last executing test programs: 4m10.892951763s ago: executing program 1 (id=51): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='cifs\x00', 0x0, &(0x7f0000000180)='uid=1\x00nk]e\t\xee\x00\xb5\x91[!\xb1\xe0\xaf\xff\x01T_zf\xd9\xd8\xca\x13\x05\xdb\xddA\xcb\xa1\x03\x03\xd0\xf9ds\x80@\xef\xce<\x8b\xd8|\x85U\xa7\xb3;^U*\x16\xa8\xb4S L\xd3\x8b \x14\x8a\xf6\xf9\x95\x8b*qy4J\xf4\\\xe2\xa5\x04U\xfd\x02G\xa9\x8fD[\xe5\xafE@\xa2\x9e3\x1a`\xa9\xe4\xae\xd49k\xc2\xfc\xadL\xe6EIe\xd4\xea\xed\xa3\b~\xce\x8a\xec\xb3\x89N\x8e=\x12\xc2\"\xf8&C\x93\xd4\x99\xf0') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x22, 0x40000000, 0x0, 0x0}) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x29, {"48c7c02000000048c7c70400000048c7c6000104000f01c1"}}], 0x29}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x9, 0x4}, {}, {0x7, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x3ff}, @TCA_RATE={0x6, 0x5, {0x81, 0xf}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\'', 0x5dc}], 0x1}, 0x4) r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x800, 0xa1) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r12, 0x3b84, &(0x7f0000000180)={0x20, r13, 0x1, 0x0, &(0x7f0000000600)=[{}]}) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r11, 0x2000000, 0x11, r2, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0xf4240) modify_ldt$write2(0x11, &(0x7f00000002c0)={0x7d, 0x0, 0xffffffffffffffff, 0x1}, 0x10) 4m10.615017772s ago: executing program 1 (id=54): r0 = shmget$private(0x0, 0x1000, 0x400, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/219) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000200)={0x60, 0x3, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffffd, &(0x7f0000000140)=[{0xffffffff00000000, 0x3, 0x3}, {0x3, 0x40, 0xc0000000000}, {0x8, 0x4, 0xfffffffffffff05b}, {0xfffffffffffff8d0, 0xb, 0x9b00}, {0x7f, 0xffffffffffffffff, 0x7ad5aac6}, {0x1, 0x6}], 0x6, 0xd972, 0x1, 0x4, 0x2, 0x62}) shmctl$SHM_LOCK(r0, 0xb) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) fstat(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000380)={0x7, 0x4, {0x0}, {0xee00}, 0x6, 0x1}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000003c0)={0x5, 0x9, {0x0}, {0xffffffffffffffff}, 0x5}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000400)={{0x2, 0x0, 0xee01, r2, r3, 0x2, 0x40}, 0x0, 0xffffffffffff9861, 0x6, 0x7, r4, r5, 0xfff1}) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000500)={0x60, 0x3, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x2, &(0x7f0000000480)=[{0x7, 0x6, 0x4}, {0xe85, 0xffffffff, 0x2}, {0xffff, 0xbe, 0x8}], 0x3, 0x200, 0x4, 0x1e, 0x4}) r6 = syz_open_dev$dri(&(0x7f0000000580), 0x3, 0x420000) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(0xffffffffffffffff, 0xc0386447, &(0x7f0000000600)={{0x8, 0x8, &(0x7f00000005c0)=[{0xe7, 0x0, 0x3}, {0x5, 0x0, 0xc3}, {0xa9, 0x0, 0x7}, {0x9, 0x0, 0xffffffff}, {0x2, 0x0, 0x5}, {0x80, 0x0, 0x7ff}, {0x7f, 0x0, 0x4}, {0x4, 0x0, 0x3}]}, 0x5, 0x10, 0x81, 0x2, 0x0, 0x6, 0x6, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000680)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000006c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000700)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000740)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000780)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000007c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000008c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000940)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000980)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000a00)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000a40)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000a80)={0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_SUBMIT(r6, 0xc0186449, &(0x7f0000000e40)={r7, 0x0, {0x28, 0x5, &(0x7f0000000d40)=[{0x5, 0xa18d6c98, 0x42b6abcd170ef080, 0x2a6, 0x0, {0x10, 0x9, &(0x7f0000000800)=[{0x80000000, r8, 0x5}, {0x1, r9, 0xffffffffffff0000}, {0x80000000, r10, 0x4}, {0x80000000, r11, 0x1}, {0x1, r12, 0x53c1}, {0x80000000, 0x0, 0x2}, {0x0, 0x0, 0x8}, {0x1, r13, 0x800}, {0x0, r14}]}}, {0x3, 0x3ff8, 0xf3c036e51f215740, 0xf0c1, 0x0, {0x10, 0x4, &(0x7f00000009c0)=[{0xff, r15, 0xfffffffffffffffc}, {0xff, r16, 0xff}, {0x1, r17, 0x3}, {0x0, r18, 0xc}]}}, {0x1, 0xe110a168, 0x18a8ee51e0f92680, 0x6, 0x0, {0x10, 0x7, &(0x7f0000000b80)=[{0x22d41f4f5735d92, r19, 0x5}, {0x0, 0x0, 0x81}, {0x0, r20, 0x4}, {0x0, r21, 0x8}, {0x80000000, 0x0, 0x8}, {0x0, 0x0, 0x3}, {0xff, 0x0, 0x4}]}}, {0xa, 0x1bbe46d0, 0x7206d768bf3a0a00, 0x4, 0x0, {0x10, 0x2, &(0x7f0000000c80)=[{0xff}, {0x0, 0x0, 0x400}]}}, {0x0, 0x5c895c98, 0x94b06da32eef0740, 0x4, 0x0, {0x10, 0x2, &(0x7f0000000d00)=[{0x0, 0x0, 0x9}, {0x1}]}}]}}) 4m10.613987961s ago: executing program 1 (id=56): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x5}, 0x8) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f0000000ac0)={0xa, 0x4e24, 0x3, @mcast1, 0x7}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0xe0, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2ac}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xec000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x41}, 0x4040050) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) ioctl$FIOCLEX(r2, 0x5451) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18070000000000000000000000800000851000000300000018110000", @ANYRES32=r4, @ANYBLOB="00000000000000009500007b00000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 4m10.553853163s ago: executing program 1 (id=59): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x2) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000140)=[{r2, 0xc002}], 0x1, 0x0, 0x0, 0x0) r3 = dup2(r1, r2) fcntl$setown(r3, 0x8, r0) tkill(r0, 0x13) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2b, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xca04, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x3, 0x1, 0x80}}]}}}]}}]}}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0x1411, 0x1, 0x170bd2c, 0x7, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x28}}, 0x240440c4) 4m8.564663194s ago: executing program 1 (id=87): r0 = userfaultfd(0x801) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0xf8}, @val={0x4, 0x3, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa0100fd, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x8}}}}, 0x36) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x40}) mmap(&(0x7f0000d7b000/0x10000)=nil, 0x10000, 0x100000d, 0x1010, r0, 0x3000) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004b2000/0x400000)=nil) 4m8.414301641s ago: executing program 1 (id=91): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000006c0), 0x8042, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xe5c5e72577a57e20) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7543, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000300)={0x0, 0x2, "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"}) close(r7) write$FUSE_INIT(r1, &(0x7f0000000400)={0x50, 0x0, r2, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x32b28eade3f84e8b, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x6000, 0x10, r3, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0xd, {0x0, 0x8, 0xfffffffffffffffd, 0x200, 0x3, 0x0, 0x0, 0x4, 0x4, 0x2000, 0x101, r3, r4, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) write$FUSE_INTERRUPT(r8, 0x0, 0x2f20) statfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)=""/92) copy_file_range(r8, &(0x7f0000000380)=0x7fffffff, r1, &(0x7f00000003c0)=0x5, 0x5, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000700), 0xffff, 0x195800) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000080)={0x1}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x78, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0xe6, 0xffffffffffffffff, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x40004) sendfile(r0, r0, &(0x7f0000000000)=0xa, 0x80000001) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r11, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 4m4.44374312s ago: executing program 3 (id=122): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, 'mnt/encrypted_dir\x00'}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$cgroup_pid(r0, &(0x7f0000002140)=r1, 0x12) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='mnt/encrypted_dir\x00', 0x10802, 0x46) openat(r2, &(0x7f0000000080)='mnt/encrypted_dir\x00', 0x40c000, 0x80) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1d, 0x2, 0x6) (async) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) setsockopt$ALG_SET_KEY(r3, 0x6a, 0x1, 0x0, 0xc) (async) r4 = syz_ublk_setup_io_uring(0x22, &(0x7f00000021c0)={0x0, 0x20000000, 0x100, 0x2, 0x1db}, &(0x7f0000002180)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x2002}}) (async) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f0000000100)={0x1, 0xa}, 0x1) (async) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, &(0x7f0000000240)) (async) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) r9 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async, rerun: 32) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0xfe, "8200"}, 0x4, 0x2, {}, 0x20800}) (rerun: 32) write$binfmt_misc(r10, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000002c0)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) (async) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000280)={0x2e, 0x5, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0x302, 0x0, 0x0, 0x1000, 0x2, r1, 0x0, 0x80}}}, 0x0) (async, rerun: 64) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) (rerun: 64) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) 4m4.312391636s ago: executing program 3 (id=124): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@getaddr={0x14, 0x16, 0x401, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x4f, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1, @ANYRES8=r0], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 4m4.241880466s ago: executing program 3 (id=126): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000780)=""/242, 0xf2}, {&(0x7f0000000880)=""/4091, 0xffb}], 0x2}, 0x60}], 0x1, 0x42, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f00000003c0)={0x3, 0x10, 0x7, 0x3, "3dcd4ed846e1e2edefd9b6eaa131640bbc9f793484a2a1cd21940471d3c8030a"}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) syz_open_dev$vim2m(&(0x7f0000000a40), 0x10003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0x400, 0xe, 0x80, "13eaffffdffffd7f00000000008b050880001d00000000000000000000000016", 0x50313134}) r4 = fanotify_init(0xf00, 0x1) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000140)={{r5, r6+60000000}, {0x77359400}}, &(0x7f00000001c0)) fanotify_mark(r4, 0x105, 0x40009965, r0, 0x0) close(r4) 4m4.193887119s ago: executing program 3 (id=129): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)={0x0, 0xfb, 0xd2, 0x4, 0x65, "12915620885e34d86697344a3b99ca83", "bc57714f592e0e7617e7d47e968d06b210d4a3f869a48a200afb5673f1924374f2b10ae7c00298c976f0623e243d087eb70a2ccb8c896d8da392c1ab7d324a521a27f4222f144d5ac197b521ff8fc3ba019a06aa39e3f6dd4ba8823687e2be648f4829c5a050b0b355134aeab0ff7394d25fb50bcb0a087c5aa572b947471310230d85b7370742e9543ba80c1faf1a1a178b22bfbe4698e85dedea0656618e667a3bbbbbb413fb063285fa3fc319fa2eebea2199711539ba2acd895a75"}, 0xd2, 0x1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006119a400000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r0 = openat(0xffffffffffffff9c, &(0x7f00000001a0)='./nfsd/max_block_size\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='3276u', 0x5) mount$overlay(0x0, &(0x7f0000000340)='./nfsd/max_block_size\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={[{@index_on, 0x3a}, {@verity_require}], [], 0x2f}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)="a1"}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, &(0x7f0000004000)=""/4099, 0x1003) 4m4.055387153s ago: executing program 3 (id=131): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x4fb, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000037000008000400ac1414bb00ba3300"/28], 0x1c}, 0x1, 0x0, 0x0, 0x24040855}, 0x8410) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10104, 0xa21}, [@IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000002c0), &(0x7f00000003c0)=0x4) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f00000001c0)={0x1d, r7}, 0x10) getsockopt$inet_mreqn(r1, 0x0, 0x7, &(0x7f0000000400)={@multicast2, @local}, &(0x7f0000000440)=0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32=r9, @ANYBLOB="1000a204080001000000000008"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000540)={'vxcan0\x00'}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000000c0)=@urb_type_bulk={0x3, {0xc, 0x1}, 0xffff, 0xc4, &(0x7f0000000100)="3b2da3f1f917a79ac2ac4bf40effbdd58b6022d85974bd2ea5a62277044880c300721a1da2d8eb55766f0ce32d9bffe40633689ab0b5656dd7fd1ca498145c627558d00fb72a5b615bc4ba6961470baa2ea5d62095fe46121c3ef5ba7dfe56eed6fb7c772d3a9f0e945d3fbca5f74976", 0x70, 0x0, 0xc, 0x1000001, 0x1, 0x4, &(0x7f00000001c0)="949d1cf50e290adb7683419ab2ad1a45524a7ae6967515d75f36b41fe7f5ec9e808c293f918c14453caad74216644f565a2461c1fa4fa60f4062042da4422a81f6c278515c31a14b2cec00045cfc5c0005a94c9a13d42e3f488cf633201909bce455aab807cc0c90f946e5a8add337ed1dced7d793de37b27f940635a67c28ec0f14dc98460dff7252bb701f0b309c7392c6212c66231c74169d1bbd79ee8516c529a638e3e27bbd00"/183}) r10 = socket$kcm(0x21, 0x2, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x6000000, 0x14032, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r11 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) setsockopt$sock_attach_bpf(r10, 0x110, 0x7, 0x0, 0x4) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x90) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) 4m3.275023388s ago: executing program 3 (id=140): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41b28, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4054) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x6, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$packet(0x11, 0x3, 0x300) r7 = dup(r6) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) ioctl$HDIO_GETGEO(r7, 0x301, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000930000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r10, 0x29, 0x4b, 0x0, &(0x7f00000023c0)) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYRESHEX=r3, @ANYRESOCT=r6], 0x58}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 4m3.210716503s ago: executing program 32 (id=140): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41b28, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4054) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x6, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$packet(0x11, 0x3, 0x300) r7 = dup(r6) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) ioctl$HDIO_GETGEO(r7, 0x301, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000930000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r10, 0x29, 0x4b, 0x0, &(0x7f00000023c0)) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYRESHEX=r3, @ANYRESOCT=r6], 0x58}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 3m58.524674716s ago: executing program 4 (id=180): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)={0x3c, r1, 0xb97534d5fe9704cf, 0x3, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x582}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4040004) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10007}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000000206010200000000000000000000fdff140007800800134001a576ea08000640000000010500010006000000050005000a00000005000400000000000900020073797a310000000016000300686173683a6e6574"], 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 3m58.46367212s ago: executing program 4 (id=181): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$9p(r0, &(0x7f0000000640)="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", 0x18f) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000600)='./file0\x00', &(0x7f0000000240)=[0xc], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 3m58.415369085s ago: executing program 4 (id=182): r0 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x7, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000140)=0xf, 0x4) r2 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) ioctl$MEMWRITEOOB64(r2, 0xc0184d15, &(0x7f0000000600)={0x3, 0x0, 0x0, 0x0}) r3 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_cache\x00') read$FUSE(r4, &(0x7f0000002240)={0x2020}, 0x202c) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000180)={@any, 0x32a2, 0x100, 0x5, 0x200, 0x9, "aa9a3a77ae2c2470f109ec1d78da9955dcfdd1337ab9c97006be6736097fae3a78c221c10548402bf299999cc5b401f8cac366c36ce6534ef547f2d66da40a456323857cb10c00c5fef56cd47527633487e8f43f4ed14920fb1c0677171bff9bca9f17bbe7c30fa3ecf5ef57af34252e5bf13d0d0bceb204d8efe4eac37306aa"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0/console\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x5}}, 0x20) connect$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000b40)={0x0, [[0x9ef8, 0x7, 0x0, 0x4, 0x5d11, 0x9, 0x0, 0xe], [0x5c0, 0x80000000, 0x0, 0x0, 0x3a3, 0x0, 0x0, 0x4], [0x7, 0x0, 0x0, 0xfffffffc, 0xc6df, 0x0, 0x4]], '\x00', [{}, {0x3, 0x8}, {0x1}, {0x0, 0x80000000}, {0x3, 0x4, 0x0, 0x1, 0x1}, {0x18, 0x5f}, {0xfffffffc}, {0x0, 0x6}, {0x0, 0x3}, {0x0, 0xfffffffe}, {0x0, 0x7}, {0x7fffffe, 0x3}], '\x00', 0x1000}) 3m58.343032446s ago: executing program 4 (id=184): r0 = socket$rxrpc(0x21, 0x2, 0x2) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="74010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc02000000000000000000000000000000000000000000000000ffffe000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008273c0ed1a38b5260c153a4d63020000000000000000000000000000000300000000000002000000000000000000000000000000000000000008001f0002000000440005007f00000100000075b7fbdbea78729bad543d000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000009d8376027aad62087ac4cb994eda640074543499a28a74094e85609"], 0x174}}, 0x0) r3 = fsopen(&(0x7f0000000340)='befs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#X\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'}) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000280), &(0x7f00000002c0)=0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2547e99a7b518086cf9e75c9"], 0x48) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@flushsa={0x14, 0x1c, 0x200, 0x70bd2a, 0x25dfdbff, {0x6c}}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x2000040) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r4], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f00000000c0)={0xfd03, 0x0, 0x0, 0x5, 0x4}) mlock(&(0x7f0000102000/0x1000)=nil, 0x1000) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r8 = socket$inet6(0xa, 0xa, 0xad) r9 = accept$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000000140)=0x1c) sendto$inet6(r9, &(0x7f00000001c0)="74ad0f7db7dfddd3342f260a2269f0c886fd21f739f8c0eccefe6f78654f4d45e315c7e6d9ced4f78c44e41bf979e8f144c83746fb639580f50569a914c3846321ff27ab2b333ead1f034dd4891093a47492", 0x52, 0x2c000080, &(0x7f0000000240)={0xa, 0x4e23, 0xe9f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) 3m58.193962561s ago: executing program 4 (id=187): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, &(0x7f00000007c0), &(0x7f0000000640)=r1}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e05085a0c"], 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x20004004) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32=r4, @ANYBLOB="080026040a000100000000000000000008000f0005"], 0x30}, 0x1, 0x0, 0x0, 0x240400c0}, 0x80c0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="cc0000002f00090027bd7000fedbdf250400000004001f"], 0xcc}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 3m56.919140362s ago: executing program 4 (id=191): r0 = socket$netlink(0x10, 0x3, 0x0) (async) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r1, 0x21, 0x0, 0x0) (async) keyctl$unlink(0x9, 0x0, 0xfffffffffffffff9) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x2, 0xd, 0x3, 0x1a, @private1, @dev={0xfe, 0x80, '\x00', 0x32}, 0x80, 0x10, 0xfffffff8, 0x3}}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) (async) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000080)="06841ffa", 0x4}], 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x700, 0x1, 0x7, 0x0, {{0x14, 0x4, 0x0, 0x6, 0x50, 0x66, 0x0, 0xb, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x9d, 0x1, 0x3, [{@loopback, 0x3}]}, @lsrr={0x83, 0x1f, 0x80, [@dev={0xac, 0x14, 0x14, 0x1c}, @remote, @broadcast, @remote, @multicast1, @loopback, @empty]}, @lsrr={0x83, 0xf, 0x6, [@remote, @loopback, @remote]}]}}}}}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000880)="800000800003210ee7decd7a000340008100db6a3e41c929ac9c7a2d7efc5738b7677b6fa874152bf4797c5ad254c2524504b62bd5b8", 0x36, 0x40, &(0x7f0000000140)={0x11, 0x18, r9, 0x1, 0x10, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@RTM_DELMDB={0xd8, 0x55, 0x800, 0x70bd2d, 0x25dfdbff, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x4, {@ip4=@private=0xa010100}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x3, 