last executing test programs: 3m8.640556504s ago: executing program 3 (id=681): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x81, 0xffff, 0x53, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @ipv4={'\x00', '\xff\xff', @local}, 0x20, 0x1, 0xb52, 0xd85}}) sendmsg$nl_route_sched(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002600)=@getqdisc={0x24, 0x26, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff3, 0xb}}}, 0x24}}, 0x0) 3m8.573292684s ago: executing program 3 (id=682): setns(0xc9, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000480)=""/179, 0xb3}], 0x1, 0x4f, 0x0) (async) r1 = open(0x0, 0x145142, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="c9", 0x0, 0x6}, 0x50) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$CDROMREADAUDIO(r5, 0x5392, &(0x7f0000000000)={@lba=0x7, 0x1, 0x0, 0x0}) (async) r6 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0xdddd0000, 0x2000, &(0x7f0000007000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) openat(r1, &(0x7f0000000280)='./file0\x00', 0x600, 0x248) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) munmap(&(0x7f000000d000/0x3000)=nil, 0x3000) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) r8 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r8, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) (async) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0\x00') (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="800000000514020827bd7000fddbdf250800010002000000080003000400000008000100000000000800030000463395d0d3103e75a40000000800050001000000080003000300000008000100010000000800030002000000080001000100000008000300030000000800010000000000080003000100000008000100010000"], 0x80}, 0x1, 0x0, 0x0, 0x20004810}, 0x1) (async) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000c3"], 0x1c}}, 0x0) (async) timer_settime(r9, 0x0, &(0x7f0000000080)={{0x77359400}}, &(0x7f00000000c0)) (async) timer_settime(r9, 0x1, &(0x7f0000001080)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f00000010c0)) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3m8.51318484s ago: executing program 3 (id=683): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x28, r1, 0x7, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}]}, 0x28}}, 0x4000004) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, 0x0) close(0x3) mmap(&(0x7f000056b000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r4, 0xc4f32000) 3m8.512824624s ago: executing program 3 (id=684): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab%+C\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x9fs\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\x90\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\x00\x00\x00\x00\x00', 0xfeffffff00000000) r3 = socket(0xa, 0x3, 0xff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./nfsd\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfsd/v4_end_grace\x00', 0x1, 0x0) write(r4, 0x0, 0xff7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000010000001900000018000180140002006970766c616e3100"], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x40) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000014c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="040a0800", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="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"], 0xa04}, 0x1, 0x0, 0x0, 0x84}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40804) socket(0x2a, 0x5, 0xd) creat(0x0, 0xae) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ptrace(0x10, r8) ptrace$poke(0x4, r8, &(0x7f0000000040), 0x8000) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000000)={r3}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000880)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x805}, 0x2400c004) 3m8.052872777s ago: executing program 3 (id=694): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='0123:abcd:a,4567:ef01:j', 0x17) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1a3c82) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000080)=0xffffc2e2) (async) read(r1, &(0x7f0000000180)=""/51, 0x33) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x9, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) 3m7.552690304s ago: executing program 3 (id=705): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/uts\x00') open_by_handle_at(r1, &(0x7f0000000bc0)=ANY=[@ANYBLOB="20000000f1000000010100000000000000000004f4"], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f00000001c0)=0x1000000010) ioctl$BLKRRPART(r4, 0x125f, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000000c0)={0x6db, 0x10, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0]}) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0:,:\x00', 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000180)={'ni_daq_700\x00', [0x100, 0x100000f, 0xcd, 0x2, 0x0, 0x100, 0x0, 0x20000000, 0x8, 0xb, 0x0, 0xb51, 0x1, 0x401, 0x3, 0x2, 0x5, 0x3, 0x60000000, 0x401, 0x6, 0x2, 0x7, 0x9, 0x48, 0x9, 0x6, 0x6a77, 0x5, 0x7fffffff, 0xa]}) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r8, 0xc0044dff, &(0x7f0000000480)=0xffff8001) r9 = syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r9, 0xc2604111, 0x0) mount$afs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000200), 0x4080, &(0x7f0000000040)=ANY=[@ANYBLOB="64796e2c666cf2336b3d77726976652c00"]) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r10, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0x7d) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000080)) r11 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x80) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r11, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x5, 0x80, 0x1, 0x2, 0x9, 0x101, 0x4, 0x2, 0x8, 0x0, 0x85f, 0x81, 0x5fb9, 0x8, 0x0, 0x0, {0x7, 0x9}, 0x8, 0xe}}) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f0000005cc0)) read$FUSE(r6, &(0x7f0000002c80)={0x2020}, 0x2020) 3m7.498812208s ago: executing program 32 (id=705): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/uts\x00') open_by_handle_at(r1, &(0x7f0000000bc0)=ANY=[@ANYBLOB="20000000f1000000010100000000000000000004f4"], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f00000001c0)=0x1000000010) ioctl$BLKRRPART(r4, 0x125f, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000000c0)={0x6db, 0x10, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0]}) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0:,:\x00', 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000180)={'ni_daq_700\x00', [0x100, 0x100000f, 0xcd, 0x2, 0x0, 0x100, 0x0, 0x20000000, 0x8, 0xb, 0x0, 0xb51, 0x1, 0x401, 0x3, 0x2, 0x5, 0x3, 0x60000000, 0x401, 0x6, 0x2, 0x7, 0x9, 0x48, 0x9, 0x6, 0x6a77, 0x5, 0x7fffffff, 0xa]}) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r8, 0xc0044dff, &(0x7f0000000480)=0xffff8001) r9 = syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r9, 0xc2604111, 0x0) mount$afs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000200), 0x4080, &(0x7f0000000040)=ANY=[@ANYBLOB="64796e2c666cf2336b3d77726976652c00"]) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r10, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0x7d) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000080)) r11 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x80) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r11, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x5, 0x80, 0x1, 0x2, 0x9, 0x101, 0x4, 0x2, 0x8, 0x0, 0x85f, 0x81, 0x5fb9, 0x8, 0x0, 0x0, {0x7, 0x9}, 0x8, 0xe}}) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f0000005cc0)) read$FUSE(r6, &(0x7f0000002c80)={0x2020}, 0x2020) 2m37.570651185s ago: executing program 0 (id=1136): r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000), 0x0) 2m37.512616494s ago: executing program 0 (id=1137): r0 = syz_open_dev$evdev(&(0x7f0000000880), 0x0, 0x201) ioctl$EVIOCGLED(r0, 0x80284511, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x44, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x8009ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x6, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x80000000}, {0x2, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x1d00, 0x5, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x0, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x1, 0xa4, 0x0, 0x7}, {0x5, 0xe1, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d6, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x7, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0xfffffffe, 0x800, 0x0, 0x1}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x3, 0xfffffff5, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0x11}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x0, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x7f, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x381, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x0, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x40000fff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x405}, {0x7011, 0xfff, 0x9, 0x1, 0x9, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x0, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x3, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x7f, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x7}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x8000, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x2, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x8000, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$SNDCTL_TMR_STOP(r3, 0x5403) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x85, 0x81, 0xfffffff9, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x12, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000e14a05eb0000", @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64", @ANYRES64=r4], 0x3c}}, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r7, 0x7a6, &(0x7f0000000180)={0x5, 0x7f, 0x6, 0x6, 0xd, 0x9}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000010800000000fbdbdf2500000000", @ANYRES32=r5, @ANYBLOB="000000006801000008000a00", @ANYRES32=r5, @ANYBLOB="6272792c197c7086246f13eb3d084cfb4a095bee0e8f3ccc3d7b9ab09acd0446802567d8a9e66b1c173b0eb172149d383eb3aaf74f8ae86537f45e3cbae2bc84141b4c2175c48528cb6182e5dcd574424e3a0c1d055560db3ed149c54d9fd723b9a99812ca7220aef5f5bb64b9b128668f0606d118f6ff79acb8879c389d4c3181ded57e67e135f65bcf81b1f5d46afaf645c34285e2dffcc9e829"], 0x28}}, 0x40000) 2m36.440911303s ago: executing program 0 (id=1139): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES64=r0], 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$poke(0x5, r3, &(0x7f0000000000), 0xfffffffefffffffd) fstatfs(0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) fremovexattr(r0, &(0x7f00000001c0)=@known='trusted.overlay.metacopy\x00') r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_nanosleep(0x7, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r6, r6, r6}, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r5, 0x3b88, &(0x7f0000000140)={0xc}) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) close(r7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="bef00bb5a7927d404861f312ae10f58800000000", @ANYRES32=r1, @ANYRESHEX=r1], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18218, r4, 0x0, 0x0, 0x0, 0x10, 0x1204a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r7, r7, 0x19, 0x0, @val=@netfilter={0x0, 0x0, 0x6}}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0x7992, @mcast2, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffff00000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00$'], 0x50}}, {{&(0x7f0000000400)={0xa, 0x4e24, 0x4, @mcast2, 0x401}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000640)="cf126486c5a9b58b0dd020a46d21ad1d18a0de0e6e5a60d086fadef8f397a6881b71388696437dd3ef5f8fad4171d23306bfc868ce74d1131d848b976bb68176d39858f9a2f121047c67577b09c26d0b5579d91486df99411911aaf341a59e01d00d09bdaad2659814ce2a1b8e5d840a97ea1cf40ee5846764d04f248bd51d85c336de04d27570c7f21a2974b8d127cac9e630d28200c906389e79a37822f203b9fa486ee4dcec5f24a2b9ce7249bc8e1de4ed7f7cfae3298ffb0a43e1289cc17123f8", 0xc3}, {&(0x7f0000000740)="0c4e52a30d127648c2e8931afc32db12", 0x10}], 0x2, &(0x7f0000000840)=[@dstopts_2292={{0x70, 0x29, 0x4, {0x87, 0xa, '\x00', [@pad1, @pad1, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0xd, 0x3e23, [0x6]}}, @enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0xf1}, @enc_lim={0x4, 0x1, 0xfe}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0x3a, 0x8, [0x6, 0x9, 0x7, 0xfffffffffffffffc]}}]}}}], 0x70}}, {{&(0x7f00000008c0)={0xa, 0x4e21, 0xffffffff, @mcast1, 0xe1e9}, 0x1c, &(0x7f0000000c80)=[{&(0x7f0000000900)="4995c3cda372083b77f4e8bbf779ec118ebb29dfe3ccd5582434507dac1912255567724812abbd1ad146b42a190ce5209aa341050b08a768c567a9270d02b3965be14df0834f7208fe818c9ddd15c5bd2d5b5d61682da7ab4c78899b46d0fe0e761471d5fc16f35b4ba6faa66e4b496ab9f1930aeae4487c36c7c86bbbc18f58ad5370ca7fd0d4b199aad9ec9580378086624a4de40a3b1e3c332a9c6de7caeb07f3af16c102ff9c7339656af79e2773596e56365d7454772fed7ffdf8db66b96c4c8b5949d7d67d34b2440782054fdb9ba7e3bf09918016667424c1650ffbc9ab534951d8ecd0a9d8b599", 