last executing test programs: 14m51.832617359s ago: executing program 32 (id=986): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000440)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x51, 0x1, 0x0, "d0206704b4f84e565c6f0f30bd9ca8ac00"}) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7]) r8 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r8, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r8], 0x108}}], 0x2, 0xc040) write$P9_RVERSION(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="6ef66132ae75d3502f5fd6bb73907877bb9c4fd5664f7538f2d94d4ad596a84f8081843870c1a5a0426ff09a54b8db444a9d019833a00e3e68c6bfcd5e0509c3b928770297d08949c650a6358c311544ad572bd95b9631a34c91b17ceff0ece706db35777aa5b26fd3b4d0a3b6716e22650a57fd4811ca3760e8527f641f9447970a1ce370c0ad4b5c7dbcfce05bc69d29744c00966d1e7a8caf169133cf5fcaa7c75cff488dfd20d4515dae5d6c57554a73860ee87f711a4cf426438fa765fab4372a6f7bd10a212fad9a76da346336cc66fa56b8897700000000000000000000000000005c7a1fdb6987fd47", @ANYRES16=r8, @ANYRESHEX=r6], 0x15) 14m33.694512189s ago: executing program 33 (id=1293): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs_stats\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_clone(0x25114100, &(0x7f0000000180)="6c20da74e2525dddaf1f032cb531b94a9b62d9afec5e823dbe4304f8dfbf75f60a8b74f634c083843e736f9d4699ec247f19275516b7f4bb6a58e5bc6ddaed9911e48e7f6f4c0228a757e27b0b544b9ae1a98413", 0x54, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="0a40804c176a7431e8ef0c311a8de27d462592cf7edd4aab3d5956824db3c8c2860f6a48fa57f5cd5b5b492e9d7dca42e45a4f5f8ad635cf1246aa6c4826d6d0a71075945b77953825bed0515c0e8286bcf52a778344710bec64e3ff5d770df6615f678fdbd65274daf9b2b9e0934bf8f76286f34cc540ff6e13c9ad0d619611ed98e7b426f214d51e9a93afea6e7d0393dcbdb40e511efe6e0cf25253bbb4e2d06b492874208739058ccce108386a068921197646ced6541513") prctl$PR_SCHED_CORE(0x3e, 0x4, r3, 0x0, &(0x7f0000000340)) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (rerun: 64) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000003c0)="66b9400101c00f32eae8edc2000f01c367f2af66b8010000000f01c1670f00da640fc71d0f01d10fc7393666f26f", 0x2e}], 0x1, 0x51, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x8}]}}]}, 0x38}}, 0x4c840) 14m17.822226839s ago: executing program 34 (id=1419): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c080009"], 0xc4}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd2(0xe5c, 0x80000) r4 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000240)={r4, 0x7, 0x2, r3}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xc0, 0x5, 0x4, 0x7f, 0x5, 0x1, 0x9, 0x1, 0x7, 0x3, 0x54, 0x7, 0x5, 0xb, 0x7f}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0xd, 0x2000000000004, 0xffffffffffffffff, 0x2, 0x4000000001002, 0x80000ef, 0x7f, 0x1000000000000b32, 0x8d, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x5, 0x7, 0xbdf], 0x200000, 0x67a64fa265da9e51}) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$TCFLSH(r8, 0x540b, 0x2) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x5f, 0x0, 0xd5]}}, 0x0, 0x2d, 0x0, 0x1}, 0x28) madvise(&(0x7f00004ba000/0x2000)=nil, 0x2000, 0xc) close(r9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 14m0.193538021s ago: executing program 35 (id=1541): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000300)="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", 0x118) 11m51.575957236s ago: executing program 36 (id=2786): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {}, [], {0x4, 0x4}, [], {}, {0x20, 0x5}}, 0x24, 0x2) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=""/14, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000002000/0x2000)=nil, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x90e5, 0x100) mmap$snddsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x4010, r1, 0x5000) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'pim6reg0\x00', 0x2e5}) ioctl(r0, 0x4, &(0x7f00000000c0)="0ea4c219b63d9ebe6c3bd75dab66022d04900271aad411") r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x81}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {}, [], {0x4, 0x4}, [], {}, {0x20, 0x5}}, 0x24, 0x2) (async) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=""/14, 0xe) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) (async) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000002000/0x2000)=nil, 0x2) (async) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x90e5, 0x100) (async) mmap$snddsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x4010, r1, 0x5000) (async) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'pim6reg0\x00', 0x2e5}) (async) ioctl(r0, 0x4, &(0x7f00000000c0)="0ea4c219b63d9ebe6c3bd75dab66022d04900271aad411") (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x81}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) 10m30.616877692s ago: executing program 37 (id=3148): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) socket$kcm(0x2, 0x1000000000000002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r1, 0x0, 0x44, 0x4000000, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005a74e230000060001000200051b08000300ac1414aa0800060021"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0xd231c4f959ad4808) syz_open_dev$dri(0x0, 0x1, 0x2200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) read$FUSE(r0, 0x0, 0x0) 7m41.919703925s ago: executing program 38 (id=3720): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) close(r2) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c46060002fe0100000000000004030006"], 0x78) close(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000900, 0xee00, &(0x7f0000000880)) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="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", 0x5c2, 0xffffffffffffffff) keyctl$read(0xb, r5, &(0x7f0000001b40)=""/4096, 0x1000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r6, 0x1, 0x9, &(0x7f00000003c0)=0x246, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100ff"], 0x12c}, 0x1, 0x0, 0x0, 0x4048885}, 0x8000) syz_emit_ethernet(0x264, &(0x7f0000000780)={@random="7ba2f3b9bcb6", @random="1f5a83157bc9", @void, {@ipv4={0x800, @udp={{0x0, 0x4, 0x3, 0x36, 0x0, 0x67, 0x0, 0xb1, 0x11, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x0, 0x84, 0x3, 0x8, [{@local, 0x99}, {@multicast2, 0x2}, {@remote, 0x1}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x5}]}, @timestamp_addr={0x44, 0x38, 0xa4, 0x1, 0x3, [{@remote, 0x5}, {@private=0xa010101}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}]}}, {0x4e24, 0x4e22, 0x0, 0x0, @wg=@response={0x2, 0x4, 0x4, "6889f7dc7151799e5ed0625b11f0265ef881670cb6d4bb839001941fe6d295c7", "3f7e1024d416c48c5ad0d401dfe69c15", {"467b163c053740ccebcdfd37535693b3", "a1febc61064697107c7a1256f13b7715"}}}}}}}, 0x0) 5m44.513729966s ago: executing program 39 (id=4263): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0xf5e543ecd220f989, 0x0) close(r4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d3, &(0x7f0000000100)) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r7, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x2}, {0x9, 0xfffffff9, 0x8, 0x8}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7, 0x0, 0x2}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="c2", 0x1}], 0x1}, 0x20004014) 5m44.261922184s ago: executing program 40 (id=4264): syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) socket(0x11, 0x2, 0x1) (async) r1 = socket(0x11, 0x2, 0x1) r2 = syz_usb_connect$uac1(0x5, 0xb6, &(0x7f0000000100)={{0x12, 0x1, 0x50, 0x0, 0x0, 0x0, 0x10, 0x582, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa4, 0x3, 0x1, 0x2, 0xc0, 0x59, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc95, 0x23}, [@extension_unit={0x7, 0x24, 0x8, 0x2, 0x1, 0xf}, @processing_unit={0xc, 0x24, 0x7, 0x4, 0x4, 0x6, "236bcf9a06"}, @selector_unit={0x6, 0x24, 0x5, 0x2, 0x5, 'a'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x8, 0x8, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8, 0x1, 0xc, "b6bc6fd4a352282117"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5, 0x3, 0x48}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x3, 0x3, 0x0, {0x7, 0x25, 0x1, 0x8, 0x0, 0xd}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x3, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xf, 0x1, 0xe, {0x7, 0x25, 0x1, 0x0, 0x7f, 0x1}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x9, 0x2, 0x7f, 0x8, 0x9}, 0x19, &(0x7f0000000240)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "71925d077c462ac9b8adf9dd46f49e6e"}]}, 0x1, [{0x3, &(0x7f0000000280)=@string={0x3, 0x3, "bb"}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x40, 0x7, 0x15, {0x15, 0x4, "f78eda0db2ffbe4b5d72b39e53bfe38f366927"}}, &(0x7f0000000340)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "9c21960aade7dc6be6a19a75aa8f1c15900765e6fa9ca50015718d77b1ffee6cf40fa9649b3df0b378371ba6175560bd7be9a6299c642473b7d20b838b8a3d568c0d784fb0bb3750dd1fcd3cd724158e1c5e2e8de29a31174ff884c0c589877df794234c115b24e9a97b5844fb690433ed6c3afb65afd6d3c9b94a22363cb1047d1b68c549b6a439d277408c"}}}, &(0x7f0000000800)={0x44, &(0x7f0000000540)={0x0, 0x16, 0xee, "0547dd71401a5bbc64ccf5c4bbb716bfb30cd58175dfb4b0eb105a207a01f07bd06d2529746264aade39b3b09db7a15e46467d2045b441dee3b412d7e3f93b8af985a8fc1200ff6bf88f898cf69092168ee0baf8ad11001d131d6a0862f9125237a5ac0c40aff0ee63621cd69dfff0820568cc8d546218854cea81d0dc45adb54554bc22434063b59dd0b4d844f1cbb04687ebe6e6c8c5be9cbf3c87060d8ab91eaf93e1f080e26963175569935515f4193fdcb15bbdfafcb24f1aee25e8e7fc0c641ed48be6e725d32bee90f83e3d068f098761583e215efc8b91829a1648996037c7189fbc2d5405f0565d81bf"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000006c0)={0x20, 0x81, 0x1, '!'}, &(0x7f0000000700)={0x20, 0x82, 0x2, "0440"}, &(0x7f0000000740)={0x20, 0x83, 0x3, "60f39f"}, &(0x7f0000000780)={0x20, 0x84, 0x4, "b9dfcfe8"}, &(0x7f00000007c0)={0x20, 0x85, 0x3, "7b0914"}}) setsockopt(r1, 0x107, 0x2, &(0x7f00000001c0)="fcff00000100060000071a80010061cc", 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@alu={0x7, 0x0, 0x3, 0x0, 0x9, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x20}, 0x94) 5m44.025541747s ago: executing program 41 (id=4265): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x68, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x68}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f000000a840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f000000a880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f000000a940)={0x0, 0x0, &(0x7f000000a900)={&(0x7f0000000400)={0x34, r7, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_IE={0x5, 0x3, "e2"}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x40832) r9 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$sock(r9, &(0x7f0000000640)={&(0x7f0000000240)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000002c0)="246bf29d3175b4ae336dd88d3a82ea6ad18afc9ee72cf0d7257b3fdad61bb61989d1d0f59fe570aa7278f8a33b53096ba287337ffa517a4c3abbc670e2160af27e143da71bd45bfb8cccdbfedb36a9", 0x4f}, {&(0x7f0000000500)="854f4eb6ac829b12a7dbcd4c", 0xc}, {&(0x7f0000000540)="45230cbbeb9d6fa1b6cd5ae8361c8c7872605ef4b7477f3d931ca937ecfa77cca007af4b49e8022fbfc635cc21559c73c5bf2580a179c3689802fb2f893fc00a6680f0a01b", 0x45}], 0x3, &(0x7f0000000600)=[@mark={{0x14, 0x1, 0x24, 0x5}}], 0x18}, 0x20040081) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = dup(r10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r12, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)=ANY=[@ANYBLOB="340000000d0601020000000000000000050000040e0003006269746d61703a69700000000500010007f0b60005000500"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) write$UHID_INPUT(r11, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) syz_fuse_handle_req(r4, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001b40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010101, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x40}}], 0x1, 0xc0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000083cd000000000000fdfffdff85000000cc00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000007ffec00b703000000000000850000007000004095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) 5m7.621501132s ago: executing program 5 (id=4336): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86dd606712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000280)="89cca9ad7f624c06000085087509000000000800", 0x6d}], 0x2) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd27, 0x700, {0x0, 0x0, 0x0, 0x0, 0x6000, 0x1806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r2}]]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x440b0) 5m6.632025101s ago: executing program 5 (id=4340): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, &(0x7f00000000c0)=0x5, 0x4) ioctl$EVIOCGMASK(r2, 0x60b, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f00000000c0)=@x86={0x7, 0x0, 0x1, 0x0, 0x4, 0xd, 0xf, 0x8, 0x6e, 0x5, 0x8, 0x4, 0x0, 0x3, 0x24, 0x7, 0x0, 0x7, 0x1, '\x00', 0xf, 0x5}) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RTC_ALM_SET(r9, 0x40247007, &(0x7f0000000040)={0x22, 0x13, 0x1, 0xd, 0x7, 0x8, 0x3, 0x23, 0xffffffffffffffff}) syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x3951c2) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$HIDIOCGFLAG(r5, 0x8004480e, &(0x7f0000000140)) sigaltstack(&(0x7f0000000040)={0xffffffffffffffff, 0x80000000}, &(0x7f0000000080)={0x0}) ioctl$USBDEVFS_CLEAR_HALT(r10, 0xc0105502, &(0x7f0000000040)={0x1, 0x1}) 5m0.987186391s ago: executing program 5 (id=4353): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async, rerun: 64) r1 = socket$kcm(0x21, 0x2, 0x2) (rerun: 64) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async) syz_open_dev$vbi(0x0, 0x3, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0xdc00) 5m0.507958872s ago: executing program 5 (id=4355): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5960, 0x1, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_PIPE={0x3e, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, {0x0, 0x0, 0x4}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000500)) r5 = socket(0x18, 0x1, 0xc5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0xfffa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8802}, 0x2004400c) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="ff0025bd7000fedbdf25690000000600d400070000000500d300060000000a00060008021100000000000a000600ffffffffffff0000"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) r8 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x2003) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r8, 0xc0245720, &(0x7f0000000040)) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000280)={0x0, 0x0, r0}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000002c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r10, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5}) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) r12 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r12, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=&(0x7f0000000040)}}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000380)) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r13, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) getsockopt$bt_BT_SNDMTU(r13, 0x112, 0xc, 0x0, &(0x7f00000000c0)) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc020000000000000000000000000000140003006970766c616e30"], 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x0) r15 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r16, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@gettclass={0x24, 0x2a, 0x0, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x1}, {0x6, 0x4}, {0x6, 0xa}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 5m0.187959368s ago: executing program 5 (id=4358): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x85, 0x3, 0x0, 0x717e387b, 0x3d, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) socketpair(0xb, 0x6, 0xfffffffc, &(0x7f0000000240)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (async) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x5) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r2) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x74, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dpkg_lock_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}]}, 0x74}}, 0x8004) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x1) (async) select(0x0, 0x0, &(0x7f0000000040)={0x4, 0x472, 0x1, 0x25, 0x101, 0x8000000000000001, 0x0, 0x3}, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r4, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x3, 0x10, "3eccd8010000000000000010000000040100"}) (async) r5 = syz_open_dev$usbfs(&(0x7f0000000700), 0x2000000000000, 0x141002) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0xc0185500, &(0x7f0000000040)={0x82, 0x100000, "aa2fe1a243fcd9abf29cc3391c06b86f68e7f73d4f0bff9669a8e82040ccb44d75131fb06cade553a6bdc314438ce0af11c38cd724980b087a7a16f9295be0a69db51576e7a06ef6bcabc67b52ba82e73504fa842ec2f0c06bf006f3e5bcdd5057997bf171c60d96a538b02ee9f4b573457498ca09cb417b1fbe6dc3b0c27ab0693ac57aff136748f7740dfc33f3a902b670f8933aec28869e637c18379d6d0b4d844b732cb1932733dfcec2f69f8b6df76ba84e1f001ad29105230471f466b6f9d7d2b05a57fe16e7363e5ecebc2c74539ca55c7ce3a175061adedd20532a9de97379f4dd5baeeae835946311e6e4e2361355c54b3bd500"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)) (async, rerun: 64) r6 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) (rerun: 64) writev(r6, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) (async, rerun: 32) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async, rerun: 32) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b893, 0x0) (async, rerun: 32) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000002a40)='./file0\x00', 0x89901) (rerun: 32) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000019200)=0x8) 4m55.087001994s ago: executing program 5 (id=4367): r0 = socket$key(0xf, 0x3, 0x2) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000040)) r2 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xd0, &(0x7f0000000000)=0x43, 0x4) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2, 0x400000000000003, 0x0, 0x9, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x4}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr, 0x1}}, @sadb_lifetime={0x4, 0x4, 0xc84a}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x60000003}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}]}, 0xb0}}, 0x84) 4m41.032073755s ago: executing program 42 (id=4364): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x2, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_FIXED_FD_INSTALL={0x36, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32, @ANYBLOB="08009f000600000008002600b4"], 0x3c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x8, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x2, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xfff1}, {0xfff2, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_RATE={0x6, 0x5, {0x7, 0x1e}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x80) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r14, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000001, 0x10000000, 0x6, 0x3fe}, 0x4}}]}, {0xd}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) r15 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r15, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r16, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f00000005c0)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r17, &(0x7f0000002140)=""/17, 0x11, 0x0) getsockopt$inet_buf(r4, 0x118, 0x4, 0x0, &(0x7f00000003c0)) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 4m39.900328377s ago: executing program 43 (id=4365): unshare(0x68040200) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) (async) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000000)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) (async) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) (async) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0xa, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_USERDATA={0x51, 0xd, 0x1, 0x0, "b38290d282a2473b7d58bb273b153b87edf438285fa9458f9d75bb481c741258669106d16114c7aac2aa75e904a1ce895c5a6ab38f9c65ed51774f9261081e2f23c2d0d82296b37d31bf6e1155"}]}, 0x74}, 0x1, 0x0, 0x0, 0x890}, 0x4000) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'dh\x00', 0x0, 0x660f537f, 0x70}, 0x2c) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4m39.756209332s ago: executing program 44 (id=4366): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) pread64(r1, &(0x7f0000000000)=""/18, 0x12, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 4m38.501905803s ago: executing program 45 (id=4367): r0 = socket$key(0xf, 0x3, 0x2) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000040)) r2 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xd0, &(0x7f0000000000)=0x43, 0x4) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2, 0x400000000000003, 0x0, 0x9, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x4}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr, 0x1}}, @sadb_lifetime={0x4, 0x4, 0xc84a}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x60000003}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}]}, 0xb0}}, 0x84) 4m3.589459628s ago: executing program 6 (id=4432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020000}, 0x4080) sendmsg$NFT_BATCH(r1, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000100000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0xc0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a01eeffffff0000000000020000000900020073797a32000000000900010073797a30000000000c000640000000000000000214"], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) r2 = signalfd(r1, &(0x7f0000000300)={[0x1]}, 0x8) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000080c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bind$xdp(r2, &(0x7f00000004c0)={0x2c, 0x2, r4, 0x21, r5}, 0x10) 4m3.472576923s ago: executing program 6 (id=4435): syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080047"], 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/233, 0xe9}], 0x1) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002955a4f40f30c19e04ffb0102030109022d000180002002090494090274833180090507000000060800091162b367e12306af0905050310"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/power/pm_freeze_timeout', 0x42, 0x0) sendfile(r3, r3, 0x0, 0xa) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x48c, 0x0, 0x9}]}) ioctl$EVIOCGMASK(r4, 0x5b02, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2c8, 0x2e8, 0x2e8, 0x2c8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0x0, 0x0, 0x0, 0xfd], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x40, 0x1}}, @common=@inet=@socket3={{0x28}, 0x22434d1da5f3fe5d}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@local, @empty, [0xffffffff, 0x1ff000100, 0x0, 0xffffffff], [0xff, 0xffffff, 0x0, 0xffffff00], 'pimreg0\x00', 'wlan1\x00', {}, {}, 0x21, 0xb, 0x1, 0x16}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [0xffffff00, 0xff000000, 0x0, 0xffffff], 0x4e23, 0x4e22, 0x4e23, 0x4e20, 0xf81, 0x9, 0x500, 0x7ff, 0x200}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) 3m59.840818857s ago: executing program 6 (id=4455): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/236, 0xec}], 0x1, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/186, 0xba}], 0x1, 0x0) process_vm_readv(r1, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) ptrace$ARCH_GET_GS(0x1e, r1, &(0x7f0000000100), 0x1004) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket$kcm(0x2, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20008814) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x140, 0x168, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@multiport={{0x50}, {0x1, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e20, 0x4e20, 0x4e24, 0x4e23, 0x4e23, 0x4e23, 0x4e24, 0x4e23, 0x4e23, 0x4e23, 0x4e20], [0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'gretap0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x6}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520) 3m59.661716761s ago: executing program 6 (id=4456): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\"\xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x5) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000800000340000000e0001006e657464657673696d0000000f0002006e657464657673696d30000063cf46605d5e60cead4875b53a7f0f63f1070a3aacd0ff31d09f54f90cbacc9aa647eeea7434e9b6cedd09d6491b7d4c32de9b46ff2f285370035d4789bf4a5eb04d6632aa5c078c9e0434ea14490686c948562a5b34a4f6a031d2972a3bc31f54e54244d7904f3e1664cdef7f2f00"], 0x34}}, 0x0) 3m59.525426622s ago: executing program 6 (id=4457): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d000000ffea010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 3m56.860579638s ago: executing program 6 (id=4462): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="ffe1"]) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0xffffffffffffffda, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="d800000000000000b9ffffffffffffff456ec975071e7be1000000000000000002000000000000000200000100000000000003000000080000000600000000000000090000000a0000000400000000000000fc0000000000008003000000000006000000000000000000ffffff7f58000000040000000090000009000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="010000000400000000000000000000000000200037050000000000002b000000f30000003a2d285cc980000009c30000f3397cd86d4d928d14d3a461b60245898556c20600000000002b133b0801000000000000"], 0x0, 0x0, 0x0}) (async) getdents64(r4, &(0x7f0000000100)=""/134, 0xfffffffffffffe4b) getdents64(r4, 0x0, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x7, 0xffffffff, 0x4f565559, 0x4, 0x7f, 0xbd, 0x5, 0x20080f9b, 0x0, 0x4, 0x0, 0x3}}) (rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xf, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x24004804) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x8080) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) (async, rerun: 64) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) (rerun: 64) r13 = openat$cgroup_ro(r12, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) close(r13) (async, rerun: 32) r14 = syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x191803) (rerun: 32) ioctl$DRM_IOCTL_PANTHOR_GROUP_SUBMIT(r14, 0xc0186449, &(0x7f00000004c0)={0x0, 0x0, {0x28, 0x0, 0x0}}) socket$vsock_stream(0x28, 0x1, 0x0) 3m56.810639592s ago: executing program 46 (id=4462): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="ffe1"]) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0xffffffffffffffda, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="d800000000000000b9ffffffffffffff456ec975071e7be1000000000000000002000000000000000200000100000000000003000000080000000600000000000000090000000a0000000400000000000000fc0000000000008003000000000006000000000000000000ffffff7f58000000040000000090000009000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="010000000400000000000000000000000000200037050000000000002b000000f30000003a2d285cc980000009c30000f3397cd86d4d928d14d3a461b60245898556c20600000000002b133b0801000000000000"], 0x0, 0x0, 0x0}) (async) getdents64(r4, &(0x7f0000000100)=""/134, 0xfffffffffffffe4b) getdents64(r4, 0x0, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x7, 0xffffffff, 0x4f565559, 0x4, 0x7f, 0xbd, 0x5, 0x20080f9b, 0x0, 0x4, 0x0, 0x3}}) (rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xf, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x24004804) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x8080) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) (async, rerun: 64) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) (rerun: 64) r13 = openat$cgroup_ro(r12, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) close(r13) (async, rerun: 32) r14 = syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x191803) (rerun: 32) ioctl$DRM_IOCTL_PANTHOR_GROUP_SUBMIT(r14, 0xc0186449, &(0x7f00000004c0)={0x0, 0x0, {0x28, 0x0, 0x0}}) socket$vsock_stream(0x28, 0x1, 0x0) 3m53.514044835s ago: executing program 2 (id=4489): mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000001ba1734407c8b045ef54f9a3fdb9660ca884a08ebe7176e03585b357a12344b8d2a4a302fb73de3b8e11f76328c8ba11960c328664089187ef5c8096fb0b01ec996791735b", @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf253e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000500830001000000"], 0x58}, 0x1, 0x0, 0x0, 0x4008055}, 0x10) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20980, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x85, 0x6, 0x0, 0x0, 0x10003, 0x3d, 0x400200cc4, 0xffd, 0x4, 0x9, 0x8001, 0x4, 0x2, 0x800, 0x6a, 0x8d], 0x8000000, 0x2011c0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400f9e3bde20064ff00000000", @ANYRES32=0x0, @ANYBLOB="00000000c81400001c0012800b00010062726964676500000c000280080031"], 0x3c}, 0x1, 0xba01}, 0x0) ioctl$SG_GET_LOW_DMA(r5, 0x227a, &(0x7f0000000040)) r7 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) ioctl$PTP_PIN_GETFUNC(r9, 0xc0603d06, &(0x7f0000000080)={'\x00', 0x400000, 0x2, 0x8}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r9, @ANYRES32, @ANYBLOB="000000000000dfffff1f00010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2a0000000000efffffffffffff07000000000038e16c6842000df845b22de8bf0d717200800000"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', r10, 0x4000, r8}, 0x18) r11 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x109341) ioctl$USBDEVFS_CONTROL(r11, 0xc0105500, &(0x7f00000001c0)={0x0, 0x3, 0x1, 0x8, 0x0, 0xb, 0x0}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18) 3m53.002481596s ago: executing program 2 (id=4492): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100)={0xffffffff, 0x4}, 0x10}, 0x94) (async) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}, {@cachetag={'cachetag', 0x3d, '\x14\xe2\xc3\x11\xe2\xcb\x86\xc8-Hs\xc6\xafm\xdc{\xdeU#\xebp7-\x9f\xb8\xf3A\xb2CX\xd3//\xdd28+\x9dS\"\x9bm\x19\xd0K4a\xe6\xfb\xdb\xf7\xe4K\xb5\xc8\x94_\a\xe61\x91\xe4<@\xc37+\x9c\xb2\xe8E=T\xd5\xb1\'\xc3w\f\'\xd4\x97\xf8\xba\xe8\xa0\n\x8d\xc7\xc9\x7f\xa8\x1d\x88\xa3\x17\xca\xa5e\x7fYj\x82Z\xe9K\xa0T\\\x87u\x8coL\a|\xc8f^\x01\x04\xe4\x8e\x0f\xfe\x16\xa7G\xd4\xa1\xef\xc5\xa7k\x1dE\xb0\x9d!i\x99\\^\\]G?E+\xcd}\xf7i\xe2\xa2\x8dEW\xab\xdc\x8c\xe9Y\xb1\xc8\xc4\x97!\xbc\xf4\xef\xc9\x03v\xf3 \xb2\xc5\xd5\xf0$\xa0KD5\xf4\x9c\xe1\r\xc4\xa0\xd1\'\xadC\xb7Z\f[t\xd1\xadYk\x90v0x0, 0x2d, 0xe, 0x0, 0xe20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, 0x8000, 0x1, 0x1000, 0x3}}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x5, r2, 0x1000}, 0xc) 3m52.476950733s ago: executing program 2 (id=4496): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) 3m52.265263362s ago: executing program 2 (id=4500): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) connect(r0, &(0x7f0000000040)=@in={0x2, 0x4e23, @broadcast}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r3, 0x111, 0x70bd2d, 0x6, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x4010) r5 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r5, 0xc0506107, &(0x7f00000003c0)={0x0, 0x0, 0x0, @raw}) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000180)=0xd0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0x0, 0x43, 0xa0, 0xe8, 0x98, 0x198, 0x178, 0x178, 0x198, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0xc8, 0xe8, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x9}}, @common=@addrtype={{0x30}, {0x429, 0x0, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452200a44a3d28da04828d1768c081f126a6bb82700"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0x70bd29, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 3m51.824123136s ago: executing program 2 (id=4505): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdef}}, 0x1) r5 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r5}]) close(r0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000480)={0x0, 0x0, r8, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r0}) sendmsg$NFNL_MSG_CTHELPER_DEL(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008810}, 0x200448c6) close_range(r7, r10, 0x2) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={0x0, r8, r9, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r11, 0x2, 0x0, 0x1, 0x2, [], [0x7fdfffff, 0x6, 0x0, 0x4], [0x7, 0x1000ffc, 0xfffffffd], [0x100000003, 0xfffffffffffffffc, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f00000009c0)={&(0x7f0000000240), &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000940), &(0x7f0000000980)=[0x0, 0x0], 0x8, 0x38, 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000a40)={r12}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000030000000000000080000000850000003900000095"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 3m51.746992855s ago: executing program 47 (id=4505): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdef}}, 0x1) r5 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r5}]) close(r0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000480)={0x0, 0x0, r8, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r0}) sendmsg$NFNL_MSG_CTHELPER_DEL(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008810}, 0x200448c6) close_range(r7, r10, 0x2) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={0x0, r8, r9, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r11, 0x2, 0x0, 0x1, 0x2, [], [0x7fdfffff, 0x6, 0x0, 0x4], [0x7, 0x1000ffc, 0xfffffffd], [0x100000003, 0xfffffffffffffffc, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f00000009c0)={&(0x7f0000000240), &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000940), &(0x7f0000000980)=[0x0, 0x0], 0x8, 0x38, 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000a40)={r12}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000030000000000000080000000850000003900000095"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 2m54.991780206s ago: executing program 9 (id=4986): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f0000000740)={{&(0x7f0000000240)=[{0xd29e, 0x7fffffff, 0xfe, {0x3ff}, 0x3, 0x4, 0x400}, {0x9, 0xba5, 0x8, {0x2}, 0xac5d, 0x8, 0x1}, {0x8b38, 0x8, 0x0, {0x1, 0x3}, 0x1, 0x1, 0x2}, {0x5, 0xfffffffffffffffc, 0x5, {0x7, 0xffffffffffffff81}, 0x45dc, 0x6d454510, 0x5}, {0x0, 0x80000000, 0x101, {0x1ff, 0x9a}, 0x5, 0x9}, {0x8, 0x0, 0x3ff, {0x7, 0x8}, 0x7, 0xfffffffffffffff7, 0x2}, {0x3, 0x2, 0x40000, {0x7fff, 0x1}, 0x3, 0x14a6, 0x59be}], 0x7, 0x40, 0x101, 0x7}, {&(0x7f0000000400)=[{0x1, 0x4}, {0x9, 0x8}, {0x9}], 0x3, 0x10, 0x4, 0x3}, {&(0x7f0000000440)=[0x8, 0x3, 0x5, 0x4, 0x0, 0x6, 0x8, 0x0, 0x7fffffff], 0x9, 0x8, 0x0, 0x595d}, {&(0x7f00000005c0)=[{0x40, 0x441, 0x3, 0x71a, 0x9}, {0xfffffffffffffffc, 0xb, 0x4, 0xff, 0x8}, {0x0, 0x100000000, 0xfffffffffffffadb, 0x5, 0x5}, {0x4, 0x4, 0x7, 0x7a, 0x4}, {0x9, 0x2, 0xfffffffffffffffa, 0x10000}, {0x0, 0x10001, 0x3ff, 0x1, 0x6}, {0x1199, 0x8, 0x4fe, 0x7f0000000000, 0x7}, {0x6, 0x4, 0x5, 0x1ff, 0xb}], 0x8, 0x28, 0x1, 0x9}, {&(0x7f0000000700)=[0xcb, 0x7], 0x2, 0x8, 0x10, 0x100000001}}) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r6, &(0x7f0000001740)={0x2020}, 0x1144) write$cgroup_type(r6, &(0x7f0000000000), 0x9) sendfile(r5, r5, 0x0, 0x6) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)='\b', 0x1}], 0x1}}], 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) (async) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f0000000740)={{&(0x7f0000000240)=[{0xd29e, 0x7fffffff, 0xfe, {0x3ff}, 0x3, 0x4, 0x400}, {0x9, 0xba5, 0x8, {0x2}, 0xac5d, 0x8, 0x1}, {0x8b38, 0x8, 0x0, {0x1, 0x3}, 0x1, 0x1, 0x2}, {0x5, 0xfffffffffffffffc, 0x5, {0x7, 0xffffffffffffff81}, 0x45dc, 0x6d454510, 0x5}, {0x0, 0x80000000, 0x101, {0x1ff, 0x9a}, 0x5, 0x9}, {0x8, 0x0, 0x3ff, {0x7, 0x8}, 0x7, 0xfffffffffffffff7, 0x2}, {0x3, 0x2, 0x40000, {0x7fff, 0x1}, 0x3, 0x14a6, 0x59be}], 0x7, 0x40, 0x101, 0x7}, {&(0x7f0000000400)=[{0x1, 0x4}, {0x9, 0x8}, {0x9}], 0x3, 0x10, 0x4, 0x3}, {&(0x7f0000000440)=[0x8, 0x3, 0x5, 0x4, 0x0, 0x6, 0x8, 0x0, 0x7fffffff], 0x9, 0x8, 0x0, 0x595d}, {&(0x7f00000005c0)=[{0x40, 0x441, 0x3, 0x71a, 0x9}, {0xfffffffffffffffc, 0xb, 0x4, 0xff, 0x8}, {0x0, 0x100000000, 0xfffffffffffffadb, 0x5, 0x5}, {0x4, 0x4, 0x7, 0x7a, 0x4}, {0x9, 0x2, 0xfffffffffffffffa, 0x10000}, {0x0, 0x10001, 0x3ff, 0x1, 0x6}, {0x1199, 0x8, 0x4fe, 0x7f0000000000, 0x7}, {0x6, 0x4, 0x5, 0x1ff, 0xb}], 0x8, 0x28, 0x1, 0x9}, {&(0x7f0000000700)=[0xcb, 0x7], 0x2, 0x8, 0x10, 0x100000001}}) (async) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') (async) read$FUSE(r6, &(0x7f0000001740)={0x2020}, 0x1144) (async) write$cgroup_type(r6, &(0x7f0000000000), 0x9) (async) sendfile(r5, r5, 0x0, 0x6) (async) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)='\b', 0x1}], 0x1}}], 0x1, 0x0) (async) 2m54.792649541s ago: executing program 9 (id=4989): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x20, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(0x0, r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="610306"], 0x10) 2m54.640655805s ago: executing program 9 (id=4992): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f000700000000000a"], 0x18) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000180)) r4 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000002c0), 0x111080, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r2, 0x200, 0x0, 0x0, {0x7}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410019012bbd700000000000047c00000400c2800c00018006000600843b00000c000280080007"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) r8 = syz_open_dev$mtd(&(0x7f0000000440), 0x4, 0x700) connect$inet(r4, &(0x7f00000003c0)={0x2, 0x4e22, @broadcast}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000000)=0x6, 0x4) connect$inet(r10, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r10, &(0x7f0000003500)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@rr={0x7, 0x17, 0xc1, [@private=0xa010100, @private=0xa010101, @local, @loopback, @private=0xa010101]}, @timestamp={0x44, 0x14, 0xf2, 0x0, 0x3, [0x0, 0x5, 0x5, 0x9]}]}}}], 0x58}}], 0x2, 0xf00) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x98}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.swap.events\x00', 0x275a, 0x0) fcntl$lock(r11, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r11, 0x6, &(0x7f0000000280)={0x0, 0x0, 0x2f, 0x1}) fcntl$lock(r11, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x90}) ioctl$MEMREADOOB64(r8, 0xc0184d16, &(0x7f0000000140)={0x7ff, 0x0, 0x5, &(0x7f0000000040)="6e5edd6126"}) 2m54.576141729s ago: executing program 9 (id=4994): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="0f01190f20e06635000200000f22e00f01d1f26d711cba430066b80000000066ef66b9eb0b00000f3266b80500000066b90b0000000f01c1baa000ec360f09", 0x3f}], 0x1, 0x60, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x19, &(0x7f0000000100)=[@cr4={0x1, 0x40240}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m54.429277848s ago: executing program 9 (id=4995): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000fc0)=[{&(0x7f0000000dc0)="d2", 0x1}], 0x1, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000008a40)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000001140)="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", 0xec1}, {&(0x7f0000002180)="14", 0x1}, {&(0x7f0000002240)="c0", 0x1}, {&(0x7f0000002300)="fa", 0x1}, {&(0x7f0000002380)="f1", 0x1}, {&(0x7f00000024c0)='M', 0x1}], 0x6}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000002600)="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", 0xa01}, {&(0x7f0000003640)="9263", 0x2}, {&(0x7f0000003700)="fe", 0x1}, {&(0x7f0000003780)="df", 0x1}, {&(0x7f0000003880)="ef", 0x1}, {&(0x7f0000000140)="eb", 0x1}, {&(0x7f0000003980)="c5", 0x1}, {&(0x7f00000039c0)="c1", 0x1}], 0x8}}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000003c00)='\x00', 0x1}], 0x1}}], 0x3, 0x4008440) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r6, &(0x7f00000000c0)=""/55, 0x37) lseek(r6, 0x0, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r7 = accept4(r3, 0x0, 0x0, 0x800) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xa4ee, 0x40, &(0x7f0000000000)={0x2, 0x1, 0x8, 0x2}, 0x8, 0x3ff, 0x300, 0x0, 0x3, 0x20004, 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x5, 0x1, 0x8, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x7, 0x3, 0x80}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x111}, 0x44990) r11 = timerfd_create(0x8, 0x80000) timerfd_settime(r11, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r7) 2m53.418076681s ago: executing program 9 (id=5009): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0xa) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x70bd04, 0x25dfdbfc, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@private=0xfeffffff}]}, 0x1c}}, 0x800) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r5, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x48010) 2m32.545816836s ago: executing program 48 (id=5009): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0xa) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x70bd04, 0x25dfdbfc, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@private=0xfeffffff}]}, 0x1c}}, 0x800) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r5, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x48010) 1m1.624883614s ago: executing program 3 (id=6048): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x6}) open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mount(&(0x7f0000000040)=@filename='./file1\x00', &(0x7f00000006c0)='./file0\x00', &(0x7f0000000800)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') (async) mount(&(0x7f0000000040)=@filename='./file1\x00', &(0x7f00000006c0)='./file0\x00', &(0x7f0000000800)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') 1m1.53333526s ago: executing program 3 (id=6049): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x14, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @enum={0x6, 0x0, 0x0, 0x6, 0x4, [{0xc, 0x5}, {0x9, 0x506}]}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x4e, 0x0, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x81, 0xffffffff}) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='personality\x00') pread64(r2, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009) mount(&(0x7f0000000040)=@rnullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x204000, 0x0) 1m1.446952586s ago: executing program 3 (id=6050): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @remote}, {0x2, 0x8, @remote}, {0x2, 0x4e25, @multicast2}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ipvlan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0xfc, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x2, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x6, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xfffd, 0x0, 0xfff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4011}, 0x20000000) 1m1.445454131s ago: executing program 3 (id=6051): r0 = syz_open_dev$mtd(&(0x7f0000000140), 0xa0, 0x100) ioctl$MEMGETINFO(r0, 0x80204d01, &(0x7f0000000040)) 1m1.349694356s ago: executing program 3 (id=6052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000ffea01410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 57.996563928s ago: executing program 3 (id=6085): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r1, &(0x7f0000000080)='/proc/partitions\x00', 0x500, &(0x7f0000000100)={@align=0x3, {0x3, 0x8, 0xed3, 0x6}}, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4}) 41.901153003s ago: executing program 49 (id=6085): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r1, &(0x7f0000000080)='/proc/partitions\x00', 0x500, &(0x7f0000000100)={@align=0x3, {0x3, 0x8, 0xed3, 0x6}}, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4}) 28.644507198s ago: executing program 1 (id=6413): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188047680ec59acca0413a1f8482d0000005e140602000000000e0027001000000002800000121f73", 0x2f}], 0x1}, 0x4000000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42003, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0xffffd000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x40, 0x2) mbind(&(0x7f00004c9000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x20, 0x2) ioctl$KDSIGACCEPT(r1, 0x800455ca, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x210804, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}, {@redirect_dir_follow}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 26.160557007s ago: executing program 1 (id=6434): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x1ff, '\x00', @p_u32=0x0}}) fallocate(0xffffffffffffffff, 0x0, 0x80000, 0x4) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file0'}, 0xb) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r3}, 0x10) socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x25dfdbfe, {0x3}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}]}]}, 0x2c}}, 0x40000000) 26.085319743s ago: executing program 1 (id=6435): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000825bd7000ffdbdf254b0000000800030003000000080001007063690011000200303030213a30303a31302e30000000000e00a90066797273746e616d65000000"], 0x48}, 0x1, 0x0, 0x0, 0x40488d4}, 0x20000080) (async, rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b80)=ANY=[@ANYBLOB="2c0000004100010000100500040000000100000004004880100001800c001080060009007b00000004000200"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) (async, rerun: 32) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES32=r1], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000040)=0x8) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 64) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r0, 0x1f, &(0x7f0000000400)={0x28, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000340)="a257bb38afaadab165eec39264501e121b38d944644d6a9f02bd8c00fb820398cc25001ed489307e831cc28a7f8741e68b1db71a04c2eba88f29a2c77148cde757b672217f23109774e9f164ef7a6987246adfee00ba40f6a7eea4612b22ff014677db9244a76631dfc9cb49f5d36ccdbf305b9a91054de7eb2f5a4125a43d9901d1de7854b3", 0x0, 0x8, 0x1, 0x0, {0x0, 0x0, r2, 0x5}}, 0x1) 26.021793727s ago: executing program 1 (id=6436): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) (async) r1 = fanotify_init(0x1, 0x101801) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) (async, rerun: 64) r2 = inotify_init() (rerun: 64) inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1300, 0x1d) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x40002, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async, rerun: 32) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async, rerun: 32) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) (async) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) (async, rerun: 64) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) (rerun: 64) 24.76180715s ago: executing program 1 (id=6447): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async, rerun: 32) close(0x3) (async, rerun: 32) r3 = socket(0x2, 0x80805, 0x0) (async, rerun: 32) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) shutdown(r4, 0x0) close(0x3) (async) ioctl$I2C_FUNCS(r2, 0x705, &(0x7f0000000080)=0x73b7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e61, 0x0, @mcast1, 0x80000000}}}, &(0x7f0000000040)=0x84) (async, rerun: 32) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) (async, rerun: 32) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000480)={r6, 0x7}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000002c0)={r8, 0xf}, 0x8) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) 24.406345499s ago: executing program 1 (id=6452): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000002000010028bd7000fcdbdf350a8003000800000317000000080018004e224e2414000200fc0000000000000000000000000000001400010020010000000000000000000000000001"], 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0000000000000000000000000000010b298adaf72b25e7a731f87306733886bfc926ea8ae0928d36c31f7c8e109ba9ce3b560631a487e6c77e0261f4452c15f02e2d44ec03b9cf775d78afb02428435c4216d236e3933366debffebbaaec88f03c7b49b2224a3587a2f56864bcb33d0a298d505700f4880638d75b0d200f43359aaf4039cb85d61cf36a873390bde9c3867acae349797c2978423e81b81a07d91e5a7350680a3b17cee66bfe4d01ea8335883a7e03e5805d16cb9fd41ffa8fcc00dd65ffcc852d7c8ac88b536c383656c831f0696147c9a56e0f"], 0x5c}}, 0x20000840) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x101}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r2, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x4f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40044) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_PEC(r3, 0x708, 0x2) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0}) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000280)=""/221, &(0x7f0000000380)=0xdd) 24.347398026s ago: executing program 50 (id=6452): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000002000010028bd7000fcdbdf350a8003000800000317000000080018004e224e2414000200fc0000000000000000000000000000001400010020010000000000000000000000000001"], 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x5c}}, 0x20000840) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x101}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r2, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x4f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40044) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_PEC(r3, 0x708, 0x2) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0}) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000280)=""/221, &(0x7f0000000380)=0xdd) 5.221932147s ago: executing program 4 (id=6648): prctl$PR_SET_THP_DISABLE(0x41, 0x3) syz_clone(0xa202000, &(0x7f0000001180)="6f1cde780e2f96227550a6d22d89bfade474e66fa254fceb9ed36e3b39ed79412c04d66226617d5bd853e0520da011097c58e926d71132c4ebdaeaf7ff4490cb0fdbf5ea1c3abbc3cdb9fe5c", 0x4c, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000010c0)="f5b3d1bc5197a4331f66c4330f2696d01e776e7aed648bc2558d22afbaefe76106e7a8e67603e8146b4a46bc894edf0f6182d1b95de940b2f95edf8dcdb06d770926865cb5d344cca76924d07da8314c0bacc96fb888681dcea42e11221442c74a3ebfd0ea8ef9f83b3af101149c92b6a85d62b016e4ed01acc8a1bbdd136a44795907ed39ef95bcefd55a6c425857bff2ad079a3a1b38e9cb3eb1ffa77a715b9c72499c0fa5ab06944816767e072cf93ef850e5ae0f772752") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20044880) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, &(0x7f0000000180)="13"}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x4c0540, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc45}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000001040)={0x1, 0x0, [{0xc000001b, 0x4, 0x8, 0x31237e48, 0x6, 0xe, 0x688}]}) r3 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x6e0, 0x0, 0x3d}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0xfff9, 0x20000000, 0x5, 0x50, 0x1000, 0x1}, 0x9c) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2db, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x8, 0x401, 0x2, 0x5, 0x8d], 0x30000, 0x280e97}) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) syz_clone(0x1000, &(0x7f0000001200)="46d552f8faf0d4cbc6f932272b5ae1f75b85a184c2eba4d2f06243a5c8d9c789bbeab4d3a58106b917c4dd3e1f2b626711f2d82114d5bd85a156cecf3f7337b56f490f19fd409a1dad6d3e183051a09f54ceef3e649992eb3b1e6cf7717d983230fddb7769672fc8d7a64b3bfb51d4c53377d6c78bfd1349ae77a2707490b75dc1c9c82c68041d5c06c9579228da256485989de62f5460b0a0de7ec3abaab56d0041e2bbbbeeda8384149108b32dc72e2063459e91d17c0e07656bd10c400bc01043cb952f40535ffa62659386787914f642786b331b0c9e84a56fc8080faba7", 0xe0, &(0x7f0000001300), &(0x7f0000001340), &(0x7f0000001380)="27bbf1944d353af30cbac7eda2efbff527184326563ec3d2021daf2c0ccc38254c9ff0017e95a4f10bddf75d613e872402694d9d79147b7de2a22a21c999e67f3728779779e1ccfb2e27cf34a6aad5ce599b4f97b33df94f0d6445b440306cf8da419e8fba19938aced569dab636a0c18f7ba82f07bdc2019ebfa06ef91230250907689f5574d446c78c62c2a14319385b7f61e44facf0067a69a112291b8ef58f1ebc2100e8f7a13ed94b") ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000006380)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) syz_clone(0x9288000, 