0x0, {@in6_addr=@mcast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x3, {@in6_addr=@mcast2, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x0, 0x1, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x0, 0x1, {@in6_addr=@remote}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x1, 0x3, {@ip4=@dev={0xac, 0x14, 0x14, 0xe}, 0x800}}}]}, 0xa6}, 0x1, 0x0, 0x0, 0xc8c1}, 0xc850) 3m56.788042015s ago: executing program 33 (id=191): r0 = socket$netlink(0x10, 0x3, 0x0) (async) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r1, 0x21, 0x0, 0x0) (async) keyctl$unlink(0x9, 0x0, 0xfffffffffffffff9) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x2, 0xd, 0x3, 0x1a, @private1, @dev={0xfe, 0x80, '\x00', 0x32}, 0x80, 0x10, 0xfffffff8, 0x3}}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) (async) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000080)="06841ffa", 0x4}], 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x700, 0x1, 0x7, 0x0, {{0x14, 0x4, 0x0, 0x6, 0x50, 0x66, 0x0, 0xb, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x9d, 0x1, 0x3, [{@loopback, 0x3}]}, @lsrr={0x83, 0x1f, 0x80, [@dev={0xac, 0x14, 0x14, 0x1c}, @remote, @broadcast, @remote, @multicast1, @loopback, @empty]}, @lsrr={0x83, 0xf, 0x6, [@remote, @loopback, @remote]}]}}}}}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000880)="800000800003210ee7decd7a000340008100db6a3e41c929ac9c7a2d7efc5738b7677b6fa874152bf4797c5ad254c2524504b62bd5b8", 0x36, 0x40, &(0x7f0000000140)={0x11, 0x18, r9, 0x1, 0x10, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@RTM_DELMDB={0xd8, 0x55, 0x800, 0x70bd2d, 0x25dfdbff, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x4, {@ip4=@private=0xa010100}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x3, 0x0, {@in6_addr=@mcast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x3, {@in6_addr=@mcast2, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x0, 0x1, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x0, 0x1, {@in6_addr=@remote}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x1, 0x3, {@ip4=@dev={0xac, 0x14, 0x14, 0xe}, 0x800}}}]}, 0xa6}, 0x1, 0x0, 0x0, 0xc8c1}, 0xc850) 3m53.340393087s ago: executing program 34 (id=91): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000006c0), 0x8042, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xe5c5e72577a57e20) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7543, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000300)={0x0, 0x2, "4cf90fba85c830e42a3ca4b10f01bbcb15f3806c4853e7c44a6974759d9f643905a56baa4195fb396d9bfa306999f1586e5d1ca49add100a36b751a7d9fe0b182ebf2c8a0e66f72c1c08260030752f07cd4089473e52885a3c85bbcf3ccfac5bb9435fe036dcfccd7254bbd8bce90e2284d29e1f17d6652270fd0abcb8729f16ff602b438bd122a9e09984e2799d0dbfef7533d1a930ea4f4b57605ace45f5815450693650ae000034aa0c5ca5e793516d156e5a5b34d6c17c40d753426a3d8e15e726d0f2622e873e0cbe63751bb62c68594d4cb0a21b92ad2e80f24a9b290a9eee6779022a0b7f5223e4e8c9f53f501ec8c439724078fdc076a51d50760566"}) close(r7) write$FUSE_INIT(r1, &(0x7f0000000400)={0x50, 0x0, r2, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x32b28eade3f84e8b, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x6000, 0x10, r3, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0xd, {0x0, 0x8, 0xfffffffffffffffd, 0x200, 0x3, 0x0, 0x0, 0x4, 0x4, 0x2000, 0x101, r3, r4, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) write$FUSE_INTERRUPT(r8, 0x0, 0x2f20) statfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)=""/92) copy_file_range(r8, &(0x7f0000000380)=0x7fffffff, r1, &(0x7f00000003c0)=0x5, 0x5, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000700), 0xffff, 0x195800) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000080)={0x1}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x78, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0xe6, 0xffffffffffffffff, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x40004) sendfile(r0, r0, &(0x7f0000000000)=0xa, 0x80000001) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r11, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 3m39.403616355s ago: executing program 2 (id=371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0a41, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="080008000700000000031500000045f0801600000000002f9078000000d0327f4fba9e1e682600ffffffffa20022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="1000000090780000"], 0xfdef) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f00000002c0), 0x4) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x48, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfffe, 0xfff3}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'wlan0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8080) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3m39.01375957s ago: executing program 2 (id=381): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x305082, 0x0) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x4000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) (async) pipe2$9p(&(0x7f0000000000), 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x305082, 0x0) (async) dup(r0) (async) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x4000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) (async) 3m38.933873948s ago: executing program 2 (id=383): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000010000)=[@text32={0x20, &(0x7f0000000340)="b934000000b80401c0feba000000000f3064f23ef78ded6dffff02000000c4c2f192acc2f8ff96a466b816610101f8d866baf80cb80fc5008def66bafc0cecc4e2fdb6fff3af0fc76b9466baf80cb8bf195a84ef66bafc0cb0cfee66baf80cb8f092a18cef66bafc0c66b847f566ef", 0x6f}], 0x1, 0x36, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0x81, 0x0, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x183, 0x2, 0x0, 0xf5, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0x200000, 0x1c6017}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r7, 0x4068aea3, &(0x7f00000003c0)) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4804}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r6, {}, {0x4, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x50deecda08de2091}, @TCA_TBF_PARMS={0x28, 0x1, {{0xb, 0x1, 0x9, 0xe5ae, 0x42, 0x7e71b34}, {0x8, 0x3, 0x7cb, 0x200, 0xf5b, 0x7}, 0x2000007, 0x80000000, 0x1cd9}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 3m37.964848231s ago: executing program 2 (id=390): r0 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./my_config/usb_gadget/g1/os_desc/qw_sign\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd70107c05219d040000e2040000000600010005000000080009"], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) socket(0x18, 0x2, 0x6d4a) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r1, 0x1a, 0x0, @void}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025647a31000000000900010073797a3000000000080005400000001c"], 0xe0}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) 3m37.883374958s ago: executing program 2 (id=391): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) (async, rerun: 32) r4 = socket$inet6(0xa, 0x2, 0x3a) (rerun: 32) sendto$inet6(r4, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) socket$rds(0x15, 0x5, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x2c, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = syz_open_dev$vbi(&(0x7f0000000500), 0x0, 0x2) (rerun: 64) ioctl$VIDIOC_G_SLICED_VBI_CAP(r6, 0xc0745645, &(0x7f0000000540)={0x2, [0x8001, 0x1, 0x101, 0xc5, 0x7, 0xa, 0x1000, 0x507, 0xfffb, 0x3, 0x7fff, 0x5, 0x1, 0x2, 0x2, 0x7, 0x7fff, 0x3, 0x2, 0x0, 0xfffb, 0x0, 0x1, 0x1, 0xe15b, 0xa, 0x200, 0xb8, 0x8, 0x1175, 0x1, 0xd, 0x8001, 0x1, 0xfffb, 0xf400, 0x7, 0x5, 0x0, 0x8, 0x0, 0x5, 0x6, 0x3800, 0xed, 0x8, 0x100, 0x6], 0xb}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56749, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x8}, {}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x2, 0x0, 0x2, 0xa, 0xa}, {0xc, 0x2, 0x1, 0x800, 0x3, 0x4}, 0x6, 0x3027, 0x1a52}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@newtclass={0x34, 0x28, 0x102, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xc, 0x8}, {0x7, 0x10}, {0xfff3, 0xc}}, [@TCA_RATE={0x6, 0x5, {0xe9, 0x3}}, @TCA_RATE={0x6, 0x5, {0x6f, 0xb}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4) (async, rerun: 32) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/90, 0x5a, 0x8, 0xfffffb5b}) (async) sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=@getnexthop={0x20, 0x6a, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x800) (async) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000800"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000a5976ac6acd41fd8"], 0x48}}, 0x4008004) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r1, {0x2, 0x1}, {0x5, 0x10}, {0xd, 0x3}}}, 0x2f}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 3m37.794133255s ago: executing program 2 (id=393): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000180)=0xffffffff) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r3, 0x0, r4}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x183001, 0x0) write$snapshot(r5, 0x0, 0x0) 3m22.172366955s ago: executing program 35 (id=393): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000180)=0xffffffff) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r3, 0x0, r4}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x183001, 0x0) write$snapshot(r5, 0x0, 0x0) 3m9.295701256s ago: executing program 7 (id=651): r0 = syz_open_dev$sg(&(0x7f0000001600), 0xb, 0x40042) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r4 = fsopen(&(0x7f0000000000)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xc5, 0x3b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}]}, 0x38}, 0x1, 0x0, 0x0, 0x40041}, 0x40008890) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x30, r2, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfd, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) 3m9.295232661s ago: executing program 7 (id=652): unshare(0x6a040000) (async) r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) fstat(r0, &(0x7f0000000040)) 3m8.963869418s ago: executing program 7 (id=654): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbf, {0x0, 0x0, 0x0, r6, {0x5, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x1}, {{0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x1}, {0x8, 0x1, 0x7, 0x2, 0x5, 0x1, 0x1}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x7, r3, 0x41}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)}], 0x1}, 0x0) 3m8.741049315s ago: executing program 7 (id=655): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) open(&(0x7f0000000080)='./file0/../file0\x00', 0x181483, 0xa4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x463}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x176) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 3m8.74075316s ago: executing program 7 (id=656): r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f0000000000)) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r1, &(0x7f0000000040)=""/102390, 0x18ff6, 0x10000002fc) listen(r1, 0xa5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000019100), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000019200)={&(0x7f00000190c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000191c0)={&(0x7f0000019140)={0x44, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xf}, @L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044005}, 0x24000000) unlink(&(0x7f0000019040)='./mnt\x00') connect$inet6(r1, &(0x7f0000019080)={0xa, 0x4e21, 0x7, @local, 0x1}, 0x1c) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="616464723d3132372e302e302e312c706f72743d323034392c6d6f756e74706f72743d323034392c70721e5921b96f3d7463702c6e6f6c6f636b2c736f66742c74697f656f3d312c7265a072616e733d31005e00"]) 3m8.378876802s ago: executing program 7 (id=657): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r1}]}, 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f787900"], 0xcc}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000006"], 0x34c000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x35}, 0x15, 0x3, 'fo\x00', 0x6, 0x4, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lblc\x00', 0x0, 0x81, 0x39}, {@rand_addr=0x64010500, 0x4e26, 0x3, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x20, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3m8.316528642s ago: executing program 36 (id=657): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r1}]}, 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f787900"], 0xcc}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000006"], 0x34c000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x35}, 0x15, 0x3, 'fo\x00', 0x6, 0x4, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lblc\x00', 0x0, 0x81, 0x39}, {@rand_addr=0x64010500, 0x4e26, 0x3, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x20, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.315865423s ago: executing program 8 (id=2099): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 1.221450738s ago: executing program 8 (id=2100): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e26, 0xc5de, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) (async) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000080), 0x4) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) (rerun: 64) 993.509175ms ago: executing program 8 (id=2104): setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) (async) syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x2, 0x2, 0xf1}, 0x0, 0x0, 0x0) (async) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x29, 0x5, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x28) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES16=r0], 0x84}}, 0x20008040) 901.79443ms ago: executing program 8 (id=2105): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) (async) chdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x2a) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000580)=[@text32={0x20, &(0x7f0000000200)="0f20e035200000000f22e066b842000f00d8b805000000b9a00000000f21c13e0f070fde460b0f0130670f01c2f2360f217ab9e90200000f32", 0x39}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) io_setup(0x2, &(0x7f0000000080)=0x0) (async) r4 = eventfd(0x0) io_submit(r3, 0x4, &(0x7f0000001780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x9d9c, r0, &(0x7f0000000140)="d66ee8fe1f", 0x5, 0x24df, 0x0, 0x2}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x1, 0xa0, r1, &(0x7f00000005c0)="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", 0x1000, 0x9, 0x0, 0x2}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x3, 0x5, r2, &(0x7f0000001600)="ccff7a0c126074d2c25ce97deca988c4bf32b7febcefd467854720063fe085a1b05c39c00b17808f39f4962cd369879503b81a28b33b92e7f38f744684", 0x3d, 0x5, 0x0, 0x2, r4}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x8, 0x7fff, r0, &(0x7f0000001680)="978e871866dc611727022cf199d383543ee8dda91ff9c00b83376b37bc21f7a312aee248be888e9142a091102d3b8575e73ffada3be76a283aaa7ef886914fc8af4fd4c1981057f8a57c253d68025ff88269c1450e8e1e4cf7a14b277dbd72e838759aee46e323ba1dafd09e3aff15cb88254f1699ab76f57b530df516a78cc98ccb0f5932f8448cb11d1719097f93fc7d1f20a6e1b8a3bb8485d8fb16fcfd6291cf6f06f93f147454fb75150c7d83ea5c7c8ffaa4fcecd3a8fa2d", 0xbb, 0x68a6, 0x0, 0x1}]) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@index_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}], [], 0x2c}) 837.563535ms ago: executing program 0 (id=2108): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x6, 0xb, 0x6, 0x42, @private1, @mcast2, 0x20, 0x10, 0x4, 0x7}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_getnetconf={0x3c, 0x52, 0x200, 0x70bd24, 0x25dfdbfb, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x8001}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x9}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x7}, @NETCONFA_IFINDEX={0x8, 0x1, r1}, @NETCONFA_FORWARDING={0x8, 0x2, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 836.520247ms ago: executing program 0 (id=2110): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000002300)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x70, 0x2, 0x6, 0x201, 0x6000006, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0xc080) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe50}, {0x0}, {0x0}, {0x0}, {&(0x7f00000020c0)}], 0x5, 0x0, 0x0, 0x51}, 0x4000000) 739.974807ms ago: executing program 0 (id=2111): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000200)={0x2, @raw_data="f210040fbc756187424138312bfac52370e3a80ce2d83cc3ab02a19ef300f39be6c49a56f6f1ab3326f93529c8638b6ca31251be3f023f281a3e60a98f4c6759800b8a4ee0d221fa1cc9d257fe8618afcaa64266e427705c1e60839bb4815a626ee41a04d3e7c4f5f0feb90ccb46897cec802a7807f971001d3c96939f554511221521bdaa90f4312622c36eb488a97ddb69f9718de293b79558e3b4c7ad8e9e0bb64f53c4ff85f1b0c84748007f3b54ff2b1dc14cbff1c832236c5f82dc31c725251361171e0159"}) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000003980)=0x7, 0x4) 738.499068ms ago: executing program 0 (id=2112): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000280)='v', 0x1}], 0x1) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) (async, rerun: 64) r6 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005900)=@newtfilter={0x4c, 0x2c, 0x20, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0x2, 0xfff3}}}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) (async) write(r3, &(0x7f0000000400)='1', 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r8, &(0x7f0000000600)='1', 0x1) 654.841599ms ago: executing program 8 (id=2114): userfaultfd(0x80001) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) epoll_create1(0x80000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x40049366, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) fsmount(r5, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r8 = socket(0x10, 0x80002, 0x0) move_mount(r2, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x324) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r8, @ANYRES32=r8], 0x44}}, 0x2000800) 503.531285ms ago: executing program 8 (id=2117): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101c02, 0x0) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) (async) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) (async, rerun: 32) dup3(r3, r4, 0x0) (async, rerun: 32) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x304}, "2b875c4dba89eaaf", "b144cd6f1e6801ee02d37138c6c49d600da928554995cc24db65a0730183ff63", "736700dc", "fa81907166736e06"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000740)=@gcm_256={{0x304}, "3939e0286ea0c77e", "01000000c19cbf39962882d3000057388e530a7a9142af7f40d84be28795f4c3", "47d2afcd", "00000200"}, 0x38) (async) flistxattr(r1, &(0x7f0000000000)=""/8, 0x8) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400800001000010410287d00e3ffffff00050000", @ANYRES32=0x0, @ANYBLOB="0131010000000000200012800b00010065727370616e000010000280040012000800150060bb0200"], 0x40}}, 0x0) dup3(r1, r0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x12, r0, 0xfc778000) 431.333441ms ago: executing program 6 (id=2118): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) syz_emit_ethernet(0x96, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="800200"], 0x0) 356.46115ms ago: executing program 0 (id=2119): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x80) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket(0x2, 0x80805, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000020340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB='\b\x00?