0xeb}, {&(0x7f0000000a00)="cef24a195e17ba54a7b0923dbe544e762ee604aa8138eddca22dd3a028faa29130150bed02e57bc18ba91a8563431cc7ffe6f087aec1856ce84791aacb94fa7f0971b502a9e31b45b17ce3391429fb2d296aac320ef78781dc40c1be099b49127f1bedd7ea0f5e8ea4ece213076b371f2fd767209c03006afeb4b40a235c00dee4cc39", 0x83}, {&(0x7f0000000ac0)="5a06addd7740b4df2ad6af19b9de7c69286fa77f5b3b9a3edb82b4aa82210b41f24a99bbe16c2dd9b69cb9d5f929da6c40e7c43666aa170789cc0b6ca4d666f8d34f1fe48af2b65f4d202d227d9d4f7ed21fe67770fe939009472d09c77fc3d31c316bf079678d57ec52fe9237cacd05cb5c512445779516bd434b6b72cf81b4ea487c4e563b9d1fc58f50fbe60236ac8ac9068c816efcd5c65d0a69cb0fd2c3fb0523bec9ab75a44f08123532b6a36abf84c2b898d52ff0a20696b698b2486b2666c86e95453c0047f4cb31eb7f55", 0xcf}, {&(0x7f0000000bc0)="9472834a965cbf0e9b0431f78527caa2f0f6a313ac10be8efdc8b0b1a48d8267c91be1cbcfffe42330bd93900080d0d6c322e90487cf7513033a33abdbb67a17217f242c6aceeb10f74abcfbe48872cfd86de70462a7408e180f8bcf128f91655398", 0x62}, {&(0x7f0000000c40)="0bee7b59e631578b43", 0x9}], 0x5, &(0x7f0000000d00)=[@dontfrag={{0x14, 0x29, 0x3e, 0x10}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x65f5}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3c, 0x4, 0x2, 0x8, 0x0, [@loopback, @dev={0xfe, 0x80, '\x00', 0x2c}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}], 0x100}}], 0x3, 0xc011) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_require}]}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r8, &(0x7f0000003480)={0x2020}, 0x2020) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x80, &(0x7f0000000200)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) 2m36.383176452s ago: executing program 0 (id=1141): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r3) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x40025b0c, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="190000000000", 0x0, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) 2m35.801610392s ago: executing program 0 (id=1151): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r0, 0x0, 0x0) 2m34.663089585s ago: executing program 0 (id=1154): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$nfc_llcp(r1, 0x118, 0x4, &(0x7f00000000c0), 0x0) statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x100, 0x10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, 0xee01) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000280)='numa_maps\x00') r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000440)={&(0x7f00000002c0)=@id={0x1e, 0x3, 0x0, {0x4e21}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000300)="a026bf42d27f8a7c7672fcecd4030ea0ea2e613d344c239eae32c6b496b5f2d140dfa685adc2dbed1fa9309359d03281e9f6bd3290f69ad08f32a826195b514d821914431f0ca3be8d002218d0b2cdd39e7ba670a58057b6", 0x58}], 0x1, &(0x7f00000003c0)="6b079ca77be9b57bf197a915d78f0a6895c7514cda360ef7932beebafd96f3d6d521fa6b3d011348f742135a267b904feb6d829805fd4aaf4c7919e42416efcb525653223c8c666cbb5a54c8934d03880fc839c4d06b62269e93b81115f6086afe62e2e0", 0x64, 0x4005}, 0x54) write$P9_RRENAME(r4, &(0x7f0000000480)={0x7, 0x15, 0x1}, 0x7) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f00000004c0)) recvmsg(r0, &(0x7f0000000900)={&(0x7f0000000500)=@nfc, 0x80, &(0x7f0000000840)=[{&(0x7f0000000580)=""/24, 0x18}, {&(0x7f00000005c0)=""/233, 0xe9}, {&(0x7f00000006c0)=""/149, 0x95}, {&(0x7f0000000780)=""/172, 0xac}], 0x4, &(0x7f0000000880)=""/91, 0x5b}, 0x100) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_SETMODE(r6, 0x5602, &(0x7f0000000940)={0x81, 0x6, 0x8, 0xea3, 0x7fff}) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000980)={r7, r4}) ioctl$XFS_IOC_ERROR_INJECTION(r6, 0x40085874, &(0x7f00000009c0)={r5, 0x4}) r8 = fsmount(r4, 0x1, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r8, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x5c, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1d9, 0x17}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) getsockopt$TIPC_NODE_RECVQ_DEPTH(r4, 0x10f, 0x83, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) ioctl$VIDIOC_SUBDEV_G_CROP(r8, 0xc038563b, &(0x7f0000000bc0)={0x1, 0x0, {0x8001, 0x6, 0xeff8, 0x3}}) ioctl$NILFS_IOCTL_GET_SUSTAT(r8, 0x80306e85, &(0x7f0000000c00)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000c40)={'ip6gretap0\x00', 0x400}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r10, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xe4, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000) r11 = socket$nl_rdma(0x10, 0x3, 0x14) r12 = ioctl$NS_GET_PARENT(r8, 0xb702, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r11, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x48, 0x1407, 0x400, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r12}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m34.621357539s ago: executing program 33 (id=1154): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$nfc_llcp(r1, 0x118, 0x4, &(0x7f00000000c0), 0x0) statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x100, 0x10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, 0xee01) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000280)='numa_maps\x00') r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000440)={&(0x7f00000002c0)=@id={0x1e, 0x3, 0x0, {0x4e21}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000300)="a026bf42d27f8a7c7672fcecd4030ea0ea2e613d344c239eae32c6b496b5f2d140dfa685adc2dbed1fa9309359d03281e9f6bd3290f69ad08f32a826195b514d821914431f0ca3be8d002218d0b2cdd39e7ba670a58057b6", 0x58}], 0x1, &(0x7f00000003c0)="6b079ca77be9b57bf197a915d78f0a6895c7514cda360ef7932beebafd96f3d6d521fa6b3d011348f742135a267b904feb6d829805fd4aaf4c7919e42416efcb525653223c8c666cbb5a54c8934d03880fc839c4d06b62269e93b81115f6086afe62e2e0", 0x64, 0x4005}, 0x54) write$P9_RRENAME(r4, &(0x7f0000000480)={0x7, 0x15, 0x1}, 0x7) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f00000004c0)) recvmsg(r0, &(0x7f0000000900)={&(0x7f0000000500)=@nfc, 0x80, &(0x7f0000000840)=[{&(0x7f0000000580)=""/24, 0x18}, {&(0x7f00000005c0)=""/233, 0xe9}, {&(0x7f00000006c0)=""/149, 0x95}, {&(0x7f0000000780)=""/172, 0xac}], 0x4, &(0x7f0000000880)=""/91, 0x5b}, 0x100) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_SETMODE(r6, 0x5602, &(0x7f0000000940)={0x81, 0x6, 0x8, 0xea3, 0x7fff}) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000980)={r7, r4}) ioctl$XFS_IOC_ERROR_INJECTION(r6, 0x40085874, &(0x7f00000009c0)={r5, 0x4}) r8 = fsmount(r4, 0x1, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r8, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x5c, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1d9, 0x17}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) getsockopt$TIPC_NODE_RECVQ_DEPTH(r4, 0x10f, 0x83, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) ioctl$VIDIOC_SUBDEV_G_CROP(r8, 0xc038563b, &(0x7f0000000bc0)={0x1, 0x0, {0x8001, 0x6, 0xeff8, 0x3}}) ioctl$NILFS_IOCTL_GET_SUSTAT(r8, 0x80306e85, &(0x7f0000000c00)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000c40)={'ip6gretap0\x00', 0x400}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r10, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xe4, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000) r11 = socket$nl_rdma(0x10, 0x3, 0x14) r12 = ioctl$NS_GET_PARENT(r8, 0xb702, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r11, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x48, 0x1407, 0x400, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r12}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m18.840246783s ago: executing program 2 (id=1411): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "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"}, 0x418, 0x7fffffff}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f0000000b00)={&(0x7f00000006c0)={{@local, 0x4c3}, {@local, 0x6}, 0x400, "eca603488a8f3218fa041fe61bb72b3d1db35a74471b99e91207e9a1af07837653dea28543292af4591a6a5d10410022a7473879906de7dd533292f3eaa7a3a5b00ad23a1197f8be93099d82d39423aa15a7f1b56627e034c9d11d5115723da08953e7b52aec405190851b82902de6eeda6a8a373770b1268d2cbc20895c0771cd15c3bb0f17e5f01d95deb3e9c0737c2cdcce3787395746f0441b3fdd54e0ff9c12c744e8e60f7d3a886ff0a8dfd2ba66fdfc6154569254ab7c08630b449d9c2427dad8f4f21109e616aaa5eb332db62ceff9fd85ca2d19bdbe9b7f2200f7d92ebbda4e87276811923deddea6c84e5e7460c31162912423608ca6642d6b98b524d721e239d0142ab8c1ec85faf50fdf1ef29aabd04cc0c0055a4db055c482688c4df1543c0879562ecfb5583312eacf7a161cf7c5daa44c2a3b2512bff768a1d56cc0f3ede31e4bfff011b4cc26d21b1bffcf0c404d64d3924e4c4cfa08410f6a9c9464233ab8b2b7d41ef5f3a49d04e89ea706f32ef7be0c041b3fbeb4e6eae396297e21161095a3ab58fe2866e7ec9991cb8286a7f76b92f516f8f9a23c28993cea2b3254f779a070897c96efa29e1e73b0f71f5fed7cbbb13591be8578f62773b0fce15d214a49e83d42dee48dc98c325cb73075d93fae113d1482b3f4b5b8effd8a5f36edd519f0f1370b9d45e29468c08ee9e2298e2de3ac7dcf7af593f35564f1c194ef69ac1eda3afd9e6a5f6c265a01c5fab79e5f56bea7e73964e19319b0bab46fedb7c3273412731f5c47ea19c30aa4b142aec40f096af403ceda7f797f64b74a05750876fd789419f5e0c7e2a841e23ead646bb5df6ca6ecd2bec11e48599c73665ed8b234670325455fc2c411dc7fbd23cab9a076cdfd761bf0e38a24ea301d2251d876622b80bed78d311c0fb9eb09f463c8369f43a5cc0b97f66bccdc1a7e668b752f77ea8c1c4c51cf8bf251531389c04bbec29eefd48f2bf10529dbe460b17d02d733c6bfa5745360b2abe76c9384ae770508c79fe5555bde4fed6bce1566f7d48cc426d4f6302191872784c4b67cdd19352fce8bec9ce2f55cada875f86064169cd4555da2345c91f0b6b94854e89be5b582e67e9b3a8e8747ff4ff4d7039eb409fca9da14ef91d08d163585e189aa755ea657126af88b03c4684a320cc2d5ebb2eeaf334261433a428be1f5dc6e6602aedb2ae32ccf19b7e8c4e211f6686526583ada62b5ccf0b05cca18a65c336bb926638a2c868dd2acb4194de4f913519a6ff8aae0e7469506ff81e9c5d5694c8dfe892123e960acfaf20ffd9d0a54f354daea6c6977e82797c5780d2a7e52f9d9c17c71f2cd2bb7ed64ef158b0bc5409569b4b5438cd977c9990c1c0adc1ebe811e16f27ba68f58e98a31ccfe7d28285ad003312d86d1eeeda9d27413c681f8eceb84bdc8101ec9"}, 0x418, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd9a1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x40c45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x5c542889, 0x89, 0x0, 0x6, 0x8d], 0x100000, 0x2c08c6}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="580000001800050401000000000000000a800000fe040002000000001400010020010db800000000000000000000000106001500070000001800160008000100010000000c000b00080001000b0000000800040001000000", 0x58) 2m18.260403759s ago: executing program 2 (id=1416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x5, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0xfffffffc, 0x4}}}}]}, 0x78}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "42317f85ea9869215785cdaaaed5e5aa"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004c800}, 0x0) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r2, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c10200000001125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 2m18.122658281s ago: executing program 2 (id=1418): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x62e8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r0, 0x5aa1565ffaa39490, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x3e}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40488d4}, 0x4c814) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, 0x0, 0x802, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x9a}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004094}, 0x8010) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r3, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0xb32, 0x3, 0x7, 0xd, 0x8]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x14, 0xcd, [0x1, 0xfffc, 0xc4, 0xd9, 0x5, 0x81, 0xfffc, 0x200]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004844}, 0x20008000) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r4, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040044) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r2) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xd0, r3, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x6c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x101]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4a}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x401, 0x8, 0x2, 0x3, 0x8, 0xb4c]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x1, 0x100, 0x6f09, 0x101, 0x0, 0x4]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x100}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3c5b}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0xffff, 0x0, 0xf7b, 0x75c, 0xfc7a]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4a5e}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x48c4}, 0x40000) io_setup(0x511, &(0x7f00000009c0)) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r9, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x1, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) fcntl$F_GET_RW_HINT(r8, 