0x0, 0x15, 0x0, 0x0, 0x0) 5.132707293s ago: executing program 7 (id=6650): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="c4c1d5592966ba2100b0b8eeb9310a00000f3266baf80cb814cab68eef66bafc0c66ed66baf80cb824577689ef66bafc0cb8e5000000ef66baf80cb83e088183ef66bafc0c66b87b0066ef8adb66f30f09643e0fc7b100000100b9800000c00f3235004000000f30", 0x68}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="66b9800000c00f326635004000000f30baf80cba6100b80d00ef66efbafc0c66ed6764dd44ade0f30fc7b7400066660f388052d40f89f4000f066726dac366b91601000066b84454000066ba000000000f30660f5e960090", 0xa6}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f00000002c0)={0xbc, 0x0, 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.923493201s ago: executing program 7 (id=6653): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d00000000000100000000000000014100001f1c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 4.830815286s ago: executing program 7 (id=6654): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x109080, 0x0) read$dsp(r1, &(0x7f00000005c0)=""/217, 0xd9) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000f40)) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001640)={{r2, &(0x7f0000000080)='gcm(anubis)\x00', 0x48101, &(0x7f0000000180)={@align=0x7, {0x4, 0x8, 0xfffffffa, 0x6}}, 0x3c90, &(0x7f0000000240), &(0x7f0000000280)=0x7ff}, 0x1, &(0x7f0000001600)=[{0x92cb006e6c716eb0, 0x1ff, &(0x7f00000002c0)='%{#$%\x00', &(0x7f0000000600)="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", 0x1000, 0x18}]}) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fd19d6dcd3292ea55c7beef915d564c90c200", 0x18) r4 = accept4(r2, 0x0, 0x0, 0x800) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x100580) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r6 = fsopen(&(0x7f0000000000)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) open(0x0, 0x10000, 0x80) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r7, 0x0) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r5, 0xc0305302, &(0x7f0000000200)={0x80000000, 0x9, 0x80000001, 0xfff, 0x10000, 0x2}) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x1}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x100) 4.191541278s ago: executing program 4 (id=6659): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) mkdir(&(0x7f00000001c0)='./bus\x00', 0x40) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="04010100010a000014000300118a9459c8d3159f5def7866726d30000000000000000000000008000a00", @ANYRES32=r1, @ANYBLOB], 0x3c}}, 0x0) 3.794097323s ago: executing program 4 (id=6663): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x8, 0xfffffffe, 0x8, 0x40, 0x1b, "3eccd25569e20900"}) (async) close(0x3) 3.578197171s ago: executing program 4 (id=6665): r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x40502) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x4, 0x20}) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@mask_cswp={0x58, 0x114, 0x9, {{}, 0x0, 0x0}}], 0x58}, 0x0) close_range(r0, r0, 0x0) 3.226914633s ago: executing program 4 (id=6666): r0 = socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0xe) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f0000000240)={&(0x7f0000000180)=[r3, 0x0, 0x0], &(0x7f0000000200)=[0x23e, 0xbcec, 0xfffffffffffffffd, 0x60, 0x7, 0x101], 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000280)={r3}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000780)={r5, 0xfffffffd, 0x4, 0x1, 0x2, [0x0], [0x40, 0x0, 0x400, 0x1ff], [0x0, 0x0, 0xfffffffc, 0x5], [0x5, 0x0, 0x7]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_CSIF_INFO(r2, 0xc0106440, &(0x7f0000000100)={0x1, 0x7}) syz_emit_ethernet(0x72, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x16, 0x4, 0x0, 0x0, 0x64, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x3c, 0x8e, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x7}, {@multicast2, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@rand_addr=0x64010101, 0xf9a}]}, @ssrr={0x89, 0x7, 0x52, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) 2.817095148s ago: executing program 4 (id=6669): set_mempolicy_home_node(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='romfs\x00', 0x200000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000080)) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000100), &(0x7f0000000180)=0x4) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x501201, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) close(r2) 1.495344056s ago: executing program 0 (id=6683): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0xd) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 1.493865581s ago: executing program 0 (id=6684): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x40081, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r2, 0x2000, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) 1.163553657s ago: executing program 8 (id=6687): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd40, 0x1200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x3a, &(0x7f0000000680)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x4, 0xe}]}}, @timestamp}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) (async) r6 = syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0x1000, 0x7a}, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r6, 0xc, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000100001002abd700402d4df2500000000", @ANYRES32=r5, @ANYBLOB="946a0100240012801165000000000800058005001d0000000000000033112100"/47], 0x44}}, 0x200088c2) (async) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x10802, 0x0) ioctl$SNAPSHOT_FREE(r7, 0x3305) 1.16327559s ago: executing program 0 (id=6688): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r2, &(0x7f0000000340)="18000000010005", 0x7) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 1.068890256s ago: executing program 0 (id=6689): mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0x253af000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x91e, 0x7, {0xffffffffffffffff}, {}, 0x8f2, 0x5}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001680)={&(0x7f0000000080)={0x15f4, 0x3c, 0x4, 0x70bd29, 0x25dfdbfc, {0x6}, [@typed={0xa, 0x12, 0x0, 0x0, @str='-\xb3/-[\x00'}, @nested={0x26d, 0x5c, 0x0, 0x1, [@typed={0x8, 0x5f, 0x0, 0x0, @ipv4=@empty}, @generic="d8a205ba24d1853f759087d62bbe4e8ab6b3e630d161fe97cfcec6a969e4a6e5eed5682bc6262daace10d4234eb59973f6b1a381ebbd672598147282ba9e786f84236f13e9e6e9d1e77fdb9793078f6bd103685fdc83af0ff2a99282501f469be0690d2884122b06ed44e2cee8fdeaf2c79beeeab2d74ee017659c350d5a36f160715ee4f131ff62fb097df4ca5dfbe01154b2e91aece01fbe9640080e5b6f81c32dd14d1fc8fc41b3faaaa5a3f7dde71860f105ee680b5d2e99278bc79bb8ae2d8b9379e03b9850ea9ef45cb03d0a0d554ca9bb08c924d61fa7e7ac45e4de0e5fb254b0454be088578096a610b369ae2e35f8f9e7bd", @typed={0x8, 0x143, 0x0, 0x0, @pid=r1}, @generic="397fbf3fa21044151b3d9e0de085957427198bd6db5d825b22ea54dd42c2326d4ef22bc83972bdec8d23172ad668edf1b50debf63207d93f1b981687d4d185087cc81eb31850b1a12b548fa89caa5dc7188ceaab76e3c7bca29cdc4521e84b3818c5f2f8ed96e93b1a70c36e9288019caf69dd1a6a767c2dc2f019f5f37e69107b65", @nested={0x4, 0x130}, @generic="2aa135b7db7d56b696c855dce7de287f22a8bdb09364ceb5b62c1deeee9ff9b4a4046b792dbf050161", @generic="656c56201866446976b3a288bc65c87027fc99e7ba7b07f9ab965f26d1c46df27cefeb3cc36b732da3e54b1ec12a863e4ba7be2a517912e944c79e9e45bd489732cf96e5dd75642198286588f869fb9b48cc9e5427848130707f1bc6c0e00b5153c4fe60e7f534a05bf17aff4f3938f8256f4ff222a1dc7778115ea956a066efc41c745c76ace6ed09107d96ae56a3972f72606f03a1eeb8dc6852813976ac7e8015ce255ea1278648a8600401dd365acef2b63d"]}, @nested={0x1223, 0xc1, 0x0, 0x1, [@typed={0x8, 0x8d, 0x0, 0x0, @u32=0x7ff}, @typed={0xe4, 0x103, 0x0, 0x0, @binary="1bd7264a5f921bf23d23a28e54a496ad2df212f5395e70831a1c958595ce17b1359be3b9fdf594b6591e6248abe6211fc574bc73c8c6a2dc9415b7967b9fca70607315caf377cfd2dbf8ff99ff6b83ff5d957e438ba3ebf0f606a78320e46eabc97a9afbe4c837a7c5bba44d91c3746464304478b475f33c27b8d2dd7345114fe991415880070356ba7a29583cdc17ddf60e9ae7cc46e60af41d75765a6500b0a1ff4cd6937e021b265f0deb549de0f701ebffae755a7f633abbd3fdf233884f1326d1ae31a01114e603d41a075f61bf0b21a599a0a501bb2483a933fc3e47c4"}, @generic="76d339fd93203d2b2ffd430319a71bae2b50c5adfa7321cc75fb6ea58cb47f4dc3e8e43a0ed046ee61af3de3f0b2340a08febafac63f6a99c57ff8650ad7e7314c076d5536054803609fb3d24b4c96175f0a3286e05262a1da9f89d5f0216f1bf6772fc64851956e76bfc8c2d4bdf31e19048ab77655509533d9dc4574a7c2", @nested={0x4, 0xeb}, @nested={0x4, 0x39}, @generic="19ca9c9b98cddc38a69d6c746530aadabf108edb403a830a506611887e0ea085d072fe85248fb25a379702c1941b9086eeeda60a00e5f815046b26ac899a5b298e34bb969352cfe484d2e43886ea9c84eb5cf37002592593445682efe1c73f6d105fe5a4f9889a355b807523334c7780bc3513f8b34020534bb20ff2c994cb96ed071f8d04915b123ecebe770acf2319929d17ed2383efb1a1c1a3605280650e2dbdf8bfd893ac30", @generic="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", @nested={0x4, 0xbe}]}, @generic="db5d8fad96c6c98f3f321c77f0f662dc90fb5e33079b51b3dcb0f62303c63cdf9f375b981c71ce65611072a5195536b6a84d74b8abb0f5598c07287565f1d98e5a92cd5bd9186f866035fe8a1fd7514c1faa14a94372ab794890265ec4a48a571ecc19401bcf66be9cc3a1798ec285adc77e6b36a02420d4c4b2f6bab2e2fa960e1bd2726d5009d5f4bb4873b212e7bfe5a948570c389adb27f7eb2cc779eba902be312e8eeaa5b2e5f0625254933fcedded8e558f2716235b0016de3b2e30a13832b8da32dda3b04781a3c920b0f417629cbc4b27014d", @nested={0x68, 0x35, 0x0, 0x1, [@typed={0x4, 0x113}, @generic="0df416103476c2b1affa9e237c5d09dc5600a2b4cab023e844dec196ea72ff9a320df0314f7efbfbc56307c44765219404f113d376bbcbc95cfa2d3c8db26792e4d036d4e840cb529b8dc9eb2cbe00b46d6b8f05e53edcce", @typed={0x8, 0x13f, 0x0, 0x0, @str='-%@\x00'}]}]}, 0x15f4}, 0x1, 0x0, 0x0, 0x4000}, 0x20040011) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) pselect6(0x40, &(0x7f0000001740)={0x24, 0x8000000000000000, 0x1, 0x3f, 0x6, 0x5, 0x9, 0x527}, &(0x7f0000001780)={0xffffffffffff1479, 0x4, 0x100000000, 0x3, 0x7fffffff, 0x0, 0x6a, 0x2}, &(0x7f00000017c0)={0xffffffff, 0x7ff, 0x9, 0x5647, 0x4, 0x2, 0x0, 0x8}, &(0x7f0000001800), &(0x7f0000001880)={&(0x7f0000001840)={[0x80000000]}, 0x8}) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000001940)={&(0x7f00000018c0)='-\x00', &(0x7f0000001900)='-\xb3/-[\x00', 0xb}) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(0xffffffffffffffff, 0x40086e81, &(0x7f0000001980)=0xb) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f00000019c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0xc, 'bond_slave_0\x00'}) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001ac0)={'veth0_vlan\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000001b00)={@private0={0xfc, 0x0, '\x00', 0x1}, r4}, 0x14) r5 = semget$private(0x0, 0x2, 0xc8) semtimedop(r5, &(0x7f0000001b40)=[{0x4, 0xd, 0x1c00}, {0x3, 0x6, 0x1000}, {0x0, 0x800, 0x1000}, {0x4, 0xa, 0x1000}], 0x4, &(0x7f0000001b80)={0x77359400}) setsockopt$MRT6_PIM(r2, 0x29, 0xcf, &(0x7f0000001bc0), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001c00)={'vxcan1\x00', 0x0}) r7 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001c40)={0x1b, 0x0, 0x0, 0x80, 0x0, 0x1, 0x8000, '\x00', r6, r3, 0x3, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e40)={r2, 0x0, 0x55, 0x2e, &(0x7f0000001cc0)="40034249de7341c3b77a9592ea7e4fc0704dc93c76205d2af453c47a5bc4305870411136734ad5a47353acc2155d1ff3684bdb067462d91da2a2da82b2de49cef05642f9c8d132f0fc0bcd5a0d2f1c97662882daf7", &(0x7f0000001d40)=""/46, 0x40, 0x0, 0x69, 0xf, &(0x7f0000001d80)="f9bce24928e7ddc38ae9556180367ece4a6f180f55fa7911cc548a9a0c1d3a019b710cb85a4e44be56b156b02c48ef24ac891da17b25ff816119c2d1bb61c6a8ff1aa501211812eca1cd0ef314845b3f45c34c612cbbf0e9b6f9ad5163547539b08eb733e2f8af21b4", &(0x7f0000001e00)="fbc73f28dcac1e39b28c1361e43571", 0x2, 0x0, 0x2}, 0x50) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001f00), r8) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000002040)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0x8c, r9, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0x70, 0x8, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x8000, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7fff}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffff}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x14) inotify_add_watch(r2, &(0x7f0000002080)='./file0\x00', 0x40000280) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000020c0)={"e526884055949944c0b19103957309f289d72f7f90f6759c62660a1a2c343c9b", r2}) r10 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000002300), 0x250040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000023c0)={0xf, 0x0, &(0x7f0000002100), &(0x7f0000002140)='syzkaller\x00', 0x7, 0xce, &(0x7f0000002180)=""/206, 0x61900, 0x40, '\x00', 0x0, @fallback=0x22, r2, 0x8, &(0x7f0000002280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000022c0)={0x1, 0x6, 0x8000, 0x2}, 0x10, 0x0, r2, 0x4, &(0x7f0000002340)=[r10, r8, r8, 0xffffffffffffffff, r8], &(0x7f0000002380)=[{0x0, 0x5, 0x3, 0xa}, {0x5, 0x5, 0xc}, {0x3, 0x3, 0xc, 0x5}, {0x4, 0x3, 0x3, 0x4}], 0x10, 0x6}, 0x94) ptrace$getregset(0x4204, r1, 0x4, &(0x7f0000002500)={&(0x7f0000002480)=""/112, 0x70}) read$snddsp(r10, &(0x7f0000002540)=""/246, 0xf6) sendmsg$NFT_BATCH(r7, &(0x7f0000002740)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002700)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x44, 0x8, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x8003}, 0x800) r11 = memfd_create(&(0x7f0000002780)='!:)*\x00', 0x2) readv(r11, &(0x7f0000003e40)=[{&(0x7f00000027c0)=""/192, 0xc0}, {&(0x7f0000002880)=""/202, 0xca}, {&(0x7f0000002980)=""/107, 0x6b}, {&(0x7f0000002a00)=""/230, 0xe6}, {&(0x7f0000002b00)=""/139, 0x8b}, {&(0x7f0000002bc0)=""/128, 0x80}, {&(0x7f0000002c40)=""/109, 0x6d}, {&(0x7f0000002cc0)=""/180, 0xb4}, {&(0x7f0000002d80)=""/169, 0xa9}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0xa) 1.068129786s ago: executing program 8 (id=6690): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c1f1700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 1.06781127s ago: executing program 0 (id=6691): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x22, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.028494688s ago: executing program 7 (id=6692): mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5128bbad0099cebdc25f5abb534464c516bdd8a0f350000000000000000000000000000000000000100", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b41000000050000000000001000", [0x9, 0x12000000000000]}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001240)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000001340)=0xe8) getresgid(0x0, &(0x7f0000000000)=0x0, 0x0) setregid(0x0, r3) mount$fuse(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000280), 0x1080000, &(0x7f0000001380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@blksize={'blksize', 0x3d, 0xe00}}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@dont_hash}]}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000540)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x4, 0x19}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x4000014) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r6, &(0x7f00000023c0)={0x2, 0x4e24, @broadcast}, 0x10) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000380)={0xb2b42a00, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x3d, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x42, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x1, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0xffffffff, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff, 0x10000000}, {}, {0x0, 0x0, 0xc, 0x7, 0x0, 0x6}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x52a}, {0xffffffff, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x29, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x28e, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x100000, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x6, 0x3}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xcb}, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {0x0, 0xfffffffe}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1, 0xfffffffd}, {0x0, 0x2, 0x0, 0x88}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0x4e}, {0x0, 0x54e4}, {0x0, 0x101, 0x0, 0x4, 0x0, 0xffffffff}, {}, {0x2f, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {0x0, 0x2, 0xfffffffd, 0x80000, 0x3}, {}, {0x800000, 0x9, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {0x0, 0x80}, {}, {0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x0, 0x8}, {0x7f, 0x0, 0xfffffffe, 0xfffffffe}, {}, {}, {0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x8, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x80000000, 0x0, 0x7619, 0x0, 0x101}, {0x5, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x200, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7, 0x7f53}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x7fffffff}, {}, {0x1, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}, {0x3, 0x0, 0x0, 0x0, 0xffffffff}], [{0x3}, {}, {}, {}, {}, {0x3}, {}, {0x3, 0x1}, {0x2, 0x1}, {}, {}, {0x1}, {0x4, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {}, {}, {}, {0x749eb9ae44d9651f}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {0x3}, {}, {0x1}, {}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x8, 0x1}, {}, {0x1}, {0x4}, {}, {0x0, 0x1}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {0x6}, {0x2, 0x1}, {}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x2}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FITHAW(r9, 0xc0045878) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002b40)=""/135, 0x87}, 0x40002101) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r8, 0x58, &(0x7f0000000600)}, 0x10) rmdir(&(0x7f0000000200)='./file0/file1\x00') pipe2(&(0x7f0000000140), 0x80) 777.510244ms ago: executing program 8 (id=6693): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f0000000080)=0xfffffffe, 0x4) recvmsg$can_raw(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/107, 0x6b}, {&(0x7f0000000640)=""/81, 0x51}], 0x2, &(0x7f00000004c0)=""/243, 0xf3}, 0x120) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000100), 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) (async) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa08020209"], 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x20, 0x2c, 0x0, @remote, @local, {[@routing={0x84, 0x0, 0x2, 0x1}, @srh={0x89, 0x2, 0x4, 0x1, 0x6, 0x20, 0x3, [@mcast2]}]}}}}}, 0x0) (async) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2f00, 0x1) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x40000400004, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x48, 0x31, 0x12f, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x48}}, 0x0) (async) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000b1f000/0xf000)=nil, &(0x7f0000f4a000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fbc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f00004d9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045) r3 = io_uring_setup(0x2b24, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0x2f8}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) rt_sigsuspend(&(0x7f0000000040)={[0x4]}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000ffffff7f00000000feffffff8500fba2f130000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000180)=@canfd={{0x2, 0x1, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "c70e88260c7efc47770fec8b8498b71f007c423b6727a5f8dbc1f2625074053d0c3c91343f0cc9fb97434318efca5e4512b8efdde73c971d7826c7c08904b2a7"}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4044015) 578.801855ms ago: executing program 8 (id=6694): set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x6, 0x110, 0xffffffffffffffff, 0x1000000) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1000000004000900040000863263f200000000009b9f1d4c30185b28b9adc78724b97a3caa1ac2da21fbc47e6b1e88904988e3cc2e838da25e16ffc113b366d7ad2337575d45d1e5cd051db76991fd557b2560cf727fc139809e304d982c0c244e94797aca76950428b807e3b82296d54dfcd59180806a3d262713e58ee2f96f16e14bf63df4ab231610443e3c22c18e187212414766bf9d135c7ada9171a4ce1a4fe5bb8d7c34ca7b5dd0af08b222ad1400"/189, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc8, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x80000001}]}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x8000}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xfffffe01}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x30, 0x84, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x800}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="c779e0bfc4bb"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}]}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCAN_SSIDS={0x38, 0x2d, 0x0, 0x1, [{0x1c, 0x0, @random="94977a475016d8bb1a3239cb857cc4e0951ca8e7acb74021"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8800}, 0xc0) (async) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000180)={r0, &(0x7f0000000040), 0x0}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffe0}, 0xfffffffffffffcc2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x50}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 437.713066ms ago: executing program 7 (id=6695): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0) r1 = eventfd2(0xd, 0x801) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x2, r1}) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfffffffffffffab0, 0x62c80) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) 354.652391ms ago: executing program 8 (id=6696): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000040)=0x5, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r4, 0x4068aea3, &(0x7f0000000240)={0xce, 0x0, r4}) (async) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) (async) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0xc, 0x21}) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r6, &(0x7f0000000740)={'#! ', './file0', [{0x20, 'veth0\x00'}], 0xa, "b760e2dc54b30fdb5f51c3d4d97d88d060c692d55588da5db0d89d79f39236fb2e676363fe3dbe5794159beaa02bcf95312a65b403cb979c2fe5b992b8e03b83c12ee53f401ba4d715"}, 0x5b) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r7, &(0x7f00000000c0)=""/55, 0x37) (async) getdents64(r7, &(0x7f0000002f40)=""/4098, 0x1002) (async, rerun: 32) sendto$packet(r1, 0x0, 0x0, 0x4000040, &(0x7f0000000540)={0xc9, 0x1a, r2, 0x1, 0x0, 0x6, @random="0000031000"}, 0x14) (rerun: 32) r8 = dup3(r1, r0, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x2, 0xfffff7f8, 0x9}, &(0x7f0000000080)=0x10) (async, rerun: 32) recvmsg$can_raw(r8, &(0x7f0000000700)={&(0x7f00000003c0)=@nfc, 0x80, &(0x7f0000000640)=[{&(0x7f0000000240)=""/175, 0xaf}, {&(0x7f0000000300)=""/130, 0x82}, {&(0x7f00000003c0)}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/163, 0xa3}, {&(0x7f0000000000)=""/51, 0x33}, {&(0x7f00000001c0)=""/1, 0x1}, {&(0x7f00000005c0)=""/76, 0x4c}], 0x8, &(0x7f00000006c0)=""/36, 0x24}, 0x100) (rerun: 32) r10 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x20, 0xffffffffffffffff, 0x0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}], 0x2}, 0x2, 0x48000, 0x1, {0x2}}) (async) io_uring_enter(r10, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000011401bff1f5bc00fedbdf25080001000100000060d0a5007c12d0b9fe3a216ebea71944103f356572686732fe84cd4bf607750b214b0cea96c09e4e8ee1ffeaeecc7d981344d6ddc29c123628f62d7db68c2bf02e3841b98022ef1256db07e9d14dd8532393f59cf538405a083cda41c353d266f48751beff232cdb46150c82946e1d50ea273c3a4e21054f2ae1359a5c226da45ef5fe86a7a8858a53186ab128"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x8040) 235.51849ms ago: executing program 7 (id=6697): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001440)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001440)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="0f20c035200000000f22c0b9710300000f32f3420f5b8c608d000000660f38819310000000b9800000c00f3235002000000f3066ba4000b827000000efc4814573d8b9c74424005b000000c744240298000000ff2c24f2427bf765f347a5", 0x5e}], 0x1, 0x10, 0x0, 0x0) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000500)={0x0, &(0x7f0000000240)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @ro32=0x440e, 0x1, 0xd, 0x8}}, @nested_amd_invlpga={0x17d, 0x20, {0x8080000, 0xd6c}}, @code={0xa, 0x99, {"c744240018000000c744240201000000ff1c24c744240067a93a12c744240200000000c7442406000000000f011c2448b8cb5f5c10000000000f23c00f21f83501000c000f23f80f20d835080000000f22d88fe868b6a529000000093e3e410f353e440f07b805000000b9000800000f01c166baf80cb83408f68aef66bafc0ced6466440fc7719d"}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_vmresume={0x130, 0x18, 0x1}, @wr_crn={0x67, 0x20, {0x3, 0x200}}, @code={0xa, 0x99, {"c744240021d10109c744240200400000c7442406000000000f011424c74424007e000000c7442402565b6e6eff1c2466b86e008ee80f20e035000200000f22e03e364a0fc72e66ba410066b8006066efc74424002ebb3ce7c744240291000000c7442406000000000f01142466baf80cb83c992885ef66bafc0cedc483e944b90a1000000041dff0"}}, @rdmsr={0x66, 0x18, {0x9f1}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_vmload={0x182, 0x18}, @in_dx={0x69, 0x20, {0xed69, 0x4}}, @nested_create_vm={0x12d, 0x18, 0x1}, @in_dx={0x69, 0x20, {0xa64, 0x1}}, @wr_drn={0x68, 0x20, {0x2, 0x10f1}}], 0x2b2}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_kvm_setup_cpu$x86(r8, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000180)="660f3882862a3200003ea112000000c4e27d1ed666baf80cb85ab9af8fef66bafc0c66edb805000000b9b6f600000f01d9b81e0000000f23d00f21f835100000060f23f8c4c37d19009666baf80cb8b41dae84ef66bafc0cec66baa100ed0f20d835080000000f22d8"}], 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 111.250739ms ago: executing program 8 (id=6698): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x7, "ff0000bb719b98fb73e53a0000000600"}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0xa40, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) (async) r5 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r5, 