\x007y'], 0x24}}, 0x0) (async) sendmmsg$inet(r3, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000002680)={r7, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000080)={r7, 0x3, 0x3}, 0x8) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x77, 0x0, 0x8, 0x2, r7}, &(0x7f0000000100)=0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r8, @ANYBLOB="10080400895504002c001280110001006272696467655f736c6176650000000014000580050028"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040050) 354.948965ms ago: executing program 6 (id=2120): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) r1 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x8}) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) bind$tipc(r2, 0x0, 0x0) close(r2) r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$bpf(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800881, &(0x7f00000007c0)={[{}]}) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x5, &(0x7f0000000340)={[{@redirect_dir_off}, {@metacopy_on}, {@upperdir={'upperdir', 0x3d, './proc/net/rpc/auth.unix.gid/channel'}}, {@redirect_dir_off}, {@uuid_auto}, {@verity_require}, {@redirect_dir_nofollow}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@default_permissions}, {@nfs_export_off}], [{@uid_eq}, {@smackfsroot={'smackfsroot', 0x3d, '*{'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@appraise}, {@pcr={'pcr', 0x3d, 0x2e}}, {@smackfsfloor={'smackfsfloor', 0x3d, '+#*'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/fuse\x00'}}, {@subj_type={'subj_type', 0x3d, '\'$^$/'}}]}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000100)={@local, @remote}, &(0x7f0000000180)=0x8) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10408, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x1) ioctl$NBD_SET_BLKSIZE(r10, 0xab01, 0x9) syz_fuse_handle_req(r6, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x5af, {0xfeffffffffffffff, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x21, 0x7, 0x1, 0x8000, 0x0, r8, r9, 0x1000003, 0x7d1d}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r5, 0x3, r8, &(0x7f0000000000)={0x9, 0x3, 0x1, 0x4}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r11, &(0x7f0000000500)=' 294967 95 2\\000 0000 0\n', 0x18) 354.467745ms ago: executing program 5 (id=2121): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='ip6tnl0\x00', 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'gretap0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000600)=0x3) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc08c5332, &(0x7f0000000400)={{0x40, 0x3}, 0x0, 0x4, 0x88, {}, 0x0, 0xffff}) syz_emit_ethernet(0x4e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000180640fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e22", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="5018100090785fcc40c80004"], 0x0) 353.137861ms ago: executing program 6 (id=2122): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xc, &(0x7f0000000040), 0x4) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='7\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="08002bbd7000fddbdf25040000002400068008000600070000000500020032000000060001000a00000005000200000000000800030003000000"], 0x40}, 0x1, 0x0, 0x0, 0x24004041}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000003c0)={0x0, 'veth1_to_team\x00', {}, 0x80}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000003c0)={0x0, 'veth1_to_team\x00', {}, 0x80}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000380)={0x3a80, 0x2, 0x100, "28ea603c8a6516823228b23bc919cb2fa6fe1309645b2fc3cf53537183df8cb7", 0x405b5c97}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 300.883123ms ago: executing program 5 (id=2123): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80000) connect$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x4, 0x1}}, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000701feffffff00000000017c0000040042802c00018010000400cab1893a20b8d2a93521800a18001c8014000200fe800000000000000000000000000032040002"], 0x48}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) 300.016583ms ago: executing program 0 (id=2124): mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000005, 0x20031, 0xffffffffffffffff, 0x5f5e6000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001280)={0xf, {"a2e3ad214fc752f91b29090942f70e0dd038e7ff7fc6e5539b3267078b089b34083b681a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b313b0d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910de85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520008008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600071a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45fdcfe6180a8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c1173ea68e93b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20870800000000000000939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a520f9506711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8393c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df7227fff687e39e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f", 0x1000}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x40040, 0x0) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000180)=0x9, 0x9, 0x1) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0xb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0xff}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x50, 0xffffffffffffffda, 0x9d6, {0x7, 0x29, 0xfffffffb, 0x48400410, 0x1, 0x0, 0xb, 0x2, 0x0, 0x0, 0x8, 0x97}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0xcb14, 0x10100, 0x3, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000), 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000000)) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000000400)={&(0x7f00000003c0)=[{&(0x7f0000000580)="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", 0xfd}], 0x1, 0xfff, 0x0, 0x6, 0x3, 0x9e6, 0x0, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x2) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x7, 0x7, 0x582b04d7, 0x0, 0x1, 0xfffffff9}) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f00000001c0)=0x9, 0x4) close(r2) syz_usb_control_io$hid(r1, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r6, &(0x7f0000000240)=[{&(0x7f00000000c0)='\n', 0x1}], 0x1) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x2, &(0x7f0000000040)={0xc, "970eece033cc6fecf8e79f0e2de512fecc4610efac121d9b76041bdb8b0d3f7ece"}}) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) mbind(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0xa, 0x0) 295.512265ms ago: executing program 5 (id=2125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2}, {0x0, [0x0]}}, &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000440006"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x24004004) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0x1400c000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 186.003001ms ago: executing program 5 (id=2126): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x200, 0x0) 184.500242ms ago: executing program 5 (id=2127): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x0, 0xeb}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x2200}], 0x0, 0xa}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x44, r2, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x25}}}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x0, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xcd97, 0x88f6, 0x7, 0x1d0, 0x2, 0x3, 0xb]}}]}]}]}]}]}, 0x44}}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000000840)) 111.038224ms ago: executing program 6 (id=2128): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r0, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x40, r3, 0x403, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r4 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x0, 0xeb}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000100), 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001700)=""/4095, 0xffffffffffffff9c}, {&(0x7f0000000000)=""/67, 0x50}], 0x2) 95.957699ms ago: executing program 5 (id=2129): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='1', 0x1) writev(r2, &(0x7f0000001d80)=[{&(0x7f0000000000)="0300000000", 0x5}], 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000a00)='1', 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x2c0, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @broadcast, @broadcast, @port=0x4e23, @gre_key=0x40}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @gre_key=0xff, @port=0x4e20}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'lo\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @icmp_id=0x64, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) bind$bt_hci(r4, &(0x7f0000000480)={0x1f, 0x1, 0x4}, 0x6) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0xe0000000, 0xffffffffd64b043a, 0x83, 0xffff, 0x4, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x10000, 0x0) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000040)='cifs\x00', 0x0, &(0x7f00000000c0)='rdma') sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001900010000000000000000081c14"], 0x30}}, 0x0) 94.071063ms ago: executing program 6 (id=2130): r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) socket$tipc(0x1e, 0x2, 0x0) socket(0x1e, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xd00, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x48}], 0x1}}], 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close(r0) 0s ago: executing program 6 (id=2131): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x3c, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x3c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0xabc21000) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000180)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000000)="650fae4e070fbe35f30f53ce9a0a000201660f3a22aee0ff722e362e2e660fae7e003e0faeec65660f1aa74f070f01c3f30f5d2f", 0x34}], 0xaaaaaaaaaaaacbc, 0xe, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r8, 0x89e3, &(0x7f0000000080)={0x24, 0xffffbe5c, 0xa, 0x6, 0x2, 0x81}) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r10, &(0x7f0000005f40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000240)=[{&(0x7f0000002280)="c4", 0x1}], 0x1}}], 0x1, 0x50004) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f00000003c0)={r11}, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) kernel console output (not intermixed with test programs): h an up link [ 186.965662][ T5849] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.968700][ T5849] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.971736][ T5849] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.974606][ T5849] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.172698][T11142] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 187.184235][T11142] cramfs: wrong magic [ 187.262231][T11144] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1386'. [ 187.399466][T11155] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 187.480114][T11163] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1391'. [ 187.483586][T11163] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1391'. [ 189.058950][T11181] fuse: Unknown parameter ' `0x0000000000000003' [ 189.619729][T11198] netlink: 'syz.6.1400': attribute type 1 has an invalid length. [ 189.674450][T11198] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 189.690000][T11198] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1400'. [ 189.703845][T11198] 8021q: adding VLAN 0 to HW filter on device bond5 [ 189.707364][ T13] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 189.717613][T11198] xfs: Unknown parameter 'norecovery/binder0' [ 189.798349][T11211] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1403'. [ 189.851689][ T5591] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 190.055322][T11226] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1407'. [ 190.097062][T11226] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1407'. [ 190.134557][T11233] sctp: [Deprecated]: syz.8.1408 (pid 11233) Use of struct sctp_assoc_value in delayed_ack socket option. [ 190.134557][T11233] Use struct sctp_sack_info instead [ 190.238640][T11243] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1409'. [ 190.504985][T11259] /dev/sg0: Can't lookup blockdev [ 190.622081][ T42] kauditd_printk_skb: 31022 callbacks suppressed [ 190.622113][ T42] audit: type=1400 audit(1785632353.973:67224): avc: denied { accept } for pid=11260 comm="syz.8.1415" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 190.684342][ T42] audit: type=1400 audit(1785632354.020:67225): avc: denied { execute } for pid=11265 comm="syz.8.1416" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 190.693940][ T42] audit: type=1400 audit(1785632354.039:67226): avc: denied { ioctl } for pid=11265 comm="syz.8.1416" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 190.765438][ T42] audit: type=1400 audit(1785632354.104:67227): avc: denied { map } for pid=11271 comm="syz.5.1419" path="/proc/862/net/netlink" dev="proc" ino=4026532904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 190.868779][ T42] audit: type=1400 audit(1785632354.207:67228): avc: denied { write } for pid=11276 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.889410][T11281] overlay: filesystem on ./bus not supported [ 190.936722][ T42] audit: type=1400 audit(1785632354.263:67229): avc: denied { write } for pid=11286 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.081108][T11298] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=11298 comm=syz.6.1425 [ 191.162403][ T42] audit: type=1400 audit(1785632354.478:67230): avc: denied { read } for pid=11297 comm="syz.6.1425" dev="sockfs" ino=44064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 191.212433][T11315] binder: 11314:11315 ioctl c0306201 200000000040 returned -22 [ 191.224372][T11317] 9p: Unknown access argument 18446744073709551615: -34 [ 191.290047][ T42] audit: type=1400 audit(1785632354.591:67231): avc: denied { create } for pid=11318 comm="syz.0.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 191.417719][ T42] audit: type=1400 audit(1785632354.712:67232): avc: denied { shutdown } for pid=11325 comm="syz.5.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 191.536421][ T42] audit: type=1400 audit(1785632354.825:67233): avc: denied { write } for pid=11339 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.570829][T11344] __nla_validate_parse: 4 callbacks suppressed [ 191.570852][T11344] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1436'. [ 191.639028][T11348] comedi comedi2: board detection failed [ 191.651266][T11348] ehci-pci 0000:00:1d.7: remove, state 4 [ 191.654103][T11348] usb usb2: USB disconnect, device number 1 [ 191.691372][T11348] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 191.782259][T11351] team0: entered promiscuous mode [ 191.783993][T11351] team_slave_0: entered promiscuous mode [ 191.786225][T11351] team_slave_1: entered promiscuous mode [ 191.788980][T11351] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.958665][T11369] bridge5: entered promiscuous mode [ 191.960427][T11369] bridge5: entered allmulticast mode [ 191.964888][T11369] Invalid source name [ 191.966354][T11369] UBIFS error (pid: 11369): cannot open "./file0", error -22 [ 191.971371][T11369] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1440'. [ 192.005007][ T6352] Bluetooth: hci0: Frame reassembly failed (-84) [ 192.038290][T11382] netlink: 'syz.0.1442': attribute type 3 has an invalid length. [ 192.055610][T11354] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 192.066237][T11354] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 192.070964][T11354] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 192.095433][T11354] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 192.104181][T11354] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 192.107996][T11354] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 192.111997][T11354] usb usb2: Product: EHCI Host Controller [ 192.114023][T11354] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 192.116364][T11354] usb usb2: SerialNumber: 0000:00:1d.7 [ 192.146510][T11354] hub 2-0:1.0: USB hub found [ 192.150712][T11354] hub 2-0:1.0: 6 ports detected [ 192.262417][T11354] hub 1-0:1.0: USB hub found [ 192.265690][T11354] hub 1-0:1.0: 2 ports detected [ 192.285273][T11403] openvswitch: netlink: IPv4 tun info is not correct [ 192.343878][T11354] hub 3-0:1.0: USB hub found [ 192.345604][T11354] hub 3-0:1.0: 2 ports detected [ 192.417194][T11354] hub 4-0:1.0: USB hub found [ 192.422967][T11354] hub 4-0:1.0: 2 ports detected [ 192.490481][ T848] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 192.697090][ T848] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 192.700922][ T848] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 192.705842][ T848] usb 2-1: Product: QEMU USB Tablet [ 192.708111][ T848] usb 2-1: Manufacturer: QEMU [ 192.710108][ T848] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 192.734317][ T848] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.000C/input/input20 [ 192.829417][ T848] hid-generic 0003:0627:0001.000C: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 192.985443][T11441] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pid=11441 comm=syz.8.1457 [ 192.993205][T11441] netlink: 'syz.8.1457': attribute type 21 has an invalid length. [ 192.996734][T11441] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1457'. [ 193.089878][T11454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.488702][T11477] fuse: fd is not a fuse device [ 193.549604][T11484] binder: 11483:11484 ioctl 942e 0 returned -22 [ 193.663174][T11496] sysfs: cannot create duplicate filename '/class/ieee80211/1^!' [ 193.667306][T11496] CPU: 0 UID: 0 PID: 11496 Comm: syz.0.1475 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.667337][T11496] Tainted: [L]=SOFTLOCKUP [ 193.667345][T11496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.667367][T11496] Call Trace: [ 193.667385][T11496] [ 193.667393][T11496] dump_stack_lvl+0x100/0x190 [ 193.667543][T11496] sysfs_warn_dup.cold+0x1c/0x28 [ 193.667589][T11496] sysfs_do_create_link_sd+0x113/0x140 [ 193.667639][T11496] sysfs_create_link+0x61/0xc0 [ 193.667659][T11496] device_add+0x675/0x1970 [ 193.667740][T11496] ? __pfx_device_add+0x10/0x10 [ 193.667773][T11496] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 193.667821][T11496] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 193.667916][T11496] wiphy_register+0x2151/0x3110 [ 193.667973][T11496] ? __pfx_wiphy_register+0x10/0x10 [ 193.667995][T11496] ? __asan_memset+0x23/0x50 [ 193.668026][T11496] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 193.668093][T11496] ieee80211_register_hw+0x3053/0x4580 [ 193.668143][T11496] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 193.668170][T11496] ? __pfx___debug_object_init+0x10/0x10 [ 193.668228][T11496] ? find_held_lock+0x2b/0x80 [ 193.668268][T11496] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 193.668293][T11496] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 193.668341][T11496] ? __hrtimer_setup+0x208/0x330 [ 193.668387][T11496] mac80211_hwsim_new_radio+0x2acc/0x64c0 [ 193.668431][T11496] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 193.668460][T11496] ? __asan_memcpy+0x3c/0x60 [ 193.668482][T11496] hwsim_new_radio_nl+0xc6b/0x13f0 [ 193.668510][T11496] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 193.668544][T11496] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 193.668604][T11496] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 193.668636][T11496] genl_family_rcv_msg_doit+0x214/0x300 [ 193.668663][T11496] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 193.668697][T11496] ? bpf_lsm_capable+0x9/0x10 [ 193.668726][T11496] ? security_capable+0x80/0x260 [ 193.668772][T11496] ? ns_capable+0xd2/0xf0 [ 193.668810][T11496] genl_rcv_msg+0x560/0x800 [ 193.668838][T11496] ? __pfx_genl_rcv_msg+0x10/0x10 [ 193.668863][T11496] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 193.668899][T11496] netlink_rcv_skb+0x159/0x420 [ 193.668920][T11496] ? __pfx_genl_rcv_msg+0x10/0x10 [ 193.668948][T11496] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 193.668983][T11496] ? netlink_deliver_tap+0x1ae/0xcc0 [ 193.669019][T11496] genl_rcv+0x28/0x40 [ 193.669039][T11496] netlink_unicast+0x585/0x850 [ 193.669062][T11496] ? __pfx_netlink_unicast+0x10/0x10 [ 193.669091][T11496] netlink_sendmsg+0x8b0/0xda0 [ 193.669116][T11496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.669139][T11496] ? selinux_socket_sendmsg+0x198/0x2f0 [ 193.669182][T11496] ____sys_sendmsg+0xa4d/0xbe0 [ 193.669235][T11496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.669258][T11496] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.669302][T11496] ___sys_sendmsg+0x190/0x1e0 [ 193.669323][T11496] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.669341][T11496] ? __lock_acquire+0x49f/0x1a40 [ 193.669391][T11496] __sys_sendmsg+0x160/0x210 [ 193.669416][T11496] ? __pfx___sys_sendmsg+0x10/0x10 [ 193.669453][T11496] do_syscall_64+0x115/0x870 [ 193.669486][T11496] ? clear_bhb_loop+0x40/0x90 [ 193.669528][T11496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.669550][T11496] RIP: 0033:0x7fc89cf9e019 [ 193.669572][T11496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.669589][T11496] RSP: 002b:00007fc89df1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.669619][T11496] RAX: ffffffffffffffda RBX: 00007fc89d225fa0 RCX: 00007fc89cf9e019 [ 193.669631][T11496] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 193.669641][T11496] RBP: 00007fc89d03500c R08: 0000000000000000 R09: 0000000000000000 [ 193.669653][T11496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.669664][T11496] R13: 00007fc89d226038 R14: 00007fc89d225fa0 R15: 00007ffe78b5dc08 [ 193.669691][T11496] [ 194.178765][ T5745] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 194.179221][ T5747] Bluetooth: hci0: command 0x1003 tx timeout [ 200.421468][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.424032][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 214.250046][T11519] 9pnet_virtio: no channels available for device syz [ 214.262584][T11519] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1478'. [ 214.387755][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 214.387799][ T42] audit: type=1400 audit(1785632376.208:67252): avc: denied { write } for pid=11525 comm="syz.8.1481" name="extensions" dev="configfs" ino=39566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 214.400389][ T42] audit: type=1800 audit(1785632376.217:67253): pid=11527 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1481" name="bmControls" dev="configfs" ino=44457 res=0 errno=0 [ 214.623766][T11537] tmpfs: Bad value for 'mpol' [ 214.875824][ T42] audit: type=1400 audit(1785632376.666:67254): avc: denied { bind } for pid=11556 comm="syz.6.1491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 