0x40b, &(0x7f0000000b40)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r2) r10 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000002080), 0x8000, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f00000020c0)=0x0) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000002100)={r9}, 0x8) ioctl$DVB_DEMUX_DMX_EXPBUF(r9, 0xc00c6f3e, &(0x7f0000002140)={0x9, 0x80000, r9}) sendmsg$unix(r9, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000bc0)="a5028454eb5b0cadcfb469bd062c4fc569c19ef8442f832ebb7e445a0496212b4d089d60510cbc109a00e267643b38846992e20f3d7149c70795f168a4177f10504684632f619ce18e7875578c5a1385fe331532c5ba0925f99bcbe61043629f42c73fc7ff147faa39e50b8b7f5805f28e16837e74bf2b5106ad73a9d43d7804aad35fd962384cbb544cc78fbfbd17d58948c86d3137a9f4a4b8a1a102bb", 0x9e}, {&(0x7f0000000c80)="a3d129665d8d7c8911ff06024a3300ffec335efc52f81fa9ef4cbc6f1539a815f75b33a06cb75e0ef3fa7b8927228149e563e8d2db129cae3cbd4ca4d3c8011b50043736d39f61a735dc12ab52b7638b6006b4cfc4502183d91c1e9d4559380f654f05c197a35e67aba8063cdb69a4152e63a684c97dc3da20320f8adfed01dd04dce75bc84dfd084052a7f94e8d4f9f67b4619e0f1a2e455bd60dd518c370adad4db7287d62ed83173a2f838f5038eb4a1cf1a7dc6f3d50e7b51249c2e2d8edb5be326f855ac395ad3eb1ef4a76d012cd7e3d12029b47fa32bdb7f010c61a", 0xdf}, {&(0x7f0000000d80)="5272ef6dec0c5a278024f53d180f21559debd921a3779cc9146d09eb4f4b1bb259446700213f63b3fce0aff668cfe41c2fa9ac3ecb9d9187459af62803f5867ecb7dd0b06119462f4267fefc49c7fb29433aff862b424bde5b1b5c9ea9930be9ecf1548903401670356c5fc2299a4ff800e03b26c54aeb2f71e4beaab7181a7b3d44da44b09c2678bfb8c1c66f0b3c18ec9bdb", 0x93}, {&(0x7f0000000e40)="8e40836c796c19148e86e25ccbe22f05327827db50bbac9735b0b3914456bb807d1df17d34cfecdea238a3781e7c94cd3a63c88d8cca6e70dce2598b14a9d6b5e585221c2e2ef63a6f9f074cb48a3ef1baa4bc3f99884c998bae0261f2b31541da0743471176c4d9b02ed04ace123547dd9a22f2299530add0a8d1c4bcb67481fec3cc97a3058d5e938585ff88bbaf1becf3556f818fe982614d77134d8cfabd0b4ac43f434f392f0eac1b44295677b0a81c069e9fe9b6197904f38ba821b70e8df00480df03a61d27d48b7c86bada780adb9d19323227f15c791a239b492dbce2b773f1d2faa2cc6c785f5e6eb8b0d749f232bc18bea9a44b7977903df9eda0e9e3e7d4f269db66666fb859533a14990c09caaa8efbb6ff777758be6e67916cc37f1cfba352d6fc9b6ce68731a6fef05d8fc94334985a4ce4570768c83fff6de958010de6c5d9d3bfe1a3f02e7310815eecc1fd86d243249d1623d1ca77645e23ca2f9b2c9b6551767209cbaef0bc5694820091d560152b8d11ccdf64fd58901eea703ab69942ddfa87d14e26a9398cbc2d465be8dcf0d87a852d626ec50c96d1ff3d1851597c9f4193bcfc6e1022a7fbbc3a0eb6136106ae4cbe1ddf7051aa6e600c1664bad64fadcc77e2f8952e12350d14fabdf712c872c5c0659e2a3277411e49a704817d43a3b5bd8124bd88916fde9822e73ac987e89c210c9d3a55415e8f8c28e41bb4302217f648409e1334cf2b4ae6d13c30d790aaaab8df7e7c607768242649378fc1e86468ad4771a8a7ddf8eb7cbecdec25f59c4d22adf7f0ea20cf7487eeecb075c7229be1ac79dc25e6a811c2d456d015ebac7d7ef7d4859fc2e2583b6aa0e7d1ab8072efb4f97d97d74ba57f57d8329b0129044e216a71397385ff3560c13fb8633189eb5bf8cb92f4e778fd05240a1fbf5413e6f8fd5f1f11de4a748ade17607782d2e1ecadb6c63b8d3fd6a09df3084d44f4afb08451fdaf3e044b847aed11357e968d3015b82e44915335ac9567a6f87f9033986c162cd502a5b8004a56a54ef8c448204d461f6b978eca36ee04de901bc90a0e1f7a94dc331edc71216ad83304e04a6214ebfe5e642d2b129b352e3416a29f6af8ada024d4ab29e9785958ac1c273173baf7873b158157587029eb3a028704f7752e8a5f50eabe766099589d54fbbcda5dce39dc528c8d469890fcee3eb2d9db9a19c508ce7d032bb0bd3785a405d1b90c6d91a88c8de636209f5f49043ee15645654016f34649d12ed4cd08e7b035f4205acec93cc934cebb0d230f6a99522b5a66b4ebf6f45fc3def8c90062444159087fbd0bd2dcd147cd02b4779b539c59510cda916a296b7106ee6a7a570fa3a06cdae67fb0d0d9ac9aa57a23025dfa8a89a5d719b5cc09cfee72622ec9cdb7ddd2f9d25a1b5e8d94f023d12a7b5a330d2de4171fa8b0df24b38d45724d18371b30c776501642d4f0d3281824f122bfbbb4be5a5e6a7b92e6e9ebe2faacf89a34980ae3ae38ce6921fc40cc1d6c82c55ba53139a684bd86d8d6b3cda0f783acc180079d69f873d1f83fe782f4bf6098f62f9f2cc8687b70a8fac8b313e587f378efcee9f053b44e3f5c874de2305ce550366ce5facdb3d61ec5e287c3b1b18653ffed4239026f0416be53c96a550a5e2ce50a7a9e3ec4b8217f31d446aa4c46cb07804c5dfcb8c8b593f4e4767ee13b16dea8429f630d47712e9fad35ea8a0795d6e8e32537ea8144a4a2ef937fa6310d11a64e6b7fe6319aeb5209acacedb8f3551b9abe91b2d12ed90e31b641b0c6b43cf10ab1a58fe86bab519a53fd5c46e0c4f320a55e7f507c17bbdb8967fdc8bc6d2d76b45561c74fdde45d96bb7e53d474e303ebb2a027274d90e3628bdf91074bc5e0e553f1ceb477a18fc4e1b4a313a1c59cd1344ff374dcb544e86a0292cb3b14e3d187d4e4f362171b87d50ac3ace12dfd91f6948d0cde28fdc9b684f1ec2590f3be9c7c9ec699b433690a61d09f47bda8fa7b240c4748b01c8a4bb5a9fc81894c9223c0e665b016f11e6512e4bcfb1ee6cd2acb0a50b17c1f13f98327e0e5cc891ada00e47972cb7a887c509a47837051ce2c4a4467108de8b173cbe14cfb17fed66c80bbaf1872aad744b49b5168e06f8b35b4b4eda80f617346ff18135a0a0790b2f075b027a30f94fa8309cf34fafddd8d76d7b66e60c935a699b598ec9f858bcfcaf0576b813633980a9d359653ad26852e0e62f558075ff3b609dc7a4bfcb8b7bc6f1699b0bead3042bd64001e20fb44e185bfd749cc0a1f15c2d0f7b9e444811373a70222279201a11dc292b165fa145cc5b81b7b3c0caa95c6776b3b8c680d887a77f7c123a9c250b98af6083e2c8d059e9a0765d2a0eccfbc75d180632db701fde2fb1551140ef77629031ff34506f5b8264d330bb17ffd08135b27e74e489a740419658f049aedfb17afcfbddccf28404100bfaeaae562a0d0b4686a1e820268094a98509a63fa1fe03a3d50004671977903e2dc00e1a3e1805be37ead4fedd5341e7c550cc08cca2094a76704497ba509a50b198d763699e777769960ebd4e705551c96b3c0ae2e8c80d0c4bc75500e95f95a15b5dac918afdce5bf2d0cb7c9f9b4fe04b44dacaa5ff815098d6b89eb4924cb67005df6f7fa550bcfc58b2c4c3111719cc96666f587c4175f43c3d2908b62ddab8e8fc95e8bf00966ba5bdbaba29d7811f78bfd693a5a6e273e0935b0c807db23ae8953580450d6ee921d5cb9163c962ab3558fe35e3a6d51987cab75da973ffebb16a0c3b23ee7f07a1aeae81b3e68bae1bc42a9ea4159b9dee2d6a7522d172e46888cd921a7a28d59596eefd9f63429b80bb501e78e5d62e6438e49b0ba66229b500df6a06a86d074c02dd64890f5014112c55fdc9f41b0a879593e87b03d904f90e86cb0ec1dc241052ef417d51f9495dd107e1c58c845c6ab2f3cf8923ece097fa1fb2aa37fa6313d31002707a4315a6a751a818f4b70f4e1c1a4710916724bb366bf046a00a6bc7ee13912ec345f628367c52bf453e85c3b62e3bb92daa743621cfee22649a32e0db429fb0d981144992dfff5de9d30ece86a3ea0faa5d804ae95d9e4855627dffa794b4978c68953f146b7582270d23273a31c905f09a04ac8175fdb181fb2d3acef5278fcbfd1ff5d34625663a3e104d7dfa303967a75647682ba1526cdc1c6665d4e9e1351c0f1964117cf2ae6ce1a5ef708f73fc8d41588c82bd368f28a1ae7417144c60c7a3093c636f9c05dccd6697953237b9ca6803f1bd9bb048790f943ed5e58ed40422b3c8cff1b7fa9f9926a456ff5d783c97af87ee13385c2e7c7c813398691e3d832049f813567f47feda2d4aa030ae3a413fd4bf676640df9bfe2b7f6c3ee5f2332d77e8653acd104ef3824eade1e05c1d5981c4f3ca28eb3d331236839d8288e67f191a87fb2eb05187f1c492356224deb0db1dcdbda9dca3ca3b263f29fff5925b158f5d2f98fe49268e5c27015dfc6e749e9410d64f2355e5fc0d52d02fbd207b0be9f23f3776276a53c7ab456a74d61c9bcbf525fca5d3de08281407ca8720162e0bd14834d0ccbfb1625557a36ff4a44ef4667a61878eb76170d458d6a7c29a56b276640b98a06c55d1b0984c4c891d1577975e1b0d8e6c15295918b367d63c3e8051b14bd6573d0ea3f8c6f1c86cbb815ada6be0d0352005a1f6629013cd530fa657090e8a82b5612c4f4edb37f283ffa40ebbc3868401a781c3bf80b25b7d95d2895b715b67219203fa6017faeb31a442f72706f13091d2d3cc0feb39b9fe61739a704e7545e036e1bfb77a6320e08ecbb4bfe591c42497f4351c7887db86128326c274a92acfe48236c09114b0d8b705d5fd2a04c6373a2f8aea57541494e0e1435604c4f71c1427c6708a93f3523afa1c56c96a6702bcf38874d67ebe68ec9b19df08fb646a71e237ce554ad20963cc4436baa2d064447609e1c0389f191fc4869d7794beb8f92a86c4e2eb4454104473f86f38d36f618d517c856c425c533addc18c2b5afc564552b0c019af4e57dfe2ce8d684cbd01e8952dd2f0d1d0dcfe5d88d8c27614a09515f2efe17c59d5ccdce621a02906cc7578b0068e413ef76f40049880ed2b96d9c98d89e8c64d2b2192c1c470ef95f78782ce743aaeb401a60ae1c6a017d4f8d231344c72d931ec84abe6aecaf1d723cf4acdf50d936ad8a21233f7d46be16f4824d356c9b7a04579e977a200a7463f40b12cc2d44228b11c30a31d78f85875e8116b4674ada669d4bb7c3142080942a7b5490971130c7cb2e53b072ae268c75f28faa9b53f9986ba48b3bbacc59f80b11c27c3e7a5e798c0ebed2503d95eb06b8767ee2ead3dad20aac5b0cd8abac64c0aa6821366503e0283ab7e86a327371cc2bbf16b78ee184860da675ff963247a4d1d47f02fdd4a292817af4a17fe2f5740389dd7a510c53368cf005789e79574edfc9aa27bc31c5c20e88ec20c8ed87d1db50c8f9b56a68ebd5b0216ed0244eff28ce56014f4dd7cd2dea81badfe39f05e7486d0e6200edc11ebb1fbd02d86ef34d15809d5e8d8338daa61317052f3730e2605e791831ed76dd5ba7be613733307b595a2374d82ced56ac30932495a39b0c917ae05e66ba84347944e0adb3c41f7fc9500631f19f454f9e187323eeaf25f3fbc3a51a1d83172cadcdb4f8a6d0c6ba172853b521cbd7ccd6cd67cba11c781bd4c74c05ced6ebe15e1fb4b138e4b55debbf2c39e1ef086bf8aa7d9aed28ccc854a7565914a4a695d05e599501abf91993abfd46579322769c5dbca6b455c38926819f993998e5fd2ca7fbe6c64394900712cf0b4e55bc0d063cf1083021c49d0d7eef68c178044801152317e0c39f9a3114eebee91745039766d03334797a0b29694ae7cc4b04b6046e4d8bfd6df1e317558b1c32e6c54eaae381070b29ce224b2c453bba5b529af4a8a483cd86c2314a4572698f25edbf656a7978cfd3cb0819e5bef527f1590a9ebb29f39d0ecf82503c652079c669a19f7bc2303bd6d76347f7e424fa3b5daf3c4e35e65fe35c0444d4f952a43fa656aaf48bcbec281efb26b3a3570dc06351ece042cabfad2f444818ead71792e01db8eea53b10b9fa69c4369a92d72ca6cb80192b12c4697c5c5f65d81e2542f857077e84e60af43aa3b4e6a496b1fc1e5d3169b6b5b1c61840c8a0df19254857b84e693ce7ec7fb91273f2e5a9de5901181adfe79e6cf0cb2dbe43e3f349eab2bc316b479688acef5eb0e9a2d0427024ec7997fc027ad94b4e8a2b661e8a5ecd7eaba6ee308171717bc192a7986f6873b6542381fa5f5a0898cc72e876007c69da871570920b9f6212f943fbdcd27bfb9ee1d43a9ec7cefc9a5f1b340ccdf51f448c599a0d92a2f618f05f9f660e3ae525c05c7d9a9e2e23ece3e45571a8321603c35353651d90c5bd63bded2b3f1b1c02fe6855c3ff1ca4775549287b83fa160f818005d86e5bbac0be297750929cc75a62999b58002f38c4b9cb678b321c7c45e4f33c1ac1e95c77200580f5a13c6fa524bc762ab6d0af52cc089cc66189c8f42b983558d129e2ed0814a6aeef1129b5d8021b75cba1dca4d19f2bc799e6c4fac29879d5c639b920d4159df798ef7f821a8b01494281c68209ae2ffa6364e6c149353db1583e6271d02ac59fb7705cf925a68cb5731501788d909ef6ed2c7679f3462bb21c23f71616bcdbaaef04c56befaa2c5055aa399327e801e5f4187e9204b1076e1741da2503a9030157d1ab23b2dae4", 0x1000}, {&(0x7f0000001e40)="850e6e7b7bd14cd4899008426488c46d516e19291f0fcdfacd0aac67d721ebe0c11002d5267c502dda826c78e02597cb25bd5d143f4f6ddd05b4cbab73a2e63ddd0afd244af117fc3d66d524c9d72ed7927fbb9df061c78fccb89319da9cfd1eeea04c195725344893199ab0876353d4ccd5056f5fa986c4dbb5d56e63f505006d2a05f2", 0x84}, {&(0x7f0000001f00)="d02ee1a47d3e2b2ec50ba1da6c3203f43fb24413edaa3d3e43961986ad33c33a904687019f710b3e7d257b69ae44e1f682c2182b00eaef77717f2b12af43eae7", 0x40}, {&(0x7f0000001f40)="63628d79342d27756b733a7c4fee449158dae498a2e850b55afab02494a1c1f6d73741b4fd4409ea7dcab944551904f82901b482476390655169c78d5f244f57caa10a6509ecff47a01514eb39c08bddb38a3cc3e3cc051ee101a01f8c36d554201df9e2c04ef3bb53feb2f9f74bcbbb57a716a7f4936584d991210c448c21910d66b90645dc56cd6a9c8a582bfc21fec352bf680652c47664100f9994dd938f0ce77ef82cc3db525e3945", 0xab}], 0x7, &(0x7f0000002180)=[@rights={{0x24, 0x1, 0x1, [r9, r2, r9, r10, r8]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r12, r9, r8]}}, @rights={{0x30, 0x1, 0x1, [r8, r9, r2, r5, r5, r5, r8, r13]}}], 0x98, 0x40000}, 0x48090) socket(0x28, 0x2, 0x8) mprotect(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x64, r7, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffff801}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}, 0x64}}, 0x4) 2m17.989232338s ago: executing program 2 (id=1421): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003980)=@newtaction={0x6518, 0x30, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{0xe0c, 0x1, [@m_ipt={0x25c, 0x1f, 0x0, 0x0, {{0x8}, {0x134, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xf9, 0x6, {0x6, 'nat\x00', 0x19, 0x1, "551522e041acff16bfd8825c1917c0aad335b072864eb7265890985b0bf8ceca1e56ebd8b5fa9195be3dde958337d122bb8a766acb46dfa859c81533f08d51216bcf9ec566a0519d8e5f810e367779ea3e516454a0213d955c9ea2a0fbcc883a50c3f54146813bb46f3f2c4adb98cc53073d03122fd4c639e0f2bb02031f491e2158dfcf4d4285434c246943875bd64e6b3e1730019d8cfa1f8f0c2a8072ea6e81f9631c90dd7b69408f259e8b49d227e888283a24ab9a09322fdda1ec3717205b46db1dc635ed6d03539739909831"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ipt={0x68, 0x5, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0xa}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x16, 0x6, "98e7bbb51ddae07275926e1f375194d430bc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x20c, 0x0, 0x0, 0x0, {{0x8}, {0x164, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x56, 0x6, {0x1, 'nat\x00', 0x3, 0x6, "34688018c7ac4ff5a5b0188ca87ba673970e3c6953de6ba2f197091e5d629046bae915bd9f54f0ce1fd9ec2a"}}, @TCA_IPT_TARG={0x100, 0x6, {0xfff, 'raw\x00', 0x9, 0x200, "e33384f1523589e452de86d59a59797ace2a25355f09474e2157bcd8ee08a57f819d9fa18a07c372750980e75a0afb7456437aedd44d322d0903093eccb3440800392a5724266b976265c0a54ebf44e627ef958918075f145ffeb30c343b50d56281aa9d8d5f54eea60bd7463728a173603ea83e347c260a19d762c98932a87cc7fdceb1a09177746a4a0c90b80eceec63a3c2696cc22d25f7fadecec67c654ac813103d194598514b2ba8a4ca84e687240bcb41f4d6c1fc8da1ad6c1a3d24e3dcb7f935a4177727de731014c0777906dafc4ce60b91"}}]}, {0x82, 