0x5406, &(0x7f00000001c0)={0xff7e, 0xd, 0x8, 0xe9, 0x17}) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0xd) 0s ago: executing program 0 (id=6699): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket(0x10, 0x803, 0x2) (rerun: 32) syz_genetlink_get_family_id$mptcp(0x0, r3) getsockname$packet(r3, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000500), &(0x7f0000000540)=0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0x1, 0x3, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xc}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x4ee0, 0x0, 0x5, 0xb367}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}}, 0x0) getpeername$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) (async) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e00)=@newtfilter={0x48, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5, 0xfff3}, {0x0, 0xfff3}, {0x9, 0x300}}, [@filter_kind_options=@f_flower={{0xf}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'wg2\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x100, r6, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000090}, 0x1) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) (async, rerun: 64) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x94, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x80, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x60, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) kernel console output (not intermixed with test programs): [T27806] overlay: Unknown parameter './file0' [ 968.882232][T27806] overlay: Unknown parameter './file0' [ 968.885670][T27806] overlay: Unknown parameter './file0' [ 968.902208][T27806] overlay: Unknown parameter './file0' [ 968.920842][T27806] overlay: Unknown parameter './file0' [ 968.938011][T27806] overlay: Unknown parameter './file0' [ 968.949737][T27806] overlay: Unknown parameter './file0' [ 968.960854][T27806] overlay: Unknown parameter './file0' [ 968.967692][T27806] overlay: Unknown parameter './file0' [ 968.985297][T27806] overlay: Unknown parameter './file0' [ 968.993811][T27806] overlay: Unknown parameter './file0' [ 969.008024][T27806] overlay: Unknown parameter './file0' [ 969.020072][T27806] overlay: Unknown parameter './file0' [ 969.028153][T21189] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 969.038688][T27806] overlay: Unknown parameter './file0' [ 969.048030][T27806] overlay: Unknown parameter './file0' [ 969.073143][T27806] overlay: Unknown parameter './file0' [ 969.077023][T27806] overlay: Unknown parameter './file0' [ 969.087384][T27806] overlay: Unknown parameter './file0' [ 969.093889][T27806] overlay: Unknown parameter './file0' [ 969.099465][T27806] overlay: Unknown parameter './file0' [ 969.104860][T27806] overlay: Unknown parameter './file0' [ 969.110035][T27806] overlay: Unknown parameter './file0' [ 969.115805][T27806] overlay: Unknown parameter './file0' [ 969.122042][T27806] overlay: Unknown parameter './file0' [ 969.131386][T27806] overlay: Unknown parameter './file0' [ 969.138534][T27806] overlay: Unknown parameter './file0' [ 969.160071][ T42] kauditd_printk_skb: 1097 callbacks suppressed [ 969.160090][ T42] audit: type=1400 audit(1784611532.682:71103): avc: denied { mounton } for pid=27803 comm="syz.0.5887" path="/246/bus" dev="tmpfs" ino=1325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 969.163137][T27806] overlay: Unknown parameter './file0' [ 969.180554][ T42] audit: type=1400 audit(1784611532.701:71104): avc: denied { create } for pid=27828 comm="syz.3.5892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 969.181018][T27806] overlay: Unknown parameter './file0' [ 969.199977][ T42] audit: type=1400 audit(1784611532.701:71105): avc: denied { create } for pid=27828 comm="syz.3.5892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 969.210107][T27806] overlay: Unknown parameter './file0' [ 969.212247][ T42] audit: type=1400 audit(1784611532.701:71106): avc: denied { ioctl } for pid=27828 comm="syz.3.5892" path="socket:[144071]" dev="sockfs" ino=144071 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 969.226900][T27806] overlay: Unknown parameter './file0' [ 969.228912][ T42] audit: type=1400 audit(1784611532.701:71107): avc: denied { module_request } for pid=27828 comm="syz.3.5892" kmod="netdev-vxcan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 969.233889][T27806] overlay: Unknown parameter './file0' [ 969.241992][T27806] overlay: Unknown parameter './file0' [ 969.247907][ T42] audit: type=1400 audit(1784611532.701:71108): avc: denied { write } for pid=27828 comm="syz.3.5892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 969.248094][T27806] overlay: Unknown parameter './file0' [ 969.256107][ T42] audit: type=1400 audit(1784611532.701:71109): avc: denied { write } for pid=27828 comm="syz.3.5892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 969.256157][ T42] audit: type=1400 audit(1784611532.701:71110): avc: denied { mounton } for pid=27803 comm="syz.0.5887" path="/246/bus" dev="tmpfs" ino=1325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 969.256196][ T42] audit: type=1400 audit(1784611532.710:71111): avc: denied { create } for pid=27828 comm="syz.3.5892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 969.256237][ T42] audit: type=1400 audit(1784611532.710:71112): avc: denied { bind } for pid=27828 comm="syz.3.5892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 969.290357][T27806] overlay: Unknown parameter './file0' [ 969.292745][T27806] overlay: Unknown parameter './file0' [ 969.297207][T27806] overlay: Unknown parameter './file0' [ 969.300493][T27806] overlay: Unknown parameter './file0' [ 969.302972][T27806] overlay: Unknown parameter './file0' [ 969.306850][T27806] overlay: Unknown parameter './file0' [ 969.308892][T27806] overlay: Unknown parameter './file0' [ 969.310820][T27806] overlay: Unknown parameter './file0' [ 969.312839][T27806] overlay: Unknown parameter './file0' [ 969.314993][T27806] overlay: Unknown parameter './file0' [ 969.318961][T27806] overlay: Unknown parameter './file0' [ 969.321009][T27806] overlay: Unknown parameter './file0' [ 969.323357][T27806] overlay: Unknown parameter './file0' [ 969.325313][T27806] overlay: Unknown parameter './file0' [ 969.330413][T27806] overlay: Unknown parameter './file0' [ 969.332614][T27806] overlay: Unknown parameter './file0' [ 969.334480][T27806] overlay: Unknown parameter './file0' [ 969.336306][T27806] overlay: Unknown parameter './file0' [ 969.340693][T27806] overlay: Unknown parameter './file0' [ 969.343682][T27806] overlay: Unknown parameter './file0' [ 969.345983][T27806] overlay: Unknown parameter './file0' [ 969.348739][T27806] overlay: Unknown parameter './file0' [ 969.351862][T27806] overlay: Unknown parameter './file0' [ 970.958540][ T35] block nbd0: Possible stuck request ffff888029a65080: control (read@0,1024B). Runtime 178 seconds [ 970.962939][ T35] block nbd0: Possible stuck request ffff888029a65240: control (read@1024,3072B). Runtime 178 seconds [ 971.938539][T27811] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 972.118607][T27868] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5902'. [ 972.133752][T27867] netlink: 'syz.3.5900': attribute type 61 has an invalid length. [ 972.284269][T27872] fuse: Unknown parameter '0x0000000000000004' [ 972.665494][T27891] netlink: 'syz.0.5908': attribute type 1 has an invalid length. [ 972.669817][T27891] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.5908'. [ 972.678665][T27891] netlink: 'syz.0.5908': attribute type 1 has an invalid length. [ 972.683570][T27891] netlink: 2016 bytes leftover after parsing attributes in process `syz.0.5908'. [ 972.722291][T27887] xt_hashlimit: size too large, truncated to 1048576 [ 972.823898][T27895] fuse: fd is not a fuse device [ 973.119173][T27912] fuse: Unknown parameter '0x0000000000000004' [ 973.220539][T20850] block nbd1: Possible stuck request ffff888029a80000: control (read@0,4096B). Runtime 300 seconds [ 973.361639][T27929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5918'. [ 973.443842][ T5816] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xaa [ 973.511956][T27938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 973.596071][T27947] fuse: Unknown parameter '0x0000000000000004' [ 974.220730][ T61] usb 13-1: new high-speed USB device number 35 using dummy_hcd [ 974.392131][ T61] usb 13-1: Using ep0 maxpacket: 32 [ 974.399513][ T61] usb 13-1: config index 0 descriptor too short (expected 15270, got 18) [ 974.407772][ T61] usb 13-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 974.411714][ T61] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.415250][ T61] usb 13-1: Product: syz [ 974.417071][ T61] usb 13-1: Manufacturer: syz [ 974.418910][ T61] usb 13-1: SerialNumber: syz [ 974.423751][ T61] usb 13-1: config 0 descriptor?? [ 974.430420][ T61] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 974.433775][ T61] dvb-usb: bulk message failed: -22 (4/0) [ 974.437488][ T61] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 974.441840][ T61] dvb-usb: bulk message failed: -22 (5/0) [ 974.444227][ T61] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 974.458231][ T61] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 974.462561][ T61] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 974.465798][ T61] usb 13-1: media controller created [ 974.477911][ T61] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 974.498596][ T61] usb 13-1: selecting invalid altsetting 3 [ 974.500551][ T61] ttusb2: set interface to alts=3 failed [ 974.533726][ T61] DVB: Unable to find symbol tda10086_attach() [ 974.535825][ T61] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 974.538933][ T61] dvb-usb: bulk message failed: -22 (4/0) [ 974.545566][ T35] block nbd0: Possible stuck request ffff888029a65080: control (read@0,1024B). Runtime 180 seconds [ 974.545603][ T35] block nbd0: Possible stuck request ffff888029a65240: control (read@1024,3072B). Runtime 180 seconds [ 974.554912][ T61] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 974.558258][ T61] dvb-usb: bulk message failed: -22 (5/0) [ 974.560288][ T61] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 974.564094][ T61] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 974.642352][T27962] dvb-usb: bulk message failed: -22 (7/0) [ 974.650853][T27962] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 974.655572][T27962] ttusb2: i2c transfer failed. [ 974.658010][ T42] kauditd_printk_skb: 1572 callbacks suppressed [ 974.658027][ T42] audit: type=1400 audit(1784611537.829:72685): avc: denied { read } for pid=27961 comm="syz.8.5927" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 974.671257][ T42] audit: type=1400 audit(1784611537.829:72686): avc: denied { open } for pid=27961 comm="syz.8.5927" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 974.671683][ T61] usb 13-1: USB disconnect, device number 35 [ 974.691996][ T42] audit: type=1400 audit(1784611537.866:72687): avc: denied { recv } for pid=5650 comm="syz-executor" saddr=127.0.0.1 src=46778 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 974.704272][ T42] audit: type=1400 audit(1784611537.866:72688): avc: denied { recv } for pid=5649 comm="sshd-session" saddr=10.0.2.2 src=34026 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 974.721766][ T42] audit: type=1400 audit(1784611537.876:72689): avc: denied { read write } for pid=22333 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 974.736071][ T42] audit: type=1400 audit(1784611537.876:72690): avc: denied { read write open } for pid=22333 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 974.752051][ T42] audit: type=1400 audit(1784611537.876:72691): avc: denied { ioctl } for pid=22333 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 974.765446][ T42] audit: type=1400 audit(1784611537.913:72692): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46778 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 974.768519][ T61] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 974.776431][ T42] audit: type=1400 audit(1784611537.913:72693): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=46778 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 974.789661][ T42] audit: type=1400 audit(1784611537.922:72694): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46778 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 976.454971][T27931] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 976.530655][T27982] fuse: Unknown parameter 'fd0x0000000000000004' [ 976.671786][T27989] selinux_netlink_send: 57 callbacks suppressed [ 976.671799][T27989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=27989 comm=syz.3.5934 [ 976.730652][T27998] xt_hashlimit: size too large, truncated to 1048576 [ 976.794564][T28001] xt_hashlimit: size too large, truncated to 1048576 [ 976.797420][T28003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28003 comm=syz.7.5938 [ 976.913109][T28019] fuse: Unknown parameter 'fd0x0000000000000004' [ 977.396923][T28047] overlayfs: invalid redirect (./bus) [ 977.591242][T28067] fuse: Unknown parameter 'fd0x0000000000000004' [ 977.874656][T28077] syzkaller0: entered promiscuous mode [ 977.878289][T28077] syzkaller0: entered allmulticast mode [ 977.933894][T28077] tipc: Enabled bearer , priority 0 [ 977.942963][T28076] tipc: Resetting bearer [ 977.973971][T28076] tipc: Disabling bearer [ 978.151036][ T35] block nbd0: Possible stuck request ffff888029a65080: control (read@0,1024B). Runtime 182 seconds [ 978.155672][ T35] block nbd0: Possible stuck request ffff888029a65240: control (read@1024,3072B). Runtime 182 seconds [ 978.662001][T28097] fuse: Bad value for 'fd' [ 978.749853][T28101] syzkaller0: entered promiscuous mode [ 978.754210][T28101] syzkaller0: entered allmulticast mode [ 978.802514][T28101] tipc: Enabled bearer , priority 0 [ 978.815313][T28100] tipc: Resetting bearer [ 978.830301][T28107] openvswitch: netlink: IPv4 tunnel dst address is zero [ 978.832580][T28107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 978.867417][T28100] tipc: Disabling bearer [ 979.017266][T28118] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 979.382152][T28125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5974'. [ 979.445945][T28128] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5975'. [ 979.460878][T28128] overlay: filesystem on ./bus not supported [ 980.010600][ T42] kauditd_printk_skb: 929 callbacks suppressed [ 980.010616][ T42] audit: type=1400 audit(1784611542.835:73624): avc: denied { read } for pid=28143 comm="syz.3.5982" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 980.026721][T28145] binder: 28143:28145 ioctl c0306201 200000000480 returned -14 [ 980.039103][ T42] audit: type=1400 audit(1784611542.835:73625): avc: denied { read open } for pid=28143 comm="syz.3.5982" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 980.054917][ T42] audit: type=1400 audit(1784611542.845:73626): avc: denied { ioctl } for pid=28143 comm="syz.3.5982" path="/dev/binderfs/binder0" dev="binder" ino=19 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 980.066658][ T42] audit: type=1400 audit(1784611542.845:73627): avc: denied { set_context_mgr } for pid=28143 comm="syz.3.5982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 980.082381][ T42] audit: type=1400 audit(1784611542.845:73628): avc: denied { read } for pid=28143 comm="syz.3.5982" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 980.094727][ T42] audit: type=1400 audit(1784611542.845:73629): avc: denied { read open } for pid=28143 comm="syz.3.5982" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 980.120838][ T42] audit: type=1400 audit(1784611542.845:73630): avc: denied { ioctl } for pid=28143 comm="syz.3.5982" path="/dev/binderfs/binder0" dev="binder" ino=19 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 980.140843][ T42] audit: type=1400 audit(1784611542.845:73631): avc: denied { read } for pid=28143 comm="syz.3.5982" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 980.163905][ T42] audit: type=1400 audit(1784611542.845:73632): avc: denied { read open } for pid=28143 comm="syz.3.5982" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 980.174405][ T42] audit: type=1400 audit(1784611542.845:73633): avc: denied { map } for pid=28143 comm="syz.3.5982" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 980.255447][T28167] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 980.552355][T28183] openvswitch: netlink: Actions may not be safe on all matching packets [ 980.572879][T28181] overlayfs: failed to clone lowerpath [ 980.695591][T28195] syzkaller0: entered promiscuous mode [ 980.699090][T28195] syzkaller0: entered allmulticast mode [ 980.752988][T28195] tipc: Enabled bearer , priority 0 [ 980.764078][T28191] tipc: Resetting bearer [ 980.797157][T28191] tipc: Disabling bearer [ 980.829607][T28204] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6002'. [ 980.835423][T28204] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6002'. [ 980.859489][T28204] SELinux: ebitmap: high bit 1536 is not equal to the expected value 768 [ 980.863050][T28204] SELinux: invalid class [ 980.869423][T28204] SELinux: failed to load policy [ 981.054900][T28209] SET target dimension over the limit! [ 981.104136][T28209] netlink: 'syz.7.6004': attribute type 27 has an invalid length. [ 981.121064][T28209] macsec0: left promiscuous mode [ 981.125130][T28209] macsec0: left allmulticast mode [ 981.127552][T28209] mac80211_hwsim hwsim52 syzkaller0: left promiscuous mode [ 981.131602][T28209] mac80211_hwsim hwsim52 syzkaller0: left allmulticast mode [ 981.134125][T28209] geneve2: left promiscuous mode [ 981.139580][T28209] bond5: left promiscuous mode [ 981.141140][T28209] ip6gre1: left promiscuous mode [ 981.147003][T28209] macvtap1: left allmulticast mode [ 981.149314][T28209] macvtap2: left allmulticast mode [ 981.286049][T28212] bond6: entered promiscuous mode [ 981.332364][T28217] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6006'. [ 981.341985][T28217] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6006'. [ 981.478436][T28225] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 981.724901][ T35] block nbd0: Possible stuck request ffff888029a65080: control (read@0,1024B). Runtime 184 seconds [ 981.728872][ T35] block nbd0: Possible stuck request ffff888029a65240: control (read@1024,3072B). Runtime 184 seconds [ 981.845005][T28232] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 981.851419][T28232] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.864553][T28231] tipc: Enabling of bearer rejected, failed to enable media [ 982.077121][T28232] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 982.101439][T28232] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.515303][T28232] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 982.519603][T28232] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.542287][T28254] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 982.558759][T28254] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 982.576352][T28254] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 982.593356][T28254] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 982.854018][T28232] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 982.854246][T28261] netlink: 'syz.8.6018': attribute type 1 has an invalid length. [ 982.857870][T28232] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.922864][T28261] bond7: entered allmulticast mode [ 982.956440][T28261] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 982.960099][T28261] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 982.979130][T28261] bond7: (slave vti0): making interface the new active one [ 982.982226][T28261] vti0: entered allmulticast mode [ 982.989966][T28261] bond7: (slave vti0): Enslaving as an active interface with an up link [ 983.096578][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 983.115024][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.139485][ T5819] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 983.146604][ T5819] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.180984][ T5819] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 983.185777][ T5819] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.205225][ T5819] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 983.208928][ T5819] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.308034][T28271] lo speed is unknown, defaulting to 1000 [ 983.348815][T28276] mac80211_hwsim hwsim52 syzkaller0: entered promiscuous mode [ 983.352073][T28276] mac80211_hwsim hwsim52 syzkaller0: entered allmulticast mode [ 983.404337][T28276] tipc: Enabling of bearer rejected, already enabled [ 983.463452][T28281] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6023'. [ 983.594017][T28283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6024'. [ 983.644539][T28288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6026'. [ 983.649008][T28288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6026'. [ 983.652475][T28288] netlink: 'syz.3.6026': attribute type 7 has an invalid length. [ 983.658321][T28288] netlink: 'syz.3.6026': attribute type 13 has an invalid length. [ 983.774629][T28292] devpts: Unknown parameter 'wlan0' [ 983.834376][T28298] SET target dimension over the limit! [ 983.899528][T28302] SET target dimension over the limit! [ 983.983665][T28305] tipc: Enabling of bearer rejected, already enabled [ 984.445708][T28337] tipc: Enabling of bearer rejected, failed to enable media [ 984.568096][T28353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28353 comm=syz.3.6043 [ 984.990233][T28377] syzkaller0: entered promiscuous mode [ 984.995592][T28377] syzkaller0: entered allmulticast mode [ 985.049105][T28377] tipc: Enabled bearer , priority 0 [ 985.057388][T28376] tipc: Resetting bearer [ 985.088612][T28376] tipc: Disabling bearer [ 985.314714][ T35] block nbd0: Possible stuck request ffff888029a65080: control (read@0,1024B). Runtime 186 seconds [ 985.318265][ T35] block nbd0: Possible stuck request ffff888029a65240: control (read@1024,3072B). Runtime 186 seconds [ 985.490798][ T42] kauditd_printk_skb: 1124 callbacks suppressed [ 985.490818][ T42] audit: type=1400 audit(1784611547.964:74758): avc: denied { recv } for pid=5650 comm="syz-executor" saddr=127.0.0.1 src=46778 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 985.504399][ T42] audit: type=1400 audit(1784611547.964:74759): avc: denied { recv } for pid=24623 comm="syz-executor" saddr=10.0.2.2 src=34026 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 985.515160][ T42] audit: type=1400 audit(1784611547.982:74760): avc: denied { create } for pid=28381 comm="syz.0.6054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 985.524144][ T42] audit: type=1400 audit(1784611547.982:74761): avc: denied { write } for pid=28381 comm="syz.0.6054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 985.543319][ T42] audit: type=1400 audit(1784611548.010:74762): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46778 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 985.553469][ T42] audit: type=1400 audit(1784611548.010:74763): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=46778 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 985.554409][T28384] __nla_validate_parse: 1 callbacks suppressed [ 985.554423][T28384] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6055'. [ 985.564171][ T42] audit: type=1400 audit(1784611548.010:74764): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46778 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 985.564216][ T42] audit: type=1400 audit(1784611548.010:74765): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=34026 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 985.564256][ T42] audit: type=1400 audit(1784611548.010:74766): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=34026 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 985.564293][ T42] audit: type=1400 audit(1784611548.010:74767): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=34026 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 985.608817][T28384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6055'. [ 985.725974][T28394] tipc: Enabling of bearer rejected, failed to enable media [ 985.769443][T28399] fuse: fd is not a fuse device [ 986.205290][T28420] fuse: fd is not a fuse device [ 986.224186][T28420] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.081869][T28420] bridge_slave_0 (unregistering): left allmulticast mode [ 987.084833][T28420] bridge_slave_0 (unregistering): left promiscuous mode [ 987.088557][T28420] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.266824][T28434] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6071'. [ 987.362933][T28438] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6073'. [ 987.369502][T28438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6073'. [ 987.380403][T28440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6073'. [ 987.380432][T28439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6073'. [ 987.467931][T28443] overlayfs: failed to resolve './cgroup': -2 [ 987.654117][T28452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=28452 comm=syz.8.6076 [ 987.700272][T28454] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6074'. [ 987.721337][T28456] sg_write: data in/out 808464396/14 bytes for SCSI command 0x0-- guessing data in; [ 987.721337][T28456] program syz.8.6077 not setting count and/or reply_len properly [ 987.783776][T28456] 9pnet_virtio: no channels available for device syz [ 987.814736][T28459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28459 comm=syz.7.6078 [ 987.820460][T28459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28459 comm=syz.7.6078 [ 987.830715][T28459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28459 comm=syz.7.6078 [ 987.839414][T28459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28459 comm=syz.7.6078 [ 