214.983307][T11567] mac80211_hwsim hwsim14 syzkaller0: left promiscuous mode [ 214.986562][T11567] mac80211_hwsim hwsim14 syzkaller0: left allmulticast mode [ 215.077845][ T42] audit: type=1400 audit(1785632376.853:67255): avc: denied { read } for pid=11572 comm="syz.6.1498" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 215.397174][ T42] audit: type=1400 audit(1785632377.153:67256): avc: denied { getopt } for pid=11584 comm="syz.8.1502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 215.405998][T11586] netlink: 'syz.8.1502': attribute type 1 has an invalid length. [ 215.425921][T11586] 8021q: adding VLAN 0 to HW filter on device bond5 [ 215.674857][ T42] audit: type=1400 audit(1785632377.415:67257): avc: denied { load_policy } for pid=11588 comm="syz.5.1503" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 215.818162][T11590] SELinux: failed to load policy [ 215.968533][T11573] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 215.975873][T11573] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 215.990104][T11573] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 216.017808][T11573] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 216.020475][T11573] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 216.028147][T11573] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 216.034471][T11573] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 216.036521][T11573] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 216.061626][T11573] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 216.287938][T11608] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 216.312078][T11610] netlink: ct family unspecified [ 216.316438][T11610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.352750][ T24] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 216.440491][T11614] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1508'. [ 216.496460][ T42] audit: type=1804 audit(1785632378.182:67258): pid=11616 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.1509" name="/newroot/258/file0" dev="tmpfs" ino=1404 res=1 errno=0 [ 216.520052][ T24] usb 13-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 216.524490][ T24] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.527958][ T24] usb 13-1: Product: syz [ 216.529968][ T24] usb 13-1: Manufacturer: syz [ 216.532100][ T24] usb 13-1: SerialNumber: syz [ 216.592093][ T8636] usb 13-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 217.036743][T11585] vlan2: entered allmulticast mode [ 217.038534][T11585] macsec0: entered allmulticast mode [ 217.040293][T11585] veth1_macvtap: entered allmulticast mode [ 217.050559][ T24] usb 13-1: USB disconnect, device number 8 [ 217.346108][ T5747] Bluetooth: hci3: command 0x0c1a tx timeout [ 217.495743][ T10] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 217.670748][ T10] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 217.679118][ T10] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 217.691428][ T10] usb 10-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= 1.00 [ 217.699407][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.705268][ T10] usb 10-1: Product: syz [ 217.707077][ T10] usb 10-1: Manufacturer: syz [ 217.713929][ T10] usb 10-1: SerialNumber: syz [ 217.724258][T11624] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 217.731003][T11624] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 217.738106][T11634] ntfs3(sr0): Primary boot signature is not NTFS. [ 217.743378][T11634] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 217.743761][ T10] kl5kusb105 10-1:1.0: KL5KUSB105D / PalmConnect converter detected [ 217.752598][ T10] usb 10-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 217.763049][ T8636] ath9k_htc 13-1:1.0: ath9k_htc: Target is unresponsive [ 217.767051][ T8636] ath9k_htc: Failed to initialize the device [ 217.771614][ T24] usb 13-1: ath9k_htc: USB layer deinitialized [ 217.836696][ T5841] Process accounting resumed [ 218.190503][ T5747] Bluetooth: hci5: command 0x0405 tx timeout [ 218.190708][ T5745] Bluetooth: hci4: command 0x0405 tx timeout [ 218.221608][T11655] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 218.335134][T11658] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1519'. [ 219.035389][T11680] netlink: 'syz.6.1526': attribute type 49 has an invalid length. [ 219.041556][T11680] bond0: (slave bond_slave_0): Releasing backup interface [ 219.114585][T11680] bond_slave_0: entered promiscuous mode [ 219.116868][T11680] bond_slave_0: entered allmulticast mode [ 219.237310][ T42] audit: type=1400 audit(1785632380.746:67259): avc: denied { write } for pid=11689 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.285364][ T5841] usb 10-1: USB disconnect, device number 23 [ 219.303159][ T5841] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 219.305621][ T42] audit: type=1400 audit(1785632380.812:67260): avc: denied { write } for pid=11695 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.310929][ T5841] kl5kusb105 10-1:1.0: device disconnected [ 219.369818][T11700] MPI: mpi too large (16392 bits) [ 219.467068][ T42] audit: type=1400 audit(1785632380.962:67261): avc: denied { write } for pid=11706 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.527179][T11710] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1533'. [ 219.568898][ T5747] Bluetooth: hci3: command 0x0c1a tx timeout [ 219.689431][T11722] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1537'. [ 219.900909][ T9307] e1000 0000:00:06.0 eth0: Reset adapter [ 219.939376][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 219.939396][ T42] audit: type=1400 audit(1785632381.401:67264): avc: denied { write } for pid=11733 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.032351][ T42] audit: type=1400 audit(1785632381.495:67265): avc: denied { write } for pid=11738 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.231887][ T9307] e1000 0000:00:06.0 eth0: Reset adapter [ 220.260667][ T42] audit: type=1400 audit(1785632381.701:67266): avc: denied { write } for pid=11754 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.308312][ T42] audit: type=1400 audit(1785632381.757:67267): avc: denied { write } for pid=11758 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.397001][ T42] audit: type=1400 audit(1785632381.832:67268): avc: denied { write } for pid=11762 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.413011][ T5747] Bluetooth: hci5: command 0x0405 tx timeout [ 220.424259][ T5747] Bluetooth: hci4: command 0x0405 tx timeout [ 220.445185][ T42] audit: type=1400 audit(1785632381.879:67269): avc: denied { write } for pid=11765 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.518946][ T10] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 220.528421][ T42] audit: type=1400 audit(1785632381.953:67270): avc: denied { write } for pid=11768 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.577581][ T42] audit: type=1400 audit(1785632382.000:67271): avc: denied { write } for pid=11771 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.669149][ T42] audit: type=1400 audit(1785632382.084:67272): avc: denied { write } for pid=11773 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.727403][ T42] audit: type=1400 audit(1785632382.141:67273): avc: denied { write } for pid=11776 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.781161][ T5747] Bluetooth: hci3: command 0x0c1a tx timeout [ 222.551378][ T9307] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 222.635778][ T5747] Bluetooth: hci4: command 0x0405 tx timeout [ 222.635826][ T5745] Bluetooth: hci5: command 0x0405 tx timeout [ 229.784053][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 229.784075][ T42] audit: type=1400 audit(1785632390.610:67276): avc: denied { write } for pid=11791 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.841138][ T42] audit: type=1400 audit(1785632390.675:67277): avc: denied { write } for pid=11794 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.601575][ T42] audit: type=1400 audit(1785632392.322:67278): avc: denied { write } for pid=11797 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.668239][ T42] audit: type=1400 audit(1785632392.388:67279): avc: denied { write } for pid=11800 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.933966][ T42] audit: type=1400 audit(1785632393.567:67280): avc: denied { write } for pid=11804 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.992537][ T42] audit: type=1400 audit(1785632393.623:67281): avc: denied { write } for pid=11807 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.630959][ T42] audit: type=1400 audit(1785632395.158:67282): avc: denied { setattr } for pid=11811 comm="syz.5.1550" path="/dev/video36" dev="devtmpfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 234.673331][T11826] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1551'. [ 234.687944][ T42] audit: type=1400 audit(1785632395.204:67283): avc: denied { write } for pid=11827 comm="syz.6.1552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 234.706747][ T42] audit: type=1400 audit(1785632395.223:67284): avc: denied { bind } for pid=11829 comm="syz.8.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 234.717920][T11830] netlink: 'syz.8.1553': attribute type 3 has an invalid length. [ 234.798459][T11844] SELinux: syz.5.1558 (11844) wrote to user. This is no longer supported. [ 234.813914][T11846] IPVS: set_ctl: invalid protocol: 244 224.0.0.1:20000 [ 234.873384][T11856] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode [ 234.876636][T11856] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode [ 234.884848][ T42] audit: type=1400 audit(1785632395.382:67285): avc: denied { setopt } for pid=11854 comm="syz.6.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 235.023670][T11851] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1561'. [ 235.029809][T11851] xfrm1: entered promiscuous mode [ 235.031681][T11851] xfrm1: entered allmulticast mode [ 235.036428][T11851] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1561'. [ 235.039951][T11851] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1561'. [ 235.296386][T11873] SELinux: ebitmap: start bit 0 comes after start bit 768 [ 235.299012][T11873] SELinux: invalid class [ 235.303519][T11873] SELinux: failed to load policy [ 235.315334][T11873] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 235.319859][T11873] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 235.326957][T11873] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 235.472851][T11885] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1571'. [ 235.483894][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 235.483910][ T42] audit: type=1400 audit(1785632395.953:67287): avc: denied { bind } for pid=11884 comm="syz.8.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 235.691704][T11893] wireguard0: entered promiscuous mode [ 235.736617][ T42] audit: type=1400 audit(1785632396.187:67288): avc: denied { write } for pid=11889 comm="syz.5.1573" name="mouse0" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 235.745920][T11890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=11890 comm=syz.5.1573 [ 235.788548][T11900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11900 comm=syz.0.1577 [ 235.794863][T11900] netlink: 'syz.0.1577': attribute type 1 has an invalid length. [ 235.828898][T11900] macvtap1: entered allmulticast mode [ 235.830764][ T42] audit: type=1400 audit(1785632396.271:67289): avc: denied { shutdown } for pid=11897 comm="syz.8.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 235.908770][T11900] bond9: (slave bridge6): making interface the new active one [ 235.911868][T11900] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 235.951597][ T42] audit: type=1400 audit(1785632396.393:67290): avc: denied { append } for pid=11911 comm="syz.6.1582" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 235.996275][T11920] netlink: 'syz.5.1584': attribute type 1 has an invalid length. [ 235.998994][T11920] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 236.001665][T11920] IPv6: NLM_F_CREATE should be set when creating new route [ 236.005535][T11920] netlink: 'syz.5.1584': attribute type 1 has an invalid length. [ 236.008196][T11920] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 236.099309][T11936] netlink: 'syz.0.1590': attribute type 63 has an invalid length. [ 236.103134][T11936] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1590'. [ 236.187183][ T848] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 236.335167][ T848] usb 13-1: device descriptor read/64, error -71 [ 236.352804][T11948] netlink: 'syz.6.1594': attribute type 8 has an invalid length. [ 236.380007][T11952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.425702][ T42] audit: type=1326 audit(1785632396.833:67291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11962 comm="syz.6.1599" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa53279e019 code=0x0 [ 236.475815][ T42] audit: type=1400 audit(1785632396.889:67292): avc: denied { connect } for pid=11966 comm="syz.5.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 236.478259][T11967] openvswitch: netlink: Message has 16 unknown bytes. [ 236.483550][ T42] audit: type=1400 audit(1785632396.889:67293): avc: denied { read } for pid=11966 comm="syz.5.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 236.602471][ T848] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 236.741600][ T848] usb 13-1: device descriptor read/64, error -71 [ 236.859390][ T848] usb usb13-port1: attempt power cycle [ 236.893784][T11988] binder_alloc: 11987: binder_alloc_buf size -16 failed, no address space [ 236.899884][T11988] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 237.095127][ T5747] Bluetooth: hci5: command 0x0405 tx timeout [ 237.103771][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1609'. [ 237.222231][ T848] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 237.246410][ T848] usb 13-1: device descriptor read/8, error -71 [ 237.274199][T12001] IPVS: persistence engine module ip_vs_pe_s not found [ 237.385106][ T42] audit: type=1400 audit(1785632397.731:67294): avc: denied { getopt } for pid=12012 comm="syz.6.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 237.397770][ T40] IPVS: starting estimator thread 0... [ 237.422807][T12022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=12022 comm=syz.0.1617 [ 237.476203][T12029] fuse: Unknown parameter 'f' [ 237.489325][T12020] IPVS: using max 33 ests per chain, 79200 per kthread [ 237.510787][ T848] usb 13-1: new high-speed USB device number 12 using dummy_hcd [ 237.535120][ T848] usb 13-1: device descriptor read/8, error -71 [ 237.610737][T12042] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1622'. [ 237.658315][T12045] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1623'. [ 237.660550][ T848] usb usb13-port1: unable to enumerate USB device [ 237.662204][T12045] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1623'. [ 237.713148][T12050] xt_l2tp: v2 doesn't support IP mode [ 238.544278][T12091] openvswitch: netlink: Tunnel attr 99 out of range max 16 [ 238.554577][T12091] xt_l2tp: v2 doesn't support IP mode [ 238.679899][T12101] overlayfs: conflicting options: userxattr,redirect_dir=on [ 238.686682][ T40] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 238.705922][T12103] netlink: 'syz.5.1642': attribute type 1 has an invalid length. [ 238.708800][T12103] netlink: 'syz.5.1642': attribute type 1 has an invalid length. [ 238.858219][ T40] usb 11-1: Using ep0 maxpacket: 32 [ 238.862654][ T40] usb 11-1: config 2 has an invalid interface number: 236 but max is 0 [ 238.866396][ T40] usb 11-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 238.871156][ T40] usb 11-1: config 2 has no interface number 0 [ 238.876608][ T40] usb 11-1: config 2 interface 236 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 238.888254][ T40] usb 11-1: config 2 interface 236 has no altsetting 0 [ 238.900089][ T40] usb 11-1: New USB device found, idVendor=1a0a, idProduct=0106, bcdDevice=3f.4a [ 238.905809][ T40] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.912654][ T40] usb 11-1: Product: syz [ 238.914484][ T40] usb 11-1: Manufacturer: 玓㎱ፔ슌瑔熋畵榹᝸ᕍ根渙ﻢ촇ᖸ鐐ऽ髢燴㞥륖뮩섧鼸쨳萸㾇孯 [ 238.919773][ T40] usb 11-1: SerialNumber: syz [ 239.133326][T12118] CIFS: bad ip= option (.RHe'ˠ/1C~1WexEAeSb{~R) [ 239.320173][T12127] Invalid source name [ 239.321573][T12127] UBIFS error (pid: 12127): cannot open "/dev/sg0", error -22 [ 239.467801][ T848] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 239.637516][ T848] usb 10-1: Using ep0 maxpacket: 8 [ 239.643316][ T848] usb 10-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 239.646368][ T848] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.653741][ T848] kobil_sct 10-1:1.0: KOBIL USB smart card terminal converter detected [ 239.664503][ T848] usb 10-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 239.708996][T12139] netlink: 'syz.8.1657': attribute type 21 has an invalid length. [ 239.983609][T12146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=12146 comm=syz.5.1650 [ 240.022020][ T5110] usb 13-1: new high-speed USB device number 13 using dummy_hcd [ 240.183697][ T5110] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 240.187849][ T5110] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 128, changing to 11 [ 240.191339][ T5110] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 240.194701][ T5110] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 240.199003][ T5110] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.202339][ T5110] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.206783][ T5110] usb 13-1: config 0 descriptor?? [ 240.452285][T12154] netlink: 'syz.0.1661': attribute type 49 has an invalid length. [ 240.476079][ T5900] usb 10-1: USB disconnect, device number 25 [ 240.487121][ T5900] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 240.497464][ T5900] kobil_sct 10-1:1.0: device disconnected [ 240.640481][ T5110] plantronics 0003:047F:FFFF.000D: ignoring exceeding usage max [ 240.658390][ T5110] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 240.792846][ T42] audit: type=1400 audit(1785632400.913:67295): avc: denied { setattr } for pid=12171 comm="syz.0.1667" name="/" dev="configfs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 240.832355][ T42] audit: type=1400 audit(1785632400.950:67296): avc: denied { getopt } for pid=12176 comm="syz.0.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 240.989530][T12194] __nla_validate_parse: 7 callbacks suppressed [ 240.989546][T12194] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1673'. [ 241.037335][T12194] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12194 comm=syz.6.1673 [ 241.080568][ T42] audit: type=1400 audit(1785632401.194:67297): avc: denied { connect } for pid=12195 comm="syz.5.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 241.094336][ T42] audit: type=1400 audit(1785632401.194:67298): avc: denied { write } for pid=12195 comm="syz.5.