0x6, "c2f9aa45a6492cf4e4012fabcf2ca569a555712b4308fcf8be3df37e0f8238849363095fdaddda4456308c7e7f34929cae1c41eba7efedfb8104151db95190cf84c9470af74f938835e9afae7e2ea3e26d6504232939362a0e02a677fc156f0ae6c1cf182e6c42c0e5458aedfc781a209d147162aee376c7e92480acb647"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ipt={0x10c, 0x19, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x38}, @TCA_IPT_TARG={0x4b, 0x6, {0x3, 'filter\x00', 0x9, 0x4, "990c39e9c1bb92957fe2ed9d791c61dea3c1930b9130558d0bf492e663e412645a"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}]}, {0x87, 0x6, "556efbdfb87c51df8a6aee3c007b94d6f8e0148f0d96ccb15dec3e4f83ceac0d4044785a82ed3f94979f9f808728ce48dcf85f5e93fe870ea6b0bc220908ef06d2f80c544c44f86c865dcdb4aed0ab68fb1cc7e3ed3a9d949d140eac90c42ce99f0bee1d26759a402b915447123fc4e98df82b045914f8580f1639a91f014b81462601"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ipt={0x18c, 0x16, 0x0, 0x0, {{0x8}, {0x94, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x75, 0x6, {0x46, 'security\x00', 0x0, 0xa81a, "e1def261d85644aa9cdff74d9c2d299519f497f68c3ccde2ed5fe239f23b2b4a8cfb5abf05a2d9d2b68737412d3387e7be2bd235f8ad691ce256fed539489033a3a4e543b85276038fde82"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1c5108290b3f400d}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0xd4, 0x6, "a23e5dcf75222c2bb5d5c44e81e910e3ae3b41c4c29023e202f7c430d3452ee8ad98793bec27aaac98b533c370a28f252cc0ff163fe42e8ee26a56476210f0174d0ab7b9a23ad014a92f607a39b5fb41c1588be347e5048080386ceee541fd9a04c159bd591321243ba2de6846028a43f932c8af1bc7871a9ddc1ad930158adab9156ecccb5432a204f6c7a1773ae3038c1e204085440650bccfc55e5821a4600c17e6346ceb2be724c39a7a5b0cdf95b8279952d2bbed8e06ee346201c0de6f261737c0ec72fce52bebca5473ed38df"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ipt={0x2e4, 0x19, 0x0, 0x0, {{0x8}, {0x1d0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x126, 0x6, {0x8, 'nat\x00', 0x10, 0xaa2, "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"}}, @TCA_IPT_TARG={0x75, 0x6, {0x1b0e, 'nat\x00', 0x3, 0x4c, "d01e42f85d82b772500c33ccf0fc3d6e47afe47a5e8c6425fe612a6edb116df3fcaf5df8288830221a8ed7741a37b62344586ad3482d4159df303f8ae2d5d3c29fe54cfe8f848ae9945039"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}]}, {0xf0, 0x6, "3e4694ee4ce2461d39f692ab59dc975783eca19336ea9ce8973ec2a072accb1bd6abe9614388031e8b5753a48d079cd47858add729353df2aa5c5d0c2412f6cd777ca632992a98fdff0b07ac169477982f847f9991a19f9016284da83162d6c398701a4aba195c416efe5a94c1eb324cce9a32374e6a49b0e85531d5d9cad81ff503ad322cf5d8e05851d4198d03636afce51db5f1dbe76e5acba25651f588c5746d2300ae203b50737f14fa8592f49bda6edf3ac6675ace3fde793b25d574429df530d9ca1446facc704309e021fffc376431cdec10399056c323a0436eea6c65fbf4e9ac81fd61ce0968b3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0x100, 0xc, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2f, 0x6, {0x0, 'filter\x00', 0xff, 0x4, "a9913193ac"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x82, 0x6, "253b6fb5d56415b7ba2fd345f2f3ec018638224356d97f0b33d9ffdf32d6cd61a04eefbc939646dbe40a73ee5e6bff99d1ca09a5b21ca5f625432f09522f641059758271e9e941a5026134edc1aee15dc16d36c9761721627bd9e23aa8c1fa312843efbd48c2a4ad1c2346964d17ffc704b3e00c91da4ac8c0017abe17f7"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0x224, 0xe, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xdf, 0x6, {0x4, 'raw\x00', 0x7, 0x9, "d3ebb43445e5a6a180c29c1390a96e52dcffde99d973c1d00cd9e2ba39e5494f43a4214b6e99537a52688d033815bb7d41053cd7e416bb1ee72b2353d03888c819d7c1a25b4ba97bb68b0f2ce2933291ffdaae5d6badc710e97c1b6d0c2341c09c88af6df2c5454efbf27cf657ed755811418695fea4fd6c654644dac06d659a9468b661bd4c34fb5e86bfaeec646d84ca410f46a5e2156a83d938d7237fd17451930b5a14c867de60f38e85fd229975cb3edea8e4"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x80000001}, @TCA_IPT_INDEX={0x8, 0x3, 0x3c000000}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0xbb, 0x6, "812c4a96f9f50e51e24c5270584ece6fef6e0d9ae7d904fea93d4ac3aca5922e6969f9443328070927c2d6d2e7eb9877b293b2ba52f2d6b449b2c1c76b4395cd5d6d51093bb0c4a299b11d1f91bcceca094dd1808e79633b1418511112cf385acd44950393b5d2600d1252df4195db09cfbcbad1f4306a1355a2992399ea6818754888d16ed3750287b5a25d1473eca978c88f019b0d27ea9a295b1f39eabd38731dfbc02bc2fffbdd1a6ff97d6d1bed2079ed5273c034"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x98, 0x1c, 0x0, 0x0, {{0x8}, {0x4}, {0x70, 0x6, "d8395910fb6ee148d757f1a60aeb06d36e2b4afb34493b58c6c3e72c4de7bb6299ed53e64f88b91dbb8777fe17796195c0f9c232eede2cba200fcfe9ae860529438eaf2bd74ea94f708e909081990bd024794c2afabb22fb1449e796338c1cffa72fc5b53afbb7acfec313f7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, {0x970, 0x1, [@m_ipt={0x1bc, 0x1e, 0x0, 0x0, {{0x8}, {0x114, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd2, 0x6, {0x7, 'nat\x00', 0x5, 0x7, "820d3f23ca301d04d323e368db2e98f61d0078575a491e14fbfb87c4f6f1319bd8b9c569d605fd7e565466b7868b89012cc84190cb72b8c7b3bdb9320b16b755ccac856d3747b8c24a16cc203c80ad7de278cb948f48e7ee2c469ef3a563254206238cec0590abb4c0d299cec6755881fea8d851af2620938619bec738e394143183ee555e0a08e793e29337fd2dbdd49e1b071fceb64ee40cd0183422de80fddfe2abbae873aa75"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x83, 0x6, "e54d45aa1190b7fb282dfe413fc7413710b119a163fb77ecb3e6f2acfe2d155e0bd24aba39238b27f80dbb5240bb973b8c5e1a504a51706fe9ec80774d168cf54abf96680f37fbb9ed41672f78cebdec5ddcd4e65c089916d633c677e2898124a7fa2ee969a90950aa257369443e8a189de08c3cb5456fd4682a2b4176244d"}, {0xc}, {0xc}}}, @m_ipt={0xf4, 0x1a, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x3830000}]}, {0x96, 0x6, "2afd313e5b0ed25ee61191a2c64509c2e223271d65e113a304275755d189b5a5ee4618a1f6e419678989e62df189a90e4dff8ecd6284118e66d2c4a978b45cb9a3e3cfc268fc6ab6e03fe7ee1d790f6a840e90d35a3c6806a4779e8cd1d049da42e0d592ee8df6330faffa3c939461a27a0a797980ef5e86dfa50b7f653873ad0e24d6b2dcac66de01680df1eebe61f261f0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0x1a0, 0x1b, 0x0, 0x0, {{0x8}, {0xa8, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x4e, 0x6, {0xf, 'mangle\x00', 0x4, 0xf, "5d190bd8d65ac04f9ce1d6326b613d3d0d5640a7d08077c62a936287758a27d8bdf68b4b"}}, @TCA_IPT_INDEX={0x8, 0x3, 0xc}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x7f}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x6}]}, {0xd2, 0x6, "1366c18a77b2559ffa9774b5de02f63d47c5b9691a60ec8e5f4686a25781378bb9bc84b88cbe770cdb285279b85898ba26fd975a19173b869c138f01a5c2c4a579c1bcd7cba02eb460eba5e0b69d52d23d473fa69be30e9abbc4ab10dc928e48eda9ecf69a99a3125e9d7e1097b86f0febe5d3c646b92b4ef6d4b782bad98d29694c0b9c7ad2966b77f9b61888fa500c8f393db0a5c621ca5679667c825067705da30e824acbae0e04f1de5bb19bd5a681c10606c0c46958ec8cfca6d5a67bc825f420330c36bc36fefc8db3b700"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ipt={0x258, 0x15, 0x0, 0x0, {{0x8}, {0x15c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x10a, 0x6, {0x2, 'mangle\x00', 0x6, 0x0, "878041ff32636edef7290aed31a8039c5983a3917464b238a6aae142c973fc25287c9b4c1402e554ab1e76205e1ca48c99339d986b402b8dcfd317613dc255cf7af51f76a1603c4a9dae63d8232f89c28888269a456e4c784c2b4dd0b266ef4c3fc6a88ad4d679c302201200d77871e14f577efc4a7962c30a76b9b1fff1290f2d8886be476814b9428a0600ab3a9c432ae53e98a622dc979cab29afa7fd4c850e82934503b4f4947868d43c75a71ea878073ecc00970e3bec379a3ba3d46d25fca61984260dfae43d517f3c88988934fa3266ac20505f11a8ca7ed8f271bea5"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8}]}, {0xd7, 0x6, "500c7a0a439c10c5001e50aafa394e44d9c876faaa9b58d9e79a33824b098794494f20346f3ac7aced1a13f85482cdb5a65741367ce89c44ec898720a71c3eefd39730dff50a90c5105f27f72b702f66847ebd280393cbd43a1c94a8e81581009501c298e705d0e5e673ce49c109637a4d459d64d71f85c6c58cc1934f3c827d0cdee8ef5a19615c49f7f83e98c4f23c234182f378f14bd1d2f3a9983036dccef79d35243273500cbb15957ac4933e3ad08a19bb37af6e06913e898044987a0e73b6c5b6af96363c442a74e08413ec1e706ffe"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0xc0, 0x17, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x47, 0x6, "15ffb8b2e0b995edce5650bc17c080817d3ed7f5cd19b765e569773fe1801f5db0e142fffe8da033f3d44a3da3204cc7ea1370ef0017d178d9e54db0d9c5108910d7b3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ipt={0x204, 0x18, 0x0, 0x0, {{0x8}, {0x104, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TARG={0xee, 0x6, {0x5, 'nat\x00', 0xe, 0x4, "a560927f39d0800769b6fa6293f0f90abd2f287aba0defee431c9eefb29c72dcb7d81345cc073ba46e177cda45b83e41e78c799648bdd62d17fee67e8600fd2b3728a7ecc1bfa22a83e082dc852792e9ea3dce042140d74d6ea19bfcbaa940b8fa56af6ceb332a42a483cc49faea188ddae54ce0fe1a3befb2f13f23bbb27df37459e70cdcbc525294f870ce41f6a7c2c92186309af050a188f9f3954e433f0c92dcbb76f613b0f716ba834926f7c939ddb18cc75fd4a470f5ee0fa1ccd6e274b23ed6af"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0xdb, 0x6, "e47ee5be3d7a3e9170eda45208eadaca3e9e0b49dbba53052bd6f2886e658510abb73c8e2b7ea72c620a38b205ff950dc8fc0637e511fcd8f3ac8941db1657e6e781b463e2efbfb35eab5105919eda2e4e0648b2b714b0db770cbfede65478ebc392c279bdc1d18745f260575ac751e0b303241b57939b48afa1ed653a5d8502c24f26aee9d819afb787e02ca18ff507223a9e9f49a32b832ad8915d8c7c8a3c88ab69be8ca1e7f2a6cba13fd9cac98bb7c80590225ee04d8292558f6dacbc1dcf5fb8f7bd821888c11a8a9d21fc2f9b3a2bb93bfc06b1"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x1f4, 0x1, [@m_ipt={0x16c, 0x0, 0x0, 0x0, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_TARG={0xae, 0x6, {0x8, 'raw\x00', 0x86, 0x3, "551de866a53f47d15281610271ba7deee6faa93e8d8331e666475ac6d3a48677e7d8729927dbceba97ae66b80b519e5877d71ca773294cc91e603ed94a5bb5d187caccad34dd34641e9e14e45787e5120fa46fd91a62aaa23b6e2aefbf89cd1e1b4eb862ff7bf44d6c39a48ab8b447cb8a519677d045fa2abe6a5c72a0fd3b13df708776"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}]}, {0x19, 0x6, "3296e89a148d65f4c2a3840a41ce4eb49bbacb73f5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ipt={0x84, 0x12, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x48728b3a}]}, {0x53, 0x6, "a0394f18841a8854fd06b27ac8ebbd6ecc0b2737a22b2bb85e85f4cc415b861272fa6ff151800a866f5eca3dbcc5bfa8c4d98218a41293dd9ea3d585457ad1e8811f8a7798bce897b79ee54bc90829"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x96c, 0x1, [@m_ipt={0xd4, 0x8, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_INDEX={0x8, 0x3, 0xff}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x66, 0x6, "0ebda5be575197be63d5d0188281fceff37ef0238a8106343195017c4ed4cd8517b92bdd2a5342808943a09bb4bb166ad12838ac281c3b2c9d7c89b730a41b17f6821f3b8341d80f6aaddce7ca08d7411561860e4a155f4f9544903ebd769118b567"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ipt={0x10c, 0x9, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0xbe, 0x6, "3832488a54c6c9e9b08c8245cc44db7a787f769ec7d38e8d51f17c20992fb3474c91aab068da9ae1166a8f6430663f759d93e15e03cb69c28675f64957c80d1fd95f7ab4b58ec4bb8b3707f8eb8314cceef80bf456b749614dbcab74ce891f2afa211f671db8be63a1008c35bd666cd2063a2b710023a1fd463c63a763d3afeb7b2c23375e1d6eafac589f2282e9f800f8432139bfbc44e391711fcdd21fba70e1aee6d4d52e9bd9a9642f1a9c24f25b026f783a1e6b36455017"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ipt={0x198, 0x1c, 0x0, 0x0, {{0x8}, {0xe4, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x6}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xa3, 0x6, {0xffff, 'nat\x00', 0x7, 0x3, "4e56780f5f482cc1665673774a08355da6dc3d9d7d015ea05891f5a81951bcce082587461ebb22d9e1b2326c3d18578a1409355d1f881875fbad89d790c2923c031369764eb074e881ddf60a546a3ae1da876db0140a0e8cc4b7e112bc95d852ef9905a9998276f628dd7ec99a573546041f3fbe6ab19d28fc"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x90, 0x6, "4689f08fc6296b60b9ee74e7945656cad93a4ef82254d287f8c42a8e96e8d530f2530f3555a320426b64ced3a1290bace913b6176e4d11dcffdf4d5d754b1e723cbd14c9040717af29514923e81371d96e63db6e86931218858f28b4f0f5724aa3d7f985160962b55cbfe14ee7d1029c02fed86d8c213fb18e692dcb82343e2731c8156ecc26d781c86c9f27"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0x174, 0xd, 0x0, 0x0, {{0x8}, {0xd4, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0x6f, 0x6, {0x6, 'raw\x00', 0x95, 0x1, "d5c3f1f2fd1444704e02624ac370c0614114760ffcf2f04b8415013df87e4fe6f901905647b65635b2f4eb1c5c4a42291475051ee102371566b4eab0e6908919785215e721"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x7c, 0x6, "da7e5fd9137b2c414b8e95e214af5a8f87d09844c2dfcf9419f192f62df578ebdcecdec52af287182e0efe61bfdeddfece3184bbd479cbbd12f54156aba0b665f6d661a6df0425622514d5ca9859f95267f321c18b36696c2e5ca04611061aab27ef1ec338776c4c6bd611907c317fd0af73e5ee031e84df"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ipt={0x194, 0x1d, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x1dc0}, @TCA_IPT_INDEX={0x8, 0x3, 0x2f9}, @TCA_IPT_TARG={0x6d, 0x6, {0x401, 'mangle\x00', 0x4, 0x2, "aaf50551cb6bf3ffc0c5fc2b9aa0f6fdee66f0e29e259a33c71a647d062f2c7fbd54fcd00fc464f8533997f2e8b691056504460251e451a6f96d3820607a8286f41fe3"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3f}]}, {0xcb, 