987.844821][T28459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28459 comm=syz.7.6078 [ 988.084594][T28465] program syz.8.6080 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 988.217343][T28470] overlayfs: cannot append lower layer [ 988.906160][ T35] block nbd0: Possible stuck request ffff888029a65080: control (read@0,1024B). Runtime 188 seconds [ 988.910681][ T35] block nbd0: Possible stuck request ffff888029a65240: control (read@1024,3072B). Runtime 188 seconds [ 989.599926][T28518] CIFS mount error: No usable UNC path provided in device string! [ 989.599926][T28518] [ 989.603216][T28518] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 989.692036][T28520] program syz.8.6097 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 989.703754][T28520] rdma_rxe: rxe_newlink: failed to add geneve1 [ 989.899095][T28524] binder: Unknown parameter 'subj_type' [ 989.946223][T28526] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6099'. [ 989.949801][T28526] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.970139][T28526] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6099'. [ 990.108148][T28537] : renamed from bridge_slave_1 (while UP) [ 990.842219][ T42] kauditd_printk_skb: 817 callbacks suppressed [ 990.842236][ T42] audit: type=1400 audit(1784611552.970:75585): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46778 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 990.855683][ T42] audit: type=1400 audit(1784611552.970:75586): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=46778 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 990.865594][ T42] audit: type=1400 audit(1784611552.970:75587): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46778 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 990.893547][ T42] audit: type=1400 audit(1784611552.970:75588): avc: denied { recv } for pid=5649 comm="sshd-session" saddr=10.0.2.2 src=34026 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 990.913101][ T42] audit: type=1400 audit(1784611552.970:75589): avc: denied { recv } for pid=5649 comm="sshd-session" saddr=10.0.2.2 src=34026 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 990.921216][T28552] __nla_validate_parse: 1 callbacks suppressed [ 990.921232][T28552] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6108'. [ 990.922581][ T42] audit: type=1400 audit(1784611552.970:75590): avc: denied { recv } for pid=5649 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46778 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 990.945468][ T42] audit: type=1400 audit(1784611552.989:75591): avc: denied { recv } for pid=5649 comm="sshd-session" saddr=127.0.0.1 src=46778 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 990.957408][ T42] audit: type=1400 audit(1784611553.008:75592): avc: denied { read write } for pid=22333 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 990.967362][ T42] audit: type=1400 audit(1784611553.008:75593): avc: denied { open } for pid=22333 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 990.976884][ T42] audit: type=1400 audit(1784611553.008:75594): avc: denied { ioctl } for pid=22333 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 991.032770][T28554] program syz.8.6109 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 991.567867][T28562] netlink: 56 bytes leftover after parsing attributes in process `syz.8.6112'. [ 991.713464][T28568] syzkaller1: entered promiscuous mode [ 991.718301][T28568] syzkaller1: entered allmulticast mode [ 991.804614][T28570] netlink: 'syz.7.6116': attribute type 16 has an invalid length. [ 991.811179][T28570] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.6116'. [ 992.149411][T28537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6103'. [ 992.235510][T28583] netlink: 'syz.7.6119': attribute type 2 has an invalid length. [ 992.266205][T28583] : entered promiscuous mode [ 992.280967][T28585] 9p: Unknown access argument 18446744073709551615: -34 [ 992.343986][ T5890] Process accounting resumed [ 992.353569][T21174] lo speed is unknown, defaulting to 1000 [ 992.386124][T28593] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 992.389495][T28593] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 992.392912][T28593] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found [ 992.395436][T28593] UDF-fs: Scanning with blocksize 512 failed [ 992.400363][T28593] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 992.404341][T28593] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 992.408903][T28593] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found [ 992.412122][T28593] UDF-fs: Scanning with blocksize 1024 failed [ 992.415191][T28593] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 992.419393][T28593] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 992.424259][T28593] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found [ 992.427393][T28593] UDF-fs: Scanning with blocksize 2048 failed [ 992.431809][T28593] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 992.435793][T28593] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 992.439565][T28593] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found [ 992.443111][T28593] UDF-fs: Scanning with blocksize 4096 failed [ 992.445565][T28593] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 992.495467][ T35] block nbd0: Possible stuck request ffff888029a65080: control (read@0,1024B). Runtime 190 seconds [ 992.499914][ T35] block nbd0: Possible stuck request ffff888029a65240: control (read@1024,3072B). Runtime 190 seconds [ 993.083072][T28606] netlink: 25 bytes leftover after parsing attributes in process `syz.7.6127'. [ 993.133945][T28611] netlink: 'syz.7.6129': attribute type 4 has an invalid length. [ 993.157118][T28611] netlink: 19 bytes leftover after parsing attributes in process `syz.7.6129'. [ 993.162591][T28611] netlink: 'syz.7.6129': attribute type 4 has an invalid length. [ 993.648785][T28640] tipc: Enabling of bearer rejected, failed to enable media [ 993.827928][T28654] fuse: fd is not a fuse device [ 993.833692][T28654] netlink: 'syz.0.6144': attribute type 1 has an invalid length. [ 993.872591][T28654] bond6: entered promiscuous mode [ 993.874672][T28654] 8021q: adding VLAN 0 to HW filter on device bond6 [ 993.928458][T28654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28654 comm=syz.0.6144 [ 993.932463][T28662] netlink: 'syz.8.6146': attribute type 12 has an invalid length. [ 993.935961][T28662] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6146'. [ 993.937247][T28654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=28654 comm=syz.0.6144 [ 993.985153][T28664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6148'. [ 994.047860][T28672] xt_bpf: check failed: parse error [ 994.067529][T28672] bridge0: port 2(4) entered blocking state [ 994.070529][T28672] bridge0: port 2(4) entered listening state [ 994.169286][T28676] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6150'. [ 994.176197][T28676] ip6gre2: entered promiscuous mode [ 994.177966][T28676] ip6gre2: entered allmulticast mode [ 994.204144][T28676] netlink: 'syz.7.6150': attribute type 6 has an invalid length. [ 994.212988][T28676] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6150'. [ 994.371133][T28696] overlayfs: failed to clone upperpath [ 994.753754][T28715] 9pnet_virtio: no channels available for device syz [ 994.756979][T28715] 9pnet_virtio: no channels available for device syz [ 994.761129][T28715] 9pnet_virtio: no channels available for device syz [ 994.763448][T28715] 9pnet_virtio: no channels available for device syz [ 994.765721][T28715] 9pnet_virtio: no channels available for device syz [ 994.768096][T28715] 9pnet_virtio: no channels available for device syz [ 994.773396][T28715] 9pnet_virtio: no channels available for device syz [ 994.775805][T28715] 9pnet_virtio: no channels available for device syz [ 994.778027][T28715] 9pnet_virtio: no channels available for device syz [ 994.780277][T28715] 9pnet_virtio: no channels available for device syz [ 994.783198][T28715] 9pnet_virtio: no channels available for device syz [ 994.785587][T28715] 9pnet_virtio: no channels available for device syz [ 994.787768][T28715] 9pnet_virtio: no channels available for device syz [ 994.789929][T28715] 9pnet_virtio: no channels available for device syz [ 994.793839][T28715] 9pnet_virtio: no channels available for device syz [ 994.797052][T28715] 9pnet_virtio: no channels available for device syz [ 994.799490][T28715] 9pnet_virtio: no channels available for device syz [ 994.801889][T28715] 9pnet_virtio: no channels available for device syz [ 994.806767][T28715] 9pnet_virtio: no channels available for device syz [ 994.809634][T28715] 9pnet_virtio: no channels available for device syz [ 994.812296][T28715] 9pnet_virtio: no channels available for device syz [ 994.815565][T28715] 9pnet_virtio: no channels available for device syz [ 994.818386][T28715] 9pnet_virtio: no channels available for device syz [ 994.821332][T28715] 9pnet_virtio: no channels available for device syz [ 994.824114][T28715] 9pnet_virtio: no channels available for device syz [ 994.826499][T28715] 9pnet_virtio: no channels available for device syz [ 994.828791][T28715] 9pnet_virtio: no channels available for device syz [ 994.831061][T28715] 9pnet_virtio: no channels available for device syz [ 994.833371][T28715] 9pnet_virtio: no channels available for device syz [ 994.837307][T28715] 9pnet_virtio: no channels available for device syz [ 994.840741][T28715] 9pnet_virtio: no channels available for device syz [ 994.843082][T28715] 9pnet_virtio: no channels available for device syz [ 995.127038][T28723] overlayfs: missing 'workdir' [ 995.421443][T28746] vxfs: unable to read disk superblock at 1 [ 995.429147][T28746] vxfs: unable to read disk superblock at 8 [ 995.431046][T28746] vxfs: can't find superblock. [ 995.446133][T28746] vxfs: unable to read disk superblock at 1 [ 995.452886][T28746] vxfs: unable to read disk superblock at 8 [ 995.455701][T28746] vxfs: can't find superblock. [ 995.675453][T28766] bond7: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 995.682078][T28766] bond7 (unregistering): Released all slaves [ 995.710734][ T5890] usb 12-1: new high-speed USB device number 56 using dummy_hcd [ 995.743212][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 995.788748][T28773] netlink: 'syz.0.6181': attribute type 6 has an invalid length. [ 995.881460][ T5890] usb 12-1: Using ep0 maxpacket: 32 [ 995.898021][ T5890] usb 12-1: config index 0 descriptor too short (expected 29220, got 36) [ 995.901909][ T5890] usb 12-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 995.909835][ T5890] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 995.920649][ T5890] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 995.927758][ T5890] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 995.934774][ T5890] usb 12-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 995.940005][ T5890] usb 12-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 995.943612][ T5890] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.951624][ T5890] usb 12-1: config 0 descriptor?? [ 996.085157][ T35] block nbd0: Possible stuck request ffff888029a65080: control (read@0,1024B). Runtime 192 seconds [ 996.089844][ T35] block nbd0: Possible stuck request ffff888029a65240: control (read@1024,3072B). Runtime 192 seconds [ 996.137522][T28791] fuse: fd is not a fuse device [ 996.187432][ T5890] usblp 12-1:0.0: usblp0: USB Bidirectional printer dev 56 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 996.191488][ T42] kauditd_printk_skb: 1369 callbacks suppressed [ 996.191498][ T42] audit: type=1400 audit(2000000000.533:76964): avc: denied { write } for pid=28784 comm="syz.8.6188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 996.201050][ T42] audit: type=1400 audit(2000000000.533:76965): avc: denied { create } for pid=28784 comm="syz.8.6188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 996.202406][ T5890] usb 12-1: USB disconnect, device number 56 [ 996.211398][ T42] audit: type=1400 audit(2000000000.533:76966): avc: denied { write } for pid=28784 comm="syz.8.6188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 996.218393][ T42] audit: type=1400 audit(2000000000.542:76967): avc: denied { read } for pid=28784 comm="syz.8.6188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 996.220609][ T5890] usblp0: removed [ 996.225877][ T42] audit: type=1400 audit(2000000000.542:76968): avc: denied { read } for pid=28784 comm="syz.8.6188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 996.233008][ T42] audit: type=1400 audit(2000000000.542:76969): avc: denied { write } for pid=28784 comm="syz.8.6188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 996.241122][ T42] audit: type=1400 audit(2000000000.542:76970): avc: denied { create } for pid=28784 comm="syz.8.6188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 996.247906][ T42] audit: type=1400 audit(2000000000.542:76971): avc: denied { write } for pid=28784 comm="syz.8.6188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 996.254401][ T42] audit: type=1400 audit(2000000000.542:76972): avc: denied { read } for pid=28784 comm="syz.8.6188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 996.264002][ T42] audit: type=1400 audit(2000000000.542:76973): avc: denied { read } for pid=28784 comm="syz.8.6188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 996.577270][ T41] usb 13-1: new high-speed USB device number 36 using dummy_hcd [ 996.711249][T28808] netlink: 'syz.0.6195': attribute type 23 has an invalid length. [ 996.727135][ T5890] usb 12-1: new high-speed USB device number 57 using dummy_hcd [ 996.753648][ T41] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 996.760339][ T41] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.764246][ T41] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 996.770252][ T41] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 996.773815][ T41] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.780153][ T41] usb 13-1: config 0 descriptor?? [ 996.886443][ T5890] usb 12-1: Using ep0 maxpacket: 32 [ 996.893048][ T5890] usb 12-1: config index 0 descriptor too short (expected 29220, got 36) [ 996.897741][ T5890] usb 12-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 996.903646][ T5890] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 996.911402][ T5890] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 996.917914][ T5890] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 996.921794][ T5890] usb 12-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 996.926930][ T5890] usb 12-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 996.931176][ T5890] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.937818][ T5890] usb 12-1: config 0 descriptor?? [ 997.013772][T28816] fuse: fd is not a fuse device [ 997.165793][ T5890] usblp 12-1:0.0: usblp0: USB Bidirectional printer dev 57 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 997.232318][ T41] hid_parser_main: 2 callbacks suppressed [ 997.232333][ T41] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 997.240761][ T41] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 997.243944][ T41] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 997.246965][ T41] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 997.251077][ T41] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 997.253444][ T41] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 997.255909][ T41] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 997.258139][ T41] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 997.262605][ T41] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 997.265693][ T41] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 997.278887][ T41] plantronics 0003:047F:FFFF.001A: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 997.448820][T28796] netlink: 'syz.8.6192': attribute type 1 has an invalid length. [ 997.470876][T28796] 8021q: adding VLAN 0 to HW filter on device bond8 [ 997.474835][T28827] tipc: Enabling of bearer rejected, failed to enable media [ 997.478839][T28796] __nla_validate_parse: 9 callbacks suppressed [ 997.478849][T28796] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6192'. [ 997.490639][T28796] ceph: No source [ 997.497634][ T41] usb 13-1: USB disconnect, device number 36 [ 997.627754][T28839] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6175'. [ 997.631481][T28839] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6175'. [ 997.639808][T28841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6204'. [ 997.697025][T28845] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 997.763829][T28850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 997.770886][T28850] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6206'. [ 997.834768][T28852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6207'. [ 997.839825][T28852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6207'. [ 997.988783][T28854] fuse: fd is not a fuse device [ 998.279308][T28862] tipc: Enabling of bearer rejected, failed to enable media [ 998.319784][T28860] syz.8.6210 (28860): drop_caches: 2 [ 998.467368][ T61] usb 13-1: new full-speed USB device number 37 using dummy_hcd [ 998.652725][ T61] usb 13-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 998.655670][ T61] usb 13-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 998.658231][ T61] usb 13-1: Product: syz [ 998.659569][ T61] usb 13-1: Manufacturer: syz [ 998.661556][ T61] usb 13-1: SerialNumber: syz [ 998.667502][ T61] usb 13-1: config 0 descriptor?? [ 998.879553][ T1352] usb 12-1: USB disconnect, device number 57 [ 998.896910][ T1352] usblp0: removed [ 998.945839][ T61] usb 13-1: USB disconnect, device number 37 [ 998.964095][T28877] netlink: 'syz.7.6215': attribute type 10 has an invalid length. [ 999.555521][T28888] netlink: 'syz.0.6218': attribute type 10 has an invalid length. [ 999.564118][T28888] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 999.616448][T28891] fuse: Bad value for 'fd' [ 999.660870][T28893] syzkaller0: entered promiscuous mode [ 999.663152][T28893] syzkaller0: entered allmulticast mode [ 999.691915][ T35] block nbd0: Possible stuck request ffff888029a65080: control (read@0,1024B). Runtime 194 seconds [ 999.695426][ T35] block nbd0: Possible stuck request ffff888029a65240: control (read@1024,3072B). Runtime 194 seconds [ 999.699642][T28894] xt_hashlimit: size too large, truncated to 1048576 [ 999.977513][T28901] overlayfs: workdir and upperdir must reside under the same mount [ 999.977649][T28900] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1000.045688][T28904] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 1000.061211][T28906] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6224'. [ 1000.261171][T28908] lo speed is unknown, defaulting to 1000 [ 1000.404127][ T61] usb 12-1: new high-speed USB device number 58 using dummy_hcd [ 1000.572849][ T61] usb 12-1: Using ep0 maxpacket: 8 [ 1000.595075][ T61] usb 12-1: config 179 has an invalid interface number: 65 but max is 0 [ 1000.602610][ T61] usb 12-1: config 179 has no interface number 0 [ 1000.608200][ T61] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1000.615780][ T61] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1000.620703][ T61] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1000.625328][ T61] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1000.630046][ T61] usb 12-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1000.646587][ T61] usb 12-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1000.652660][ T61] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.691008][T28910] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1001.148922][T28910] netlink: 112 bytes leftover after parsing attributes in process `syz.7.6226'. [ 1001.158090][T21942] usb 12-1: USB disconnect, device number 58 [ 1001.158147][ C1] xpad 12-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1001.164236][ C1] xpad 12-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1001.169026][T28966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28966 comm=syz.8.6235 [ 1001.178153][T28966] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6235'. [ 1001.545689][ T42] kauditd_printk_skb: 869 callbacks suppressed [ 1001.545704][ T42] audit: type=1400 audit(2000000005.549:77843): avc: denied { recv } for pid=5649 comm="sshd-session" saddr=127.0.0.1 src=46778 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1001.565029][ T42] audit: type=1400 audit(2000000005.558:77844): avc: denied { recv } for pid=5650 comm="syz-executor" saddr=127.0.0.1 src=46778 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1001.575885][ T42] audit: type=1400 audit(2000000005.568:77845): avc: denied { recv } for pid=22333 comm="syz-executor" saddr=10.0.2.2 src=34026 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1001.586264][ T42] audit: type=1400 audit(2000000005.568:77846): avc: denied { read write } for pid=22333 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1001.597404][ T42] audit: type=1400 audit(2000000005.568:77847): avc: denied { open } for pid=22333 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1001.607875][ T42] audit: type=1400 audit(2000000005.568:77848): avc: denied { ioctl } for pid=22333 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1001.627299][ T42] audit: type=1400 audit(2000000005.624:77849): avc: denied { recv } for pid=5148 comm="udevd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46778 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1001.637286][ T42] audit: type=1400 audit(2000000005.624:77850): avc: denied { recv } for pid=5148 comm="udevd" saddr=127.0.0.1 src=46778 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1001.648373][ T42] audit: type=1400 audit(2000000005.624:77851): avc: denied { recv } for pid=5649 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46778 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1001.659477][ T42] audit: type=1400 audit(2000000005.624:77852): avc: denied { read write } for pid=22333 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1001.694065][T28981] syzkaller0: entered promiscuous mode [ 1001.696692][T28981] syzkaller0: entered allmulticast mode [ 1001.746865][T28981] tipc: Enabled bearer , priority 0 [ 1001.753027][T28980] tipc: Resetting bearer [ 1001.782554][T28980] tipc: Disabling bearer [ 1001.797302][T28983] netlink: 'syz.7.6242': attribute type 1 has an invalid length. [ 1001.896101][T28990] overlayfs: failed to clone upperpath [ 1002.194597][T29022] tipc: Enabling of bearer rejected, already enabled [ 1002.410827][T21942] usb 13-1: new full-speed USB device number 38 using dummy_hcd [ 1002.600855][T21942] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.605139][T21942] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1002.608447][T21942] usb 13-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1002.611578][T21942] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.621627][T21942] usb 13-1: config 0 descriptor?? [ 1002.629096][T21942] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1002.632550][T21942] dvb-usb: bulk message failed: -22 (3/0) [ 1002.640763][T21942] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1002.646911][T21942] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1002.649119][T21942] usb 13-1: media controller created [ 1002.651678][T21942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1002.664836][T21942] dvb-usb: bulk message failed: -22 (6/0) [ 1002.671216][T21942] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1002.675131][T21942] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb13/13-1/input/input107 [ 1002.684966][T21942] dvb-usb: schedule remote query interval to 150 msecs. [ 1002.690311][T21942] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1002.717168][T29057] tipc: Enabling of bearer rejected, failed to enable media [ 1002.850393][T29020] dvb-usb: bulk message failed: -22 (2/0) [ 1002.854031][T21918] usb 13-1: USB disconnect, device number 38 [ 1002.858624][T29062] __nla_validate_parse: 6 callbacks suppressed [ 1002.858636][T29062] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6266'. [ 1002.876889][T21918] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1002.911663][T29062] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29062 comm=syz.0.6266 [ 1003.276455][ T35] block nbd0: Possible stuck request ffff888029a65080: control (read@0,1024B). Runtime 196 seconds [ 1003.281032][ T35] block nbd0: Possible stuck request ffff888029a65240: control (read@1024,3072B). Runtime 196 seconds [ 1003.453756][T29083] Cannot find set identified by id 65534 to match [ 1004.682134][T21054] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1004.689566][T21054] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1004.693899][T21054] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1004.699074][T21054] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1004.702077][T21054] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1005.233061][T29123] lo speed is unknown, defaulting to 1000 [ 1005.317610][T20850] block nbd1: Possible stuck request ffff888029a80000: control (read@0,4096B). Runtime 330 seconds [ 1005.518438][T29123] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.521814][T29123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.524980][T29123] bridge_slave_0: entered allmulticast mode [ 1005.529091][T29123] bridge_slave_0: entered promiscuous mode [ 1005.536225][T29123] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.539225][T29123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.542414][T29123] bridge_slave_1: entered allmulticast mode [ 1005.546549][T29123] bridge_slave_1: entered promiscuous mode [ 1005.578368][T29123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1005.584053][T29123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1005.614230][T29123] team0: Port device team_slave_0 added [ 1005.619612][T29123] team0: Port device team_slave_1 added [ 1005.642802][T29123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1005.645292][T29123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.653411][T29123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1005.658864][T29123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1005.661484][T29123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.669646][T29123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1005.680884][ T1352] usb 13-1: new high-speed USB device number 39 using dummy_hcd [ 1005.707620][T29123] hsr_slave_0: entered promiscuous mode [ 1005.710312][T29123] hsr_slave_1: entered promiscuous mode [ 1005.723566][T29123] debugfs: 'hsr0' already exists in 'hsr' [ 1005.725540][T29123] Cannot create hsr debugfs directory [ 1005.851580][ T1352] usb 13-1: Using ep0 maxpacket: 32 [ 1005.856614][ T1352] usb 13-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.860552][ T1352] usb 13-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1005.864588][ T1352] usb 13-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1005.868220][ T1352] usb 13-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1005.879147][ T1352] usb 13-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1005.883949][ T1352] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.888659][ T1352] usb 13-1: Product: syz [ 1005.890459][ T1352] usb 13-1: Manufacturer: syz [ 1005.892441][ T1352] usb 13-1: SerialNumber: syz [ 1005.921084][ C2] imon 13-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1005.929084][ T1352] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/input/input108 [ 1006.156192][T29176] tipc: Enabling of bearer rejected, already enabled [ 1006.161394][ T1352] imon 13-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1006.165100][ T1352] (id 0x00) [ 1006.225808][ T1352] rc_core: IR keymap rc-imon-pad not found [ 1006.227653][ T1352] Registered IR keymap rc-empty [ 1006.229259][ T1352] imon 13-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1006.232496][ T1352] imon 13-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1006.389731][ T1352] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0 [ 1006.395827][ T1352] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0/input109 [ 1006.440490][ T1352] imon 13-1:155.0: iMON device (15c2:ffdc, intf0) on usb<13:39> initialized [ 1006.817561][T29123] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1006.825665][T29123] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1006.830133][T29123] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1006.835175][T29123] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1006.840203][T29123] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1006.848312][T29123] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1006.852317][T29123] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1006.877642][T29123] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1006.880543][ T35] block nbd0: Possible stuck request ffff888029a65080: control (read@0,1024B). Runtime 198 seconds [ 1006.884918][ T35] block nbd0: Possible stuck request ffff888029a65240: control (read@1024,3072B). Runtime 198 seconds [ 1006.899806][ T42] kauditd_printk_skb: 2190 callbacks suppressed [ 1006.899821][ T42] audit: type=1400 audit(2000000010.565:80043): avc: denied { read } for pid=29123 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1006.912024][ T42] audit: type=1400 audit(2000000010.565:80044): avc: denied { write } for pid=29123 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1006.938401][ T42] audit: type=1400 audit(2000000010.583:80045): avc: denied { read } for pid=29123 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1006.950619][ T42] audit: type=1400 audit(2000000010.593:80046): avc: denied { recv } for pid=5650 comm="syz-executor" saddr=127.0.0.1 src=46778 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1006.967967][ T42] audit: type=1400 audit(2000000010.593:80047): avc: denied { search } for pid=29199 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1006.981267][ T42] audit: type=1400 audit(2000000010.593:80048): avc: denied { search } for pid=29199 comm="rm" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1006.998528][ T42] audit: type=1400 audit(2000000010.593:80049): avc: denied { search } for pid=29199 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1007.015564][ T42] audit: type=1400 audit(2000000010.593:80050): avc: denied { recv } for pid=29123 comm="syz-executor" saddr=10.0.2.2 src=34026 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1007.025588][ T42] audit: type=1400 audit(2000000010.621:80051): avc: denied { search } for pid=29188 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1007.035848][ T5890] usb 13-1: USB disconnect, device number 39 [ 1007.036277][T29207] imon:send_packet: packet tx failed (-71) [ 1007.044805][ T42] audit: type=1400 audit(2000000010.630:80052): avc: denied { create } for pid=29204 comm="syz.0.6303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1007.063012][T29207] imon:vfd_write: send packet #1 failed [ 1007.222311][T29123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1007.254327][T29123] 8021q: adding VLAN 0 to HW filter on device team0 [ 1007.266507][T28921] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.269106][T28921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1007.291818][T29219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6306'. [ 1007.292177][T28922] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.295019][T29219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6306'. [ 1007.297200][T28922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1007.329858][T29219] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6306'. [ 1007.334576][T29219] Unknown options in mask b7f2 [ 1007.558589][T29225] tipc: Enabling of bearer rejected, failed to enable media [ 1007.680516][T29243] sctp: [Deprecated]: syz.7.6310 (pid 29243) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1007.680516][T29243] Use struct sctp_sack_info instead [ 1007.826583][T29255] overlayfs: failed to resolve './file0': -2 [ 1007.851692][T29256] binder_alloc: 29254: pid 29254 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1007.860102][T29256] binder_alloc: 29254: pid 29254 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1008.021033][ T848] usb 12-1: new high-speed USB device number 59 using dummy_hcd [ 1008.048124][T29123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1008.135869][T29123] veth0_vlan: entered promiscuous mode [ 1008.172999][T29123] veth1_vlan: entered promiscuous mode [ 1008.222061][ T848] usb 12-1: unable to get BOS descriptor or descriptor too short [ 1008.243102][ T848] usb 12-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1008.278489][T29123] veth0_macvtap: entered promiscuous mode [ 1008.280086][ T848] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1008.287614][ T848] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.291798][T29123] veth1_macvtap: entered promiscuous mode [ 1008.301676][ T848] usb 12-1: Product: syz [ 1008.308763][ T848] usb 12-1: Manufacturer: syz [ 1008.318099][ T848] usb 12-1: SerialNumber: syz [ 1008.348528][T29123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1008.372347][T29123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1008.390228][T20491] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.398358][T20491] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.403654][T20491] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.409075][T20491] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.575165][T29250] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6312'. [ 1008.667631][ T848] cdc_ncm 12-1:1.0: bind() failure [ 1008.686986][ T848] cdc_ncm 12-1:1.1: CDC Union missing and no IAD found [ 1008.692308][ T848] cdc_ncm 12-1:1.1: bind() failure [ 1008.701086][ T848] usb 12-1: USB disconnect, device number 59 [ 1008.702376][T28921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.708426][T28921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.756741][T28933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.763505][T28933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.894888][T29283] syzkaller0: entered promiscuous mode [ 1008.896687][T29283] syzkaller0: entered allmulticast mode [ 1008.949756][T29283] tipc: Enabled bearer , priority 0 [ 1008.959222][T29282] tipc: Resetting bearer [ 1008.991651][T29282] tipc: Disabling bearer [ 1009.061572][T29286] netlink: 'syz.1.6285': attribute type 2 has an invalid length. [ 1009.080098][T29286] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6285'. [ 1009.611239][T29322] syzkaller0: entered promiscuous mode [ 1009.613556][T29322] syzkaller0: entered allmulticast mode [ 1009.715237][T29322] tipc: Enabled bearer , priority 0 [ 1009.733541][T29320] tipc: Resetting bearer [ 1009.761035][T29320] tipc: Disabling bearer [ 1009.782443][T29334] bond8: entered promiscuous mode [ 1009.968399][T29352] xt_socket: unknown flags 0x4c [ 1010.078264][T29356] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6337'. [ 1010.099650][T29358] batadv_slave_1: entered allmulticast mode [ 1010.109877][ C0] bridge0: port 2(4) entered learning state [ 1010.242642][T29357] batadv_slave_1: left allmulticast mode [ 1010.449046][ T35] block nbd0: Possible stuck request ffff888029a65080: control (read@0,1024B). Runtime 200 seconds [ 1010.453180][ T35] block nbd0: Possible stuck request ffff888029a65240: control (read@1024,3072B). Runtime 200 seconds [ 1010.513872][T29365] hugetlbfs: Bad value 'x' for mount option 'size' [ 1010.513872][T29365] [ 1010.825153][T29375] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1010.828043][T29375] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1010.882170][T29377] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 1010.957582][T29380] syzkaller0: entered promiscuous mode [ 1010.961427][T29380] syzkaller0: entered allmulticast mode [ 1011.001253][T29383] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6345'. [ 1011.005500][T29380] tipc: Enabled bearer , priority 0 [ 1011.005998][T29383] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6345'. [ 1011.025239][T29383] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6345'. [ 1011.028956][T29383] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6345'. [ 1011.029096][T29379] tipc: Resetting bearer [ 1011.073139][T29379] tipc: Disabling bearer [ 1011.075555][T29385] fuse: Unknown parameter '0x0000000000000004' [ 1011.089239][T12895] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1011.096113][T12895] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1011.103231][T12895] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1011.106842][T12895] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1011.111495][T29385] syzkaller1: entered promiscuous mode [ 1011.113951][T29385] syzkaller1: entered allmulticast mode [ 1011.321158][T29399] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.6350'. [ 1011.414238][T29404] netlink: 59 bytes leftover after parsing attributes in process `syz.0.6348'. [ 1011.800927][T29429] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6357'. [ 1012.114780][T12895] bond3: (slave gretap1): link status up again after 0 ms [ 1012.128207][T12895] bond3: (slave dummy0): link status up again after 0 ms [ 1012.139340][T12895] bond3: (slave gretap1): failed to get link speed/duplex [ 1012.144619][T12895] bond3: (slave dummy0): failed to get link speed/duplex [ 1012.252393][ T42] kauditd_printk_skb: 6076 callbacks suppressed [ 1012.252414][ T42] audit: type=1400 audit(2000000015.552:86129): avc: denied { search } for pid=29450 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1012.264858][ T42] audit: type=1400 audit(2000000015.552:86130): avc: denied { read } for pid=29450 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1012.265745][T21189] bond3: (slave gretap1): failed to get link speed/duplex [ 1012.273583][ T42] audit: type=1400 audit(2000000015.552:86131): avc: denied { read open } for pid=29450 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1012.273635][ T42] audit: type=1400 audit(2000000015.552:86132): avc: denied { search } for pid=29450 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1012.273823][ T42] audit: type=1400 audit(2000000015.552:86133): avc: denied { search } for pid=29450 comm="cmp" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1012.273864][ T42] audit: type=1400 audit(2000000015.552:86134): avc: denied { search } for pid=29450 comm="cmp" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1012.273902][ T42] audit: type=1400 audit(2000000015.552:86135): avc: denied { read } for pid=29450 comm="cmp" name="resolv.conf.eth10.ipv4ll" dev="tmpfs" ino=23600 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1012.273940][ T42] audit: type=1400 audit(2000000015.552:86136): avc: denied { open } for pid=29450 comm="cmp" path="/run/dhcpcd/hook-state/resolv.conf.eth10.ipv4ll" dev="tmpfs" ino=23600 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1012.273981][ T42] audit: type=1400 audit(2000000015.552:86137): avc: denied { getattr } for pid=29450 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1012.327184][ T42] audit: type=1400 audit(2000000015.627:86138): avc: denied { search } for pid=29454 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1012.336580][T21189] bond3: (slave dummy0): failed to get link speed/duplex [ 1012.466145][ T5828] usb 13-1: new high-speed USB device number 40 using dummy_hcd [ 1012.477099][T12895] bond3: (slave gretap1): failed to get link speed/duplex [ 1012.488289][T12895] bond3: (slave dummy0): failed to get link speed/duplex [ 1012.616235][T21189] bond3: (slave gretap1): failed to get link speed/duplex [ 1012.619234][T21189] bond3: (slave dummy0): failed to get link speed/duplex [ 1012.677431][ T5828] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1012.681540][ T5828] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1012.684689][ T5828] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1012.688259][ T5828] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.706382][T29451] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1012.746540][ T5828] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 1013.060397][ T5828] usb 13-1: USB disconnect, device number 40 [ 1013.965569][T29492] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6375'. [ 1014.051781][ T35] block nbd0: Possible stuck request ffff888029a65080: control (read@0,1024B). Runtime 202 seconds [ 1014.055719][ T35] block nbd0: Possible stuck request ffff888029a65240: control (read@1024,3072B). Runtime 202 seconds [ 1014.077154][T29499] fuse: fd is not a fuse device [ 1014.134695][T29504] JFS: discard option not supported on device [ 1014.138306][T29504] Mount JFS Failure: -5 [ 1014.215823][T29507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6379'. [ 1014.225746][T29507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1014.247485][T29507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1014.478133][T29516] netlink: 'syz.8.6380': attribute type 34 has an invalid length. [ 1014.481495][T29516] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6380'. [ 1014.503781][T29516] bond9: option lacp_strict: invalid value (99) [ 1014.522658][T29516] bond9 (unregistering): Released all slaves [ 1014.540934][T29518] program syz.8.6380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1014.558391][T29520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6381'. [ 1014.754698][T29525] netlink: 'syz.8.6382': attribute type 15 has an invalid length. [ 1015.044635][T29532] syzkaller0: entered promiscuous mode [ 1015.049396][T29532] syzkaller0: entered allmulticast mode [ 1015.097429][T29532] tipc: Started in network mode [ 1015.099547][T29532] tipc: Node identity ae8e793fe0da, cluster identity 4711 [ 1015.102876][T29532] tipc: Enabled bearer , priority 0 [ 1015.108890][T29531] tipc: Resetting bearer [ 1015.143788][T29531] tipc: Disabling bearer [ 1015.299467][T29544] xt_connbytes: Forcing CT accounting to be enabled [ 1015.302753][T29544] set match dimension is over the limit! [ 1015.485163][T29550] binder: 29545:29550 ioctl c0306201 200000000080 returned -14 [ 1015.503627][T29550] binder: 29545:29550 ioctl c0306201 2000000007c0 returned -14 [ 1015.905173][T29568] syzkaller0: entered promiscuous mode [ 1015.913112][T29568] syzkaller0: entered allmulticast mode [ 1016.006084][T29568] tipc: Enabled bearer , priority 0 [ 1016.011542][T29566] tipc: Resetting bearer [ 1016.051838][T29566] tipc: Disabling bearer [ 1016.465057][T29585] binder: 29584:29585 ioctl c0306201 200000000080 returned -14 [ 1016.554452][T29589] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.6403'. [ 1016.627582][T29585] binder: 29584:29585 ioctl c0306201 2000000003c0 returned -14 [ 1016.641273][T29585] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6401'. [ 1016.869468][T29601] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6405'. [ 1017.121796][T29606] tipc: Enabling of bearer rejected, already enabled [ 1017.365353][T29608] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6408'. [ 1017.522911][ T5819] net_ratelimit: 79 callbacks suppressed [ 1017.522925][ T5819] bond3: (slave gretap1): failed to get link speed/duplex [ 1017.533622][ T5819] bond3: (slave dummy0): failed to get link speed/duplex [ 1017.552182][T29618] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 1017.611678][ T42] kauditd_printk_skb: 10861 callbacks suppressed [ 1017.611696][ T42] audit: type=1326 audit(2000000020.578:97000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29536 comm="syz.0.6387" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0039d9de99 code=0x50000 [ 1017.636126][ T35] block nbd0: Possible stuck request ffff888029a65080: control (read@0,1024B). Runtime 204 seconds [ 1017.638499][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1017.640622][ T35] block nbd0: Possible stuck request ffff888029a65240: control (read@1024,3072B). Runtime 204 seconds [ 1017.643185][ C1] audit: audit_lost=1117 audit_rate_limit=0 audit_backlog_limit=64 [ 1017.643203][ C1] audit: backlog limit exceeded [ 1017.668065][T29621] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1017.671407][T29123] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1017.672730][ T42] audit: type=1326 audit(2000000020.578:97001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29536 comm="syz.0.6387" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0039d9de99 code=0x50000 [ 1017.674353][T29123] audit: audit_lost=1118 audit_rate_limit=0 audit_backlog_limit=64 [ 1017.676301][ T5450] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1017.676317][ T5450] audit: audit_lost=1119 audit_rate_limit=0 audit_backlog_limit=64 [ 1017.702802][T12895] bond3: (slave gretap1): failed to get link speed/duplex [ 1017.714746][T12895] bond3: (slave dummy0): failed to get link speed/duplex [ 1017.764206][T29623] afs: Unknown parameter 'dynta' [ 1017.783739][T29625] netlink: 'syz.1.6413': attribute type 39 has an invalid length. [ 1017.800467][T29625] hsr_slave_0 (unregistering): left promiscuous mode [ 1017.943592][T12895] bond3: (slave gretap1): failed to get link speed/duplex [ 1017.946614][T29628] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 1017.957155][T12895] bond3: (slave dummy0): failed to get link speed/duplex [ 1018.076324][T21189] bond3: (slave gretap1): failed to get link speed/duplex [ 1018.082485][T21189] bond3: (slave dummy0): failed to get link speed/duplex [ 1018.099410][T29632] tipc: Enabling of bearer rejected, already enabled [ 1018.205024][T21189] bond3: (slave gretap1): failed to get link speed/duplex [ 1018.208194][T21189] bond3: (slave dummy0): failed to get link speed/duplex [ 1018.242089][T29642] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6420'. [ 1018.560209][T29661] tmpfs: Unknown parameter 'usrquotc_ino$e_hardlimpt' [ 1018.845961][ T5954] usb 13-1: new high-speed USB device number 41 using dummy_hcd [ 1018.985959][ T5954] usb 13-1: device descriptor read/64, error -71 [ 1019.016739][T29664] tipc: Enabled bearer , priority 0 [ 1019.252679][ T5954] usb 13-1: new high-speed USB device number 42 using dummy_hcd [ 1019.311243][T29676] /dev/nullb0: Can't lookup blockdev [ 1019.392830][ T5954] usb 13-1: device descriptor read/64, error -71 [ 1019.510405][ T5954] usb usb13-port1: attempt power cycle [ 1019.894449][ T5954] usb 13-1: new high-speed USB device number 43 using dummy_hcd [ 1019.927382][ T5954] usb 13-1: device descriptor read/8, error -71 [ 1020.029318][T21054] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1020.178741][T29688] tipc: Enabled bearer , priority 10 [ 1020.203058][ T5954] usb 13-1: new high-speed USB device number 44 using dummy_hcd [ 1020.213966][ T1352] tipc: Node number set to 3638421122 [ 1020.226336][ T5954] usb 13-1: device descriptor read/8, error -71 [ 1020.342956][ T5954] usb usb13-port1: unable to enumerate USB device [ 1020.371971][T29703] overlayfs: regular lower layers cannot follow data lower layers [ 1020.373980][T29702] overlayfs: regular lower layers cannot follow data lower layers [ 1020.386819][T29702] fuse: fd is not a fuse device [ 1020.388078][T29703] fuse: fd is not a fuse device [ 1020.492434][T29707] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1020.513285][T29707] batman_adv: batadv0: Adding interface: gretap2 [ 1020.516102][T29707] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1020.555580][T29707] batman_adv: batadv0: Interface activated: gretap2 [ 1021.220782][ T35] block nbd0: Possible stuck request ffff888029a65080: control (read@0,1024B). Runtime 206 seconds [ 1021.224187][ T35] block nbd0: Possible stuck request ffff888029a65240: control (read@1024,3072B). Runtime 206 seconds [ 1021.241513][ T5529] tipc: Node number set to 1314158911 [ 1021.381938][T29736] overlayfs: failed to clone upperpath [ 1021.447272][T29741] xt_l2tp: v2 doesn't support IP mode [ 1021.769455][T29749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29749 comm=syz.0.6450 [ 1021.978948][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.131489][T21056] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1022.142401][T21056] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1022.148652][T21056] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1022.161774][T21056] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1022.164753][T29766] bond3: (slave dummy0): Releasing backup interface [ 1022.170278][T21056] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1022.173201][T29769] fuse: fd is not a fuse device [ 1022.283199][T29766] : left allmulticast mode [ 1022.285194][T29766] : left promiscuous mode [ 1022.287627][T29766] bridge0: port 2(4) entered disabled state [ 1022.300339][T29766] bond0: (slave veth0_to_bond): Releasing backup interface [ 1022.360977][T29766] bond0: (slave bond_slave_0): Releasing backup interface [ 1022.373059][T29766] bond0: (slave bond_slave_1): Releasing backup interface [ 1022.394327][T29766] team0: Port device team_slave_0 removed [ 1022.401256][T29766] team0: Port device team_slave_1 removed [ 1022.403637][T29766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1022.408377][T29766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1022.412512][T29766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1022.416692][T29766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1022.473039][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.502770][T29769] team0: Mode changed to "activebackup" [ 1022.566402][T29786] overlayfs: failed to clone lowerpath [ 1022.574925][T29786] overlayfs: failed to clone upperpath [ 1022.685702][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.728930][T29798] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1022.739586][T29798] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1022.751692][T29798] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1022.779226][T29798] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1022.788329][T29798] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1022.793265][T29798] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1022.886828][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.939238][T20491] net_ratelimit: 76 callbacks suppressed [ 1022.939254][T20491] bond3: (slave gretap1): failed to get link speed/duplex [ 1023.014806][ T42] kauditd_printk_skb: 5104 callbacks suppressed [ 1023.014825][ T42] audit: type=1400 audit(2000000025.640:102069): avc: denied { read } for pid=5450 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1023.044300][ T42] audit: type=1400 audit(2000000025.659:102070): avc: denied { recv } for pid=5650 comm="syz-executor" saddr=127.0.0.1 src=46778 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1023.057900][T12895] bond3: (slave gretap1): failed to get link speed/duplex [ 1023.062464][ T42] audit: type=1400 audit(2000000025.659:102071): avc: denied { recv } for pid=5649 comm="sshd-session" saddr=10.0.2.2 src=34026 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1023.085454][ T42] audit: type=1400 audit(2000000025.668:102072): avc: denied { search } for pid=5450 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1023.106211][T29764] lo speed is unknown, defaulting to 1000 [ 1023.115250][ T42] audit: type=1400 audit(2000000025.668:102073): avc: denied { search } for pid=5450 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1023.137890][ T42] audit: type=1400 audit(2000000025.668:102074): avc: denied { search } for pid=5450 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1023.148994][ T42] audit: type=1400 audit(2000000025.668:102075): avc: denied { read } for pid=5450 comm="dhcpcd" name="n94" dev="tmpfs" ino=23708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1023.162996][ T42] audit: type=1400 audit(2000000025.668:102076): avc: denied { read open } for pid=5450 comm="dhcpcd" path="/run/udev/data/n94" dev="tmpfs" ino=23708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1023.178259][ T42] audit: type=1400 audit(2000000025.678:102077): avc: denied { getattr } for pid=5450 comm="dhcpcd" path="/run/udev/data/n94" dev="tmpfs" ino=23708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1023.187913][ T42] audit: type=1400 audit(2000000025.706:102078): avc: denied { read write } for pid=29810 comm="syz.7.6466" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1023.196381][T29811] tipc: Enabling of bearer rejected, already enabled [ 1023.230354][ T13] bridge_slave_1: left allmulticast mode [ 1023.232441][ T13] bridge_slave_1: left promiscuous mode [ 1023.236591][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.245101][ T13] bridge_slave_0: left allmulticast mode [ 1023.247299][ T13] bridge_slave_0: left promiscuous mode [ 1023.250251][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.505029][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1023.566258][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1023.575509][ T13] bond0 (unregistering): Released all slaves [ 1023.654461][T15094] usb 12-1: new high-speed USB device number 60 using dummy_hcd [ 1023.655627][ T5450] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1023.676255][T12895] bond3: (slave gretap1): failed to get link speed/duplex [ 1023.795697][T15094] usb 12-1: device descriptor read/64, error -71 [ 1023.824344][ T13] tipc: Disabling bearer [ 1023.842037][ T13] tipc: Left network mode [ 1023.884939][T20491] bond3: (slave gretap1): failed to get link speed/duplex [ 1023.903225][T29848] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1024.028557][ T5819] bond3: (slave gretap1): failed to get link speed/duplex [ 1024.060583][T15094] usb 12-1: new high-speed USB device number 61 using dummy_hcd [ 1024.105657][T29859] fuse: fd is not a fuse device [ 1024.189863][T29764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.192897][T29764] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.196186][T29764] bridge_slave_0: entered allmulticast mode [ 1024.200848][T29764] bridge_slave_0: entered promiscuous mode [ 1024.209440][T29764] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.212730][T29764] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.215963][T29764] bridge_slave_1: entered allmulticast mode [ 1024.220090][T29764] bridge_slave_1: entered promiscuous mode [ 1024.231634][T15094] usb 12-1: device descriptor read/64, error -71 [ 1024.355653][T29764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.360669][T15094] usb usb12-port1: attempt power cycle [ 1024.381570][T21054] Bluetooth: hci5: command tx timeout [ 1024.386489][T29764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1024.439537][ T5450] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1024.447465][T29764] team0: Port device team_slave_0 added [ 1024.463025][T29764] team0: Port device team_slave_1 added [ 1024.547960][ T13] hsr_slave_1: left promiscuous mode [ 1024.551125][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1024.558494][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1024.583129][ T13] veth1_macvtap: left promiscuous mode [ 1024.585571][ T13] veth0_macvtap: left promiscuous mode [ 1024.588135][ T13] veth1_vlan: left promiscuous mode [ 1024.590556][ T13] veth0_vlan: left promiscuous mode [ 1024.744843][T15094] usb 12-1: new high-speed USB device number 62 using dummy_hcd [ 1024.767950][T15094] usb 12-1: device descriptor read/8, error -71 [ 1024.811635][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1024.816798][ T35] block nbd0: Possible stuck request ffff888029a65080: control (read@0,1024B). Runtime 208 seconds [ 1024.821212][ T35] block nbd0: Possible stuck request ffff888029a65240: control (read@1024,3072B). Runtime 208 seconds [ 1024.835290][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1024.951713][T29764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1024.954808][T29764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1024.965813][T29764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1024.982813][T29764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1024.987644][T29764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.004970][T29764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1025.032949][T15094] usb 12-1: new high-speed USB device number 63 using dummy_hcd [ 1025.053139][T29764] hsr_slave_0: entered promiscuous mode [ 1025.057268][T29764] hsr_slave_1: entered promiscuous mode [ 1025.060416][T29764] debugfs: 'hsr0' already exists in 'hsr' [ 1025.062922][T29764] Cannot create hsr debugfs directory [ 1025.068594][T15094] usb 12-1: device descriptor read/8, error -71 [ 1025.188347][T15094] usb usb12-port1: unable to enumerate USB device [ 1025.257893][T12895] bond3: (slave gretap1): failed to get link speed/duplex [ 1025.499086][ T5450] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1025.546648][ T5819] bond3: (slave gretap1): failed to get link speed/duplex [ 1025.560391][T29886] netlink: set zone limit has 4 unknown bytes [ 1025.701534][T29891] netlink: 'syz.0.6483': attribute type 1 has an invalid length. [ 1025.864638][T29891] bond7: option mode: invalid value (7) [ 1025.874586][T29891] bond7 (unregistering): Released all slaves [ 1025.903782][T29892] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 1025.917903][T29894] dummy0: entered promiscuous mode [ 1026.004661][ T5450] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1026.016398][ T5819] bond3: (slave gretap1): failed to get link speed/duplex [ 1026.403497][T29764] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1026.412156][T29764] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1026.416878][T29764] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1026.430968][T29764] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1026.436548][T29764] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1026.441187][T29764] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1026.446466][T29764] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1026.450880][T29764] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1026.607052][T21054] Bluetooth: hci5: command tx timeout [ 1026.619355][T29764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.645809][T29924] netlink: 872 bytes leftover after parsing attributes in process `syz.8.6488'. [ 1026.649030][T29764] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.651960][T29924] netlink: 872 bytes leftover after parsing attributes in process `syz.8.6488'. [ 1026.675779][T28922] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.678585][T28922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.715968][T28922] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.718223][T28922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1027.084791][T29952] binder: 29948:29952 ioctl c0306201 200000000040 returned -14 [ 1027.502457][T21935] usb 13-1: new high-speed USB device number 45 using dummy_hcd [ 1027.664709][T29976] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20003 [ 1027.684139][T21935] usb 13-1: Using ep0 maxpacket: 8 [ 1027.705350][T21935] usb 13-1: config 0 has an invalid interface number: 1 but max is 0 [ 1027.710990][T21935] usb 13-1: config 0 has no interface number 0 [ 1027.714009][T21935] usb 13-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1027.722510][T21935] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1027.728065][T21935] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.736084][T21935] usb 13-1: config 0 descriptor?? [ 1027.753183][T21935] iowarrior 13-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1027.883470][T29993] netlink: 'syz.0.6505': attribute type 1 has an invalid length. [ 1027.937444][T29993] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1027.967051][T29764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1028.035378][T29993] bond7: (slave geneve2): making interface the new active one [ 1028.058380][T29993] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 1028.346167][T21189] net_ratelimit: 16 callbacks suppressed [ 1028.346182][T21189] bond3: (slave gretap1): failed to get link speed/duplex [ 1028.369526][ T42] kauditd_printk_skb: 3349 callbacks suppressed [ 1028.369545][ T42] audit: type=1400 audit(2000000030.647:105342): avc: denied { recv } for pid=5649 comm="sshd-session" saddr=10.0.2.2 src=34026 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1028.409281][ T42] audit: type=1400 audit(2000000030.647:105343): avc: denied { recv } for pid=5649 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46778 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1028.426207][ T35] block nbd0: Possible stuck request ffff888029a65080: control (read@0,1024B). Runtime 210 seconds [ 1028.430579][ T35] block nbd0: Possible stuck request ffff888029a65240: control (read@1024,3072B). Runtime 210 seconds [ 1028.438111][ T42] audit: type=1400 audit(2000000030.647:105344): avc: denied { recv } for pid=5649 comm="sshd-session" saddr=127.0.0.1 src=46778 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1028.465745][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 1028.467582][ T42] audit: type=1400 audit(2000000030.638:105341): avc: denied { search } for pid=29991 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1028.485244][ T42] audit: type=1400 audit(2000000030.666:105345): avc: denied { search } for pid=29991 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1028.505180][ T42] audit: type=1400 audit(2000000030.666:105346): avc: denied { search } for pid=29991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1028.529470][ T42] audit: type=1400 audit(2000000030.666:105347): avc: denied { write search } for pid=29991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1028.541419][ T42] audit: type=1400 audit(2000000030.666:105348): avc: denied { add_name search } for pid=29991 comm="dhcpcd-run-hook" name="resolv.conf.eth16.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1028.552970][ T42] audit: type=1400 audit(2000000030.666:105349): avc: denied { create } for pid=29991 comm="dhcpcd-run-hook" name="resolv.conf.eth16.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1028.565475][ T42] audit: type=1400 audit(2000000030.666:105350): avc: denied { write open } for pid=29991 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth16.ipv4ll" dev="tmpfs" ino=23759 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1028.583277][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 1028.595955][T30011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6508'. [ 1028.599474][T30011] netlink: 'syz.0.6508': attribute type 5 has an invalid length. [ 1028.602706][T30011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6508'. [ 1028.607703][T21935] usb 13-1: USB disconnect, device number 45 [ 1028.613981][T30011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6508'. [ 1028.631891][T30011] netlink: 'syz.0.6508': attribute type 5 has an invalid length. [ 1028.643310][T30011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6508'. [ 1028.698340][T21189] bond3: (slave gretap1): failed to get link speed/duplex [ 1028.804582][T29764] veth0_vlan: entered promiscuous mode [ 1028.815833][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 1028.828350][T21054] Bluetooth: hci5: command tx timeout [ 1028.856471][T30016] overlayfs: failed to clone upperpath [ 1028.858193][T29764] veth1_vlan: entered promiscuous mode [ 1028.946661][T29764] veth0_macvtap: entered promiscuous mode [ 1028.956936][T20491] bond3: (slave gretap1): failed to get link speed/duplex [ 1028.967208][T29764] veth1_macvtap: entered promiscuous mode [ 1029.005011][T29764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1029.032114][T29764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1029.045005][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.059325][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.067714][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.071405][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.086289][T20491] bond3: (slave gretap1): failed to get link speed/duplex [ 1029.164412][T30023] fuse: fd is not a fuse device [ 1029.203278][T20491] bond3: (slave gretap1): failed to get link speed/duplex [ 1029.400689][T28922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1029.405571][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 1029.410283][T28922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1029.427577][T30035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.431368][T30035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.449561][T30036] overlayfs: missing 'lowerdir' [ 1029.487089][T28930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1029.489782][ T61] usb 12-1: new high-speed USB device number 64 using dummy_hcd [ 1029.494639][T28930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1029.513527][T30038] syzkaller0: entered promiscuous mode [ 1029.521060][T30038] syzkaller0: entered allmulticast mode [ 1029.543686][T20491] bond3: (slave gretap1): failed to get link speed/duplex [ 1029.619614][T30046] fuse: fd is not a fuse device [ 1029.657751][T30048] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6459'. [ 1029.750049][T21054] Bluetooth: hci5: Malformed Event: 0x13 [ 1030.049863][T30068] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6523'. [ 1030.179390][T30079] fuse: fd is not a fuse device [ 1030.385123][T30090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1030.425523][T30090] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6529'. [ 1030.831848][T21935] IPVS: starting estimator thread 0... [ 1030.851072][T30109] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6533'. [ 1030.855330][T30109] tipc: Invalid UDP bearer configuration [ 1030.855425][T30109] tipc: Enabling of bearer rejected, failed to enable media [ 1030.870233][T30110] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1030.931994][T30115] IPVS: using max 30 ests per chain, 72000 per kthread [ 1031.049696][T21054] Bluetooth: hci5: command tx timeout [ 1031.674780][T30153] overlayfs: conflicting options: userxattr,redirect_dir=on [ 1032.004573][ T35] block nbd0: Possible stuck request ffff888029a65080: control (read@0,1024B). Runtime 212 seconds [ 1032.007974][ T35] block nbd0: Possible stuck request ffff888029a65240: control (read@1024,3072B). Runtime 212 seconds [ 1032.041591][T30172] fuse: fd is not a fuse device [ 1032.072505][T30174] syzkaller0: entered promiscuous mode [ 1032.075335][T30174] syzkaller0: entered allmulticast mode [ 1032.152499][T30177] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1032.233948][T21054] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 1032.235321][T30175] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1032.241790][T21054] Bluetooth: Wrong link type (-22) [ 1032.432299][T30184] __nla_validate_parse: 1 callbacks suppressed [ 1032.432319][T30184] netlink: 180 bytes leftover after parsing attributes in process `syz.0.6552'. [ 1032.550231][T30192] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1032.560737][T30194] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:21 [ 1032.576694][T30194] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6554'. [ 1032.773351][T30213] binder: 30211:30213 ioctl c0306201 200000000080 returned -14 [ 1032.801877][T30213] binder: 30211:30213 ioctl c0306201 2000000003c0 returned -14 [ 1033.207389][T30235] bond8 (unregistering): Released all slaves [ 1033.478702][T30250] fuse: Bad value for 'user_id' [ 1033.480887][T30250] fuse: Bad value for 'user_id' [ 1033.625128][T30250] can0 (unregistered): slcan off ttyS3. [ 1033.695939][T30265] xt_hashlimit: size too large, truncated to 1048576 [ 1033.701099][T30263] binder: 30261:30263 ioctl c020662a 200000000440 returned -22 [ 1033.706335][T30267] netlink: 'syz.0.6576': attribute type 1 has an invalid length. [ 1033.725046][ T42] kauditd_printk_skb: 4083 callbacks suppressed [ 1033.725058][ T42] audit: type=1400 audit(2000000035.653:109434): avc: denied { search } for pid=30251 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1033.752733][ T42] audit: type=1400 audit(2000000035.663:109435): avc: denied { getattr } for pid=30251 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1033.764080][ T42] audit: type=1400 audit(2000000035.663:109436): avc: denied { search } for pid=30251 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1033.771524][ T42] audit: type=1400 audit(2000000035.663:109437): avc: denied { getattr } for pid=30251 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1033.780159][ T42] audit: type=1400 audit(2000000035.663:109438): avc: denied { search } for pid=30251 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1033.786752][T30269] netlink: 'syz.0.6576': attribute type 13 has an invalid length. [ 1033.788994][ T42] audit: type=1400 audit(2000000035.663:109439): avc: denied { search } for pid=30251 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1033.790837][T30269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6576'. [ 1033.798813][T30269] netlink: 'syz.0.6576': attribute type 13 has an invalid length. [ 1033.803646][ T42] audit: type=1400 audit(2000000035.663:109440): avc: denied { search } for pid=30251 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1033.810431][T21189] net_ratelimit: 35 callbacks suppressed [ 1033.810448][T21189] bond3: (slave gretap1): failed to get link speed/duplex [ 1033.815606][ T42] audit: type=1400 audit(2000000035.663:109441): avc: denied { getattr } for pid=30251 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=23835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1033.817114][T30269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6576'. [ 1033.819907][ T42] audit: type=1400 audit(2000000035.672:109442): avc: denied { create } for pid=30261 comm="syz.7.6578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1033.840672][ T42] audit: type=1400 audit(2000000035.682:109443): avc: denied { read } for pid=30261 comm="syz.7.6578" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1033.935438][ T5819] bond3: (slave gretap1): failed to get link speed/duplex [ 1034.000237][T30280] input: syz0 as /devices/virtual/input/input110 [ 1034.019046][T30280] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.6579'. [ 1034.062917][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 1034.180655][ T5819] bond3: (slave gretap1): failed to get link speed/duplex [ 1034.374247][T21189] bond3: (slave gretap1): failed to get link speed/duplex [ 1034.548993][T30294] syzkaller0: entered promiscuous mode [ 1034.556308][T30294] syzkaller0: entered allmulticast mode [ 1034.618395][T21189] bond3: (slave gretap1): failed to get link speed/duplex [ 1034.686284][T30301] RDS: rds_bind could not find a transport for fe88::9, load rds_tcp or rds_rdma? [ 1034.703392][T30303] ªªªªªª: renamed from vlan0 (while UP) [ 1034.735873][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 1034.824672][T30306] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6587'. [ 1034.828046][T30306] netlink: 14 bytes leftover after parsing attributes in process `syz.8.6587'. [ 1034.831056][T21054] Bluetooth: hci2: unexpected event for opcode 0x041c [ 1034.856998][ T5819] bond3: (slave gretap1): failed to get link speed/duplex [ 1034.909400][T30308] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1034.971491][ T10] IPVS: starting estimator thread 0... [ 1034.982559][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 1035.030910][T30315] IPVS: set_ctl: invalid protocol: 48 5.0.0.0:0 [ 1035.067478][T30317] IPVS: using max 48 ests per chain, 115200 per kthread [ 1035.102626][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 1035.108079][T30324] fuse: fd is not a fuse device [ 1035.152624][T30290] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1035.158867][T30290] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1035.377064][T15128] usb 13-1: new high-speed USB device number 46 using dummy_hcd [ 1035.471872][T30290] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1035.484589][T30290] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1035.550811][T15128] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1035.556726][T15128] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1035.565587][T15128] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1035.572143][T15128] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.593478][ T35] block nbd0: Possible stuck request ffff888029a65080: control (read@0,1024B). Runtime 214 seconds [ 1035.598158][ T35] block nbd0: Possible stuck request ffff888029a65240: control (read@1024,3072B). Runtime 214 seconds [ 1035.598432][T30327] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1035.615305][T15128] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 1035.656112][T30346] netlink: 348 bytes leftover after parsing attributes in process `syz.0.6598'. [ 1035.888405][T30327] comedi comedi2: pcl812: I/O port conflict (0x140,16) [ 1036.602433][T30379] overlayfs: failed to verify index (index/00fb21000121c2c235f4f641abab60dd56ca4399e4866f9490d00a000000000000, ftype=8000, err=-61) [ 1036.611225][T30379] overlayfs: failed index dir cleanup (-61) [ 1036.613838][T30379] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 1036.701290][T30383] fuse: Unknown parameter '' [ 1037.211004][T30404] can0: slcan on ttyS3. [ 1037.421497][T30410] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6607'. [ 1037.492425][T20850] block nbd1: Possible stuck request ffff888029a80000: control (read@0,4096B). Runtime 360 seconds [ 1037.734990][T30416] netlink: 'syz.0.6607': attribute type 1 has an invalid length. [ 1037.786972][T30416] bond8: option mode: invalid value (8) [ 1037.789790][T30421] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6607'. [ 1037.802352][T30416] bond8 (unregistering): Released all slaves [ 1037.903553][T30430] SELinux: ebitmap start bit (1279) is not a multiple of the map unit size (64) [ 1037.910712][T30430] SELinux: invalid class [ 1037.934552][T30430] SELinux: failed to load policy [ 1038.079626][T30433] netlink: 'syz.4.6611': attribute type 4 has an invalid length. [ 1038.083586][T30433] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6611'. [ 1038.093475][T30433] .