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 241.420175][T12220] overlayfs: missing 'lowerdir' [ 241.710779][ T9307] e1000 0000:00:06.0 eth0: Reset adapter [ 241.719152][ T5745] Bluetooth: unknown link type 240 [ 241.721581][ T42] audit: type=1400 audit(1785632401.783:67299): avc: denied { read } for pid=12230 comm="syz.6.1683" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 241.726259][ T5745] Bluetooth: hci4: connection err: -111 [ 241.729504][ T42] audit: type=1400 audit(1785632401.783:67300): avc: denied { open } for pid=12230 comm="syz.6.1683" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 241.749801][ T42] audit: type=1400 audit(1785632401.811:67301): avc: denied { write } for pid=12240 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.785345][ T42] audit: type=1400 audit(1785632401.849:67302): avc: denied { ioctl } for pid=12230 comm="syz.6.1683" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 241.833971][ T42] audit: type=1400 audit(1785632401.895:67303): avc: denied { write } for pid=12247 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.854629][T12231] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 241.896602][T12236] mac80211_hwsim hwsim14 syzkaller0: left promiscuous mode [ 241.899979][T12236] mac80211_hwsim hwsim14 syzkaller0: left allmulticast mode [ 242.052692][ T9307] e1000 0000:00:06.0 eth0: Reset adapter [ 242.084442][ T5849] bond5: (slave ip6gretap1): link status up again after 0 ms [ 242.106340][ T5591] bond5: (slave ip6gretap1): link status up again after 0 ms [ 242.127476][ T5591] bond5: (slave ip6gretap1): link status up again after 0 ms [ 242.148630][ T5591] bond5: (slave ip6gretap1): link status up again after 0 ms [ 242.165855][T12250] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1686'. [ 242.170430][ T5591] bond5: (slave ip6gretap1): link status up again after 0 ms [ 242.181329][ T10] usb 13-1: reset high-speed USB device number 13 using dummy_hcd [ 242.191410][ T9307] e1000 0000:00:06.0 eth0: Reset adapter [ 242.193772][ T5839] bond5: (slave ip6gretap1): link status up again after 0 ms [ 242.209421][ T42] audit: type=1400 audit(1785632402.242:67304): avc: denied { write } for pid=12253 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.213258][ T5839] bond5: (slave ip6gretap1): link status up again after 0 ms [ 242.255326][ T5839] bond5: (slave ip6gretap1): link status up again after 0 ms [ 242.276788][ T5591] bond5: (slave ip6gretap1): link status up again after 0 ms [ 242.301168][ T5591] bond5: (slave ip6gretap1): link status up again after 0 ms [ 242.307099][ T42] audit: type=1400 audit(1785632402.335:67305): avc: denied { write } for pid=12258 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.321754][ T10] usb 13-1: device descriptor read/64, error -32 [ 242.328248][ T5830] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 242.359968][T12257] bond7: Unable to set down delay as MII monitoring is disabled [ 242.370452][T12257] bond7 (unregistering): Released all slaves [ 242.420997][ T42] audit: type=1400 audit(1785632402.447:67306): avc: denied { write } for pid=12261 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.471397][T12242] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 242.511738][T12242] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 242.513833][T12242] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 242.579344][ T10] usb 13-1: reset high-speed USB device number 13 using dummy_hcd [ 242.714773][ T10] usb 13-1: device descriptor read/64, error -32 [ 242.971421][ T10] usb 13-1: reset high-speed USB device number 13 using dummy_hcd [ 242.992869][ T10] usb 13-1: device descriptor read/8, error -32 [ 243.934015][ T9] usb 13-1: USB disconnect, device number 13 [ 244.264321][ T5745] Bluetooth: hci3: command 0x0c1a tx timeout [ 244.521749][ T9307] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 244.702524][ T5745] Bluetooth: hci5: command 0x0405 tx timeout [ 244.702581][ T5747] Bluetooth: hci4: command 0x0405 tx timeout [ 247.297084][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 247.297104][ T42] audit: type=1400 audit(1785632407.005:67312): avc: denied { write } for pid=12289 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.356158][ T42] audit: type=1400 audit(1785632407.061:67313): avc: denied { write } for pid=12292 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.534333][ T13] net_ratelimit: 49 callbacks suppressed [ 247.534349][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 247.651927][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 247.769303][ T5822] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 247.886951][ T5822] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 248.015367][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 248.143774][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 248.261126][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 248.389236][ T5822] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 248.506872][ T5822] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 248.624735][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 251.601638][ T42] audit: type=1400 audit(1785632411.038:67314): avc: denied { write } for pid=12296 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.654179][ T42] audit: type=1400 audit(1785632411.085:67315): avc: denied { write } for pid=12299 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.920738][ T13] net_ratelimit: 35 callbacks suppressed [ 252.920763][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 253.037730][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 253.156091][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 253.272850][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 253.390550][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 253.507895][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 253.625603][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 253.753894][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 253.871350][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 253.989260][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 255.038142][ T42] audit: type=1400 audit(1785632414.257:67316): avc: denied { write } for pid=12302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.087584][ T42] audit: type=1400 audit(1785632414.295:67317): avc: denied { write } for pid=12305 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.576896][T12318] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 256.589153][ T42] audit: type=1400 audit(1785632415.708:67318): avc: denied { mount } for pid=12321 comm="syz.5.1697" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 256.604714][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1697'. [ 256.611087][T12323] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1697'. [ 256.616623][ T42] audit: type=1400 audit(1785632415.717:67319): avc: denied { search } for pid=12321 comm="syz.5.1697" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 256.627581][ T42] audit: type=1400 audit(1785632415.717:67320): avc: denied { write } for pid=12321 comm="syz.5.1697" name="versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 256.627619][ T42] audit: type=1400 audit(1785632415.717:67321): avc: denied { open } for pid=12321 comm="syz.5.1697" path="/366/nfsd/versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 256.671931][ T42] audit: type=1400 audit(1785632415.783:67322): avc: denied { shutdown } for pid=12325 comm="syz.6.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 256.683075][T12330] netlink: 'syz.8.1701': attribute type 4 has an invalid length. [ 256.684580][T12338] 9pnet_virtio: no channels available for device syz [ 256.686195][ T42] audit: type=1400 audit(1785632415.792:67323): avc: denied { unmount } for pid=6693 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 256.691071][T12338] fuse: fd is not a fuse device [ 256.706801][T12330] netlink: 'syz.8.1701': attribute type 4 has an invalid length. [ 256.712591][T12338] xfrm1: entered allmulticast mode [ 256.722453][ T42] audit: type=1400 audit(1785632415.820:67324): avc: denied { map } for pid=12340 comm="syz.6.1704" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 256.761292][ T42] audit: type=1400 audit(1785632415.867:67325): avc: denied { create } for pid=12340 comm="syz.6.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 256.924768][T12367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1712'. [ 256.996843][T12371] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1714'. [ 257.160474][T12382] overlayfs: missing 'workdir' [ 257.166759][T12382] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1718'. [ 257.171244][T12382] overlayfs: failed to clone upperpath [ 257.241515][T12412] bond0: Error: Cannot enslave bond to itself. [ 257.301329][ T848] usb 13-1: new high-speed USB device number 14 using dummy_hcd [ 257.338832][T12419] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1721'. [ 257.347786][T12419] bond0: entered promiscuous mode [ 257.349981][T12419] bond_slave_1: entered promiscuous mode [ 257.353784][T12419] gretap0: entered promiscuous mode [ 257.357828][T12419] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 257.361987][T12419] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 257.370606][T12419] hsr1: entered promiscuous mode [ 257.460929][ T5900] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 257.465031][ T5900] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 257.477227][ T5900] hid-generic 0000:0000:0000.000E: hidraw1: HID v0.00 Device [syz0] on syz0 [ 257.484987][ T848] usb 13-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 257.489511][ T848] usb 13-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 257.494571][ T848] usb 13-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 257.499109][ T848] usb 13-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 257.507003][ T848] usb 13-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 257.510954][ T848] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.519982][ T848] usb 13-1: Product: syz [ 257.521802][ T848] usb 13-1: Manufacturer: syz [ 257.523846][ T848] usb 13-1: SerialNumber: syz [ 257.541172][ T848] ti_usb_3410_5052 13-1:2.0: TI USB 5052 2 port adapter converter detected [ 257.546675][ T848] usb 13-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 257.559150][ T848] usb 13-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 257.754426][T12373] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90 [ 257.759634][T12373] [U] V3Fپ"S/4:XTZWTLW= [ 257.764084][T12372] [U] J"E:" [ 257.766911][ T5900] usb 13-1: USB disconnect, device number 14 [ 257.773189][ T5900] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 257.781881][ T5900] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 257.784700][T12439] overlayfs: failed to clone upperpath [ 257.788626][ T5900] ti_usb_3410_5052 13-1:2.0: device disconnected [ 257.793523][T12439] overlayfs: failed to clone lowerpath [ 257.996248][ T1048] usb 10-1: new full-speed USB device number 26 using dummy_hcd [ 258.021772][T12467] sctp: [Deprecated]: syz.0.1734 (pid 12467) Use of int in maxseg socket option. [ 258.021772][T12467] Use struct sctp_assoc_value instead [ 258.061643][T12469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1735'. [ 258.064666][T12469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1735'. [ 258.101079][T12473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1736'. [ 258.106144][T12473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1736'. [ 258.168565][ T1048] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.171905][ T1048] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 258.174790][ T1048] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 258.177848][ T1048] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.182683][ T1048] usb 10-1: config 0 descriptor?? [ 258.190233][ T1048] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 258.196262][ T1048] dvb-usb: bulk message failed: -22 (3/0) [ 258.213129][ T1048] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 258.216309][ T1048] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 258.218605][ T1048] usb 10-1: media controller created [ 258.221342][ T1048] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 258.232982][ T1048] dvb-usb: bulk message failed: -22 (6/0) [ 258.234904][ T1048] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 258.243332][ T1048] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input23 [ 258.255857][ T1048] dvb-usb: schedule remote query interval to 150 msecs. [ 258.259068][ T1048] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 258.298831][T12482] fuse: fd is not a fuse device [ 258.308234][T12484] 9pnet_virtio: no channels available for device syz [ 258.335703][T12489] fuse: fd is not a fuse device [ 258.382170][T12496] overlayfs: failed to clone upperpath [ 258.392567][ T13] net_ratelimit: 35 callbacks suppressed [ 258.392579][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 258.435403][ T1048] dvb-usb: bulk message failed: -22 (1/0) [ 258.441477][ T1048] dvb-usb: error while querying for an remote control event. [ 258.443468][T12436] dvb-usb: bulk message failed: -22 (4/0) [ 258.509352][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 258.515506][T12506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.530969][T12506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.554700][T12508] befs: (nullb0): No write support. Marking filesystem read-only [ 258.561604][T12508] befs: (nullb0): invalid magic header [ 258.606488][ T1048] dvb-usb: bulk message failed: -22 (1/0) [ 258.608350][ T1048] dvb-usb: error while querying for an remote control event. [ 258.637223][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 258.754547][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 258.791086][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 258.793008][ T9] dvb-usb: error while querying for an remote control event. [ 258.808906][ T1048] usb 10-1: USB disconnect, device number 26 [ 258.822103][ T1048] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 258.872588][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 258.989790][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 259.117927][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 259.142138][T12521] netlink: 'syz.0.1752': attribute type 8 has an invalid length. [ 259.235434][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 259.293502][T12533] xt_hl: Unknown Hop Limit match mode: 206 [ 259.355675][ T5822] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 259.360908][T12537] CIFS mount error: No usable UNC path provided in device string! [ 259.360908][T12537] [ 259.364706][T12537] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 259.475700][T12542] i2c i2c-0: new_device: Can't parse I2C address [ 259.478257][T12542] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12542 comm=syz.6.1757 [ 259.492044][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 259.729023][T12557] vlan4: entered promiscuous mode [ 259.731915][T12557] syz_tun: entered promiscuous mode [ 259.789773][T12555] overlayfs: missing 'lowerdir' [ 259.854307][ T5747] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 259.964606][T12571] 9pnet_virtio: no channels available for device syz [ 260.016926][T12571] vlan2: entered promiscuous mode [ 260.135099][ T5745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 260.142095][ T5745] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 260.149025][ T5745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 260.154207][ T5745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 260.159416][ T5745] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 260.520850][T12607] bond6: Removing last arp target with arp_interval on [ 260.547505][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 260.547517][ T42] audit: type=1400 audit(1785632419.404:67330): avc: denied { map } for pid=12614 comm="syz.8.1776" path="socket:[50415]" dev="sockfs" ino=50415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 260.562725][T12615] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 260.822019][T12577] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.824454][T12577] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.826863][T12577] bridge_slave_0: entered allmulticast mode [ 260.830740][T12577] bridge_slave_0: entered promiscuous mode [ 260.834469][T12577] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.836817][T12577] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.843959][T12577] bridge_slave_1: entered allmulticast mode [ 260.849945][T12577] bridge_slave_1: entered promiscuous mode [ 260.869240][T12577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.878612][T12577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.906394][T12577] team0: Port device team_slave_0 added [ 260.909733][T12577] team0: Port device team_slave_1 added [ 260.927716][T12577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.932325][T12577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.940789][T12577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.952080][T12577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.954657][T12577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.963055][T12577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.986447][T12657] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed [ 261.005890][T12577] hsr_slave_0: entered promiscuous mode [ 261.010710][T12577] hsr_slave_1: entered promiscuous mode [ 261.013361][T12577] debugfs: 'hsr0' already exists in 'hsr' [ 261.015211][T12577] Cannot create hsr debugfs directory [ 261.121369][T12577] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.125781][T12577] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.247024][T12577] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.251181][T12577] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.383405][T12577] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.387238][T12577] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.574614][T12577] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.578912][T12577] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.745916][T12577] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 261.753489][T12577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 261.756425][T12577] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 261.761291][T12577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 261.764091][T12577] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 261.772009][T12577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 261.774033][T12669] netlink: 'syz.5.1787': attribute type 8 has an invalid length. [ 261.774920][T12577] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 261.791447][T12577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 261.859222][T12577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.878005][T12577] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.883661][T12413] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.886761][T12413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.897988][T12413] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.900367][T12413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.079840][T12692] syz.5.1789 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 262.137921][ T42] audit: type=1400 audit(1785632420.892:67331): avc: denied { read } for pid=12698 comm="syz.6.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 262.162798][T12577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.192235][T12577] veth0_vlan: entered promiscuous mode [ 262.199436][T12577] veth1_vlan: entered promiscuous mode [ 262.201960][ T42] audit: type=1400 audit(1785632420.958:67332): avc: denied { nlmsg_read } for pid=12703 comm="syz.5.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 262.228587][T12577] veth0_macvtap: entered promiscuous mode [ 262.233145][T12577] veth1_macvtap: entered promiscuous mode [ 262.243976][T12577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.255191][T12577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.263371][ T5591] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.266692][ T5591] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.281819][T12699] __nla_validate_parse: 71 callbacks suppressed [ 262.281834][T12699] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1791'. [ 262.326181][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.331610][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.390378][T12410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.395973][T12410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.400042][ T5745] Bluetooth: hci0: command tx timeout [ 262.444089][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.449829][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.539740][T12728] input: syz0 as /devices/virtual/input/input24 [ 262.553692][T12728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.559032][T12728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.568107][T12728] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 262.573431][T12728] netlink: 344 bytes leftover after parsing attributes in process `syz.0.1797'. [ 262.578867][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1798'. [ 262.581955][T12730] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1798'. [ 262.624876][T12735] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 262.629536][T12735] CPU: 3 UID: 0 PID: 12735 Comm: syz.6.1799 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.629564][T12735] Tainted: [L]=SOFTLOCKUP [ 262.629571][T12735] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 262.629594][T12735] Call Trace: [ 262.629611][T12735] [ 262.629619][T12735] dump_stack_lvl+0x100/0x190 [ 262.629685][T12735] sysfs_warn_dup.cold+0x1c/0x28 [ 262.629731][T12735] sysfs_create_dir_ns+0x24b/0x2b0 [ 262.629811][T12735] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 262.629837][T12735] ? find_held_lock+0x2b/0x80 [ 262.629867][T12735] ? kobject_add_internal+0x25f/0x930 [ 262.629982][T12735] ? kobject_add_internal+0x25f/0x930 [ 262.630011][T12735] ? class_dir_child_ns_type+0xd/0x60 [ 262.630087][T12735] kobject_add_internal+0x2c8/0x930 [ 262.630117][T12735] kobject_add+0x16a/0x1e0 [ 262.630142][T12735] ? __pfx_kobject_add+0x10/0x10 [ 262.630169][T12735] ? get_device_parent+0x1b3/0x4c0 [ 262.630193][T12735] ? kobject_put+0xb9/0x640 [ 262.630218][T12735] ? device_add+0xc4d/0x1970 [ 262.630246][T12735] device_add+0x294/0x1970 [ 262.630271][T12735] ? lockdep_init_map_type+0x5c/0x250 [ 262.630294][T12735] ? __pfx_device_add+0x10/0x10 [ 262.630317][T12735] ? lockdep_init_map_type+0x5c/0x250 [ 262.630337][T12735] ? __init_waitqueue_head+0xca/0x150 [ 262.630367][T12735] tty_register_device_attr+0x388/0x7f0 [ 262.630411][T12735] ? lockdep_init_map_type+0x5c/0x250 [ 262.630431][T12735] ? __pfx_tty_register_device_attr+0x10/0x10 [ 262.630455][T12735] ? tty_port_init+0x156/0x1c0 [ 262.630479][T12735] gsm_activate_mux+0x155/0x2a0 [ 262.630499][T12735] gsmld_ioctl+0xbbc/0x15c0 [ 262.630526][T12735] ? kasan_quarantine_put+0x104/0x240 [ 262.630566][T12735] ? __pfx_gsmld_ioctl+0x10/0x10 [ 262.630594][T12735] ? __ldsem_down_read_nested+0xf3/0x890 [ 262.630623][T12735] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 262.630655][T12735] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 262.630689][T12735] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 262.630708][T12735] ? __pfx_gsmld_ioctl+0x10/0x10 [ 262.630732][T12735] tty_ioctl+0x11b4/0x1640 [ 262.630753][T12735] ? __pfx_tty_ioctl+0x10/0x10 [ 262.630773][T12735] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 262.630827][T12735] ? __fget_files+0x215/0x3d0 [ 262.630839][T12735] ? hook_file_ioctl_common+0x140/0x440 [ 262.630856][T12735] ? selinux_file_ioctl+0x13b/0x290 [ 262.630872][T12735] ? selinux_file_ioctl+0xb6/0x290 [ 262.630889][T12735] ? __pfx_tty_ioctl+0x10/0x10 [ 262.630905][T12735] __x64_sys_ioctl+0x18e/0x210 [ 262.630923][T12735] do_syscall_64+0x115/0x870 [ 262.630943][T12735] ? clear_bhb_loop+0x40/0x90 [ 262.630957][T12735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.630969][T12735] RIP: 0033:0x7fa53279e019 [ 262.630980][T12735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.630991][T12735] RSP: 002b:00007fa5336fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.631010][T12735] RAX: ffffffffffffffda RBX: 00007fa532a26090 RCX: 00007fa53279e019 [ 262.631017][T12735] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 000000000000000d [ 262.631024][T12735] RBP: 00007fa53283500c R08: 0000000000000000 R09: 0000000000000000 [ 262.631030][T12735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.631037][T12735] R13: 00007fa532a26128 R14: 00007fa532a26090 R15: 00007ffebf5d4e48 [ 262.631051][T12735] [ 262.631068][T12735] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 263.122881][T12748] kvm: user requested TSC rate below hardware speed [ 263.138489][T12748] binfmt_misc: register: failed to install interpreter file ./file1 [ 263.304841][T12761] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 263.346345][T12761] @0: renamed from bond_slave_1 (while UP) [ 263.390820][T12773] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 263.404600][ T42] audit: type=1400 audit(1785632422.081:67333): avc: denied { connect } for pid=12771 comm="syz.0.