0x6, "f5ae4a6a61a1ee0448508c0044d6a8613a307a802d310e0f278ce107a70a2f66d26f1f008288de6a19b50f150e315a514067e6208bde25da3aedfe02c492e834030ea2f313f72a286938a81c5aabe7143b2af722befdd169deda44204580912f1cd9d633d237980dea1d9820ac4c823c88700b88bb6052825e62cb2d5048b267451b0db08f279c676a03f170b34ed9b89709b195452e95df925e471ac2650cf0f84fc199ef90629dc3bca48c7e3903b5fe48822cc6145572a05064b24cb0c396a02fe5f1bdd941"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0xc4, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x92, 0x6, "2ef9833160b6201565f1daf1a686dbee781f55073b4daca6c278c0a4f13b3b3c972edac7aa954eee959b79716147ab8701eb1e39166b5a6d39b9ec243cf9ccdc0193c36df0d7876db125ec6b7f14d95e81508248bb1a2e1d84e411a73476333d72ac74b3f1a810409f00933953fb24b3cbd43ca0ffc1e878d427376412da934afdffbc97554839919014b9db8a70"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ipt={0x224, 0xd, 0x0, 0x0, {{0x8}, {0x174, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x6749}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0xe27790aebd31149c}, @TCA_IPT_TARG={0x82, 0x6, {0x4, 'filter\x00', 0xc, 0x0, "fa2940cee22c09588d3ad3326de790cc09da623d2b7bd9590eee2c900c7092094b42077e1197a8cb947e3a7ae2f70a1e264430eb492f196c34a0e53db4617636f7a13f83997fbf19518ebc26b5fcf4f3e73bca6b4d81fa8b"}}, @TCA_IPT_TARG={0x54, 0x6, {0x137, 'mangle\x00', 0x8, 0x8, "34bc0b151e3529b2bc79359b5c4e93f33933167eda48a113472210a892c87e6bacef621133e526257d07"}}, @TCA_IPT_TARG={0x5c, 0x6, {0x8, 'mangle\x00', 0xe7, 0x7fff, "8daee6887f064c58f4b5a89c16ec72fb46c9098c933491d1ddbff0a3d89c886038ee660f2ede45a5fe4547e3783661844d43"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x200}]}, {0x89, 0x6, "7e9c4a60dd19fc055ab67e3cdc500144b8a17673a5eb7228098375fc86a77ad2972b52dab900e888e088e031bc261200c21c083e00ac05d1a859356294f4df2f5578e1ddd64248cfab824f4ce3fa03370038df61833bd62addfc21b319648f0dc4e4197017692c97ebc224611f167bd8b39028f2560c793d2f0f89112509f80fb8bb6f3c4f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x90c, 0x1, [@m_ipt={0x274, 0x1c, 0x0, 0x0, {{0x8}, {0x244, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TARG={0xc1, 0x6, {0x5, 'raw\x00', 0x2a, 0x6, "ad1404c2a2af2ea02e1ed36c7e478a11f4ce4a43afb6b22e342192d555d8ae277e90dab87ea7e06e410ba8c60b9d11dc02c5d6b319fcb34b622db0b72493d19bb7161499d0a731a1dcc14af6c08699a8d4da281cb3df446e39b3626951f70c22d0c741b9e46f04c0b6ab46bd6befa143dde81bc1ad5eb345db4349a696e335f74bf3e846bb161d7254434ad71428b8ccfec45c42f7b20c"}}, @TCA_IPT_TARG={0x121, 0x6, {0x8, 'nat\x00', 0x4, 0xf, "ffc8e5d76ca49e21aa0b191237856ddc17aed6ae88e282106b2d25f32a37e3b42f6555609ffdeaff14059e37ef788fd5471d796647596e5fda17738d9da9e2c94d0bc738b2254a70bdd8c40c8cf47862e181825a8ac562948634dafb2b30cc8ea9e0f92be81fb71382a275cd6ef1999bee4dab30776f5ca96b81aa4d1278ece0b42d77633885f43863f6b444ddf70f0d23cbce63464e8e8428211e548fc11b32d4a67c23c8aeedd6a022082e6ef7e71df517cc477999d9d370f94e608d0822625b1e7bc73780b9649ed0a84c18216ede1f2de95f794fd426ebc7b571b01a59327ef26dbbdde668f82b552cd2b79c08e98824d65c0413ba"}}]}, {0xa, 0x6, "9cf0c0f8d36f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0x1c4, 0xe, 0x0, 0x0, {{0x8}, {0x120, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd5, 0x6, {0x0, 'filter\x00', 0x2, 0x7f, "af81f15d1e6e657ac3db48526a9f2f6f4c1badd344716ae6b5f68aa5c348a2d393c3621cebf7246678bbfefd8b250919669dd0b9ebad5eb689ce394c839c068b0e59f41f73d0b1da72c32de03472a76faedd906f89295ab547dc414ca2ca2b3096a5e1a231bb59c946d8681ed3f64f1cf5738f8775f909dcec3f5b7bfd2bc80df403cea4393b30a0f236d7fa6e17effa6f4696b3e92afe70a3f6e0035c2d9a37549b7eda0481b51049928c"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0xbab1}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}]}, {0x7d, 0x6, "7b8bea5f42ee8c7828252bf214dfc1f9fa91df503673ac6de597b859093088d8e020cf3dfb3d3a69aca15acdba9f6ba640a453b722790bc250ce666543a8b3b5f608c1d97a662de459b14e81958ca5128746590e00b9b78c53cfac54ccce1b9dfa76241e1f05d5bf317a83a5d4023481a5f2fbe0a282e692c9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x3a4, 0xf, 0x0, 0x0, {{0x8}, {0x2cc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x11b, 0x6, {0x81a, 'mangle\x00', 0xc, 0x0, "248b74aaf838213c715a2752eab1c25872f00e9b20b389b7c5b554ec50e52868c2a5bae4416d39f490f8bb24151cf2ed4e62ba7ed22fc1f4e0f8b15dfdd8671eb5ba074df8b4b74dce5735c84fb2d527f8603c928158a9e5829a9fdf638a0ba562466309ed80417ee08d8cec9b6c6f0120f6fcadb23e4a8db273dbafd90679e8e113401694ca425e0fc58b5a7a0866bf5caa1d1800d244fcd3701980833881e359769678af14809aadfc2fcd21537b3f9ee13cbe331b7ef6e98b54846f9daa6293df05002ed05cdb2e8c677f35ee2f7ff5472e8fcde84033c06efa14b3d8f275c68d8c04f865c3bda83c8f7648a4716e8f"}}, @TCA_IPT_TARG={0xd3, 0x6, {0x7, 'mangle\x00', 0x6d, 0x7, "fb4acf8227d2ff2f8293149d05ae80fe7ebdfcf27e1a47673a1522caf4eaf9621fe4884b3b6dda9cf7491ab4ee1e59784f0cf6e6ec2311f5bcf29cf6af7322f8cbda67c94cf848adb568a4324b6958ae2ed1b36262860670a6d265be4891a13b71c0fdae68a84482f14f9fb34eca44f2c06ac9d56e8f6b722f96a7c91289a37b078fb64f782713e7d70c9c17adb4ae391a89401644d94a554cd4d24343f2e723becc6aaa5fd36ff58f"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x93, 0x6, {0x1, 'security\x00', 0x9, 0x7, "95addaa0e0dd4e7dccd8d3f6406ec2d8ab2d53e05cb14c3191d94637059b66c476434f56a72e7d9921fbe58ae46ad287667316881a4bcde5c9a6db504e648b1a73199ff7162942e44a344acf01512f7fb80846e82014f6933966712314550d2c45ddf5c22949e648f1"}}]}, {0xb4, 0x6, "469e0fc11294418c92db5aca199eea6c392a139d6a6da5ca0856239e1425df7961b46d8671d24867f1c6ad4e9390100627ac34e12187bfd5eb7b8fdef1607db9d5e9157af9d47e8374b8ecb427df46c9a2df5a95cc64027c914f5190c8190142b58967539bedd869be5dacce346a79d23bf3d149af7287fe3eaf7178bb0c606faf76b5401c628f88903d3fa5fe510fa136ae6cc49ea9f223ca193dfd78a6cfc53fcbf3a0b3224b513cf1537979f0a532"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ipt={0x12c, 0x16, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x89, 0x6, {0x10, 'raw\x00', 0xa, 0x4, "83d944a54545954be085d8b43b75f5e86bb9c67bbb690aa199ee68acacd5db91e936a0ad376e0a50ddc1a13e3dd7625d819d19ce6c004ec7194beb6b24880448a2b85c8d198e837f61706b34684b7a11e9bb6e2d084f416022ff7a000fe1e1"}}]}, {0x75, 0x6, "dfc4ed1ccd4a5ddb8238ac708dfc314611a5fe2412304e44b2b416cf8aa7151a47afe53d28492abb0b147779ed6a21dba61f14f46447690784df08277e8f065640c8cabfde9617478cb7cd1238e7aed3c61a784de30dac0a3081d7c3fb1b9a120e37939a46091da79cb34ce9e535f97cf2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, {0x1744, 0x1, [@m_ipt={0x18c, 0x0, 0x0, 0x0, {{0x8}, {0xe4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd5, 0x6, {0x8, 'security\x00', 0xa, 0x9, "a66ae41828b0c20db88ce80cf864f05c3035a06e57069ad13814966076a3945804a49ada6f8e66f6e8b40bfd116baa09476ce932d9321e9cb5b29dd9bb32f2592fa85f25b8a69cd796ddc72645e37c13a4ee1b8672e3c6daf648eb5c82a0b8812ea41910d70a9fa5877f141756bcc7a7d3c950c2f8e5754086e153791cd03a9c4842524f03fbb49714dbdbc70869927f7bc9745dfe9af89bd806b1a40166aa246b040467c975d11ec5bb21"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x82, 0x6, "9720267b8819215b13521f479130e27051de3aec273d23775134d6f641656c6884defbdb2f5fcd7340cc28eabdeae4119665b6632f1595f8979506539a78e094401849747c8a0b38f7fa594211f0d94c9a65ad0f4454babff272aeed5618c847303bbd625ad2d5eed0cddae0de777e592bac57296c0d401a8fc2da472d72"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ipt={0x104, 0x1b, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0xd3, 0x6, "567779bc42a8e3ab322474e77796c08dc458e0be566992a02ed13ca82425100d21d9ad67b792ab17b90fb3b1c725801bccecb14ce74db52ec073dded4a0b30ddfccfeada95d467f6283eb4ec3c3ca71ed4d7e8f03b66b039a2a009ec59ca18904318f9b3390a4bcf8281b6adba3d81077b92158f767669ea1add7f75d3a320dd8e89624ff2121ff963f046befb6a984b7a9f3ed40d46601eb23f3a7a834a934bc2e7e3f80ff18bb098700d44947fd2b3a25848d0df90204e9d409b2092ce4a177f1da984dfd69bc2c88a46acc46a32"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ipt={0x1b8, 0x19, 0x0, 0x0, {{0x8}, {0x118, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0xc3, 0x6, {0xfffd, 'security\x00', 0x55, 0x3, "49f74a3aedffc9b858d46d133f01ec37520555c10ca6ad32899cd58da71011dc9e6ca4337b8b66c505cb138375c91f4733b99692ae5e242aef0eb3f4721d8f203aa51285397eb8ff3d9e55a10035a5df98adaa782e027ea8ce1d7a5186c0ee2608e13d39fa7a7ad0b490ae9d3b8fc448a8542ad26f7f33d9ce470404d513e82f6ca11bc6ee2fa17470d186ccaa66bbe52afcd40b363269dde4"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x7a, 0x6, "e0e17c3681d89975cf3257cedde124a4ff72c7283bea4cedd65480fbc7d36f001205a1c6dc099a55bd6ef756609a60c489bd4b92dd398d358bef05a806485d5291291ca33bdc4a55e2e0343969b62952e1f22d8c1b3537f8f055da48cd025a8a4bdbc3e3ebded25a7f8b3a921723b842df0225b233bd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ipt={0xec, 0xc, 0x0, 0x0, {{0x8}, {0xac, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffff9}, @TCA_IPT_TARG={0x95, 0x6, {0xff, 'filter\x00', 0x0, 0x2, "6cc117922fbfa7d7765b17833440407c32bd075492562d9e6844157abde096c3f7fefd23af0d158102ec5e9a1c218b2b0863e9a62caaee99971e3e9b3bfefc2b546f6adf8573eab96e32229e8cd94bbdf0791205fc4831ad0b8894bb764a1e024bd4ec85bfebfb260555de"}}]}, {0x1a, 0x6, "9463bccaae83292fa0c99916a7691147c6281bb3e517"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ipt={0x128, 0x1b, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xaa}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x80}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x90, 0x6, "857bb34895cb0e072008b80da4d48c0f775288e27a27b6eea9afed76ae065615f3c2c8b3a07aae24dd1ecb016569cb78a75ed09d6c621ad9cbd5e69ea5e26a1cbe153ba28faca89cde109429d009d8eca3e27a51114526e0272469694bafec39768ec073fcc494b1f4f31e923c7a27a362ec34ed5c1a2dccea77d3217c5a1b8720b1d9e876d1c190f61d6403"}, {0xc}, {0xc}}}, @m_ipt={0x10e4, 0x10, 0x0, 0x0, {{0x8}, {0x10a4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x54, 0x6, {0x40, 'nat\x00', 0xa6, 0x4, "8492c3dc99bdd77e5e1a39d8ef039c47593efac8e64e1094fab3e15ec01c45d6cd0409e8731ab9128626"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x57}, @TCA_IPT_TARG={0x102a, 0x6, {0x9, 'security\x00', 0x4, 0x0, "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"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x200}]}, {0x1a, 0x6, "c218366f48e7ec49251648544539ff69ed2ee41f98a6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, {0x1c30, 0x1, [@m_ipt={0x134, 0x1b, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0x101, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0x1c4, 0x1, 0x0, 0x0, {{0x8}, {0xd4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd0, 0x6, {0x8, 'raw\x00', 0x7, 0x0, "334d0d06487b2ea03d73f8c35bfe4801cded17a64293cfc8d1c6db5471e807ae47eebd1943c7ecc4f1aa34056ea86695d9c0a8975c2e1b82a85105141cee3683a609d4e9482e21e835813c10c7bdcd1c667e2333a47292296d9df0cac30456097e3c8a0f01b727e076629212a98e597268250baf9dd6189a530becbb1f89f7bd9fbc23caa27e3e29959786046949b1ac68e97d5e6ea89c1c90244eb88a85db1b021682c8b370"}}]}, {0xc9, 0x6, "3bc75416cf1536cf8410fc635d617ad1255fb07e30de986abb7032a73a361b727c46e5274b45740f1e1019b342f919236720a9976d797b790f620a47c5c86ac5ec9dc1825d12ea54133304bd47f632edc245d9882bed477e196da4c2c9257c596d8e00301f8e8931e66d4832261b4179db151d0e1c56c4cae98643e03bc36ea7d2c2e46c42fd6fa80efb3ffa3978482708b6f1b6f15cbc768f8b89f2c373424ada3be82ef81be698f64e38097cd1bbf5e78613d1b4e19343f1c1a90c058551e395b94e94c0"}, {0xc, 0x7, {0x0, 0xd6981972af8b547b}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0x16c, 0x3, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x68, 0x6, {0xd, 'raw\x00', 0x3, 0xf, "46e1c0b4dbdc4a52d1727b6c086e8fbac29a4ecc008d59f6ecc1688fc9c11d01c970d21b81fc1c87c82595fc06cbfd3cc4626a47a346345c90a3872abcbe"}}]}, {0xd9, 0x6, "61a4e7f4d7f8ab5092f5988a3892f64f589d284c85ff6b2f43ad1cb490a9a59ec1ccffdfd36c468d9270d49df32944e63cf21ebab09051b27aa87c6742defc969954e24cca8170b57b723363aa328792d9e3f10e89f5344197153934c230ccd7d003f6b4732b77f775620cc2878561776d5991dca70cae0496025da2b360b1e1b2738decb03f5bcb782f0a0d9a6201d560e4f0a73a83dce319a0b3f10dcb8a4e5975f575cd8f00a736ea54eaabde6c9eb7cca7c4e67a86716893dc86a8d3b6e222790a30cd2447d87b7dd899ecad70fa654110712f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x200, 0x13, 0x0, 0x0, {{0x8}, {0x104, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xff, 0x6, {0x41d1, 'nat\x00', 0x35, 0x6c, "e40e73d145e03f61bd3667d3a3bfc129eca87741e5c207a1d3dee5b8f1afab2990e03d0da23c078edc81248ad52e835c9abcd4f66fb83494dfd725745703eb4772f13fa884be727d828167e84b0d51ab1814c390813cc15ee94fa2c249cf1f401b7548ea091dada4fd9d9cedd8f908bb297fa3a19b174207ba94005ed543203b20d9d6329fc37c10eeebfb899d454340fb0847827194eb27abfdf7b063be824c86f659a6499d0b1a9b09321bddc3da3568a1f33c6e5c60e0c63586a61f1e676772c063cb88b675a95b73d1b9717842e55a0e21ada8"}}]}, {0xd8, 0x6, "49a9c7a19342abc92fb54c6cf52c647614fcd3173c7cf4fca430d3605757c211a0e578f97f057b7666fe7de8b49731002207af974c9e3c9362e109d19051e8d0bf478a4f81a57d0de3ffcb043d2689ff250b3bcc180bf9cc9dc2ae11b3753d5f36d36b5071b4804701adcc1e176a1cc3b0a01493f8f1abd8c76b8e31132b0d860dda508bec800a1d13ad95fcdc79e7a885c23efbcc059a9d84c62a0b407c9983724eeb07f40114571789756a65c787f0af27114aa9cf0b7336d8b544b01bc7616d493af56f33be79e6f7f7e933825828d1171428"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ipt={0x12d8, 0x17, 0x0, 