.677325][T17725] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.806128][T17818] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2375'. [ 344.811634][T17819] Invalid argument reading file caps for ./file0 [ 344.841585][T17822] openvswitch: netlink: IPv4 tun info is not correct [ 344.880199][T17825] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 344.880199][T17825] [ 344.885354][T17829] sctp: [Deprecated]: syz.5.2377 (pid 17829) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.885354][T17829] Use struct sctp_sack_info instead [ 344.889854][T17825] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 344.894689][T17825] CIFS: Attempting to mount //127.0.0.1/share [ 344.902789][T17825] CIFS: VFS: Error connecting to socket. Aborting operation. [ 344.906343][T17829] sctp: [Deprecated]: syz.5.2377 (pid 17829) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.906343][T17829] Use struct sctp_sack_info instead [ 344.907114][T17825] CIFS: VFS: cifs_mount failed w/return code = -101 [ 345.065610][ T41] kauditd_printk_skb: 109 callbacks suppressed [ 345.065645][ T41] audit: type=1400 audit(1786011773.771:17772): avc: denied { write } for pid=17843 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.089954][ T41] audit: type=1800 audit(1786011773.791:17773): pid=17794 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2371" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 345.119465][ T41] audit: type=1800 audit(1786011773.831:17774): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 345.136792][ T41] audit: type=1400 audit(1786011773.841:17775): avc: denied { write } for pid=17846 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.199155][ T41] audit: type=1800 audit(1786011773.901:17776): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 345.239817][ T41] audit: type=1800 audit(1786011773.951:17777): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 345.261473][T17853] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2381'. [ 345.286079][ T41] audit: type=1800 audit(1786011773.991:17778): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 345.303532][ T41] audit: type=1400 audit(1786011774.011:17779): avc: denied { write } for pid=17856 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.312571][ T41] audit: type=1800 audit(1786011774.011:17780): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 345.361325][ T41] audit: type=1400 audit(1786011774.071:17781): avc: denied { write } for pid=17868 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.365186][T17864] bridge0: port 3(syz_tun) entered blocking state [ 345.382889][T17864] bridge0: port 3(syz_tun) entered disabled state [ 345.388213][T17872] netlink: 666 bytes leftover after parsing attributes in process `syz.7.2387'. [ 345.388603][T17864] syz_tun: entered allmulticast mode [ 345.402886][T17864] syz_tun: entered promiscuous mode [ 345.405741][T17864] bridge0: port 3(syz_tun) entered blocking state [ 345.410634][T17864] bridge0: port 3(syz_tun) entered forwarding state [ 345.420610][T17864] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 345.808548][T17913] e1000 0000:00:03.0: PCI INT A: failed to register GSI [ 345.816719][T17913] e1000 0000:00:03.0: probe with driver e1000 failed with error -16 [ 346.014831][T17933] ISOFS: Unable to identify CD-ROM format. [ 346.132471][T17948] genirq: Flags mismatch irq 4. 00200000 (comedi_parport) vs. 00200080 (ttyS0) [ 346.203880][T17965] netlink: 'syz.7.2408': attribute type 1 has an invalid length. [ 346.209288][ T5766] Bluetooth: hci1: command tx timeout [ 346.227453][T17965] 8021q: adding VLAN 0 to HW filter on device bond8 [ 346.467153][T17991] overlayfs: conflicting options: nfs_export=on,index=off [ 346.707630][T18006] binder: 18001:18006 ioctl 4018620d 0 returned -22 [ 346.719294][T18006] binder_alloc: binder_alloc_mmap_handler: 18001 200000ffe000-200001000000 already mapped failed -16 [ 346.824108][T17996] 8021q: adding VLAN 0 to HW filter on device bond2 [ 346.831684][T17996] 8021q: adding VLAN 0 to HW filter on device bond3 [ 346.849639][T17996] 8021q: adding VLAN 0 to HW filter on device bond6 [ 346.953421][T18011] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.000897][T18023] /dev/sg0: Can't lookup blockdev [ 347.077366][T18022] bond9: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 347.095129][T18022] __nla_validate_parse: 6 callbacks suppressed [ 347.095150][T18022] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2420'. [ 347.097737][ T5842] IPVS: starting estimator thread 0... [ 347.102951][T18022] bond9: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 347.168765][T18011] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.198942][T18030] IPVS: using max 45 ests per chain, 108000 per kthread [ 347.273974][T18011] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.368940][ T24] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 347.404069][T18011] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.523713][ T24] usb 8-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 347.526121][T18065] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 347.526589][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.526603][ T24] usb 8-1: Product: syz [ 347.526612][ T24] usb 8-1: Manufacturer: syz [ 347.526621][ T24] usb 8-1: SerialNumber: syz [ 347.638930][T17725] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.701496][ T5549] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.706788][ T5549] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.712237][ T5549] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.749341][T18031] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 347.792717][ T24] usb 8-1: 1:1 : no cluster descriptor [ 347.823235][ T24] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 347.843656][T18087] team0: Device xfrm0 is of different type [ 347.855007][T18085] team0: Device xfrm0 is of different type [ 347.914930][ T24] usb 8-1: USB disconnect, device number 13 [ 348.031234][T18096] qnx6: unable to set blocksize [ 