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 263.511535][T12784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1811'. [ 263.513537][T12786] ip6gretap2: entered promiscuous mode [ 263.709020][T12809] netlink: 'syz.6.1818': attribute type 3 has an invalid length. [ 263.711602][T12809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1818'. [ 263.756200][ T13] net_ratelimit: 31 callbacks suppressed [ 263.756234][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 263.783268][ T42] audit: type=1400 audit(1785632422.436:67334): avc: denied { append } for pid=12820 comm="syz.5.1823" name="usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 263.791195][ T42] audit: type=1400 audit(1785632422.446:67335): avc: denied { ioctl } for pid=12820 comm="syz.5.1823" path="/dev/usbmon0" dev="devtmpfs" ino=738 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 263.894669][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 263.928807][T12846] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1830'. [ 263.984095][T12859] netlink: 'syz.8.1833': attribute type 1 has an invalid length. [ 264.014150][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 264.129856][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 264.247305][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 264.247392][T12475] usb 13-1: new high-speed USB device number 15 using dummy_hcd [ 264.375407][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 264.410044][T12475] usb 13-1: config index 0 descriptor too short (expected 8228, got 36) [ 264.412777][T12475] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.416014][T12475] usb 13-1: config 0 has no interfaces? [ 264.417864][T12475] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.421678][T12475] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.426214][T12475] usb 13-1: config 0 descriptor?? [ 264.503729][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 264.610722][ T5745] Bluetooth: hci0: command tx timeout [ 264.621297][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 264.644854][T12859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.647913][T12859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.652125][T12475] usb 13-1: USB disconnect, device number 15 [ 264.739083][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 264.858697][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 266.077774][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.080638][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.833791][ T5745] Bluetooth: hci0: command tx timeout [ 269.057777][ T5745] Bluetooth: hci0: command tx timeout [ 269.120327][ T5849] net_ratelimit: 35 callbacks suppressed [ 269.120344][ T5849] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 269.238224][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 269.355383][ T5849] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 269.472941][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 269.590239][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 269.707898][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 269.825477][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 269.943197][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 270.060563][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 270.178021][ T5849] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 272.222927][ T40] usb 11-1: USB disconnect, device number 14 [ 274.473991][ T12] net_ratelimit: 35 callbacks suppressed [ 274.474009][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 274.591795][ T5849] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 274.708970][ T5849] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 274.837936][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 274.955114][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 275.082916][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 275.200849][ T5822] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 275.318246][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 275.435764][ T5849] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 275.553250][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 279.902709][ T5849] net_ratelimit: 35 callbacks suppressed [ 279.902734][ T5849] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 280.019925][ T5822] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 280.137538][ T5822] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 280.255151][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 280.372894][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 280.490276][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 280.607797][ T5839] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 280.725342][ T5822] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 280.842977][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 280.960482][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 281.789123][ T848] Process accounting resumed [ 281.791325][T12869] netlink: 'syz.6.1835': attribute type 32 has an invalid length. [ 281.798421][T12869] 9pnet_virtio: no channels available for device syz [ 281.813125][ T42] audit: type=1400 audit(1785632439.309:67336): avc: denied { watch } for pid=12867 comm="syz.6.1835" path="/348/file0/net_prio.prioidx" dev="tmpfs" ino=1897 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 281.829833][T12877] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1838'. [ 281.973507][T12886] netlink: 'syz.5.1837': attribute type 63 has an invalid length. [ 281.980255][T12886] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1837'. [ 282.084773][T12894] vivid-000: unregistering video7 [ 282.107826][T12894] vivid-000: unregistering video8 [ 282.121838][T12894] vivid-000: unregistering vbi0 [ 282.138069][T12894] vivid-000: unregistering vbi1 [ 282.184003][T12894] vivid-000: unregistering swradio0 [ 282.205343][T12894] vivid-000: unregistering radio0 [ 282.225692][T12894] vivid-000: unregistering radio1 [ 282.285721][T12894] vivid-000: unregistering video9 [ 282.336813][ T42] audit: type=1400 audit(1785632439.795:67337): avc: denied { ioctl } for pid=12908 comm="syz.8.1844" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x5111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 282.366775][ T42] audit: type=1400 audit(1785632439.823:67338): avc: denied { write } for pid=12910 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.368565][T12894] vivid-000: unregistering video10 [ 282.397207][T12894] vivid-000: unregistering v4l-touch0 [ 282.444809][ T42] audit: type=1400 audit(1785632439.898:67339): avc: denied { write } for pid=12917 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.512435][ T5451] veth1_vlan: left promiscuous mode [ 282.637411][T12894] vivid-001: unregistering video11 [ 282.651880][T12894] vivid-001: unregistering video12 [ 282.670438][T12894] vivid-001: unregistering vbi2 [ 282.701795][ T42] audit: type=1400 audit(1785632440.132:67340): avc: denied { write } for pid=12930 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.724569][T12894] vivid-001: unregistering vbi3 [ 282.728855][T12894] vivid-001: unregistering swradio1 [ 282.736220][T12894] vivid-001: unregistering radio2 [ 282.748874][T12894] vivid-001: unregistering radio3 [ 282.778016][T12894] vivid-001: unregistering video13 [ 282.780757][ T42] audit: type=1400 audit(1785632440.216:67341): avc: denied { write } for pid=12933 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.793044][T12894] vivid-001: unregistering video14 [ 282.797269][T12894] vivid-001: unregistering v4l-touch1 [ 282.816710][ T5451] veth1_vlan: entered promiscuous mode [ 282.857642][T12894] vivid-002: unregistering video15 [ 282.861212][T12894] vivid-002: unregistering video16 [ 282.867260][T12894] vivid-002: unregistering vbi4 [ 282.874742][T12894] vivid-002: unregistering vbi5 [ 282.882119][T12894] vivid-002: unregistering swradio2 [ 282.892475][T12894] vivid-002: unregistering radio4 [ 282.899383][T12894] vivid-002: unregistering radio5 [ 282.909198][T12894] vivid-002: unregistering video17 [ 282.919715][T12894] vivid-002: unregistering video18 [ 282.930185][T12894] vivid-002: unregistering v4l-touch2 [ 282.974160][T12937] geneve1: entered allmulticast mode [ 282.985010][T12894] vivid-003: unregistering video19 [ 282.988108][T12894] vivid-003: unregistering video20 [ 282.995670][T12894] vivid-003: unregistering vbi6 [ 283.012166][T12894] vivid-003: unregistering vbi7 [ 283.020653][T12894] vivid-003: unregistering swradio3 [ 283.028856][T12894] vivid-003: unregistering radio6 [ 283.038092][T12894] vivid-003: unregistering radio7 [ 283.042406][ T42] audit: type=1400 audit(1785632440.450:67342): avc: denied { write } for pid=12940 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.042709][T12894] vivid-003: unregistering video21 [ 283.053138][T12894] vivid-003: unregistering video22 [ 283.058926][T12894] vivid-003: unregistering v4l-touch3 [ 283.094102][ T42] audit: type=1400 audit(1785632440.506:67343): avc: denied { write } for pid=12945 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.107095][T12894] vivid-004: unregistering video23 [ 283.110780][T12944] netlink: 'syz.5.1849': attribute type 3 has an invalid length. [ 283.111371][T12894] vivid-004: unregistering video24 [ 283.115494][T12944] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1849'. [ 283.125950][T12894] vivid-004: unregistering vbi8 [ 283.132896][T12894] vivid-004: unregistering vbi9 [ 283.136494][T12894] vivid-004: unregistering swradio4 [ 283.153966][T12894] vivid-004: unregistering radio8 [ 283.177317][T12894] vivid-004: unregistering radio9 [ 283.184793][T12894] vivid-004: unregistering video25 [ 283.189847][T12894] vivid-004: unregistering video26 [ 283.195783][T12894] vivid-004: unregistering v4l-touch4 [ 283.271981][T12894] vivid-005: unregistering video27 [ 283.272479][ T42] audit: type=1400 audit(1785632440.675:67344): avc: denied { write } for pid=12953 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.275647][T12894] vivid-005: unregistering video28 [ 283.284981][T12894] vivid-005: unregistering vbi10 [ 283.294492][T12894] vivid-005: unregistering vbi11 [ 283.304926][T12894] vivid-005: unregistering swradio5 [ 283.315069][T12894] vivid-005: unregistering radio10 [ 283.349391][T12894] vivid-005: unregistering radio11 [ 283.360598][T12894] vivid-005: unregistering video29 [ 283.366662][T12894] vivid-005: unregistering video30 [ 283.391396][T12894] vivid-005: unregistering v4l-touch5 [ 283.394965][ T42] audit: type=1400 audit(1785632440.787:67345): avc: denied { write } for pid=12956 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.434991][T12965] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1853'. [ 283.484154][T12894] vivid-006: unregistering video31 [ 283.490032][T12894] vivid-006: unregistering video32 [ 283.498091][T12894] vivid-006: unregistering vbi12 [ 283.503029][T12975] bridge0: port 1(syz_tun) entered blocking state [ 283.506056][T12975] bridge0: port 1(syz_tun) entered disabled state [ 283.508603][T12975] syz_tun: entered allmulticast mode [ 283.509793][T12894] vivid-006: unregistering vbi13 [ 283.519353][T12894] vivid-006: unregistering swradio6 [ 283.543054][T12894] vivid-006: unregistering radio12 [ 283.548865][T12894] vivid-006: unregistering radio13 [ 283.557901][T12894] vivid-006: unregistering video33 [ 283.565869][T12894] vivid-006: unregistering video34 [ 283.575953][T12894] vivid-006: unregistering v4l-touch6 [ 283.639282][T12894] vivid-007: unregistering video35 [ 283.643013][T12894] vivid-007: unregistering video36 [ 283.645923][ T5451] veth0_vlan: left promiscuous mode [ 283.646183][T12894] vivid-007: unregistering vbi14 [ 283.651604][T12894] vivid-007: unregistering vbi15 [ 283.687337][T12894] vivid-007: unregistering swradio7 [ 283.701619][ T848] veth0_vlan: entered promiscuous mode [ 283.709876][T12894] vivid-007: unregistering radio14 [ 283.714800][T12894] vivid-007: unregistering radio15 [ 283.723324][T12894] vivid-007: unregistering video37 [ 283.726014][T12894] vivid-007: unregistering video38 [ 283.731558][T12894] vivid-007: unregistering v4l-touch7 [ 283.739707][T12993] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1859'. [ 283.742629][T12993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1859'. [ 283.756941][T12995] binder: BINDER_SET_CONTEXT_MGR already set [ 283.765991][T12894] vivid-008: unregistering video39 [ 283.766572][T12995] binder: 12988:12995 ioctl 4018620d 200000004a80 returned -16 [ 283.768412][T12894] vivid-008: unregistering video40 [ 283.777105][T12894] vivid-008: unregistering vbi16 [ 283.794310][T12894] vivid-008: unregistering vbi17 [ 283.809443][T12998] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 283.811378][T12894] vivid-008: unregistering swradio8 [ 283.836916][T12999] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 283.839099][T12894] vivid-008: unregistering radio16 [ 283.848357][T12894] vivid-008: unregistering radio17 [ 283.855901][T12894] vivid-008: unregistering video41 [ 283.863469][T12894] vivid-008: unregistering video42 [ 283.869925][T12894] vivid-008: unregistering v4l-touch8 [ 283.892658][T13010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1862'. [ 283.903576][T13005] sch_tbf: burst 240 is lower than device lo mtu (11337746) ! [ 283.917171][T12894] vivid-009: unregistering video43 [ 283.920546][T12894] vivid-009: unregistering video44 [ 283.926192][T12894] vivid-009: unregistering vbi18 [ 283.933140][T12894] vivid-009: unregistering vbi19 [ 283.942167][T12894] vivid-009: unregistering swradio9 [ 283.966605][T12894] vivid-009: unregistering radio18 [ 283.971191][T12894] vivid-009: unregistering radio19 [ 283.983978][T12894] vivid-009: unregistering video45 [ 283.989345][T12894] vivid-009: unregistering video46 [ 283.994558][T12894] vivid-009: unregistering v4l-touch9 [ 284.027797][T12894] vivid-010: unregistering video47 [ 284.033701][T12894] vivid-010: unregistering video48 [ 284.037088][T12894] vivid-010: unregistering vbi20 [ 284.046498][T12894] vivid-010: unregistering vbi21 [ 284.054784][T12894] vivid-010: unregistering swradio10 [ 284.058598][T12894] vivid-010: unregistering radio20 [ 284.064277][T12894] vivid-010: unregistering radio21 [ 284.072051][T12894] vivid-010: unregistering video49 [ 284.078592][T12894] vivid-010: unregistering video50 [ 284.082345][T12894] vivid-010: unregistering v4l-touch10 [ 284.123061][T12894] vivid-011: unregistering video51 [ 284.127554][T12894] vivid-011: unregistering video52 [ 284.133237][T12894] vivid-011: unregistering vbi22 [ 284.141640][T12894] vivid-011: unregistering vbi23 [ 284.147889][T12894] vivid-011: unregistering swradio11 [ 284.152993][T12894] vivid-011: unregistering radio22 [ 284.156449][T12894] vivid-011: unregistering radio23 [ 284.159799][T12894] vivid-011: unregistering video53 [ 284.163000][T12894] vivid-011: unregistering video54 [ 284.167175][T12894] vivid-011: unregistering v4l-touch11 [ 284.170541][T13015] SELinux: failed to load policy [ 284.209358][T12894] vivid-012: unregistering video55 [ 284.212477][T12894] vivid-012: unregistering video56 [ 284.216378][T12894] vivid-012: unregistering vbi24 [ 284.227147][T12894] vivid-012: unregistering vbi25 [ 284.229927][T12894] vivid-012: unregistering swradio12 [ 284.235390][T12894] vivid-012: unregistering radio24 [ 284.241717][T12894] vivid-012: unregistering radio25 [ 284.253680][T12894] vivid-012: unregistering video57 [ 284.260511][T12894] vivid-012: unregistering video58 [ 284.271219][T12894] vivid-012: unregistering v4l-touch12 [ 284.307799][T12894] vivid-013: unregistering video59 [ 284.311221][T12894] vivid-013: unregistering video60 [ 284.316841][T12894] vivid-013: unregistering vbi26 [ 284.321382][T12894] vivid-013: unregistering vbi27 [ 284.328388][T12894] vivid-013: unregistering swradio13 [ 284.335276][T12894] vivid-013: unregistering radio26 [ 284.340574][T12894] vivid-013: unregistering radio27 [ 284.344921][T12894] vivid-013: unregistering video61 [ 284.349665][T12894] vivid-013: unregistering video62 [ 284.352264][T12894] vivid-013: unregistering v4l-touch13 [ 284.379051][T12894] vivid-014: unregistering video63 [ 284.382423][T12894] vivid-014: unregistering video64 [ 284.385107][T12894] vivid-014: unregistering vbi28 [ 284.389090][T12894] vivid-014: unregistering vbi29 [ 284.391473][T12894] vivid-014: unregistering swradio14 [ 284.404851][T12894] vivid-014: unregistering radio28 [ 284.414499][T12894] vivid-014: unregistering radio29 [ 284.418479][T12894] vivid-014: unregistering video65 [ 284.421498][T12894] vivid-014: unregistering video66 [ 284.427606][T12894] vivid-014: unregistering v4l-touch14 [ 284.460686][T12894] vivid-015: unregistering video67 [ 284.463070][T12894] vivid-015: unregistering video68 [ 284.468218][T12894] vivid-015: unregistering vbi30 [ 284.471873][T12894] vivid-015: unregistering vbi31 [ 284.474853][T12894] vivid-015: unregistering swradio15 [ 284.478047][T12894] vivid-015: unregistering radio30 [ 284.482112][T12894] vivid-015: unregistering radio31 [ 284.488777][T12894] vivid-015: unregistering video69 [ 284.491180][T12894] vivid-015: unregistering video70 [ 284.494177][T12894] vivid-015: unregistering v4l-touch15 [ 284.516887][T12894] vivid-016: unregistering video71 [ 284.519932][T12894] vivid-016: unregistering video72 [ 284.523911][T12894] vivid-016: unregistering vbi32 [ 284.531381][T12894] vivid-016: unregistering vbi33 [ 284.535710][T12894] vivid-016: unregistering swradio16 [ 284.539545][T12894] vivid-016: unregistering radio32 [ 284.544623][T12894] vivid-016: unregistering radio33 [ 284.549574][T12894] vivid-016: unregistering video73 [ 284.553170][T12894] vivid-016: unregistering video74 [ 284.555848][T12894] vivid-016: unregistering v4l-touch16 [ 284.580891][T13028] vlan2: entered promiscuous mode [ 284.607256][T12894] vivid-017: unregistering video75 [ 284.609780][T12894] vivid-017: unregistering video76 [ 284.612422][T12894] vivid-017: unregistering vbi34 [ 284.616076][T12894] vivid-017: unregistering vbi35 [ 284.621200][T12894] vivid-017: unregistering swradio17 [ 284.626238][T12894] vivid-017: unregistering radio34 [ 284.632815][T12894] vivid-017: unregistering radio35 [ 284.637625][T12894] vivid-017: unregistering video77 [ 284.641046][T12894] vivid-017: unregistering video78 [ 284.644929][T12894] vivid-017: unregistering v4l-touch17 [ 284.667309][T12894] vivid-018: unregistering video79 [ 284.670575][T12894] vivid-018: unregistering video80 [ 284.673325][T12894] vivid-018: unregistering vbi36 [ 284.677412][T12894] vivid-018: unregistering vbi37 [ 284.679823][T12894] vivid-018: unregistering swradio18 [ 284.685029][T12894] vivid-018: unregistering radio36 [ 284.692320][T12894] vivid-018: unregistering radio37 [ 284.695916][T12894] vivid-018: unregistering video81 [ 284.699122][T12894] vivid-018: unregistering video82 [ 284.711502][T12894] vivid-018: unregistering v4l-touch18 [ 284.731097][T12894] vivid-019: unregistering video83 [ 284.736039][T12894] vivid-019: unregistering video84 [ 284.738496][T12894] vivid-019: unregistering vbi38 [ 284.742117][T12894] vivid-019: unregistering vbi39 [ 