0x0, {{0x8}, {0x2b0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x114, 0x6, {0xfff8, 'nat\x00', 0x8, 0x0, "690e8b15508c880dc91d31c292d215c8e347988e0603e461c4cd7822096d4d05c7bc77e1f6e9281d3c266335e1d51b89689bd72daa0342328c75fd1bff6366b125f452b6e9548b9969374909b4542f201bed0a95302086704beb591c5850f8e8cbd005bcd703c3798cc3024f12974f8a332d8685852207c9368b172829c599e7cecc4836c6f9032d66cc24b58073e2956b9654ae521e38daa8d6a413a2ab30ca51c807cee8a7dceb70cc8bab694d8fd91e8adcf79903895253cae6b35b37ac9867d5b319614eb8ffb5fb3a45e0478cf6cb274711338971180c2558839d06593b42de054b60e7c6ba7d66"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0xde, 0x6, {0x1, 'filter\x00', 0xd, 0x8, "c9234e2790d79c46e52e5766284c5e9b0530a6a721cef6a8f721cf202e58e83ef4f425e524de53b64df3a6f29b0d9054a6d4fae0ddbd87b925efdad2d8e5e30c60d6866e9d19587d97376298ed9676a98094972fe9deac6c9c7a6cef1c2d7db0a8bafa6bb67eb557093eeff2c28038c62e818b5535351cd1c0445c996d20faba1782b78d13d285489e813a49ccf0b9be9a6c9491a18f7b6a2a31a74598532456206d29879c721f595c5c32727957ca80b8ab9ccf"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x54d}, @TCA_IPT_TARG={0x7b, 0x6, {0x800, 'mangle\x00', 0x9, 0x9, "ea850c008f0bb691eb828fdd82f3bfb42cf05355e8da1194f0c057abc775af1df2af06cd01f0521adce0f7f4305e554aea85ff58736123f6ad37f01037224b1f3fa400cb49ecda36069108ac05e92d36de"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x8001}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ipt={0x114, 0x3, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x10000}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x896}]}, {0x83, 0x6, "caa57c6dc70bdd10807e472899b2b5c0c7ee38d8b604aed35e714052b66d6998c381eb33c9fbde77328255d44da89e23c92d25985faf6fde2298cbd0dcf72ec66ea3bf59b1aa47ce1f7b203a14338c90421eaf93ee72a7ad6021ec53c55ecf9b35d15ac29aa0c9a0cf49578d36d6b66d59a4ca6a7854da81f68e2de8583c21"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_ipt={0x1dc, 0xe, 0x0, 0x0, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xee, 0x6, {0x2, 'nat\x00', 0x7, 0x9, "5f5e0abd1a27dab5eec4cdfdaccc0662b677e4150cfffcf8e4a9bb97990e563c69a933eb47346256e7129d68445af9d3e42a721b56ac8a064883e5621b5b6dd33f66396d8a3df889e175ebb7b6268eb8d54cb5af20beed0d1d1ca61286cd66d80c2318e97ee69ae0223afbf9d4be2076de1a925a21ba2c81fd1f8a745d3195b7667761b5ce0df38818a58bf4491b523ee74f16f59be3a00329ae82d8f84bbc4a3d43a5b6010b80a5cca3a49d13ae1d8876273a6e77ad78ced00647075a93f1d058b32baa"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0xba, 0x6, "f1bd7b14b38a2398b8902704135b8425cf7bd2a4141b4c68fcdb76a6344bf326bba551587755a8333756d48a313e2e634b2e859eeff6b029abbec3ed12f0d4f025dedb7f83fcde067dbc4f1e849e47e58e5d0c1ce0ef56f0c6cfe3b09ed7adde6c1da1e821c7594a2c00bf3894717189cd34f95ca42a961db79bb61d87d054232b8976e130c232ac4a36489c4de2de4ac701280883eb476b07593715837dafd64f85240b92459ee69e553a09ac8a9827a0586d692fe9"}, {0xc, 0x7, {0xb4e1aba42c949606, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x5a8, 0x1, [@m_ipt={0xa0, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0x77, 0x6, "6e7cdc8560398b9a90d3c538cc44206a23c3ee7297762833c6006f12c6cb77ac778f0d8dc6854520a2cfe2de09edc42e2ffba8a6b725b07b2c1cdf0866ccca4996a92a30538e15b3a09131e0467fa7c8820afc74f11376e6bce733078be5b4e60d6e9bd6dc0db89cd5f623cacae618aa129029"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ipt={0x29c, 0x4, 0x0, 0x0, {{0x8}, {0x184, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x49, 0x6, {0x7, 'nat\x00', 0x5, 0xfffa, "a5eed42b5fb6ed154b27b2fc88e42a015ef5b34b996dbeb6ebe17f15427068"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0xef, 0x6, {0x4781, 'security\x00', 0x7, 0x4, "46af1c3260341a984d2ab080fa85a37d244b2ec284717769003db54812acbe84888f5eadc879f07d181cf5d76a9e82c0e454eed3b1fe853b3e531527e9d73d71fbbe1ce25aa6db606ffa7505b3f7bd886a9787cc6a5f1ceecea2c93dc429ea706d84bb23062fcbefc4b78b01094f30e2018be8310194567b2d6630f17e2a5a219e714ae840f374ec5bf5db7b8d41b49e6ee572065083b34d2585c16183043d9bc86f1c9d5b17864856e0d9fc092f48af5d0e34786c95d413ac9afdd2767adae300d0bd90a5"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0xf4, 0x6, "623517c7b1905346e4dadec5f609fd84948ab721070a955728af1f67602346b8f9a5205334a0af93c45cd42c00070cd63129ec690a770d9dd5872b2496f5e4ab520c2d18412f92806272f05d21bf261f2f386c900cc9d3c92535a05cf73402cec5a90007c45f4f2eb568db61e9a43c017d883628b5bc9b2ee5007df84968066015cac9cfdd0503a9efc0557968339c03fcf62e90d7a77e1279c74218f77d8c701c16fb5aae02773f8f5bdbc14e0800d45d3448e6cca04590e7ab999cd722f85b96a78069b77b1b3181d64262d9255293634abc4290f1279ad0099abf3c9cc02f10ba2d64431ba3134272e2cc496ff4f6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ipt={0x268, 0xe, 0x0, 0x0, {{0x8}, {0x23c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xab, 0x6, {0x5, 'mangle\x00', 0x2, 0x6, "998733e2ed1c58fee426754d34786b9288d3c59254accf8cd2227089aac8a65dff60766f5de8a97d192af3a9b31a3363688a315c11470899ded4f32cbffc0baa73feb284b47fd63942cfe545e71ccf497e4da8a8c9628b0493ef15fda08a752159c0932eb14649c1817ebeee8570f802f7df5f0ecfe82af3ddfa504882b475c5cb"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x110, 0x6, {0x9, 'raw\x00', 0xa, 0x1, "7a4d6fa4e52b17ea7c7dd4b841feb3f75765c0cd514a3ea6105ff3bcb84c751d376abd9f49fd3aee1e5162e331469323412d50dabfeacef25c9e034be09586e725f73a94137ef056cd2d6aa3f5cc6420dad37a847eb1ceb278c7146cf6823a3257d361e0faf845f4cece7f3a0d07010d69c8a4670e37c3714f5bc14d408502b39cf411b10090c3450f05a49ad300ddf0ad803cc457806ce17d33343a31fe3e0a43e283cfea55a2ca40adb9320994dc52c1687f9ffeb9918bb10025acda5d5284f25775a2e39e8d74b59831ab30448f20ece811b6e25254d175812e118a87c24e952da353d793"}}, @TCA_IPT_TARG={0x71, 0x6, {0x2, 'nat\x00', 0x4, 0x2, "f7e4c39edde1ece94064fd183ceabae2eeef1ef42dd53ba3e90d18c81ae672ac6590e87cc5711ea8d9c5cfd6afc2275b4d6bbbc4b5ac93467eee52fe0f4b529948b0d28c240aed"}}]}, {0x7, 0x6, "1f6d03"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x6518}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6tnl0\x00', 0x4}, 0x18) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x4800) splice(r6, 0x0, r5, 0x0, 0x18, 0x7) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) recvmsg(r3, &(0x7f0000002180)={0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000001d40)=""/74, 0x4a}, {&(0x7f0000001e00)=""/163, 0xa3}], 0x2}, 0x3) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000feffffff01000000000000000c4100000014001462726f6164636173742d6c696e6bf9"], 0x30}}, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r8, 0x5420, &(0x7f0000003940)=0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) ioctl$TIOCSSOFTCAR(r8, 0x541a, &(0x7f00000000c0)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x3, 0x0, 0x0, [{}]}]}}, &(0x7f0000000d00)=""/198, 0x32, 0xc6, 0x1}, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r7, {0x40}}, './file0\x00'}) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x4, 0x4824b3966aa41fd4, 0xe, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x85e}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xbc69, 0x5, 0x5}, {0x6, 0x24, 0x1a, 0xffff, 0xa}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0xcc, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0xf3, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0xff, 0x6}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNGETFILTER(r10, 0x801054db, &(0x7f0000000140)=""/97) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x221, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x1, 0x2, 0xe5, {0x9, 0x21, 0x6, 0x3, 0x1, {0x22, 0x1b6}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x5, 0x0, 0xfe}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0xf7, 0xd8, 0x0, 0x20, 0xff}, 0xbf, &(0x7f0000000100)={0x5, 0xf, 0xbf, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x0, 0x0, 0x2, [0xff0030, 0xc0c0, 0xff0000, 0x30]}, @generic={0x9e, 0x10, 0x4, "c2b1cbc21a150b357b6f080d9f07069febc93086cc8d51fa0d26516d11e99952852a6386a2ba17b55b0df9ee90416f588ea642e4d3a800dba0d92a9e3874bbbd0bdd4cd01c8060de1327a0dfd70880e98689c071b05c3e1c94430a82ed6cb53f640d729cde66c810b66c3bab0cb0e8b62ea3e871b54456c9e92eb753d2711ac086e2304c3546ea229d6bfeda07825b53586a2026b8d1fda02f2511"}]}, 0x7, [{0x6a, &(0x7f00000001c0)=@string={0x6a, 0x3, "41eaef2427e792b623946d2765157bb8157a9e81eff24b4b963e5d33926713495662596d9f2dba5fdba0348af349a9cb9483fa721e6f29e7d7e5bf0962fc764848c332b250189dad48bc746a5703b6bc6db6902ed1b09fb52d4b341dc3d945b0fdd1e33609b2f4ab"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4}}, {0xf9, &(0x7f0000000280)=@string={0xf9, 0x3, "ed1a0c80b04e898e8b8046d59b261221741549206cf4bb1beab72f472f852afc18e7e1b274814a861eb3084996ab3000f18b36def784138f0900bec23b3d8f34416ece54b542c6cf7c2edd762ef1002603e5973cab1f1f7f9a5f36457d1eb02b3f74ac9f141871e020dcc7b2eac2e3c210f4cdfc71e63b774a762b73cf1b6e6989ea473b96a77deabe430a08a799ff4c4033248d70828c46b1047fd34a524b1e9a0c14b0df5e05615a55a35977a033123abc6e3d3b3ec4bc5d49cca9054139ed3f05e78927dbc5761fe9df587b884c8e1c20bbcfc74fc72f79715a77283fc33d275bfac495a30d7240b48668fa4150cf77f209f885ab73"}}, {0x94, &(0x7f0000000380)=@string={0x94, 0x3, "2260102aef61618b57307d0e0bb0f15c781fc55ebcf0e00ccea3fc52f4118bb2f65b667017806f5f0e8bcd09e38233c271b9950e5f0afb1e68438607468d1163983de30793ceffc7d95896af0be047f2d5fdef5bf65c84da8a31b1cedd1b36e41619ba30acd072e937b94670ecab48cf97024914b1e12fc35570256acfb01e360b786826a6e49cced711bf651583ebe731db"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x421}}, {0xea, &(0x7f0000000540)=@string={0xea, 0x3, "964c8bf12d22bfbdf08f62aa05c697c89e713513af60bebb7873dcc096ca400d66068b10a6431c84ef00c406256d7c1030bbe6698b24693a754cd1acc446c451276b3aacd3f36db5d4f1b870f675d8eb84fb8198b380ad2d4c82e2574cc6a2df671a9ce4b356cb6ef9e1fb43d041b2defe01ba6e6cb772845c008f46b60b1d4296a33a0644b448592e0f4f36b57ae112fd7488293fa429a2c9d088fdbcd3897d4eda36782d274c9f8ddcacbd1e71d23c6351eaa9483bb5ebc9d8b2bb85e7bb3ccb94b6432482dd7502dd342814c03c4f24f0d10a283a2f46f6f0dfddf2d430281cf27755c2ff61fb"}}, {0x3a, &(0x7f0000000640)=@string={0x3a, 0x3, "f6441ed7fab5e23c7959b1ddc39453eaa0c966d4462624c00f3b2908f920eae0794a4ca60c7a7cf15426a5552d3b82c98460f6ffe3ee53c4"}}]}) 2m16.582316664s ago: executing program 2 (id=1446): r0 = socket$nl_generic(0x10, 0x3, 0x10) getuid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0) 2m16.581996833s ago: executing program 2 (id=1447): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x25, 0x9, 0x70bd25, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080) ioctl$NILFS_IOCTL_GET_SUSTAT(0xffffffffffffffff, 0x80306e85, &(0x7f0000000040)) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) syz_emit_vhci(&(0x7f0000003800)=ANY=[@ANYBLOB="0400"], 0x9) setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x1404, 0x100, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file3\x00', &(0x7f0000000200)='btrfs\x00', 0x0, &(0x7f0000000380)='acl') open(&(0x7f0000000000)='./file3\x00', 0x800, 0x5ef8f7bc480e9c30) 2m13.263034361s ago: executing program 5 (id=1479): mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) (async) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mysys/bus/platform/devices/QEMU0002:00/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='QEMU0002:00\x00', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='mysys/bus/platform/devices/QEMU0002:00/driver_override\x00', 0x11e601, 0x0) write(r1, &(0x7f0000000700)='oxu210hp-hcd\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='mysys/bus/platform/drivers/oxu210hp-hcd/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='QEMU0002:00', 0xb) 2m13.18308291s ago: executing program 5 (id=1480): r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="580000001800050401000000000000000a800000fe040002000000001400010020010db800000000100000000000000106001500070000001800160008000100010000000c000b00080001000b0000000800040001000000", 0x58) 2m13.111939162s ago: executing program 5 (id=1481): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000bc0)={0x2020}, 0x2020) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000002759269e400000005000200"], 0x1c}}, 0x0) 2m13.052806381s ago: executing program 5 (id=1482): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r1, @ANYRESOCT=r2], 0x50}}, 0x1) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x12, 0x468fe4e8}]}}]}, 0x38}}, 0x4048000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, 0x0, &(0x7f00000076c0)) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240", @ANYBLOB="01"], 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x20000084) 2m13.035982112s ago: executing program 5 (id=1483): madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='\\x01000000 2000000000 0 0 0 krb5 \\x00000000ffffffff0000000000000000120000000000000000000000000000000000000000000000000000000000000000000000 c', 0x8d) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m12.812413397s ago: executing program 5 (id=1488): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x2}, 0x10) write(r1, &(0x7f00000002c0)="04", 0x1) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) close(r1) 2m1.252861874s ago: executing