348.275933][T18133] netlink: 'syz.7.2445': attribute type 2 has an invalid length. [ 348.299832][ T5766] Bluetooth: hci1: command tx timeout [ 348.476167][T18151] could not open pipe file descriptor [ 349.521784][T16328] bridge_slave_1: left promiscuous mode [ 349.527282][T16328] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.541658][T16328] bridge_slave_0: left allmulticast mode [ 349.545598][T16328] bridge_slave_0: left promiscuous mode [ 349.547533][T16328] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.781954][T16328] bond8 (unregistering): (slave ip6gre1): Releasing backup interface [ 349.787464][T16328] ip6gre1 (unregistering): left promiscuous mode [ 349.829172][T16328] bond15 (unregistering): (slave ip6erspan0): Releasing backup interface [ 349.833341][T16328] ip6erspan0 (unregistering): left allmulticast mode [ 349.873949][T18245] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 349.983414][T16328] bond9 (unregistering): (slave bridge5): Releasing backup interface [ 349.986083][T16328] bridge5 (unregistering): left promiscuous mode [ 349.988196][T16328] bridge5 (unregistering): left allmulticast mode [ 350.002867][T16328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.011698][T16328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.025692][T16328] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 350.029898][T16328] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 350.037924][T16328] bond0 (unregistering): Released all slaves [ 350.043833][T16328] bond1 (unregistering): Released all slaves [ 350.051448][T16328] bond2 (unregistering): Released all slaves [ 350.063060][T16328] bond3 (unregistering): (slave bond4): Releasing backup interface [ 350.070845][T16328] bond3 (unregistering): Released all slaves [ 350.078426][T16328] bond4 (unregistering): Released all slaves [ 350.086263][T16328] bond5 (unregistering): Released all slaves [ 350.093671][T16328] bond6 (unregistering): Released all slaves [ 350.105118][T16328] bond7 (unregistering): Released all slaves [ 350.114443][T16328] bond8 (unregistering): Released all slaves [ 350.125619][T16328] bond9 (unregistering): Released all slaves [ 350.133393][T16328] bond11 (unregistering): Released all slaves [ 350.147622][T16328] bond10 (unregistering): Released all slaves [ 350.155404][T16328] bond12 (unregistering): Released all slaves [ 350.163013][T16328] bond13 (unregistering): Released all slaves [ 350.173743][T16328] bond14 (unregistering): Released all slaves [ 350.181075][T16328] bond15 (unregistering): Released all slaves [ 350.188394][T16328] bond16 (unregistering): Released all slaves [ 350.206453][T18227] erspan0: entered promiscuous mode [ 350.267053][ T41] kauditd_printk_skb: 137 callbacks suppressed [ 350.267085][ T41] audit: type=1800 audit(1786011778.971:17919): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 350.305903][ T958] IPVS: starting estimator thread 0... [ 350.373448][ T41] audit: type=1800 audit(1786011779.081:17920): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 350.401552][T18255] IPVS: using max 44 ests per chain, 105600 per kthread [ 350.428882][ T41] audit: type=1400 audit(1786011779.131:17921): avc: denied { write } for pid=18257 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.462847][T16328] : left promiscuous mode [ 350.527873][ T41] audit: type=1326 audit(1786011779.231:17922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18258 comm="syz.3.2467" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7da039e0d9 code=0x0 [ 350.588499][T16328] tipc: Left network mode [ 350.593301][ T41] audit: type=1400 audit(1786011779.301:17923): avc: denied { write } for pid=18262 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.606153][T16328] IPVS: stopping backup sync thread 6269 ... [ 350.614151][ T41] audit: type=1800 audit(1786011779.321:17924): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 350.719579][T18268] xt_TCPMSS: Only works on TCP SYN packets [ 350.736610][ T41] audit: type=1400 audit(1786011779.441:17925): avc: denied { write } for pid=18266 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.811251][ T41] audit: type=1400 audit(1786011779.521:17926): avc: denied { write } for pid=18270 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.903050][ T41] audit: type=1800 audit(1786011779.611:17927): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 350.994548][ T41] audit: type=1800 audit(1786011779.701:17928): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 351.095424][T18281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2471'. [ 351.470781][T18294] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 351.473365][T18294] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 351.501155][T18299] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2473'. [ 351.509705][T18294] vhci_hcd vhci_hcd.0: Device attached [ 351.651208][T18305] XFS (nbd7): SB validate failed with error -5. [ 351.866880][T16328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.878938][ T5863] usb 53-1: new high-speed USB device number 2 using vhci_hcd [ 351.879925][T16328] batadv0: mtu less than device minimum [ 351.890914][T18296] vhci_hcd: connection reset by peer [ 351.896860][T16328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 351.900923][T17725] vhci_hcd vhci_hcd.8: stop threads [ 351.903232][T17725] vhci_hcd vhci_hcd.8: release socket [ 351.906305][T16328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 351.912840][T16328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 351.918051][T16328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 351.923399][T16328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 351.923983][T17725] vhci_hcd vhci_hcd.8: disconnect device [ 351.929901][T16328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 351.935164][T16328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 351.957429][T16328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.961521][T16328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.973922][T16328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.976879][T16328] batman_adv: batadv0: Interface deactivated: dummy0 [ 351.979613][T16328] batman_adv: batadv0: Removing interface: dummy0 [ 351.997936][T16328] veth1_macvtap: left allmulticast mode [ 351.999945][T16328] veth1_macvtap: left promiscuous mode [ 352.001757][T16328] veth0_macvtap: left promiscuous mode [ 352.003743][T16328] veth0_vlan: left promiscuous mode [ 352.352224][T16328] team0 (unregistering): Port device team_slave_1 removed [ 352.369713][T16328] team0 (unregistering): Port device team_slave_0 removed [ 352.485742][ T5766] Bluetooth: hci0: adv larger than maximum supported [ 352.485791][ T5766] Bluetooth: hci0: Malformed LE Event: 0x0d [ 352.498071][T18342] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 352.504568][T18342] Error validating options; rc = [-22] [ 352.623155][T18350] netlink: 'syz.3.2484': attribute type 4 has an invalid length. [ 352.628930][T18350] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2484'. [ 352.666020][T18356] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 352.677101][T18357] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 352.695402][T18357] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 352.702699][T12081] Bluetooth: hci2: Frame reassembly failed (-84) [ 352.710653][T18357] cramfs: wrong magic [ 352.765429][T18353] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2483'. [ 352.820990][T18362] type: 17119 invalid [ 352.859204][T18240] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 353.046328][ T958] IPVS: starting estimator thread 0... [ 353.140158][T18372] IPVS: using max 27 ests per chain, 64800 per kthread [ 353.224661][T16328] IPVS: stop unused estimator thread 0... [ 353.284215][T18390] ptrace attach of "/syz-executor exec"[17548] was attempted by " [ 353.448890][ T50] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 353.512451][T18405] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2496'. [ 353.628913][ T5898] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 353.642790][ T50] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.649088][ T5754] Bluetooth: hci1: command tx timeout [ 353.654286][ T50] usb 13-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 353.659027][ T50] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 353.667686][ T50] usb 13-1: Product: syz [ 353.669228][ T50] usb 13-1: Manufacturer: syz [ 353.675260][ T50] usb_debug 13-1:1.0: debug converter detected [ 353.684455][ T50] usb 13-1: debug converter now attached to ttyUSB0 [ 353.789038][ T5898] usb 10-1: Using ep0 maxpacket: 32 [ 353.793963][ T5898] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 353.813593][ T5898] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 353.816609][ T5898] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 353.819261][ T5898] usb 10-1: Product: syz [ 353.820604][ T5898] usb 10-1: Manufacturer: syz [ 353.822111][ T5898] usb 10-1: SerialNumber: syz [ 353.829083][ T5898] usb 10-1: config 0 descriptor?? [ 353.834170][T18398] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 353.837298][ T5898] hub 10-1:0.0: bad descriptor, ignoring hub [ 353.841337][ T5898] hub 10-1:0.0: probe with driver hub failed with error -5 [ 353.889103][ T50] usb 13-1: USB disconnect, device number 3 [ 353.917227][ T50] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 353.929856][ T50] usb_debug 13-1:1.0: device disconnected [ 354.042280][T18398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.047327][T18398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.438084][T18446] xt_hashlimit: size too large, truncated to 1048576 [ 354.495888][T18454] vlan1: entered promiscuous mode [ 354.586366][T18463] overlayfs: upper fs does not support file handles, falling back to index=off. [ 354.596453][T18463] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 354.689004][ T5766] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 354.791107][ T10] usb 10-1: USB disconnect, device number 3 [ 354.808271][T18479] nfs: Bad value for 'mountport' [ 354.816340][T18479] xt_time: unknown flags 0x78 [ 354.970758][T18497] gfs2: error -5 reading superblock [ 355.100751][T18511] netlink: 'syz.7.2509': attribute type 1 has an invalid length. [ 355.166342][T18522] CIFS mount error: No usable UNC path provided in device string! [ 355.166342][T18522] [ 355.183408][T18522] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 355.276023][ T41] kauditd_printk_skb: 108 callbacks suppressed [ 355.276036][ T41] audit: type=1400 audit(1786011783.981:18037): avc: denied { write } for pid=18527 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.325526][ T41] audit: type=1800 audit(1786011784.031:18038): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 355.372821][ T41] audit: type=1400 audit(1786011784.081:18039): avc: denied { write } for pid=18535 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.402917][ T41] audit: type=1800 audit(1786011784.111:18040): pid=18540 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2514" name="bind" dev="sysfs" ino=13956 res=0 errno=0 [ 355.456623][T18540] loop5: detected capacity change from 0 to 7 [ 355.472097][T18540] Dev loop5: unable to read RDB block 7 [ 355.473855][T18540] loop5: unable to read partition table [ 355.478662][T18540] loop5: partition table beyond EOD, truncated [ 355.481611][T18540] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 355.535233][ T41] audit: type=1400 audit(1786011784.241:18041): avc: denied { write } for pid=18547 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.558110][ T41] audit: type=1800 audit(1786011784.251:18042): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 355.575937][ T41] audit: type=1400 audit(1786011784.281:18043): avc: denied { write } for pid=18552 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.581831][T18553] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 355.587969][T18555] sctp: [Deprecated]: syz.7.2516 (pid 18555) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.587969][T18555] Use