284.744501][T12894] vivid-019: unregistering swradio19 [ 284.748339][T12894] vivid-019: unregistering radio38 [ 284.752576][T12894] vivid-019: unregistering radio39 [ 284.759070][T12894] vivid-019: unregistering video85 [ 284.762735][T12894] vivid-019: unregistering video86 [ 284.765454][T12894] vivid-019: unregistering v4l-touch19 [ 284.793202][T12894] vivid-020: unregistering video87 [ 284.798291][T12894] vivid-020: unregistering video88 [ 284.801027][T12894] vivid-020: unregistering vbi40 [ 284.811179][T12894] vivid-020: unregistering vbi41 [ 284.814112][T12894] vivid-020: unregistering swradio20 [ 284.817433][T12894] vivid-020: unregistering radio40 [ 284.820974][T12894] vivid-020: unregistering radio41 [ 284.824454][T12894] vivid-020: unregistering video89 [ 284.826870][T12894] vivid-020: unregistering video90 [ 284.830053][T12894] vivid-020: unregistering v4l-touch20 [ 284.861469][T12894] vivid-021: unregistering video91 [ 284.864135][T12894] vivid-021: unregistering video92 [ 284.867379][T12894] vivid-021: unregistering vbi42 [ 284.877742][T12894] vivid-021: unregistering vbi43 [ 284.880467][T12894] vivid-021: unregistering swradio21 [ 284.895889][T13044] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1869'. [ 284.898159][T12894] vivid-021: unregistering radio42 [ 284.911165][T12894] vivid-021: unregistering radio43 [ 284.915483][T12894] vivid-021: unregistering video93 [ 284.918551][T12894] vivid-021: unregistering video94 [ 284.921550][T12894] vivid-021: unregistering v4l-touch21 [ 284.924135][T13044] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1869'. [ 284.927698][T13044] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1869'. [ 284.945629][T12894] vivid-022: unregistering video95 [ 284.949180][T12894] vivid-022: unregistering video96 [ 284.951782][T12894] vivid-022: unregistering vbi44 [ 284.954898][T12894] vivid-022: unregistering vbi45 [ 284.957746][T12894] vivid-022: unregistering swradio22 [ 284.960546][T12894] vivid-022: unregistering radio44 [ 284.963005][T12894] vivid-022: unregistering radio45 [ 284.967001][T12894] vivid-022: unregistering video97 [ 284.969795][T12894] vivid-022: unregistering video98 [ 284.972560][T12894] vivid-022: unregistering v4l-touch22 [ 284.994345][T12894] vivid-023: unregistering video99 [ 284.997278][T12894] vivid-023: unregistering video100 [ 285.000703][T12894] vivid-023: unregistering vbi46 [ 285.003950][T12894] vivid-023: unregistering vbi47 [ 285.006187][T12894] vivid-023: unregistering swradio23 [ 285.009109][T12894] vivid-023: unregistering radio46 [ 285.011604][T12894] vivid-023: unregistering radio47 [ 285.013926][T12894] vivid-023: unregistering video101 [ 285.016499][T12894] vivid-023: unregistering video102 [ 285.018797][T12894] vivid-023: unregistering v4l-touch23 [ 285.152955][T13060] Bluetooth: MGMT ver 1.23 [ 285.320318][ T13] net_ratelimit: 30 callbacks suppressed [ 285.320339][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 285.399168][T13078] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 285.442967][T13087] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 285.451334][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 285.587273][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 285.705541][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 285.822414][ T5839] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 285.939935][ T5839] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 286.057522][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 286.175171][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 286.292579][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 286.410262][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 290.684878][ T5591] net_ratelimit: 35 callbacks suppressed [ 290.684895][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 290.802162][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 290.919791][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 291.037197][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 291.154736][ T5839] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 291.272359][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 291.400628][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 291.518533][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 291.646426][T12863] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 291.763866][ T5839] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 295.248359][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 295.248379][ T42] audit: type=1400 audit(1785632451.886:67360): avc: denied { write } for pid=13119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.318947][ T42] audit: type=1400 audit(1785632451.942:67361): avc: denied { write } for pid=13122 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.399831][ T42] audit: type=1400 audit(1785632452.026:67362): avc: denied { write } for pid=13125 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.473951][ T42] audit: type=1400 audit(1785632452.092:67363): avc: denied { write } for pid=13128 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.563029][ T42] audit: type=1400 audit(1785632452.176:67364): avc: denied { write } for pid=13131 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.613309][ T42] audit: type=1400 audit(1785632452.223:67365): avc: denied { write } for pid=13134 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.698605][ T42] audit: type=1400 audit(1785632452.307:67366): avc: denied { write } for pid=13137 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.738995][ T42] audit: type=1400 audit(1785632452.335:67367): avc: denied { write } for pid=13140 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.038431][T12863] net_ratelimit: 35 callbacks suppressed [ 296.038448][T12863] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 296.084166][ T42] audit: type=1400 audit(1785632452.662:67368): avc: denied { write } for pid=13142 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.133957][ T42] audit: type=1400 audit(1785632452.700:67369): avc: denied { write } for pid=13145 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.156247][T12863] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 296.273434][ T5839] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 296.401727][T12863] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 296.519417][ T5839] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 296.636980][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 296.754564][ T5839] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 296.882544][T12863] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 297.000128][T12863] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 297.118152][ T5839] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 301.456497][ T5591] net_ratelimit: 35 callbacks suppressed [ 301.456524][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 301.573732][T12863] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 301.701938][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 301.819740][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 301.936987][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 302.054693][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 302.182903][ T5839] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 302.300300][ T5839] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 302.428678][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 302.557414][T12863] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 305.977152][T13164] overlayfs: overlapping lowerdir path [ 305.977152][T13165] overlayfs: overlapping lowerdir path [ 305.978988][ T42] audit: type=1400 audit(1785632461.918:67370): avc: denied { append } for pid=13156 comm="syz.0.1888" name="mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 306.016279][T13173] __nla_validate_parse: 32 callbacks suppressed [ 306.016313][T13173] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1892'. [ 306.121949][T13185] cgroup: Need name or subsystem set [ 306.152322][T13187] 9pnet_virtio: no channels available for device syz [ 306.232045][ T42] audit: type=1400 audit(1785632462.151:67371): avc: denied { ioctl } for pid=13193 comm="syz.6.1900" path="/dev/btrfs-control" dev="devtmpfs" ino=1341 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 306.403117][T13198] exFAT-fs (nullb0): invalid boot record signature [ 306.405421][T13198] exFAT-fs (nullb0): failed to read boot sector [ 306.407884][T13198] exFAT-fs (nullb0): failed to recognize exfat type [ 306.465637][T13207] overlayfs: upper fs does not support file handles, falling back to index=off. [ 306.582366][T13212] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 306.591269][T13212] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 306.595252][T13212] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 306.598494][T13212] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 306.600889][T13212] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 306.603220][T13212] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 306.605540][T13212] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 306.607959][T13212] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 306.610269][T13212] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 306.612589][T13212] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 306.617030][T13214] cgroup: fork rejected by pids controller in /syz8 [ 306.620207][T13212] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 306.622608][T13212] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 306.626127][T13212] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 306.627462][T13213] binder: 13210:13213 ioctl 400c620e 200000000180 returned -22 [ 306.780130][T13249] netdevsim netdevsim6 netdevsim0: IPsec offload requires 128 bit authentication [ 306.817752][T13251] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1905'. [ 306.841953][ T5591] net_ratelimit: 35 callbacks suppressed [ 306.841975][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 306.959452][ T5839] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 307.022963][T13265] Can't find a SQUASHFS superblock on nullb0 [ 307.087741][T12863] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 307.142335][ T42] audit: type=1400 audit(1785632463.012:67372): avc: denied { setopt } for pid=13274 comm="syz.5.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 307.142811][T13275] netlink: 'syz.5.1912': attribute type 1 has an invalid length. [ 307.158231][T13269] program syz.0.1911 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.167969][T13275] 8021q: adding VLAN 0 to HW filter on device bond7 [ 307.174548][T13269] netlink: 'syz.0.1911': attribute type 13 has an invalid length. [ 307.212224][T13275] vlan2: entered allmulticast mode [ 307.214649][T13275] macsec0: entered allmulticast mode [ 307.220287][T13275] veth1_macvtap: entered allmulticast mode [ 307.227202][T13275] bond7: (slave vlan2): Error -34 calling dev_set_mtu [ 307.258586][T12863] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 307.323379][ T42] audit: type=1400 audit(1785632463.181:67373): avc: denied { write } for pid=13278 comm="syz.5.1913" name="functions" dev="configfs" ino=12134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 307.330965][ T42] audit: type=1800 audit(1785632463.181:67374): pid=13279 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1913" name="bulk_qlen" dev="configfs" ino=54972 res=0 errno=0 [ 307.375157][T13281] netlink: 'syz.5.1914': attribute type 10 has an invalid length. [ 307.377899][T12863] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 307.384382][T13281] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 307.398165][T13281] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1914'. [ 307.406052][T13281] bond0 (unregistering): Released all slaves [ 307.510943][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 307.603344][T13299] syzkaller0: entered promiscuous mode [ 307.605143][T13299] syzkaller0: entered allmulticast mode [ 307.624521][T12404] Bluetooth: hci1: Frame reassembly failed (-84) [ 307.634801][ T5591] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 308.097336][T13314] loop2: detected capacity change from 0 to 7 [ 308.104747][T13314] Dev loop2: unable to read RDB block 7 [ 308.107168][T13314] loop2: AHDI p1 p2 p3 [ 308.108956][T13314] loop2: partition table partially beyond EOD, truncated [ 308.111978][T13314] loop2: p1 start 1601398130 is beyond EOD, truncated [ 308.114980][T13314] loop2: p2 start 1702059890 is beyond EOD, truncated [ 308.146004][ T5839] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 308.185134][T13317] netlink: 'syz.5.1925': attribute type 25 has an invalid length. [ 308.263523][ T5839] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 308.380736][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 309.838796][ T5747] Bluetooth: hci1: command 0x1003 tx timeout [ 309.839369][ T5745] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 310.921134][ T42] audit: type=1400 audit(1785632466.540:67375): avc: denied { read } for pid=13327 comm="syz.0.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 311.010084][ T42] audit: type=1400 audit(1785632466.634:67376): avc: denied { recv } for pid=12577 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=33764 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 311.020735][ T42] audit: type=1400 audit(1785632466.634:67377): avc: denied { recv } for pid=12577 comm="syz-executor" saddr=127.0.0.1 src=33764 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 311.301394][T13361] netlink: 'syz.6.1936': attribute type 2 has an invalid length. [ 311.306963][T13361] netlink: 'syz.6.1936': attribute type 2 has an invalid length. [ 311.310830][T13361] netlink: 1347 bytes leftover after parsing attributes in process `syz.6.1936'. [ 311.489395][ T42] audit: type=1400 audit(1785632467.074:67378): avc: denied { egress } for pid=10884 comm="kworker/2:6" saddr=fe80::1c daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 311.499126][ T42] audit: type=1400 audit(1785632467.074:67379): avc: denied { sendto } for pid=10884 comm="kworker/2:6" saddr=fe80::1c daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 311.949112][T13345] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 311.952320][T13345] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 311.955013][T13345] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 311.957649][T13345] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 311.960153][T13345] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 311.966012][T13345] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 312.007770][T13377] autofs4:pid:13377:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 312.011442][T13377] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1941'. [ 312.152115][T13389] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1946'. [ 312.190396][ T42] audit: type=1400 audit(1785632467.738:67380): avc: denied { append } for pid=13396 comm="syz.8.1949" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 312.209046][T12404] Bluetooth: hci1: Frame reassembly failed (-84) [ 312.225021][ T42] audit: type=1400 audit(1785632467.738:67381): avc: denied { map } for pid=13396 comm="syz.8.1949" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 312.235113][ T42] audit: type=1400 audit(1785632467.738:67382): avc: denied { write execute } for pid=13396 comm="syz.8.1949" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 312.247178][T13401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1947'. [ 312.278525][T13403] tipc: Enabling of bearer rejected, already enabled [ 312.290192][T13403] tipc: Enabling of bearer rejected, already enabled [ 312.313064][T12863] net_ratelimit: 30 callbacks suppressed [ 312.313095][T12863] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 312.337545][T13403] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=13403 comm=syz.5.1951 [ 312.351201][ T42] audit: type=1400 audit(1785632467.888:67383): avc: denied { append } for pid=13402 comm="syz.5.1951" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 312.441375][ T5839] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 312.537060][ T42] audit: type=1400 audit(1785632468.056:67384): avc: denied { ioctl } for pid=13411 comm="syz.0.1953" path="socket:[56510]" dev="sockfs" ino=56510 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 312.559066][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 312.634405][T13417] geneve0: entered allmulticast mode [ 312.697864][ T5822] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 312.758854][T13424] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1955'. [ 312.776282][T13421] syz_tun: left allmulticast mode [ 312.778661][T13421] bridge0: port 1(syz_tun) entered disabled state [ 312.798174][T13421] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 312.828126][ T42] audit: type=1400 audit(1785632468.337:67385): avc: denied { attach_queue } for pid=13425 comm="syz.0.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 312.858128][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 312.917985][T13429] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1957'. [ 312.976265][ T5822] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 313.093506][ T5822] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 313.212347][T13443] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 313.223313][ T5822] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 313.349919][ T5747] Bluetooth: hci3: command 0x0c1a tx timeout [ 313.352477][ T5839] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 313.447567][ T42] audit: type=1400 audit(1785632468.917:67386): avc: denied { ioctl } for pid=13451 comm="syz.0.1962" path="socket:[57369]" dev="sockfs" ino=57369 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 313.478993][ T42] audit: type=1400 audit(1785632468.945:67387): avc: denied { lock } for pid=13457 comm="syz.8.1964" path="socket:[55927]" dev="sockfs" ino=55927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 314.121101][ T5747] Bluetooth: hci0: command 0x0c1a tx timeout [ 314.124113][ T5747] Bluetooth: hci5: command 0x0405 tx timeout [ 314.125809][ T5098] Bluetooth: hci4: command 0x0405 tx timeout [ 314.364900][ T5098] Bluetooth: hci1: command 0x1003 tx timeout [ 314.365292][ T5745] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 314.435723][T13466] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1966'. [ 314.552209][T13481] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(11) [ 314.554329][T13481] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 314.558138][T13481] vhci_hcd vhci_hcd.0: Device attached [ 314.571617][T13484] vhci_hcd: connection closed [ 314.575614][ T13] vhci_hcd vhci_hcd.8: stop threads [ 314.579673][ T13] vhci_hcd vhci_hcd.8: release socket [ 314.581817][ T13] vhci_hcd vhci_hcd.8: disconnect device [ 314.703591][T13494] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1971'. [ 314.714462][T13494] fuse: Unknown parameter '' [ 314.734174][T13491] random: crng reseeded on system resumption [ 315.461550][T13501] Invalid source name [ 315.461577][T13500] Invalid source name [ 315.462962][T13501] UBIFS error (pid: 13501): cannot open "./file0", error -22 [ 315.464663][T13500] UBIFS error (pid: 13500): cannot open "./file0", error -22 [ 315.615888][T13515] 9pnet_virtio: no channels available for device syz [ 315.627963][T13515] vhci_hcd: not connected 4 [ 315.911636][T13524] bond7: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 315.928958][T13524] bond7 (unregistering): Released all slaves [ 316.116050][T13540] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1987'. [ 316.147498][T13542] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1990'. [ 316.154704][T13542] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1990'. [ 316.331579][ T5745] Bluetooth: hci0: command 0x0c1a tx timeout [ 316.459155][ T5833] IPVS: starting estimator thread 0... [ 316.459617][ T24] usb 13-1: new high-speed USB device number 16 using dummy_hcd [ 316.556905][T13585] IPVS: using max 48 ests per chain, 115200 per kthread [ 316.621592][ T24] usb 13-1: Using ep0 maxpacket: 32 [ 316.631317][ T24] usb 13-1: config 0 has no interfaces? [ 316.633114][ T24] usb 13-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 316.643507][ T24] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.657450][ T24] usb 13-1: config 0 descriptor?? [ 316.878600][ T24] usb 13-1: USB disconnect, device number 16 [ 317.086841][T13616] veth1_macvtap: left allmulticast mode [ 317.306421][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 317.306450][ T42] audit: type=1400 audit(1785632472.511:67398): avc: denied { write } for pid=13637 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.346378][ T5839] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.349341][ T5839] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.352545][ T5839] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.356179][ T5839] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.385518][ T42] audit: type=1400 audit(1785632472.595:67399): avc: denied { write } for pid=13642 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.477869][ T42] audit: type=1400 audit(1785632472.689:67400): avc: denied { write } for pid=13648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.533717][ T42] audit: type=1400 audit(1785632472.735:67401): avc: denied { write } for pid=13656 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.613701][ T42] audit: type=1400 audit(1785632472.801:67402): avc: denied { write } for pid=13659 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.660816][T13664] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 317.669300][T13664] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 317.676618][ T42] audit: type=1400 audit(1785632472.866:67403): avc: denied { write } for pid=13663 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.724241][T13667] netlink: 'syz.0.2014': attribute type 1 has an invalid length. [ 317.727961][T13667] __nla_validate_parse: 5 callbacks suppressed [ 317.727977][T13667] netlink: 5120 bytes leftover after parsing attributes in process `syz.0.2014'. [ 317.741657][ T5822] net_ratelimit: 31 callbacks suppressed [ 317.741686][ T5822] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 317.779772][T13670] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2015'. [ 317.783119][T13670] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2015'. [ 317.859158][ T5839] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 317.888859][ T42] audit: type=1400 audit(1785632473.063:67404): avc: denied { setcurrent } for pid=13671 comm="syz.0.