program 34 (id=1447): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x25, 0x9, 0x70bd25, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080) ioctl$NILFS_IOCTL_GET_SUSTAT(0xffffffffffffffff, 0x80306e85, &(0x7f0000000040)) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) syz_emit_vhci(&(0x7f0000003800)=ANY=[@ANYBLOB="0400"], 0x9) setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x1404, 0x100, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file3\x00', &(0x7f0000000200)='btrfs\x00', 0x0, &(0x7f0000000380)='acl') open(&(0x7f0000000000)='./file3\x00', 0x800, 0x5ef8f7bc480e9c30) 1m57.189234429s ago: executing program 35 (id=1488): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x2}, 0x10) write(r1, &(0x7f00000002c0)="04", 0x1) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) close(r1) 47.237481237s ago: executing program 1 (id=2272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000140)={0xbc, 0x0, 0x3}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wrmsr={0x65, 0x20, {0x830, 0x5}}], 0x20}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000340)="66bad004ecc7442400f6000000c7442402f3ffffffff1c2448b800300000000000000f23d00f21f8353000000f0f23f866baf80cb876ab9e81ef66bafc0c66ed0f01cfb97e0b0000b806000000ba000000000f3066ba2000ec66460fc77120c7442400e2400000c7442402dd000000c7442406000000000f011c242636f264430f01f1", 0x83}], 0x1, 0x4, &(0x7f0000000480)=[@efer={0x2, 0x8000}], 0x1) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000540)={[0x1100, 0x710a, 0x3, 0x8, 0x1000, 0x0, 0x6, 0x8000000000000001, 0xf0, 0x80000004, 0x5, 0x3, 0x0, 0xfffffffffffffeff, 0x7, 0x3], 0xffffffff, 0xa0000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 47.017466444s ago: executing program 1 (id=2275): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0xc000) socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_open_dev$media(&(0x7f0000000080), 0x4, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x3, 0x3}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0xfffffbff, 0xfffffffc}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x113) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000200)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1f, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r3, &(0x7f0000001340)=""/4096, 0x1000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}]}], {0x14}}, 0x70}}, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20004880, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003680)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000002f80)=[{0x0}, {0x0}, {&(0x7f0000001f80)}], 0x3}}], 0x2, 0xc044) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d270015000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160012000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 47.015501791s ago: executing program 1 (id=2276): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a00000000000006"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x11}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1, 0xc61}}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) mount(0x0, &(0x7f0000000300)='./file3\x00', &(0x7f00000000c0)='pvfs2\x00', 0x0, &(0x7f0000000380)='acl') r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r6 = fanotify_init(0x200, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) fanotify_mark(r6, 0x1, 0x8000026, r5, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000500)) 46.633933186s ago: executing program 1 (id=2280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 46.507994501s ago: executing program 1 (id=2282): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0xb, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x8850) r2 = socket$phonet(0x23, 0x2, 0x1) r3 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000006c0)={"2d70691d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ['\x00', "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000480)={0x5, 0xfffffffffffffffe, 0x1, 0x4, 0x0, 0x5, "0f6d00", 0x0, 0x2, 0x0, 0x6, 0x0, 0x4, 0xff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc"}, 0x38) recvmmsg(r4, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0xb00}], 0x1, 0x12021, 0x0) setitimer(0x2, &(0x7f0000000340)={{0x77359400}, {0x7fffffffffffffff}}, 0x0) getitimer(0x2, &(0x7f0000000000)) sendto$phonet(r2, 0x0, 0xfffffffffffffefd, 0x0, &(0x7f00000000c0)={0x23, 0x2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a00118031f9e05e2f"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r5 = io_uring_setup(0x2f4f, &(0x7f0000000280)={0x0, 0x10, 0x1, 0x0, 0xfb}) exit(0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000000140)=""/20, 0x14, 0x60, &(0x7f0000000180)=@rc={0x1f, @none}, 0x80) 45.617665591s ago: executing program 1 (id=2298): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000d00)={0x30, r0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x48010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f00000001c0)='!],:\xb7\x00', 0x10000, &(0x7f0000000200)={@align=0x200, {0x6, 0x40, 0x4, 0x8}}, 0x9, &(0x7f0000000240)={@_ha_fsid}, &(0x7f00000002c0)=0xed8d}) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x2, r2, 0x0, &(0x7f0000000280)={0x3a0aec, 0x4, '\x00', @p_u8=0x0}}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r3, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x5, @bearer=@udp='udp:syz2\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000002380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002340)={&(0x7f0000000fc0)={0x1348, r4, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x9, 0xfc, "78ff725995"}, @NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}, @NL80211_ATTR_FILS_ERP_REALM={0x9c, 0xfa, "a4333f82ecb25be8960ecef8d861875d989487c63e072da3bbf62e39bc9674c83cf02a0114c828c1878fe6b2489d7143138644234a8e8ead2ed535173d54770bda977375e2b7f1024c6791f8965ad3ba3c12b91a569d4873a027b2f587bd43556621484b781c8ed85cc270738a45cbfa99752c5528be54ed26303143531de6044b8f67a3528a69995fbd630be3cc30cbab3b8e35f8ff00b7"}, @NL80211_ATTR_FILS_ERP_RRK={0xe7, 0xfc, "ca5b14186a8e8eca5e060a1428175186e5bfda14cefc874f4b2dea9160f4f738a4d9c024a276bd4671a2a950069506156b0c51ca1056260a081ae2964613d64910b147ffa6bf43cbeeb17c87df68218083a85be9508621aef4c67351cb6307cf8734f8c7f6f835164c9c35b1b61c3be696f3ee75cdbde7b9babdc1bd3a90ea0f12f5b2da8fefcfe542451ec3d9501be3c54d86764dc1c532300c6464e64589a9069939bea7f86d3d8271b88b4868483031f2b2098b165e06f2100bb4f4245f2ed3876da6d5b32e910029451f39b5958f88e7fb674ad61a43cbdc6f8111af79d65a372f"}, @NL80211_ATTR_FILS_ERP_RRK={0xb4, 0xfc, "a16c0447a85a11a8a781bc3d2fe89b7ebd7afe2cdd9f99d05deef362423bd197602004ac84de10859931b8a5e656b777753dc3e82ae93857b7b4643d07244613d2b53ec8b43d9dd87b32da5fb35bff96ee521c49f168089474626117e1ae67d91a04bc3c3b1640964a7ac01b10016c2c501042edfe729c54245e02489e4433d486114a58a493af1e504ccf535b703df65a4308a991ac4b431d8c903789110edaeef58d1463e39b002eb6fd709a3b2ac3"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xe}, @NL80211_ATTR_FILS_ERP_REALM={0x14, 0xfa, "e3fb7288138052ad5465c4a4dd8b9f37"}], @NL80211_ATTR_IE={0x87, 0x2a, [@supported_rates={0x1, 0x4, [{0xc, 0x1}, {0x3, 0x1}, {0x60, 0x1}, {0x3}]}, @sec_chan_ofs={0x3e, 0x1}, @measure_req={0x26, 0x10, {0xa, 0x5, 0x6, "b8df84453787d3f933412265ec"}}, @mesh_id={0x72, 0x6}, @preq={0x82, 0x4c, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0x7, 0x5, 0x1, @device_b, 0x6aa, @value=@broadcast, 0xb, 0x5, 0x4, [{{}, @device_b, 0x8001}, {{0x1}, @broadcast, 0x8}, {{}, @device_a, 0x8}, {{0x1}, @broadcast, 0xca2}]}}, @mic={0x8c, 0x10, {0xeb, "652adc40560d", @short="8e8e2c2032f5c646"}}]}, @NL80211_ATTR_IE={0xd, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x7}}]}, @NL80211_ATTR_IE={0x36, 0x2a, [@mesh_id={0x72, 0x6}, @channel_switch={0x25, 0x3, {0x1, 0x6c, 0x44}}, @cf={0x4, 0x6, {0x4c, 0x9, 0x93f0, 0xffff}}, @challenge={0x10, 0x1, 0xc5}, @mic={0x8c, 0x18, {0xdf6, "1e61cdc1ff55", @long="caec629d643e4d6b7619a03d4b8fdc2d"}}]}]}, 0x1348}, 0x1, 0x0, 0x0, 0x20000005}, 0x8004) r5 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0xea5bc50b6199d77e) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit$UBLK(r8, r9, r10, &(0x7f0000001a00)=@ublk_io_need_get_data_sqe={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0107522, 0x0, 0x0, 0x0, 0x1e0303d7fa4e9fa1, {0x7}, 0x0, 0x0, '\x00', {0x2, 0x15d, 0x3, 0x0}}) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000980)=@IORING_OP_NOP128={0x3f, 0x41, 0x0, 0xffffffffffffffff, 0x51125861, 0x3, 0xad95fb1, 0xa, 0x1, {0xffff}}) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) io_uring_enter(r7, 0x788b, 0x84b, 0x68, 0x0, 0x0) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x12e, 0x0) r11 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) ptrace(0x10, r11) ptrace(0x8, r11) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r5]) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffe}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000840}, 0xeebd27834e45d867) 30.655607776s ago: executing program 36 (id=2298): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000d00)={0x30, r0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x48010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f00000001c0)='!],:\xb7\x00', 0x10000, &(0x7f0000000200)={@align=0x200, {0x6, 0x40, 0x4, 0x8}}, 0x9, &(0x7f0000000240)={@_ha_fsid}, &(0x7f00000002c0)=0xed8d}) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x2, r2, 0x0, &(0x7f0000000280)={0x3a0aec, 0x4, '\x00', @p_u8=0x0}}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r3, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x5, @bearer=@udp='udp:syz2\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000002380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002340)={&(0x7f0000000fc0)={0x1348, r4, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x9, 0xfc, "78ff725995"}, @NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}, @NL80211_ATTR_FILS_ERP_REALM={0x9c, 0xfa, "a4333f82ecb25be8960ecef8d861875d989487c63e072da3bbf62e39bc9674c83cf02a0114c828c1878fe6b2489d7143138644234a8e8ead2ed535173d54770bda977375e2b7f1024c6791f8965ad3ba3c12b91a569d4873a027b2f587bd43556621484b781c8ed85cc270738a45cbfa99752c5528be54ed26303143531de6044b8f67a3528a69995fbd630be3cc30cbab3b8e35f8ff00b7"}, @NL80211_ATTR_FILS_ERP_RRK={0xe7, 0xfc, "ca5b14186a8e8eca5e060a1428175186e5bfda14cefc874f4b2dea9160f4f738a4d9c024a276bd4671a2a950069506156b0c51ca1056260a081ae2964613d64910b147ffa6bf43cbeeb17c87df68218083a85be9508621aef4c67351cb6307cf8734f8c7f6f835164c9c35b1b61c3be696f3ee75cdbde7b9babdc1bd3a90ea0f12f5b2da8fefcfe542451ec3d9501be3c54d86764dc1c532300c6464e64589a9069939bea7f86d3d8271b88b4868483031f2b2098b165e06f2100bb4f4245f2ed3876da6d5b32e910029451f39b5958f88e7fb674ad61a43cbdc6f8111af79d65a372f"}, @NL80211_ATTR_FILS_ERP_RRK={0xb4, 0xfc, "a16c0447a85a11a8a781bc3d2fe89b7ebd7afe2cdd9f99d05deef362423bd197602004ac84de10859931b8a5e656b777753dc3e82ae93857b7b4643d07244613d2b53ec8b43d9dd87b32da5fb35bff96ee521c49f168089474626117e1ae67d91a04bc3c3b1640964a7ac01b10016c2c501042edfe729c54245e02489e4433d486114a58a493af1e504ccf535b703df65a4308a991ac4b431d8c903789110edaeef58d1463e39b002eb6fd709a3b2ac3"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xe}, @NL80211_ATTR_FILS_ERP_REALM={0x14, 0xfa, "e3fb7288138052ad5465c4a4dd8b9f37"}], @NL80211_ATTR_IE={0x87, 0x2a, [@supported_rates={0x1, 0x4, [{0xc, 0x1}, {0x3, 0x1}, {0x60, 0x1}, {0x3}]}, @sec_chan_ofs={0x3e, 0x1}, @measure_req={0x26, 0x10, {0xa, 0x5, 0x6, "b8df84453787d3f933412265ec"}}, @mesh_id={0x72, 0x6}, @preq={0x82, 0x4c, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0x7, 0x5, 0x1, @device_b, 0x6aa, @value=@broadcast, 0xb, 0x5, 0x4, [{{}, @device_b, 0x8001}, {{0x1}, @broadcast, 0x8}, {{}, @device_a, 0x8}, {{0x1}, @broadcast, 0xca2}]}}, @mic={0x8c, 0x10, {0xeb, "652adc40560d", @short="8e8e2c2032f5c646"}}]}, @NL80211_ATTR_IE={0xd, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x7}}]}, @NL80211_ATTR_IE={0x36, 0x2a, [@mesh_id={0x72, 0x6}, @channel_switch={0x25, 0x3, {0x1, 0x6c, 0x44}}, @cf={0x4, 0x6, {0x4c, 0x9, 0x93f0, 0xffff}}, @challenge={0x10, 0x1, 0xc5}, @mic={0x8c, 0x18, {0xdf6, "1e61cdc1ff55", @long="caec629d643e4d6b7619a03d4b8fdc2d"}}]}]}, 0x1348}, 0x1, 0x0, 0x0, 0x20000005}, 0x8004) r5 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0xea5bc50b6199d77e) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit$UBLK(r8, r9, r10, &(0x7f0000001a00)=@ublk_io_need_get_data_sqe={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0107522, 0x0, 0x0, 0x0, 0x1e0303d7fa4e9fa1, {0x7}, 0x0, 0x0, '\x00', {0x2, 0x15d, 0x3, 0x0}}) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000980)=@IORING_OP_NOP128={0x3f, 0x41, 0x0, 0xffffffffffffffff, 0x51125861, 0x3, 0xad95fb1, 0xa, 0x1, {0xffff}}) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) io_uring_enter(r7, 0x788b, 0x84b, 0x68, 0x0, 0x0) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x12e, 0x0) r11 