`: renamed from bond0 (while UP) [ 1038.354807][ T5828] usb 13-1: USB disconnect, device number 46 [ 1038.809408][T30450] netlink: 'syz.7.6616': attribute type 10 has an invalid length. [ 1038.968802][T30457] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6618'. [ 1039.004106][T30463] ip6t_srh: unknown srh invflags 4000 [ 1039.077035][ T42] kauditd_printk_skb: 2603 callbacks suppressed [ 1039.077052][ T42] audit: type=1400 audit(2000000040.669:112047): avc: denied { read } for pid=30459 comm="syz.7.6619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1039.085562][T30467] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6619'. [ 1039.101251][ T42] audit: type=1400 audit(2000000040.669:112048): avc: denied { read } for pid=30459 comm="syz.7.6619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1039.114596][ T42] audit: type=1400 audit(2000000040.669:112049): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=46778 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1039.140259][ T42] audit: type=1400 audit(2000000040.669:112050): avc: denied { bpf } for pid=30461 comm="syz.0.6621" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1039.165945][ T42] audit: type=1400 audit(2000000040.669:112051): avc: denied { perfmon } for pid=30461 comm="syz.0.6621" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1039.177226][ T35] block nbd0: Possible stuck request ffff888029a65080: control (read@0,1024B). Runtime 216 seconds [ 1039.182091][ T35] block nbd0: Possible stuck request ffff888029a65240: control (read@1024,3072B). Runtime 216 seconds [ 1039.189200][ T42] audit: type=1400 audit(2000000040.669:112052): avc: denied { create } for pid=30459 comm="syz.7.6619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1039.201803][ T42] audit: type=1400 audit(2000000040.669:112053): avc: denied { bpf } for pid=30461 comm="syz.0.6621" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1039.230382][ T42] audit: type=1400 audit(2000000040.669:112054): avc: denied { create } for pid=30459 comm="syz.7.6619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1039.243343][ T13] net_ratelimit: 34 callbacks suppressed [ 1039.243359][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 1039.255541][ T42] audit: type=1400 audit(2000000040.669:112055): avc: denied { perfmon } for pid=30461 comm="syz.0.6621" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1039.270900][ T42] audit: type=1400 audit(2000000040.669:112056): avc: denied { bind } for pid=30459 comm="syz.7.6619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1039.374290][T12895] bond3: (slave gretap1): failed to get link speed/duplex [ 1039.378486][T30476] uprobe: syz.4.6622:30476 failed to unregister, leaking uprobe [ 1039.500998][T12895] bond3: (slave gretap1): failed to get link speed/duplex [ 1039.609087][T21189] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.616756][T21189] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.625227][T30482] netlink: 'syz.4.6624': attribute type 8 has an invalid length. [ 1039.662685][T21189] bond3: (slave gretap1): failed to get link speed/duplex [ 1039.752522][T30489] overlayfs: failed to clone upperpath [ 1039.780166][T12895] bond3: (slave gretap1): failed to get link speed/duplex [ 1039.897238][T21189] bond3: (slave gretap1): failed to get link speed/duplex [ 1040.014868][T21189] bond3: (slave gretap1): failed to get link speed/duplex [ 1040.133371][T21189] bond3: (slave gretap1): failed to get link speed/duplex [ 1040.261304][T21189] bond3: (slave gretap1): failed to get link speed/duplex [ 1040.337265][T30517] fuse: Unknown parameter 'fd’00000000000000000000003' [ 1040.379116][T30519] fuse: Unknown parameter 'fd’00000000000000000000003' [ 1040.379140][T12895] bond3: (slave gretap1): failed to get link speed/duplex [ 1040.619754][T30532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30532 comm=syz.4.6639 [ 1040.630880][T30535] netlink: 'syz.0.6638': attribute type 21 has an invalid length. [ 1041.176169][T30561] binder: 30560:30561 ioctl 4018620d 0 returned -22 [ 1041.680564][T30583] fuse: fd is not a fuse device [ 1041.790719][T30587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6656'. [ 1041.797803][T30587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6656'. [ 1041.954441][T30589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6657'. [ 1042.012005][T30592] xt_hl: Unknown TTL match mode: 255 [ 1042.040500][T30592] fuse: fd is not a fuse device [ 1042.410626][T30606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6659'. [ 1042.467466][T30608] syzkaller0: entered promiscuous mode [ 1042.469800][T30608] syzkaller0: entered allmulticast mode [ 1042.773224][ T35] block nbd0: Possible stuck request ffff888029a65080: control (read@0,1024B). Runtime 218 seconds [ 1042.777793][ T35] block nbd0: Possible stuck request ffff888029a65240: control (read@1024,3072B). Runtime 218 seconds [ 1043.330085][T30626] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6667'. [ 1043.652009][T30631] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1043.657287][T30631] VFS: Can't find a romfs filesystem on dev nullb0. [ 1043.657287][T30631] [ 1044.169139][T30651] netlink: 'syz.0.6675': attribute type 12 has an invalid length. [ 1044.333316][T30656] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1044.428942][ T42] kauditd_printk_skb: 1846 callbacks suppressed [ 1044.428960][ T42] audit: type=1400 audit(2000000045.676:113903): avc: denied { recv } for pid=30630 comm="syz.4.6669" saddr=10.0.2.2 src=34026 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1044.455373][ T42] audit: type=1400 audit(2000000045.676:113904): avc: denied { read write } for pid=22333 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1044.481907][ T42] audit: type=1400 audit(2000000045.676:113905): avc: denied { open } for pid=22333 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1044.504960][ T42] audit: type=1400 audit(2000000045.676:113906): avc: denied { ioctl } for pid=22333 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1044.516060][ T61] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1044.523367][ T42] audit: type=1400 audit(2000000045.695:113907): avc: denied { recv } for pid=5650 comm="syz-executor" saddr=127.0.0.1 src=46778 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1044.542323][ T42] audit: type=1400 audit(2000000045.704:113908): avc: denied { recv } for pid=5649 comm="sshd-session" saddr=10.0.2.2 src=34026 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1044.553158][ T42] audit: type=1400 audit(2000000045.732:113909): avc: denied { read } for pid=30663 comm="syz.8.6678" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1044.565089][ T42] audit: type=1400 audit(2000000045.732:113910): avc: denied { read open } for pid=30663 comm="syz.8.6678" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1044.577734][ T42] audit: type=1400 audit(2000000045.732:113911): avc: denied { ioctl } for pid=30663 comm="syz.8.6678" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1044.591390][ T42] audit: type=1400 audit(2000000045.751:113912): avc: denied { recv } for pid=30649 comm="syz.0.6675" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46778 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1044.631260][T21189] net_ratelimit: 32 callbacks suppressed [ 1044.631277][T21189] bond3: (slave gretap1): failed to get link speed/duplex [ 1044.781120][T30679] fuse: fd is not a fuse device [ 1044.786207][T21189] bond3: (slave gretap1): failed to get link speed/duplex [ 1044.900771][T21189] bond3: (slave gretap1): failed to get link speed/duplex [ 1045.026784][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 1045.070325][T30689] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6686'. [ 1045.103452][T30689] netlink: 'syz.8.6686': attribute type 2 has an invalid length. [ 1045.114061][T30689] : entered promiscuous mode [ 1045.145549][T21189] bond3: (slave gretap1): failed to get link speed/duplex [ 1045.212473][T30694] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6687'. [ 1045.272937][T21189] bond3: (slave gretap1): failed to get link speed/duplex [ 1045.297665][T30702] syzkaller0: entered promiscuous mode [ 1045.299562][T30702] syzkaller0: entered allmulticast mode [ 1045.361138][T30705] loop5: detected capacity change from 0 to 7 [ 1045.454014][T21189] bond3: (slave gretap1): failed to get link speed/duplex [ 1045.561522][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 1045.678934][T21189] bond3: (slave gretap1): failed to get link speed/duplex [ 1045.682448][T30705] Dev loop5: unable to read RDB block 7 [ 1045.685001][T30705] loop5: unable to read partition table [ 1045.687458][T30705] loop5: partition table beyond EOD, truncated [ 1045.690307][T30705] loop_reread_partitions: partition scan of loop5 (úùƒW勺РœëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 1045.807238][T21189] bond3: (slave gretap1): failed to get link speed/duplex [ 1046.030832][T30728] Lens A: ================= START STATUS ================= [ 1046.034292][T30728] Lens A: Focus, Absolute: 0 [ 1046.040038][T30728] Lens A: ================== END STATUS ================== [ 1046.357044][ T43] INFO: task syz.9.5009:24559 blocked in I/O wait for more than 143 seconds. [ 1046.360685][ T43] Tainted: G L syzkaller #0 [ 1046.364287][ T35] block nbd0: Possible stuck request ffff888029a65080: control (read@0,1024B). Runtime 220 seconds [ 1046.368753][ T35] block nbd0: Possible stuck request ffff888029a65240: control (read@1024,3072B). Runtime 220 seconds [ 1046.383639][ T43] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1046.391819][ T43] task:syz.9.5009 state:D stack:25752 pid:24559 tgid:24558 ppid:21636 task_flags:0x400040 flags:0x00080002 [ 1046.407173][ T43] Call Trace: SYZFAIL: failed to recv rpc [ 1046.408362][ T43] [ 1046.409312][ T43] __schedule+0x125c/0x6730 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1046.418819][ T43] ? __pfx___schedule+0x10/0x10 [ 1046.420419][ T43] ? find_held_lock+0x2b/0x80 [ 1046.430920][ T43] ? schedule+0x225/0x2c0 [ 1046.432398][ T43] schedule+0xdd/0x2c0 [ 1046.439375][ T43] io_schedule+0x8a/0xf0 [ 1046.440766][ T43] folio_wait_bit_common+0x414/0xa70 [ 1046.455849][ T43] ? folio_wait_bit_common+0x2a0/0xa70 [ 1046.470496][ T43] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1046.477490][ T43] ? __pfx_wake_page_function+0x10/0x10 [ 1046.479279][ T43] ? __pfx___might_resched+0x10/0x10 [ 1046.496358][ T43] ? compaction_free+0x17d/0x470 [ 1046.498081][ T43] ? hrtimer_start_range_ns_common+0x6c1/0x18b0 [ 1046.509654][ T43] migrate_pages_batch+0x7a1/0x45c0 [ 1046.515953][ T43] ? __pfx_compaction_alloc+0x10/0x10 [ 1046.528184][ T43] ? __pfx_compaction_free+0x10/0x10 [ 1046.529887][ T43] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1046.545230][ T43] ? trace_sched_exit_tp+0x120/0x160 [ 1046.547116][ T43] ? __schedule+0x126e/0x6730 [ 1046.562181][ T43] ? __pfx_folios_put_refs+0x10/0x10 [ 1046.563951][ T43] migrate_pages_sync+0x4db/0x880 [ 1046.568075][ T43] ? __pfx_compaction_alloc+0x10/0x10 [ 1046.576810][ T43] ? __pfx_compaction_free+0x10/0x10 [ 1046.578343][ T43] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1046.589360][ T43] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 1046.591218][ T43] ? find_held_lock+0x2b/0x80 [ 1046.595038][ T43] migrate_pages+0x1a83/0x2850 [ 1046.599593][ T43] ? isolate_migratepages_block+0xd74/0x61d0 [ 1046.603858][ T43] ? __pfx_compaction_alloc+0x10/0x10 [ 1046.605776][ T43] ? __pfx_compaction_free+0x10/0x10 [ 1046.610237][ T43] ? __pfx_migrate_pages+0x10/0x10 [ 1046.612249][ T43] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 1046.620543][ T43] ? putback_movable_pages+0x7e0/0xbd0 [ 1046.624912][ T43] compact_zone+0x243c/0x4420 [ 1046.626461][ T43] ? __pfx_compact_zone+0x10/0x10 [ 1046.630249][ T43] ? __flush_work+0xa38/0xcb0 [ 1046.631860][ T43] ? __flush_work+0xa38/0xcb0 [ 1046.633434][ T43] compact_node+0x17f/0x2c0 [ 1046.639868][ T43] ? __pfx_compact_node+0x10/0x10 [ 1046.646552][ T43] ? __lru_add_drain_all+0x441/0x650 [ 1046.650776][ T43] sysctl_compaction_handler+0x141/0x210 [ 1046.652611][ T43] proc_sys_call_handler+0x47f/0x5a0 [ 1046.661312][ T43] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1046.665908][ T43] ? splice_from_pipe_next+0x1ec/0x5a0 [ 1046.667668][ T43] iter_file_splice_write+0x830/0x10b0 [ 1046.671756][ T43] ? copy_splice_read+0x739/0xbb0 [ 1046.673478][ T43] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1046.682338][ T43] ? __pfx_copy_splice_read+0x10/0x10 [ 1046.685248][ T43] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1046.691205][ T43] direct_splice_actor+0x192/0x690 [ 1046.693025][ T43] splice_direct_to_actor+0x345/0xa30 [ 1046.703624][ T43] ? __pfx_direct_splice_actor+0x10/0x10 [ 1046.709466][ T43] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1046.711397][ T43] do_splice_direct+0x174/0x240 [ 1046.717161][ T43] ? __pfx_do_splice_direct+0x10/0x10 [ 1046.718873][ T43] ? avc_policy_seqno+0x9/0x20 [ 1046.722942][ T43] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1046.724881][ T43] ? rw_verify_area+0xce/0x6d0 [ 1046.729212][ T43] do_sendfile+0xadc/0xe20 [ 1046.730660][ T43] ? __pfx_do_sendfile+0x10/0x10 [ 1046.734925][ T43] __x64_sys_sendfile64+0x154/0x220 [ 1046.736699][ T43] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1046.741070][ T43] ? trace_hardirqs_off+0x70/0x170 [ 1046.742762][ T43] do_syscall_64+0x115/0x870 [ 1046.746674][ T43] ? clear_bhb_loop+0x40/0x90 [ 1046.748758][ T43] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.753578][ T43] RIP: 0033:0x7fba1399de99 [ 1046.755523][ T43] RSP: 002b:00007fba147f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1046.761973][ T43] RAX: ffffffffffffffda RBX: 00007fba13c25fa0 RCX: 00007fba1399de99 [ 1046.767652][ T43] RDX: 00002000000000c0 RSI: 0000000000000003 RDI: 0000000000000004 [ 1046.772950][ T43] RBP: 00007fba13a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1046.775506][ T43] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 1046.777951][ T43] R13: 00007fba13c26038 R14: 00007fba13c25fa0 R15: 00007ffc859c3188 [ 1046.784118][ T43] [ 1046.787806][ T43] [ 1046.787806][ T43] Showing all locks held in the system: [ 1046.793424][ T43] 4 locks held by kworker/3:1/41: [ 1046.798852][ T43] #0: ffff888022ec9140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1046.807071][ T43] #1: ffffc90000757d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1046.835105][ T43] #2: ffff88802c5941d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4a60 [ 1046.840738][ T43] #3: ffff88802c8ad568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0xb21/0x4a60 [ 1046.853885][ T43] 1 lock held by khungtaskd/43: [ 1046.855885][ T43] #0: ffffffff8ebe6180 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1046.859168][ T43] 2 locks held by kworker/u35:0/65: [ 1046.861141][ T43] #0: ffff888029070940 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1046.872176][ T43] #1: ffffc90000d37d08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1046.885976][ T43] 2 locks held by getty/5541: [ 1046.887509][ T43] #0: ffff8880235de0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1046.893440][ T43] #1: ffffc9000337b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1046.900725][ T43] 3 locks held by sshd-session/5649: [ 1046.902885][ T43] 3 locks held by kworker/2:6/15128: [ 1046.904517][ T43] #0: ffff88801bcaa940 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1046.914228][ T43] #1: ffffc9000db6fd08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1046.921285][ T43] #2: ffffffff8ebf1c28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1046.927755][ T43] 1 lock held by udevd/18590: [ 1046.934279][ T43] #0: ffff8880299ec350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1046.939412][ T43] 1 lock held by udevd/19939: [ 1046.940982][ T43] #0: ffff8880299e8350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1046.944134][ T43] 2 locks held by kworker/u35:2/20313: [ 1046.946119][ T43] #0: ffff888029070940 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1046.951352][ T43] #1: ffffc900053ffd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1046.955032][ T43] 1 lock held by syz.9.5009/24559: [ 1046.956708][ T43] #0: ffff888027d18450 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 1046.959909][ T43] 3 locks held by syz.8.5032/24645: [ 1046.961722][ T43] #0: ffff8880410cf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0x256/0x2f0 [ 1046.964897][ T43] #1: ffffffff90a9c7c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x146/0x360 [ 1046.968023][ T43] #2: ffffffff8ebf1c28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1046.971488][ T43] 1 lock held by syz.3.6085/28480: [ 1046.973276][ T43] #0: ffff88805a950450 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 1046.976576][ T43] 1 lock held by syz.8.6118/28576: [ 1046.978217][ T43] #0: ffffffff8ebf1af8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 1046.981341][ T43] 3 locks held by kworker/u33:15/28926: [ 1046.983947][ T43] 1 lock held by syz.0.6442/29726: [ 1046.985730][ T43] 1 lock held by syz-executor/29764: [ 1046.987448][ T43] #0: ffff8880396c4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1046.990962][ T43] 2 locks held by kworker/u35:1/30590: [ 1046.993003][ T43] #0: ffff888029070940 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1046.996405][ T43] #1: ffffc90003a27d08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1046.999856][ T43] 1 lock held by syz.7.6697/30729: [ 1047.001482][ T43] #0: ffffffff8ebf1af8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 1047.007340][ T43] [ 1047.008184][ T43] ============================================= [ 1047.008184][ T43] [ 1047.027255][ T43] NMI backtrace for cpu 2 [ 1047.027273][ T43] CPU: 2 UID: 0 PID: 43 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1047.027290][ T43] Tainted: [L]=SOFTLOCKUP [ 1047.027294][ T43] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1047.027300][ T43] Call Trace: [ 1047.027305][ T43] [ 1047.027309][ T43] dump_stack_lvl+0x100/0x190 [ 1047.027357][ T43] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1047.027372][ T43] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1047.027387][ T43] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 1047.027405][ T43] sys_info+0x141/0x190 [ 1047.027418][ T43] watchdog+0xcb1/0x1030 [ 1047.027433][ T43] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1047.027477][ T43] ? __pfx_watchdog+0x10/0x10 [ 1047.027489][ T43] ? __kthread_parkme+0x18c/0x230 [ 1047.027505][ T43] ? kthread+0x13a/0x450 [ 1047.027521][ T43] ? __pfx_watchdog+0x10/0x10 [ 1047.027531][ T43] kthread+0x370/0x450 [ 1047.027547][ T43] ? __pfx_kthread+0x10/0x10 [ 1047.027564][ T43] ret_from_fork+0x72b/0xd50 [ 1047.027578][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 1047.027593][ T43] ? __switch_to+0x800/0x10f0 [ 1047.027603][ T43] ? __pfx_kthread+0x10/0x10 [ 1047.027620][ T43] ret_from_fork_asm+0x1a/0x30 [ 1047.027642][ T43] [ 1047.027646][ T43] Sending NMI from CPU 2 to CPUs 0-1,3: [ 1047.075251][ C0] NMI backtrace for cpu 0 [ 1047.075266][ C0] CPU: 0 UID: 0 PID: 5649 Comm: sshd-session Tainted: G L syzkaller #0 PREEMPT(full) [ 1047.075282][ C0] Tainted: [L]=SOFTLOCKUP [ 1047.075286][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1047.075292][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0xf/0x70 [ 1047.075309][ C0] Code: 00 00 00 5b e9 42 9e 13 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 85 c3 59 12 48 8b 34 24 <65> 48 8b 15 61 c3 59 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 [ 1047.075320][ C0] RSP: 0000:ffffc90003107068 EFLAGS: 00000282 [ 1047.075329][ C0] RAX: 0000000080000202 RBX: 0000000000000008 RCX: 0000000000000200 [ 1047.075335][ C0] RDX: 0000000000000008 RSI: ffffffff85281cde RDI: ffffc900031072c8 [ 1047.075342][ C0] RBP: ffffc900031072c8 R08: 0000000000000001 R09: 0000000000000008 [ 1047.075348][ C0] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000200 [ 1047.075354][ C0] R13: ffffc90003107120 R14: 0000000000000008 R15: ffffc900031073d0 [ 1047.075360][ C0] FS: 00007f34a4835300(0000) GS:ffff8880d5de6000(0000) knlGS:0000000000000000 [ 1047.075382][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1047.075391][ C0] CR2: 00007f34a39f5000 CR3: 0000000026e10000 CR4: 0000000000352ef0 [ 1047.075397][ C0] DR0: 0000000000000004 DR1: 0000000000000000 DR2: 0000000000000000 [ 1047.075403][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1047.075409][ C0] Call Trace: [ 1047.075412][ C0] [ 1047.075416][ C0] next_bits+0x1e/0x6b0 [ 1047.075433][ C0] __do_index+0xda/0x570 [ 1047.075447][ C0] ? __pfx___do_index+0x10/0x10 [ 1047.075460][ C0] ? next_bits+0x3ca/0x6b0 [ 1047.075474][ C0] sw842_decompress+0x5ca/0xc90 [ 1047.075489][ C0] ? __pfx_sw842_decompress+0x10/0x10 [ 1047.075505][ C0] ? memcpy_from_sglist+0x201/0x2a0 [ 1047.075552][ C0] scomp_acomp_comp_decomp+0x54d/0xc40 [ 1047.075567][ C0] ? __pfx_scomp_acomp_comp_decomp+0x10/0x10 [ 1047.075581][ C0] ? __asan_memset+0x23/0x50 [ 1047.075597][ C0] crypto_acomp_decompress+0x14c/0x540 [ 1047.075610][ C0] ? __asan_memset+0x23/0x50 [ 1047.075624][ C0] zswap_decompress+0x4c7/0x810 [ 1047.075640][ C0] ? __pfx_zswap_decompress+0x10/0x10 [ 1047.075653][ C0] ? xa_load+0x153/0x2c0 [ 1047.075667][ C0] ? find_held_lock+0x2b/0x80 [ 1047.075682][ C0] zswap_load+0x25e/0x7c0 [ 1047.075696][ C0] swap_read_folio+0xab7/0x2ec0 [ 1047.075718][ C0] ? __pfx_swap_read_folio+0x10/0x10 [ 1047.075732][ C0] ? show_swap_cache_info+0x100/0x100 [ 1047.075746][ C0] ? find_held_lock+0x2b/0x80 [ 1047.075759][ C0] ? mlock_drain_local+0x254/0x4e0 [ 1047.075768][ C0] ? mlock_drain_local+0x254/0x4e0 [ 1047.075777][ C0] swap_cache_read_folio+0xae/0x140 [ 1047.075793][ C0] swap_cluster_readahead+0x387/0x5f0 [ 1047.075804][ C0] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1047.075816][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1047.075826][ C0] ? get_vma_policy+0x23d/0x3b0 [ 1047.075840][ C0] swapin_readahead+0x159/0x1200 [ 1047.075852][ C0] ? __pfx_swapin_readahead+0x10/0x10 [ 1047.075862][ C0] ? swap_table_get+0x10d/0x2c0 [ 1047.075876][ C0] ? swap_cache_get_folio+0x28d/0x360 [ 1047.075890][ C0] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1047.075905][ C0] ? __pfx_softleaf_type+0x10/0x10 [ 1047.075922][ C0] ? do_swap_page+0xf98/0x5780 [ 1047.075934][ C0] do_swap_page+0xf98/0x5780 [ 1047.075951][ C0] ? __pfx_do_swap_page+0x10/0x10 [ 1047.075964][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1047.075975][ C0] ? rcu_is_watching+0x12/0xc0 [ 1047.075990][ C0] ? __pte_offset_map+0x179/0x310 [ 1047.076001][ C0] __handle_mm_fault+0x192f/0x2a00 [ 1047.076017][ C0] ? reacquire_held_locks+0xce/0x1e0 [ 1047.076028][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 1047.076042][ C0] ? lock_vma_under_rcu+0x17c/0x590 [ 1047.076060][ C0] handle_mm_fault+0x37b/0xa30 [ 1047.076075][ C0] do_user_addr_fault+0x5a3/0x12f0 [ 1047.076091][ C0] exc_page_fault+0x6f/0xd0 [ 1047.076106][ C0] asm_exc_page_fault+0x26/0x30 [ 1047.076116][ C0] RIP: 0033:0x7f34a417f0d3 [ 1047.076124][ C0] Code: 01 62 e1 fe 28 7f 41 01 62 e1 fe 28 7f 41 02 62 e1 fe 28 7f 41 03 c3 48 3b 15 29 92 07 00 73 5f 40 0f b6 c6 48 89 d1 48 89 fa aa 48 89 d0 c3 83 fa 10 7d 22 62 e1 fd 08 7e c1 83 fa 08 7d 27 [ 1047.076133][ C0] RSP: 002b:00007ffe32167508 EFLAGS: 00010287 [ 1047.076141][ C0] RAX: 0000000000000000 RBX: 00007f34a372b010 RCX: 0000000000036010 [ 1047.076147][ C0] RDX: 00007f34a372b010 RSI: 0000000000000000 RDI: 00007f34a39f5000 [ 1047.076153][ C0] RBP: 000055d09a3446e0 R08: 0000000000000000 R09: 0000000000000000 [ 1047.076159][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000055d09a347360 [ 1047.076165][ C0] R13: 000055d091f21b12 R14: 000055d09a34a300 R15: 000055d09a3446e0 [ 1047.076175][ C0] [ 1047.076181][ C3] NMI backtrace for cpu 3 [ 1047.076198][ C3] CPU: 3 UID: 0 PID: 28926 Comm: kworker/u33:15 Tainted: G L syzkaller #0 PREEMPT(full) [ 1047.076222][ C3] Tainted: [L]=SOFTLOCKUP [ 1047.076229][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1047.076246][ C3] Workqueue: events_unbound bpf_map_free_deferred [ 1047.076274][ C3] RIP: 0010:debug_check_no_obj_freed+0x210/0x630 [ 1047.076298][ C3] Code: 00 00 48 89 c2 31 f6 49 89 df 4c 89 74 24 28 48 c1 ea 03 89 f3 42 80 3c 22 00 0f 85 dd 00 00 00 48 8d 78 18 83 c3 01 4c 8b 30 <48> 89 fa 48 c1 ea 03 42 80 3c 22 00 0f 85 27 03 00 00 48 8b 50 18 [ 1047.076315][ C3] RSP: 0018:ffffc90003dc7a60 EFLAGS: 00000002 [ 1047.076328][ C3] RAX: ffff88805da922d8 RBX: 0000000000000002 RCX: ffffffff81e5c428 [ 1047.076339][ C3] RDX: 1ffff1100bb5245b RSI: 0000000000000000 RDI: ffff88805da922f0 [ 1047.076350][ C3] RBP: ffffc90003dc7b88 R08: 0000000000000001 R09: fffff520007b8f3a [ 1047.076360][ C3] R10: 0000000000000003 R11: 0000000000000000 R12: dffffc0000000000 [ 1047.076370][ C3] R13: ffffc90136000000 R14: 0000000000000000 R15: ffffc90236010000 [ 1047.076382][ C3] FS: 0000000000000000(0000) GS:ffff8880d60e6000(0000) knlGS:0000000000000000 [ 1047.076414][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1047.076426][ C3] CR2: 00007f9e570e0238 CR3: 000000000e992000 CR4: 0000000000352ef0 [ 1047.076438][ C3] Call Trace: [ 1047.076443][ C3] [ 1047.076454][ C3] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1047.076478][ C3] ? _raw_spin_unlock+0x28/0x50 [ 1047.076502][ C3] ? find_unlink_vmap_area+0x306/0x3f0 [ 1047.076524][ C3] remove_vm_area+0x1b0/0x390 [ 1047.076548][ C3] free_vm_area+0x31/0x60 [ 1047.076566][ C3] arena_map_free+0x10f/0x1c0 [ 1047.076620][ C3] bpf_map_free_deferred+0x23e/0x810 [ 1047.076642][ C3] process_one_work+0xa23/0x1940 [ 1047.076667][ C3] ? __pfx_process_one_work+0x10/0x10 [ 1047.076687][ C3] ? __pfx_bpf_map_free_deferred+0x10/0x10 [ 1047.076712][ C3] worker_thread+0x5ef/0xe50 [ 1047.076733][ C3] ? kthread+0x13a/0x450 [ 1047.076757][ C3] ? __pfx_worker_thread+0x10/0x10 [ 1047.076770][ C3] kthread+0x370/0x450 [ 1047.076795][ C3] ? __pfx_kthread+0x10/0x10 [ 1047.076819][ C3] ret_from_fork+0x72b/0xd50 [ 1047.076842][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 1047.076863][ C3] ? __switch_to+0x800/0x10f0 [ 1047.076879][ C3] ? __pfx_kthread+0x10/0x10 [ 1047.076904][ C3] ret_from_fork_asm+0x1a/0x30 [ 1047.076932][ C3] [ 1047.076941][ C1] NMI backtrace for cpu 1 [ 1047.076958][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1047.076982][ C1] Tainted: [L]=SOFTLOCKUP [ 1047.076988][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1047.076998][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1047.077026][ C1] Code: e6 8c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d c3 99 11 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1047.077042][ C1] RSP: 0000:ffffc90000177e00 EFLAGS: 00000202 [ 1047.077056][ C1] RAX: 000000000081105d RBX: ffff88801eae2540 RCX: ffffffff8bba02d5 [ 1047.077068][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a4784 RDI: ffffffff8c401380 [ 1047.077079][ C1] RBP: ffffed1003d5c4a8 R08: 0000000000000001 R09: ffffed100d4a678d [ 1047.077091][ C1] R10: ffff88806a533c6b R11: 0000000000000000 R12: 0000000000000000 [ 1047.077101][ C1] R13: 0000000000000000 R14: 1ffff9200002efc4 R15: dffffc0000000000 [ 1047.077113][ C1] FS: 0000000000000000(0000) GS:ffff8880d5ee6000(0000) knlGS:0000000000000000 [ 1047.077144][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1047.077157][ C1] CR2: 00007f34a39b5000 CR3: 0000000026e10000 CR4: 0000000000352ef0 [ 1047.077169][ C1] Call Trace: [ 1047.077175][ C1] [ 1047.077180][ C1] default_idle+0x9/0x10 [ 1047.077204][ C1] default_idle_call+0x6c/0xb0 [ 1047.077221][ C1] do_idle+0x3a7/0x5b0 [ 1047.077244][ C1] ? __pfx_do_idle+0x10/0x10 [ 1047.077269][ C1] cpu_startup_entry+0x4f/0x60 [ 1047.077291][ C1] start_secondary+0x21d/0x2d0 [ 1047.077312][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1047.077335][ C1] common_startup_64+0x13e/0x158 [ 1047.077366][ C1] [ 1047.098925][ T43] Kernel panic - not syncing: hung_task: blocked tasks [ 1047.098941][ T43] CPU: 2 UID: 0 PID: 43 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1047.098957][ T43] Tainted: [L]=SOFTLOCKUP [ 1047.098962][ T43] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1047.098969][ T43] Call Trace: [ 1047.098974][ T43] [ 1047.098978][ T43] dump_stack_lvl+0x100/0x190 [ 1047.098997][ T43] vpanic+0x552/0x970 [ 1047.099008][ T43] ? __pfx_vpanic+0x10/0x10 [ 1047.099021][ T43] ? rcu_is_watching+0x12/0xc0 [ 1047.099042][ T43] panic+0xd1/0xe0 [ 1047.099052][ T43] ? __pfx_panic+0x10/0x10 [ 1047.099064][ T43] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 1047.099080][ T43] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 1047.099095][ T43] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 1047.099110][ T43] ? watchdog.cold+0x1ec/0x234 [ 1047.099122][ T43] ? watchdog+0xcc1/0x1030 [ 1047.099136][ T43] watchdog.cold+0x1fd/0x234 [ 1047.099151][ T43] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1047.099168][ T43] ? __pfx_watchdog+0x10/0x10 [ 1047.099180][ T43] ? __kthread_parkme+0x18c/0x230 [ 1047.099197][ T43] ? kthread+0x13a/0x450 [ 1047.099213][ T43] ? __pfx_watchdog+0x10/0x10 [ 1047.099224][ T43] kthread+0x370/0x450 [ 1047.099240][ T43] ? __pfx_kthread+0x10/0x10 [ 1047.099258][ T43] ret_from_fork+0x72b/0xd50 [ 1047.099273][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 1047.099288][ T43] ? __switch_to+0x800/0x10f0 [ 1047.099298][ T43] ? __pfx_kthread+0x10/0x10 [ 1047.099316][ T43] ret_from_fork_asm+0x1a/0x30 [ 1047.099337][ T43] [ 1047.449477][ T43] Kernel Offset: disabled [ 1047.451124][ T43] Rebooting in 86400 seconds..