struct sctp_sack_info instead [ 355.624048][ T41] audit: type=1800 audit(1786011784.331:18044): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 355.642838][T18551] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 355.647476][ T41] audit: type=1800 audit(1786011784.351:18045): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0 [ 355.669777][ T41] audit: type=1400 audit(1786011784.371:18046): avc: denied { write } for pid=18560 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.680118][T18568] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2519'. [ 355.713649][T18568] macvlan0: entered allmulticast mode [ 355.723641][T18568] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 355.759316][T18568] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 355.819981][T18577] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 355.837085][T18577] overlayfs: missing 'lowerdir' [ 355.855147][T18584] net_ratelimit: 35 callbacks suppressed [ 355.855160][T18584] netlink: NAT attribute type 0 has unexpected length (1 != 0) [ 355.864759][T18574] nilfs2: Unknown parameter 'discardyH ' [ 355.868854][T18584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.029575][T18592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=18592 comm=syz.5.2522 [ 356.393173][T18620] random: crng reseeded on system resumption [ 356.998966][ T5863] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 357.156330][T18650] cgroup: name respecified [ 357.158593][T18650] netlink: 'syz.7.2528': attribute type 64 has an invalid length. [ 357.479069][ T50] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 357.531856][T18696] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2538'. [ 357.651604][ T50] usb 8-1: unable to get BOS descriptor or descriptor too short [ 357.659024][ T5842] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 357.660140][ T50] usb 8-1: not running at top speed; connect to a high speed hub [ 357.666430][ T50] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 357.672672][ T50] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 357.676173][ T50] usb 8-1: config 14 has no interface number 0 [ 357.678751][ T50] usb 8-1: config 14 has no interface number 1 [ 357.681897][ T50] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 357.686472][ T50] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 357.691525][ T50] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 357.696157][ T50] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 357.701344][ T50] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 357.706031][ T50] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 357.711202][ T50] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 357.716607][ T50] usb 8-1: config 14 interface 57 has no altsetting 0 [ 357.719590][ T50] usb 8-1: config 14 interface 228 has no altsetting 0 [ 357.724704][ T50] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 357.731131][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.734549][ T50] usb 8-1: Product: syz [ 357.736235][ T50] usb 8-1: Manufacturer: syz [ 357.738166][ T50] usb 8-1: SerialNumber: syz [ 357.789475][ T5842] usb 13-1: device descriptor read/64, error -71 [ 357.969006][ T5766] Bluetooth: hci1: command 0x0406 tx timeout [ 358.028987][ T5842] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 358.168953][ T5842] usb 13-1: device descriptor read/64, error -71 [ 358.182417][T18661] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 358.208036][ T50] legousbtower 8-1:14.57: interrupt endpoints not found [ 358.292551][ T5842] usb usb13-port1: attempt power cycle [ 358.608229][ T50] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 358.615777][ T50] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 358.649360][ T5842] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 358.680087][ T5842] usb 13-1: device descriptor read/8, error -71 [ 358.930009][ T5842] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 358.951368][ T5842] usb 13-1: device descriptor read/8, error -71 [ 359.059203][ T5842] usb usb13-port1: unable to enumerate USB device [ 359.167737][T18766] usb 8-1: Couldn't submit interrupt_out_urb -90 [ 359.177547][T18766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.184963][T18766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.271734][ T5539] usb 8-1: USB disconnect, device number 14 [ 359.311170][ T5539] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 359.561647][T18801] syzkaller1: entered promiscuous mode [ 359.563526][T18801] syzkaller1: entered allmulticast mode [ 359.581487][T18806] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 359.772778][T18825] xt_socket: unknown flags 0x58 [ 359.774589][T18825] xt_socket: unknown flags 0x58 [ 359.776909][T18825] xt_socket: unknown flags 0x58 [ 359.780050][T18825] xt_socket: unknown flags 0x58 [ 359.781770][T18825] xt_socket: unknown flags 0x58 [ 359.783494][T18825] xt_socket: unknown flags 0x58 [ 359.785193][T18825] xt_socket: unknown flags 0x58 [ 359.786899][T18825] xt_socket: unknown flags 0x58 [ 359.788584][T18825] xt_socket: unknown flags 0x58 [ 359.791001][T18825] xt_socket: unknown flags 0x58 [ 360.051848][T18842] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 360.055016][T18842] SELinux: failed to load policy [ 360.108096][T18844] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2557'. [ 360.116481][T18844] IPv6: sit2: Disabled Multicast RS [ 360.205675][T18848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1043 sclass=netlink_route_socket pid=18848 comm=syz.7.2557 [ 360.332194][ T41] kauditd_printk_skb: 98 callbacks suppressed [ 360.332288][ T41] audit: type=1400 audit(1786011789.041:18145): avc: denied { write } for pid=18853 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.400223][ T41] audit: type=1800 audit(1786011789.101:18146): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 360.437592][ T41] audit: type=1400 audit(1786011789.131:18147): avc: denied { write } for pid=18856 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.479100][ T41] audit: type=1800 audit(1786011789.181:18148): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0 [ 360.514697][ T41] audit: type=1800 audit(1786011789.221:18149): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0 [ 360.566677][ T41] audit: type=1400 audit(1786011789.271:18150): avc: denied { write } for pid=18865 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.574918][T18858] could not allocate digest TFM handle nhpoly1305-neon [ 360.632836][ T41] audit: type=1400 audit(1786011789.341:18151): avc: denied { write } for pid=18871 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.662549][ T41] audit: type=1800 audit(1786011789.371:18152): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 360.665009][T18875] IPVS: length: 191 != 24 [ 360.698062][ T41] audit: type=1800 audit(1786011789.401:18153): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 360.716269][ T41] audit: type=1400 audit(1786011789.421:18154): avc: denied { write } for pid=18877 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.778942][ T5863] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 360.885642][T18895] team0: Device vlan2 is already an upper device of the team interface [ 360.892663][T18898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18898 comm=syz.3.2567 [ 361.003968][T18906] netlink: 'syz.3.2568': attribute type 1 has an invalid length. [ 361.073903][T18906] bond2: entered promiscuous mode [ 361.078060][T18906] 8021q: adding VLAN 0 to HW filter on device bond2 [ 361.138218][T18906] 8021q: adding VLAN 0 to HW filter on device bond2 [ 361.144410][T18906] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 361.164304][T18906] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 361.165235][T18920] [U] V3Fپ"S/4:XTZWTLW= [ 361.175900][T18919] [U] J"E:" [ 361.184256][T18906] bond2: (slave ip6gre1): making interface the new active one [ 361.191989][ T5863] usb 13-1: unable to get BOS descriptor or descriptor too short [ 361.192015][T18906] ip6gre1: entered promiscuous mode [ 361.197693][ T5863] usb 13-1: unable to read config index 0 descriptor/start: -71 [ 361.202124][ T5863] usb 13-1: can't read configurations, error -71 [ 361.212842][T18906] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 361.328625][T18930] xt_hashlimit: size too large, truncated to 1048576 [ 361.369553][T18935] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 361.390134][T18938] netlink: 1319 bytes leftover after parsing attributes in process `syz.5.2572'. [ 361.532752][T18934] kvm: user requested TSC rate below hardware speed [ 361.535627][T18935] kvm: user requested TSC rate below hardware speed [ 361.567696][T18948] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2575'. [ 361.839498][T18963] bridge1: entered allmulticast mode [ 361.873910][T18983] lo: entered promiscuous mode [ 361.883718][T18983] : entered promiscuous mode [ 361.885858][T18983] dummy0: entered promiscuous mode [ 361.887834][T18983] eql: entered promiscuous mode [ 361.889965][T18983] ifb0: entered promiscuous mode [ 361.891848][T18983] ifb1: entered promiscuous mode [ 361.896487][T18983] e1000 0000:00:06.0 eth0: entered promiscuous mode [ 361.905824][T18983] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 361.908290][T18983] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 361.913123][T18983] hwsim0: entered promiscuous mode [ 361.915189][T18983] ieee802154 phy0 wpan0: entered promiscuous mode [ 361.917325][T18983] ieee802154 phy1 wpan1: entered promiscuous mode [ 361.922533][T18983] teql0: entered promiscuous mode [ 361.924184][T18983] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 361.932532][T18986] geneve1: entered allmulticast mode [ 361.942212][T18983] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 362.004356][T18993] db_root: cannot be changed because it's in use [ 362.248686][T18993] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2586'. [ 362.927933][T19049] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 362.941989][T19049] netlink: 'syz.7.2592': attribute type 6 has an invalid length. [ 362.948615][T19053] netlink: 'syz.7.2592': attribute type 6 has an invalid length. [ 362.957075][T19049] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 362.984355][ T5421] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 363.042222][T19070] overlayfs: failed to resolve './file1': -2 [ 363.206816][ T5539] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 363.208189][T19077] kvm: kvm [19073]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 363.212962][T19077] kvm: kvm [19073]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 363.217668][T19089] program syz.8.2603 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 363.273266][T19077] kvm: vcpu 0: requested 14336 ns lapic timer period limited to 200000 ns [ 363.328997][ T54] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 363.361178][ T5539] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 363.363913][ T5539] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 363.369800][ T5539] usb 8-1: config 0 interface 0 has no altsetting 0 [ 363.373584][ T5539] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 363.376459][ T5539] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 363.379242][ T5539] usb 8-1: Product: syz [ 363.380625][ T5539] usb 8-1: Manufacturer: syz [ 363.382121][ T5539] usb 8-1: SerialNumber: syz [ 363.387356][ T5539] usb 8-1: config 0 descriptor?? [ 363.394103][ T5539] hub 8-1:0.0: bad descriptor, ignoring hub [ 363.397370][ T5539] hub 8-1:0.0: probe with driver hub failed with error -5 [ 363.406862][ T5539] usb 8-1: selecting invalid altsetting 0 [ 363.499278][ T54] usb 12-1: Using ep0 maxpacket: 8 [ 363.508307][ T54] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 363.513842][ T54] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 363.516972][ T54] usb 12-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 363.520938][ T54] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 363.524498][ T54] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 363.527943][ T54] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 363.533318][ T54] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 363.536222][ T54] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.598757][T19110] No control pipe specified [ 363.630147][T19113] netlink: 'syz.5.2606': attribute type 1 has an invalid length. [ 363.632741][T19113] netlink: 'syz.5.2606': attribute type 4 has an invalid length. [ 363.635696][T19113] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2606'. [ 363.739785][ T34] usb 8-1: USB disconnect, device number 15 [ 363.765067][ T54] usb 12-1: GET_CAPABILITIES returned 0 [ 363.767384][ T54] usbtmc 12-1:16.0: can't read capabilities [ 363.932961][T19126] ISOFS: Unable to identify CD-ROM format. [ 363.937000][T19125] nvme nvme0: failed to connect socket: -512 [ 363.939897][T19125] [ 363.940678][T19125] ====================================================== [ 363.942864][T19125] WARNING: possible circular locking dependency detected [ 363.945032][T19125] syzkaller #0 Tainted: G L [ 363.947038][T19125] ------------------------------------------------------ [ 363.949096][T19125] syz.3.2609/19125 is trying to acquire lock: [ 363.950911][T19125] ffff8880574acd00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 363.954054][T19125] [ 363.954054][T19125] but task is already holding lock: [ 363.956329][T19125] ffffffff8fd25f60 (nvmf_dev_mutex){+.+.}-{4:4}, at: nvmf_dev_write+0xa6/0xb60 [ 363.959043][T19125] [ 363.959043][T19125] which lock already depends on the new lock. [ 363.959043][T19125] [ 363.962125][T19125] [ 363.962125][T19125] the existing dependency chain (in reverse order) is: [ 363.964791][T19125] [ 363.964791][T19125] -> #4 (nvmf_dev_mutex){+.+.}-{4:4}: [ 363.967037][T19125] lock_acquire+0x1b9/0x370 [ 363.968552][T19125] __mutex_lock+0x1a4/0x1bd0 [ 363.970123][T19125] nvmf_dev_show+0x26/0x210 [ 363.971625][T19125] seq_read_iter+0x32f/0x1270 [ 363.972424][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 363.973221][T19125] seq_read+0x344/0x4d0 [ 363.977439][T19125] vfs_read+0x1e4/0xb40 [ 363.978895][T19125] ksys_read+0x12a/0x250 [ 363.980412][T19125] do_syscall_64+0x115/0x870 [ 363.982028][T19125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.983962][T19125] [ 363.983962][T19125] -> #3 (&p->lock){+.+.}-{4:4}: [ 363.986049][T19125] lock_acquire+0x1b9/0x370 [ 363.987328][T19080] netlink: 'syz.7.2601': attribute type 1 has an invalid length. [ 363.987661][T19125] __mutex_lock+0x1a4/0x1bd0 [ 363.992053][T19125] seq_read_iter+0xe1/0x1270 [ 363.993569][T19125] kernfs_fop_read_iter+0x46c/0x610 [ 363.995278][T19125] __kernel_read+0x397/0xad0 [ 363.996777][T19125] integrity_kernel_read+0x7e/0xb0 [ 363.998520][T19125] ima_calc_file_hash_tfm+0x25e/0x350 [ 364.000361][T19125] ima_calc_file_hash+0x1e3/0x380 [ 364.001976][T19125] ima_collect_measurement+0x94f/0xb30 [ 364.003841][T19125] process_measurement+0xdfe/0x2350 [ 364.005074][T19080] 8021q: adding VLAN 0 to HW filter on device bond10 [ 364.005521][T19125] ima_file_check+0xc3/0x110 [ 364.009074][T19125] security_file_post_open+0xc4/0x210 [ 364.010832][T19125] path_openat+0x985/0x4280 [ 364.012401][T19125] do_file_open+0x20e/0x430 [ 364.013903][T19125] do_sys_openat2+0x10f/0x1e0 [ 364.015508][T19125] __x64_sys_openat+0x12d/0x210 [ 364.017159][T19125] do_syscall_64+0x115/0x870 [ 364.018739][T19125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.020629][T19125] [ 364.020629][T19125] -> #2 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 364.023361][T19125] lock_acquire+0x1b9/0x370 [ 364.024956][T19125] __mutex_lock+0x1a4/0x1bd0 [ 364.026552][T19125] process_measurement+0x5ab/0x2350 [ 364.028323][T19125] ima_file_check+0xc3/0x110 [ 364.030032][T19125] security_file_post_open+0xc4/0x210 [ 364.032419][T19125] path_openat+0x985/0x4280 [ 364.034410][T19125] do_file_open_root+0x2f6/0x5a0 [ 364.036528][T19125] file_open_root+0x1c6/0x3f0 [ 364.038503][T19125] kernel_read_file_from_path_initns+0x189/0x260 [ 364.041116][T19125] _request_firmware+0x733/0x13c0 [ 364.043260][T19125] request_firmware+0x35/0x50 [ 364.045283][T19125] reg_reload_regdb+0x85/0x460 [ 364.047240][T19125] genl_family_rcv_msg_doit+0x214/0x300 [ 364.049284][T19125] genl_rcv_msg+0x560/0x800 [ 364.050884][T19125] netlink_rcv_skb+0x159/0x420 [ 364.052701][T19125] genl_rcv+0x28/0x40 [ 364.054211][T19125] netlink_unicast+0x585/0x850 [ 364.055965][T19125] netlink_sendmsg+0x8b0/0xda0 [ 364.057687][T19125] ____sys_sendmsg+0xa4d/0xbe0 [ 364.059334][T19125] ___sys_sendmsg+0x190/0x1e0 [ 364.061032][T19125] __sys_sendmsg+0x160/0x210 [ 364.062682][T19125] do_syscall_64+0x115/0x870 [ 364.064459][T19125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.066469][T19125] [ 364.066469][T19125] -> #1 (cb_lock){++++}-{4:4}: [ 364.068660][T19125] lock_acquire+0x1b9/0x370 [ 364.070365][T19125] down_read+0x99/0x4c0 [ 364.071894][T19125] genl_release+0x7e/0x1d0 [ 364.073440][T19125] netlink_release+0x1058/0x1ff0 [ 364.075125][T19125] __sock_release+0xb3/0x260 [ 364.076825][T19125] sock_close+0x1c/0x30 [ 364.078398][T19125] __fput+0x3ff/0xb50 [ 364.080010][T19125] fput_close_sync+0x118/0x250 [ 364.081706][T19125] __x64_sys_close+0x8b/0x120 [ 364.083345][T19125] do_syscall_64+0x115/0x870 [ 364.084919][T19125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.086890][T19125] [ 364.086890][T19125] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}: [ 364.089574][T19125] check_prev_add+0xeb/0xe60 [ 364.091192][T19125] __lock_acquire+0x136c/0x1a40 [ 364.092871][T19125] lock_acquire+0x1b9/0x370 [ 364.094429][T19125] down_write+0x8b/0x1f0 [ 364.095908][T19125] __sock_release+0x86/0x260 [ 364.097493][T19125] sock_close+0x1c/0x30 [ 364.098967][T19125] __fput+0x3ff/0xb50 [ 364.100361][T19125] __fput_sync+0xd4/0x100 [ 364.101875][T19125] nvme_tcp_alloc_queue.isra.0+0xd53/0x1750 [ 364.103888][T19125] nvme_tcp_configure_admin_queue+0x26/0x4d0 [ 364.105890][T19125] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 364.107628][T19125] nvme_tcp_create_ctrl+0x975/0xd20 [ 364.109414][T19125] nvmf_dev_write+0x4ee/0xb60 [ 364.111025][T19125] vfs_write+0x2aa/0x1050 [ 364.112527][T19125] ksys_write+0x12a/0x250 [ 364.114004][T19125] do_syscall_64+0x115/0x870 [ 364.115624][T19125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.117636][T19125] [ 364.117636][T19125] other info that might help us debug this: [ 364.117636][T19125] [ 364.120807][T19125] Chain exists of: [ 364.120807][T19125] &sb->s_type->i_mutex_key#13 --> &p->lock --> nvmf_dev_mutex [ 364.120807][T19125] [ 364.124886][T19125] Possible unsafe locking scenario: [ 364.124886][T19125] [ 364.127200][T19125] CPU0 CPU1 [ 364.128846][T19125] ---- ---- [ 364.130537][T19125] lock(nvmf_dev_mutex); [ 364.131926][T19125] lock(&p->lock); [ 364.134044][T19125] lock(nvmf_dev_mutex); [ 364.136475][T19125] lock(&sb->s_type->i_mutex_key#13); [ 364.138242][T19125] [ 364.138242][T19125] *** DEADLOCK *** [ 364.138242][T19125] [ 364.140933][T19125] 1 lock held by syz.3.2609/19125: [ 364.142711][T19125] #0: ffffffff8fd25f60 (nvmf_dev_mutex){+.+.}-{4:4}, at: nvmf_dev_write+0xa6/0xb60 [ 364.145697][T19125] [ 364.145697][T19125] stack backtrace: [ 364.147633][T19125] CPU: 0 UID: 0 PID: 19125 Comm: syz.3.2609 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.147649][T19125] Tainted: [L]=SOFTLOCKUP [ 364.147653][T19125] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 364.147667][T19125] Call Trace: [ 364.147672][T19125] [ 364.147679][T19125] dump_stack_lvl+0x100/0x190 [ 364.147702][T19125] print_circular_bug.cold+0x178/0x1c7 [ 364.147720][T19125] check_noncircular+0x146/0x160 [ 364.147733][T19125] ? mark_held_locks+0x40/0x70 [ 364.147747][T19125] check_prev_add+0xeb/0xe60 [ 364.147760][T19125] __lock_acquire+0x136c/0x1a40 [ 364.147775][T19125] lock_acquire+0x1b9/0x370 [ 364.147787][T19125] ? __sock_release+0x86/0x260 [ 364.147804][T19125] ? __pfx___might_resched+0x10/0x10 [ 364.147818][T19125] down_write+0x8b/0x1f0 [ 364.147833][T19125] ? __sock_release+0x86/0x260 [ 364.147847][T19125] ? __pfx_down_write+0x10/0x10 [ 364.147861][T19125] ? __pfx_locks_remove_file+0x10/0x10 [ 364.147876][T19125] __sock_release+0x86/0x260 [ 364.147890][T19125] ? __pfx_sock_close+0x10/0x10 [ 364.147903][T19125] sock_close+0x1c/0x30 [ 364.147916][T19125] __fput+0x3ff/0xb50 [ 364.147929][T19125] ? kfree+0x22b/0x6c0 [ 364.147946][T19125] __fput_sync+0xd4/0x100 [ 364.147959][T19125] nvme_tcp_alloc_queue.isra.0+0xd53/0x1750 [ 364.147975][T19125] ? mark_held_locks+0x40/0x70 [ 364.147988][T19125] ? __pfx___schedule+0x10/0x10 [ 364.148000][T19125] ? nvme_tcp_configure_admin_queue+0x26/0x4d0 [ 364.148015][T19125] nvme_tcp_configure_admin_queue+0x26/0x4d0 [ 364.148032][T19125] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 364.148046][T19125] ? preempt_schedule_thunk+0x16/0x40 [ 364.148057][T19125] ? __pfx_nvme_tcp_setup_ctrl+0x10/0x10 [ 364.148072][T19125] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 364.148085][T19125] ? nvme_change_ctrl_state+0xc0/0x440 [ 364.148095][T19125] nvme_tcp_create_ctrl+0x975/0xd20 [ 364.148111][T19125] nvmf_dev_write+0x4ee/0xb60 [ 364.148126][T19125] vfs_write+0x2aa/0x1050 [ 364.148142][T19125] ? __pfx_nvmf_dev_write+0x10/0x10 [ 364.148156][T19125] ? __pfx_vfs_write+0x10/0x10 [ 364.148172][T19125] ? find_held_lock+0x2b/0x80 [ 364.148180][T19125] ? __fget_files+0x215/0x3d0 [ 364.148190][T19125] ? __fget_files+0x215/0x3d0 [ 364.148202][T19125] ? __fget_files+0x21f/0x3d0 [ 364.148213][T19125] ksys_write+0x12a/0x250 [ 364.148222][T19125] ? __pfx_ksys_write+0x10/0x10 [ 364.148233][T19125] do_syscall_64+0x115/0x870 [ 364.148246][T19125] ? clear_bhb_loop+0x40/0x90 [ 364.148258][T19125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.148273][T19125] RIP: 0033:0x7f7da039e0d9 [ 364.148283][T19125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.148293][T19125] RSP: 002b:00007f7da1208028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 364.148311][T19125] RAX: ffffffffffffffda RBX: 00007f7da0625fa0 RCX: 00007f7da039e0d9 [ 364.148318][T19125] RDX: 0000000000000031 RSI: 0000200000000180 RDI: 0000000000000004 [ 364.148324][T19125] RBP: 00007f7da0435024 R08: 0000000000000000 R09: 0000000000000000 [ 364.148330][T19125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.148336][T19125] R13: 00007f7da0626038 R14: 00007f7da0625fa0 R15: 00007fff358bed38 [ 364.148346][T19125] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 364.514616][T19125] bridge0: port 3(syz_tun) entered disabled state [ 364.550500][T19125] syz_tun (unregistering): left allmulticast mode [ 364.553133][T19125] syz_tun (unregistering): left promiscuous mode [ 364.555696][T19125] bridge0: port 3(syz_tun) entered disabled state [ 364.749768][T16328] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.790749][ T34] usb 12-1: USB disconnect, device number 7 [ 364.858579][T16328] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.935218][T16328] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.992668][T16328] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.077971][T16328] bridge_slave_1: left allmulticast mode [ 365.081046][T16328] bridge_slave_1: left promiscuous mode [ 365.083564][T16328] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.087694][T16328] bridge_slave_0: left allmulticast mode [ 365.090221][T16328] bridge_slave_0: left promiscuous mode [ 365.092135][T16328] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.153587][T16328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.162867][T16328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.170481][T16328] bond0 (unregistering): Released all slaves [ 365.344525][ T41] kauditd_printk_skb: 155 callbacks suppressed [ 365.344556][ T41] audit: type=1800 audit(1786011794.051:18309): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=267389 res=0 errno=0 [ 365.355569][ T41] audit: type=1400 audit(1786011794.061:18310): avc: denied { write } for pid=19188 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 365.405531][ T41] audit: type=1400 audit(1786011794.111:18311): avc: denied { write } for pid=19191 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 365.485991][ T41] audit: type=1800 audit(1786011794.191:18312): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=258393 res=0 errno=0 [ 365.492576][ T41] audit: type=1400 audit(1786011794.201:18313): avc: denied { write } for pid=19194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 365.533943][T16328] hsr_slave_0: left promiscuous mode [ 365.536443][T16328] hsr_slave_1: left promiscuous mode [ 365.537435][ T41] audit: type=1400 audit(1786011794.241:18314): avc: denied { write } for pid=19197 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 365.539880][T16328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.548433][T16328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.554041][T16328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.557268][T16328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.564238][T16328] veth1_macvtap: left promiscuous mode [ 365.566733][T16328] veth0_macvtap: left promiscuous mode [ 365.572195][T16328] veth1_vlan: left promiscuous mode [ 365.661449][T16328] team0 (unregistering): Port device team_slave_1 removed [ 365.666312][T16328] team0 (unregistering): Port device team_slave_0 removed [ 365.757120][ T41] audit: type=1400 audit(1786011794.461:18315): avc: denied { write } for pid=19200 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 365.800037][ T41] audit: type=1400 audit(1786011794.511:18316): avc: denied { write } for pid=19203 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 365.847757][ T5445] 8021q: adding VLAN 0 to HW filter on device eth17 [ 365.889202][ T41] audit: type=1400 audit(1786011794.601:18317): avc: denied { write } for pid=19205 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 365.937537][ T41] audit: type=1400 audit(1786011794.641:18318): avc: denied { write } for pid=19208 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 366.093983][T16328] IPVS: stop unused estimator thread 0... [ 366.154306][T16328] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.214107][T16328] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.228688][ T5445] 8021q: adding VLAN 0 to HW filter on device eth18 [ 366.285241][T16328] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.363233][T16328] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.379589][ T5445] 8021q: adding VLAN 0 to HW filter on device eth19 [ 366.451732][T16328] bridge_slave_1: left allmulticast mode [ 366.455277][T16328] bridge_slave_1: left promiscuous mode [ 366.457877][T16328] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.463711][T16328] bridge_slave_0: left allmulticast mode [ 366.466226][T16328] bridge_slave_0: left promiscuous mode [ 366.468749][T16328] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.497476][T16328] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 366.501671][T16328] ip6gre1 (unregistering): left promiscuous mode [ 366.548247][T16328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.553531][T16328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.557128][T16328] bond0 (unregistering): Released all slaves [ 366.560619][T16328] bond1 (unregistering): Released all slaves [ 366.564826][T16328] bond2 (unregistering): Released all slaves [ 366.569752][ T5445] 8021q: adding VLAN 0 to HW filter on device eth20 [ 366.850694][ T5445] 8021q: adding VLAN 0 to HW filter on device eth21 [ 366.882061][T16328] hsr_slave_0: left promiscuous mode [ 366.884859][T16328] hsr_slave_1: left promiscuous mode [ 366.887451][T16328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.894264][T16328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.910353][T16328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.919973][T16328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.938109][T16328] veth1_macvtap: left promiscuous mode [ 366.940391][T16328] veth0_macvtap: left promiscuous mode [ 366.942613][T16328] veth1_vlan: left promiscuous mode [ 366.945200][T16328] veth0_vlan: left promiscuous mode [ 367.046339][T16328] team0 (unregistering): Port device team_slave_1 removed [ 367.060767][T16328] team0 (unregistering): Port device team_slave_0 removed [ 367.102063][ T5445] 8021q: adding VLAN 0 to HW filter on device eth22 [ 367.452553][T16328] IPVS: stop unused estimator thread 0... [ 367.500108][ T5445] 8021q: adding VLAN 0 to HW filter on device eth23 [ 367.805302][ T5445] 8021q: adding VLAN 0 to HW filter on device eth24 [ 370.362333][ T41] kauditd_printk_skb: 96 callbacks suppressed [ 370.362347][ T41] audit: type=1400 audit(1786011799.071:18415): avc: denied { write } for pid=19440 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.399264][ T41] audit: type=1400 audit(1786011799.111:18416): avc: denied { write } for pid=19443 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.489360][ T41] audit: type=1400 audit(1786011799.201:18417): avc: denied { write } for pid=19446 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.522323][ T41] audit: type=1400 audit(1786011799.231:18418): avc: denied { write } for pid=19449 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.586301][ T41] audit: type=1400 audit(1786011799.291:18419): avc: denied { write } for pid=19451 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.621050][ T41] audit: type=1400 audit(1786011799.331:18420): avc: denied { write } for pid=19454 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.685707][ T41] audit: type=1400 audit(1786011799.391:18421): avc: denied { write } for pid=19456 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.732469][ T41] audit: type=1400 audit(1786011799.441:18422): avc: denied { write } for pid=19459 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.807738][ T41] audit: type=1400 audit(1786011799.511:18423): avc: denied { write } for pid=19462 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.849769][ T41] audit: type=1400 audit(1786011799.561:18424): avc: denied { write } for pid=19465 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1