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 317.896618][T13672] netlink: 'syz.0.2016': attribute type 49 has an invalid length. [ 317.976736][ T5849] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 318.015181][T13686] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 318.105233][ T5839] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 318.222466][ T5849] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 318.340009][ T5839] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 318.349893][T13708] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 318.397548][T13708] bond6: entered promiscuous mode [ 318.423338][T13728] program syz.5.2031 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.457776][ T5849] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 318.473047][T13734] netlink: 'syz.6.2034': attribute type 1 has an invalid length. [ 318.518496][T13734] 8021q: adding VLAN 0 to HW filter on device bond7 [ 318.525482][T13734] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2034'. [ 318.538663][ T42] audit: type=1400 audit(1785632473.671:67405): avc: denied { read } for pid=13745 comm="syz.0.2037" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 318.547695][T13748] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 318.553837][ T5745] Bluetooth: hci0: command 0x0c1a tx timeout [ 318.575062][ T5839] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 318.620068][T13757] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2041'. [ 318.703412][ T5849] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 318.765093][T13774] sctp: [Deprecated]: syz.0.2046 (pid 13774) Use of struct sctp_assoc_value in delayed_ack socket option. [ 318.765093][T13774] Use struct sctp_sack_info instead [ 318.799026][T13778] 9pnet_virtio: no channels available for device syz [ 318.820924][ T5849] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 319.371692][T13786] bridge6: entered promiscuous mode [ 319.373393][T13786] bridge6: entered allmulticast mode [ 319.418739][T13788] x_tables: duplicate underflow at hook 1 [ 319.422778][T13788] x_tables: duplicate underflow at hook 1 [ 319.424698][T13788] x_tables: duplicate underflow at hook 1 [ 319.426527][T13788] x_tables: duplicate underflow at hook 1 [ 319.428430][T13788] x_tables: duplicate underflow at hook 1 [ 319.431325][T13788] x_tables: duplicate underflow at hook 1 [ 319.433314][T13788] x_tables: duplicate underflow at hook 1 [ 319.435494][T13788] x_tables: duplicate underflow at hook 1 [ 319.437483][T13788] x_tables: duplicate underflow at hook 1 [ 319.439447][T13788] x_tables: duplicate underflow at hook 1 [ 319.591889][T13803] afs: Unknown parameter '˼sИ $*4:uAroqVItE#%aEEKN*D [ 319.591889][T13803] kW֐:TUcs1' [ 319.605514][ T42] audit: type=1400 audit(1785632474.672:67406): avc: denied { mounton } for pid=13800 comm="syz.8.2055" path="/303/bus" dev="tmpfs" ino=1664 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 319.642024][T13813] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2057'. [ 319.785861][T13821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7952 sclass=netlink_route_socket pid=13821 comm=syz.6.2061 [ 319.860554][T13833] syzkaller1: entered promiscuous mode [ 319.862496][T13833] syzkaller1: entered allmulticast mode [ 319.866263][T13833] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2066'. [ 320.192995][T13843] block nbd6: not configured, cannot reconfigure [ 320.199194][T13843] Invalid argument reading file caps for ./file0 [ 320.529250][ T42] audit: type=1400 audit(1785632475.533:67407): avc: denied { checkpoint_restore } for pid=13865 comm="syz.5.2078" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 320.678711][T13864] syzkaller1: entered promiscuous mode [ 320.680994][T13864] syzkaller1: entered allmulticast mode [ 320.763171][T13889] gfs2: error -5 reading superblock [ 320.778382][ T5745] Bluetooth: hci0: command 0x0c1a tx timeout [ 321.010738][T13910] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 321.178548][T13926] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 321.189115][T13926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.192780][T13926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.253007][T13930] IPVS: set_ctl: invalid protocol: 4 100.1.0.255:20000 [ 321.791381][T13956] orangefs_devreq_open: device cannot be opened in blocking mode [ 321.809813][T13954] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 321.812301][T13958] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20004 [ 321.821701][T13954] F2FS-fs (nbd6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 321.825611][T13954] F2FS-fs (nbd6): Can't find valid F2FS filesystem in 1th superblock [ 321.830720][T13954] F2FS-fs (nbd6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 321.834729][T13954] F2FS-fs (nbd6): Can't find valid F2FS filesystem in 2th superblock [ 321.841772][T13963] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2104'. [ 322.042286][T13987] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 322.109336][T13989] team_slave_1: Caught tx_queue_len zero misconfig [ 322.170894][T13993] vcan1: entered allmulticast mode [ 322.300504][T13991] pci_bus 0000:01: busn_res: [bus 01] is released [ 322.360501][T14004] netlink: 'syz.6.2118': attribute type 4 has an invalid length. [ 322.364021][T14004] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2118'. [ 322.372029][T14004] .`: renamed from bond0 [ 322.493820][T14020] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2122'. [ 322.499409][T14019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=14019 comm=syz.6.2122 [ 322.591940][T14026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.592205][T14026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.616556][T14026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.624733][T14026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.666806][T14030] netlink: 'syz.5.2127': attribute type 11 has an invalid length. [ 322.954904][T14042] CIFS mount error: No usable UNC path provided in device string! [ 322.954904][T14042] [ 322.954952][T14042] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 322.956878][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 322.956895][ T42] audit: type=1326 audit(1785632477.807:67417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14038 comm="syz.6.2131" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53279e019 code=0x7fc00000 [ 322.957895][ T42] audit: type=1326 audit(1785632477.817:67418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14038 comm="syz.6.2131" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa53279e019 code=0x7fc00000 [ 322.958314][ T42] audit: type=1326 audit(1785632477.817:67419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14038 comm="syz.6.2131" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53279e019 code=0x7fc00000 [ 322.958341][ T42] audit: type=1326 audit(1785632477.817:67420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14038 comm="syz.6.2131" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53279e019 code=0x7fc00000 [ 322.958364][ T42] audit: type=1326 audit(1785632477.817:67421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14038 comm="syz.6.2131" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53279e019 code=0x7fc00000 [ 322.958385][ T42] audit: type=1326 audit(1785632477.817:67422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14038 comm="syz.6.2131" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53279e019 code=0x7fc00000 [ 322.958464][ T42] audit: type=1326 audit(1785632477.817:67423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14038 comm="syz.6.2131" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa53279e019 code=0x7fc00000 [ 322.959488][ T42] audit: type=1326 audit(1785632477.817:67424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14038 comm="syz.6.2131" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53279e019 code=0x7fc00000 [ 322.959515][ T42] audit: type=1326 audit(1785632477.817:67425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14038 comm="syz.6.2131" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53279e019 code=0x7fc00000 [ 322.959538][ T42] audit: type=1326 audit(1785632477.817:67426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14038 comm="syz.6.2131" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53279e019 code=0x7fc00000 [ 323.180930][ T5849] net_ratelimit: 38 callbacks suppressed [ 323.180963][ T5849] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 323.212929][T14034] ============================================================================= [ 323.216213][T14034] BUG virtio-gpu-vbufs (Tainted: G L ): Objects remaining on __kmem_cache_shutdown() [ 323.216236][T14034] ----------------------------------------------------------------------------- [ 323.216236][T14034] [ 323.217367][T14034] Object 0xffff888036cbb4c8 @offset=5320 [ 323.219017][T14034] Object 0xffff888036cbb5e0 @offset=5600 [ 323.219033][T14034] Slab 0xffffea0000db2e80 objects=29 used=2 fp=0xffff888036cba000 flags=0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 323.219075][T14034] Disabling lock debugging due to kernel taint [ 323.219366][T14034] ------------[ cut here ]------------ [ 323.219375][T14034] 1 [ 323.219382][T14034] WARNING: mm/slub.c:1244 at __slab_err+0x15/0x20, CPU#1: syz.5.2129/14034 [ 323.219577][T14034] Modules linked in: [ 323.219605][T14034] CPU: 1 UID: 0 PID: 14034 Comm: syz.5.2129 Tainted: G B L syzkaller #0 PREEMPT(full) [ 323.219637][T14034] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 323.219644][T14034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 323.219663][T14034] RIP: 0010:__slab_err+0x15/0x20 [ 323.219693][T14034] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b fd ff ff be 01 00 00 00 bf 05 00 00 00 e8 dc ba a2 00 90 <0f> 0b 90 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 323.219714][T14034] RSP: 0018:ffffc9000636f738 EFLAGS: 00010083 [ 323.219739][T14034] RAX: 00000000000205dc RBX: ffffc9000636f788 RCX: ffffc9000c781000 [ 323.219752][T14034] RDX: 0000000000080000 RSI: ffffffff81c709bd RDI: ffff88802996ca80 [ 323.219765][T14034] RBP: ffff888027f80558 R08: 0000000000000007 R09: 0000000000000000 [ 323.219778][T14034] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000001ea0 [ 323.219791][T14034] R13: ffff888036cbbfb8 R14: ffff888027f80540 R15: ffffea0000db2e80 [ 323.219805][T14034] FS: 00007f9b5db516c0(0000) GS:ffff8880d5ed8000(0000) knlGS:0000000000000000 [ 323.219839][T14034] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 323.219854][T14034] CR2: 000000110c30fb1e CR3: 000000005bdcb000 CR4: 0000000000352ef0 [ 323.219866][T14034] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 323.219878][T14034] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 323.219891][T14034] Call Trace: [ 323.219898][T14034] [ 323.219907][T14034] __kmem_cache_shutdown.cold+0x16e/0x177 [ 323.219939][T14034] kmem_cache_destroy+0x73/0x190 [ 323.220004][T14034] virtio_gpu_free_vbufs+0x38/0x80 [ 323.220108][T14034] ? __pfx_virtio_gpu_release+0x10/0x10 [ 323.220133][T14034] virtio_gpu_release+0x5c/0x1c0 [ 323.220161][T14034] ? __pfx_virtio_gpu_release+0x10/0x10 [ 323.220186][T14034] drm_dev_put.part.0+0xbd/0x140 [ 323.220228][T14034] drm_dev_put+0x1f/0x30 [ 323.220250][T14034] virtio_dev_remove+0xb8/0x170 [ 323.220276][T14034] ? __pfx_virtio_dev_remove+0x10/0x10 [ 323.220299][T14034] device_remove+0xcb/0x180 [ 323.220330][T14034] device_release_driver_internal+0x44e/0x620 [ 323.220360][T14034] bus_remove_device+0x2bc/0x560 [ 323.220382][T14034] ? __pfx_bus_remove_device+0x10/0x10 [ 323.220403][T14034] ? __pfx_device_remove_attrs+0x10/0x10 [ 323.220427][T14034] device_del+0x376/0x9b0 [ 323.220450][T14034] ? __pfx_device_del+0x10/0x10 [ 323.220473][T14034] ? __pfx___might_resched+0x10/0x10 [ 323.220527][T14034] ? __pfx_pci_device_is_present+0x10/0x10 [ 323.220586][T14034] device_unregister+0x1d/0xe0 [ 323.220609][T14034] unregister_virtio_device+0x39/0x60 [ 323.220634][T14034] virtio_pci_remove+0x7c/0x110 [ 323.220652][T14034] pci_device_remove+0xb2/0x1d0 [ 323.220671][T14034] ? __pfx_pci_device_remove+0x10/0x10 [ 323.220691][T14034] device_remove+0xcb/0x180 [ 323.220713][T14034] device_release_driver_internal+0x44e/0x620 [ 323.220741][T14034] pci_stop_bus_device+0x120/0x160 [ 323.220763][T14034] pci_stop_and_remove_bus_device+0x58/0xa0 [ 323.220787][T14034] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 323.220810][T14034] remove_store+0x123/0x140 [ 323.220831][T14034] ? __pfx_remove_store+0x10/0x10 [ 323.220852][T14034] ? find_held_lock+0x2b/0x80 [ 323.220877][T14034] ? sysfs_file_kobj+0xe4/0x290 [ 323.220912][T14034] ? sysfs_file_kobj+0xe4/0x290 [ 323.220938][T14034] ? __pfx_remove_store+0x10/0x10 [ 323.220959][T14034] dev_attr_store+0x58/0x80 [ 323.220985][T14034] ? __pfx_dev_attr_store+0x10/0x10 [ 323.221043][T14034] sysfs_kf_write+0xf2/0x150 [ 323.221071][T14034] kernfs_fop_write_iter+0x3e0/0x5f0 [ 323.221164][T14034] ? __pfx_sysfs_kf_write+0x10/0x10 [ 323.221196][T14034] vfs_write+0x6ac/0x1050 [ 323.221256][T14034] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 323.221292][T14034] ? __pfx_vfs_write+0x10/0x10 [ 323.221335][T14034] ksys_write+0x12a/0x250 [ 323.221366][T14034] ? __pfx_ksys_write+0x10/0x10 [ 323.221404][T14034] do_syscall_64+0x115/0x870 [ 323.221524][T14034] ? clear_bhb_loop+0x40/0x90 [ 323.221549][T14034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.221570][T14034] RIP: 0033:0x7f9b5cb9e019 [ 323.221596][T14034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.221616][T14034] RSP: 002b:00007f9b5db51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 323.221644][T14034] RAX: ffffffffffffffda RBX: 00007f9b5ce25fa0 RCX: 00007f9b5cb9e019 [ 323.221658][T14034] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000006 [ 323.221671][T14034] RBP: 00007f9b5cc3500c R08: 0000000000000000 R09: 0000000000000000 [ 323.221685][T14034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.221706][T14034] R13: 00007f9b5ce26038 R14: 00007f9b5ce25fa0 R15: 00007ffeee83f378 [ 323.221725][T14034] [ 323.221736][T14034] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 323.221752][T14034] CPU: 1 UID: 0 PID: 14034 Comm: syz.5.2129 Tainted: G B L syzkaller #0 PREEMPT(full) [ 323.221791][T14034] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 323.221800][T14034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 323.221812][T14034] Call Trace: [ 323.221820][T14034] [ 323.221833][T14034] dump_stack_lvl+0x100/0x190 [ 323.221882][T14034] vpanic+0x552/0x970 [ 323.221903][T14034] ? __pfx_vpanic+0x10/0x10 [ 323.221927][T14034] ? lock_release+0x24d/0x310 [ 323.221955][T14034] panic+0xd1/0xe0 [ 323.221979][T14034] ? __pfx_panic+0x10/0x10 [ 323.222003][T14034] check_panic_on_warn.cold+0x19/0x34 [ 323.222031][T14034] ? __slab_err+0x15/0x20 [ 323.222049][T14034] __warn.cold+0x191/0x318 [ 323.222070][T14034] __report_bug+0x30f/0x440 [ 323.222107][T14034] ? __slab_err+0x15/0x20 [ 323.222127][T14034] ? __pfx___report_bug+0x10/0x10 [ 323.222169][T14034] ? irq_work_queue+0xce/0x100 [ 323.222208][T14034] ? __wake_up_klogd+0xe2/0x140 [ 323.222244][T14034] ? vprintk_emit+0x1c9/0x6b0 [ 323.222281][T14034] ? __pfx_vprintk_emit+0x10/0x10 [ 323.222309][T14034] ? __pfx_vprintk_emit+0x10/0x10 [ 323.222343][T14034] ? __slab_err+0x15/0x20 [ 323.222361][T14034] report_bug+0xb2/0x220 [ 323.222390][T14034] ? __slab_err+0x15/0x20 [ 323.222409][T14034] handle_bug+0x16a/0x2a0 [ 323.222443][T14034] exc_invalid_op+0x17/0x50 [ 323.222470][T14034] asm_exc_invalid_op+0x1a/0x20 [ 323.222496][T14034] RIP: 0010:__slab_err+0x15/0x20 [ 323.222516][T14034] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b fd ff ff be 01 00 00 00 bf 05 00 00 00 e8 dc ba a2 00 90 <0f> 0b 90 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 323.222541][T14034] RSP: 0018:ffffc9000636f738 EFLAGS: 00010083 [ 323.222557][T14034] RAX: 00000000000205dc RBX: ffffc9000636f788 RCX: ffffc9000c781000 [ 323.222571][T14034] RDX: 0000000000080000 RSI: ffffffff81c709bd RDI: ffff88802996ca80 [ 323.222591][T14034] RBP: ffff888027f80558 R08: 0000000000000007 R09: 0000000000000000 [ 323.222605][T14034] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000001ea0 [ 323.222618][T14034] R13: ffff888036cbbfb8 R14: ffff888027f80540 R15: ffffea0000db2e80 [ 323.222636][T14034] ? add_taint+0x6d/0xb0 [ 323.222673][T14034] ? __slab_err+0x14/0x20 [ 323.222691][T14034] __kmem_cache_shutdown.cold+0x16e/0x177 [ 323.222726][T14034] kmem_cache_destroy+0x73/0x190 [ 323.222760][T14034] virtio_gpu_free_vbufs+0x38/0x80 [ 323.222799][T14034] ? __pfx_virtio_gpu_release+0x10/0x10 [ 323.222830][T14034] virtio_gpu_release+0x5c/0x1c0 [ 323.222854][T14034] ? __pfx_virtio_gpu_release+0x10/0x10 [ 323.222886][T14034] drm_dev_put.part.0+0xbd/0x140 [ 323.222909][T14034] drm_dev_put+0x1f/0x30 [ 323.222936][T14034] virtio_dev_remove+0xb8/0x170 [ 323.222959][T14034] ? __pfx_virtio_dev_remove+0x10/0x10 [ 323.222990][T14034] device_remove+0xcb/0x180 [ 323.223014][T14034] device_release_driver_internal+0x44e/0x620 [ 323.223047][T14034] bus_remove_device+0x2bc/0x560 [ 323.223077][T14034] ? __pfx_bus_remove_device+0x10/0x10 [ 323.223098][T14034] ? __pfx_device_remove_attrs+0x10/0x10 [ 323.223124][T14034] device_del+0x376/0x9b0 [ 323.223153][T14034] ? __pfx_device_del+0x10/0x10 [ 323.223189][T14034] ? __pfx___might_resched+0x10/0x10 [ 323.223213][T14034] ? __pfx_pci_device_is_present+0x10/0x10 [ 323.223250][T14034] device_unregister+0x1d/0xe0 [ 323.223273][T14034] unregister_virtio_device+0x39/0x60 [ 323.223305][T14034] virtio_pci_remove+0x7c/0x110 [ 323.223326][T14034] pci_device_remove+0xb2/0x1d0 [ 323.223381][T14034] ? __pfx_pci_device_remove+0x10/0x10 [ 323.223403][T14034] device_remove+0xcb/0x180 [ 323.223426][T14034] device_release_driver_internal+0x44e/0x620 [ 323.223462][T14034] pci_stop_bus_device+0x120/0x160 [ 323.223493][T14034] pci_stop_and_remove_bus_device+0x58/0xa0 [ 323.223523][T14034] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 323.223576][T14034] remove_store+0x123/0x140 [ 323.223601][T14034] ? __pfx_remove_store+0x10/0x10 [ 323.223634][T14034] ? find_held_lock+0x2b/0x80 [ 323.223652][T14034] ? sysfs_file_kobj+0xe4/0x290 [ 323.223682][T14034] ? sysfs_file_kobj+0xe4/0x290 [ 323.223707][T14034] ? __pfx_remove_store+0x10/0x10 [ 323.223736][T14034] dev_attr_store+0x58/0x80 [ 323.223764][T14034] ? __pfx_dev_attr_store+0x10/0x10 [ 323.223797][T14034] sysfs_kf_write+0xf2/0x150 [ 323.223834][T14034] kernfs_fop_write_iter+0x3e0/0x5f0 [ 323.223860][T14034] ? __pfx_sysfs_kf_write+0x10/0x10 [ 323.223896][T14034] vfs_write+0x6ac/0x1050 [ 323.223933][T14034] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 323.223961][T14034] ? __pfx_vfs_write+0x10/0x10 [ 323.224005][T14034] ksys_write+0x12a/0x250 [ 323.224041][T14034] ? __pfx_ksys_write+0x10/0x10 [ 323.224083][T14034] do_syscall_64+0x115/0x870 [ 323.224108][T14034] ? clear_bhb_loop+0x40/0x90 [ 323.224137][T14034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.224162][T14034] RIP: 0033:0x7f9b5cb9e019 [ 323.224179][T14034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.224206][T14034] RSP: 002b:00007f9b5db51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 323.224226][T14034] RAX: ffffffffffffffda RBX: 00007f9b5ce25fa0 RCX: 00007f9b5cb9e019 [ 323.224239][T14034] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000006 [ 323.224259][T14034] RBP: 00007f9b5cc3500c R08: 0000000000000000 R09: 0000000000000000 [ 323.224270][T14034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.224282][T14034] R13: 00007f9b5ce26038 R14: 00007f9b5ce25fa0 R15: 00007ffeee83f378 [ 323.224307][T14034] [ 323.225059][T14034] Kernel Offset: disabled