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) ptrace(0x10, r11) ptrace(0x8, r11) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r5]) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffe}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000840}, 0xeebd27834e45d867) 3.750657705s ago: executing program 6 (id=2845): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getpeername(r0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x80) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', r2, 0x29, 0x0, 0x81, 0xf6c3, 0x3, @private2, @loopback, 0x10, 0x80, 0x3, 0x8000}}) r3 = memfd_secret(0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000240)=0x5) ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, &(0x7f0000000280)={0x6, 0xbb}) readahead(r3, 0xfff, 0x7) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004894}, 0xb51f6d6e44a9620a) fcntl$addseals(r3, 0x409, 0xe) syz_usb_connect(0x0, 0xb6, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0xd, 0xc4, 0xa4, 0xff, 0x257a, 0x260b, 0x1280, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa4, 0x3, 0x0, 0xd, 0x0, 0x0, "", [{{0x9, 0x4, 0xf7, 0x9, 0x2, 0xdb, 0x6a, 0x7d, 0xe2, [], [{{0x9, 0x5, 0xe, 0x2, 0x10, 0x0, 0x52, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf0, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xb8, 0x8de}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x91, 0x7f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf6, 0x1}]}}]}}, {{0x9, 0x4, 0xa9, 0x40, 0x2, 0xef, 0xd3, 0xc5, 0x40, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "2ec8709c89"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xffffffd5, 0x1, 0xd, 0x5}, {0x6, 0x24, 0x1a, 0x7, 0x1c}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0xc}]}], [{{0x9, 0x5, 0x0, 0x2, 0x7ef, 0xff, 0x0, 0x29}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0x9b, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb, 0x5}]}}]}}, {{0x9, 0x4, 0xc3, 0x7f, 0x2, 0xab, 0xbb, 0xfc, 0x17, [], [{{0x9, 0x5, 0x3, 0x10, 0x400, 0x7f, 0xff, 0x9}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x40, 0x9, 0xb}}]}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x51, 0x5, 0xa0, 0x5, 0x10, 0x4}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x41, &(0x7f0000000600)=@string={0x41, 0x3, "2d75f568d4b57aed0b50e4149cfd63f7bd153f49dd1d1848786e742f53d3b6dfa6ed8be3eceed0dcfc23e77d86c6dec982af8113956e0b782521dcc841155e"}}, {0xf7, &(0x7f0000000680)=@string={0xf7, 0x3, "b315ffb0921f29c82d1264c3df1d54af455bf5967b8bb81932d6fb1057b3267f248829769be407e9790957b4aca213482a99243d2e36ebaf52011e5c865a28837f3ddb5d6befc1885ac931032e8503b5ce42ba97b71a5c527eab62f87e096f2d5fbe3cad9fb6126ba49e667fdbab295796e010a19eb02c5768cf73f9d37f645a8b2355bb176f69698e934697a49060ef52b1c937dcc21cfb60aa4ed1186d8817306038f28ef7bb4ea1dae4f5a561a3de307e57893f8908871dc0e2400d7d722950b583ceadf5ffda58c9f4c7e4feb1b0b12a301e12eff10275489155b7f00266df2bf4976129ea315fc0bf714a5dd11558d1073062"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x1809}}, {0x1f, &(0x7f00000007c0)=@string={0x1f, 0x3, "ce5bdc3d197a4de2866a8bb61d1f48187e4c4c0e58196e2529c318d1d9"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x1c09}}]}) ppoll(&(0x7f00000008c0), 0x0, &(0x7f0000000900)={0x77359400}, &(0x7f0000000940)={[0x983]}, 0x8) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000980)={0xffffffffffffffff}) r9 = openat$cgroup_procs(r3, &(0x7f0000000a00)='cgroup.threads\x00', 0x2, 0x0) r10 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000a40)={r3, 0x1, 0x4000, 0x1000000000000}) ppoll(&(0x7f0000000a80)=[{r8, 0x540}, {r3, 0x1040}, {r0}, {r9, 0x8082}, {r10}], 0x5, &(0x7f0000000ac0)={0x77359400}, &(0x7f0000000b00)={[0xe3e]}, 0x8) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000b40), 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x88, 0x1403, 0x200, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000c004}, 0x20004000) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x68, r11, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x52}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000880) r12 = socket$igmp(0x2, 0x3, 0x2) recvmsg(r12, &(0x7f0000002140)={&(0x7f0000000e80)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/53, 0x35}, {&(0x7f0000001f40)=""/54, 0x36}, {&(0x7f0000001f80)=""/112, 0x70}, {&(0x7f0000002000)=""/74, 0x4a}], 0x5, &(0x7f0000002100)=""/62, 0x3e}, 0x40000121) socket(0x10, 0x67389a8de4563e6c, 0xfffffffd) mount(&(0x7f0000002180)=@sg0, &(0x7f00000021c0)='./file0\x00', &(0x7f0000002200)='befs\x00', 0x2004006, &(0x7f0000002240)='\x00') 2.409027077s ago: executing program 7 (id=2851): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={r2, 0x4}, &(0x7f00000000c0)=0x8) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) (rerun: 64) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000180)={0x1, 0x14000, 0x58b4, 0x4, 0x7, "55ca74d3b7894d52a478b71e2d82ca9eea5b3f", 0x6, 0x5}) (async, rerun: 64) mkdir(&(0x7f0000000400)='./file0\x00', 0x114) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000002000080080002"], 0x1c}], 0x1}, 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x10000, 0x0) (async) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 32) chroot(&(0x7f0000000000)='./bus\x00') (async, rerun: 32) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f001, 0x1}) 2.34059471s ago: executing program 7 (id=2852): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x34, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x34}}, 0x4044) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x50a02, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x20}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x400c1, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x61]}}, &(0x7f0000001f80)=""/226, 0x1b, 0xe2, 0x2, 0x0, 0x10000, @value=r3}, 0x28) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) (async) sendmmsg$sock(r4, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001140)="aa", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000002780)=',', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000002a40)="78a167", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000002bc0)="ff", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f00000030c0)="f4", 0x1}], 0x1}}], 0x5, 0x4044800) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0xcb14, 0x10100, 0x3, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000a3f000/0x3000)=nil, 0x3000) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x3, 0x6) 2.169420499s ago: executing program 7 (id=2857): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x64, 0x41, 0x107, 0xfffffffe, 0x25dfdbfe, {0x7, 0x7c}, [@nested={0x4, 0x142}, @generic="bc6e4a64a76601864eb33109609050c1cf4e98ecaf35afd81d2d7e5a57ee5a2755e3", @generic="8304a35f8b01edbd8a325f9bfbbe0defa2995801c24abc9e1f9e86baa407ba85b695505b633470"]}, 0x64}, 0x1, 0x0, 0x0, 0x40815}, 0x400c800) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @local}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) 2.089307867s ago: executing program 7 (id=2859): mkdir(&(0x7f0000000150)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g_syz\x00', 0x1ff) symlink(&(0x7f0000000040)='./config\x00', &(0x7f0000000080)='./config/usb_gadget/g_syz/functions/ecm.usb0/ifname\x00') mkdir(&(0x7f0000000500)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_syz/functions/ecm.usb0/ifname\x00', 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)={0x30, r5, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x98, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x70}}}}, [@NL80211_ATTR_IE={0x56, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x80, 0x81, @device_a, 0x1, @value=@device_b, 0x8, 0x80000001, @device_a, 0x1}}, @gcr_ga={0xbd, 0x6}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x2, 0x8}}, @mic={0x8c, 0x18, {0xc5b, "009b4bf19764", @long="744534c87e4ee2f9a345d73f6902d795"}}]}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xea}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x7}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xea}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c000000190001090000000000000000021800000000fd090000000008000100ac14140008000f00ff007f"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) pwritev(r0, &(0x7f0000002180)=[{&(0x7f0000000b40)="35330fa233927534c65872ad16d4f5a4c5", 0x11}], 0x1, 0xe, 0x6) 2.040787059s ago: executing program 7 (id=2860): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r0, 0xff, 0x1, 0x0, &(0x7f0000000200)) getgid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, 0x0, &(0x7f0000000040)) (async, rerun: 64) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) 1.289817636s ago: executing program 7 (id=2865): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, '\x00', 0x5}, 0xefe}}}, 0x108) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="0f20c00f22c0f30fc7fb0f01c366420f3a0bfc2266ba6100b8cf5d00006cefef0f32362e0fc4d8c3660f382a2e0f8fcf612753", 0x33}], 0x1, 0xc1, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010025bd7000fddbdf25eeff7700", @ANYRES32=0x0, @ANYBLOB="390902000360000008001b0000000000080004"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 1.090587536s ago: executing program 4 (id=2869): syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519dc00fb1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x12) ppoll(&(0x7f0000000280)=[{r3}], 0x1, 0x0, 0x0, 0x0) close(r1) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880) r8 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r8, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01864c2, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r8, 0xc02064cc, &(0x7f00000001c0)={r9, r10, 0x0, 0x0, 0x2}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x100, 0x0, 0x0, 0x0, 0xb, &(0x7f00000000c0)='veth0_to_batadv\x00', 0x3, 0x60, 0xb0b2}) r11 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$CDROM_SET_OPTIONS(r11, 0x5320, 0x8) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) 1.000794984s ago: executing program 8 (id=2870): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80600, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x40) ioctl$SG_IO(r1, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380)="939374c94982", 0x0, 0x2, 0x1c, 0xffffffffffffffff, 0x0}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000140)={0xbc, 0x0, 0x3}) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x0, {0x63b, 0x3}}, @nested_amd_stgi, @nested_amd_vmcb_write_mask={0x17c, 0x0, {0x1, @save_area=0x44b, 0x2, 0x8, 0x9}}, @nested_amd_vmcb_write_mask={0x17c, 0x0, {0x3, @save_area=0x481, 0x6, 0x401, 0x4}}, @nested_load_code={0x12e, 0x0, {0x3, "672e470f01c3460f5d50b766bad004b899000000ef470fc616000f08400fc73fc481f169310f01992ff8264f8fe990916cd24d66b881000f00d8"}}, @rdmsr={0x66, 0x0, {0xaf3}}, @nested_amd_vmload={0x182, 0x0, 0x3}], 0xffffffffffffff94}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup(r4) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r5, 0xc0285840, &(0x7f0000000300)={0x7fe0000000000000, 0x5, 0x4, 0x0, 0x4, 0x0, 0x0, &(0x7f0000000100)}) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xdc, 0x0, 0x0, 0x1000, 0x81, 0x0, 0x0, 0x20}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r6, r10, &(0x7f00000003c0)={0x0, 0x1460, 0x40000, 0x0, 0x35a, 0x0, r6}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x4000, 0x3, 0x7e, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20007682, 0x400, 0xe, 0x2000008, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbea7, 0x8, 0x2, 0x4b, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6886, 0x5200, 0x2, 0x821b, 0x0, r6}}], 0x4, 0x0, 0x0) r11 = userfaultfd(0x801) fchmod(r11, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x800) r12 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r12, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r12, 0xc01064c4, &(0x7f0000000100)={&(0x7f0000000040)=[r13], 0x1}) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r14, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000540)={[0x1100, 0x710a, 0x3, 0x8, 0x1000, 0x0, 0x6, 0x8000000000000001, 0xf0, 0x80000004, 0x5, 0x3, 0x0, 0xfffffffffffffeff, 0x7, 0x3], 0xffffffff, 0xa0000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 870.727351ms ago: executing program 4 (id=2871): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x59}}}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) chdir(&(0x7f0000000100)='./bus\x00') r6 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x2, 0x3, 0x5, 0x6, 0x3, 0x4, {0x1, 0x3ff, 0xff, 0x4, 0x100, 0x4, 0x9, 0x7ffffffd, 0x9, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0xfff3}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x1, 0x20000000, 0x9, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x8880}, 0x0) 750.875638ms ago: executing program 8 (id=2872): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000480)={'\x00', 0xd2, 0x400, 0x80, 0x0, 0xfffb, 0xdddd0000, 0x60000, '\x00', 0x200}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000280)='./file0/file0\x00', 0xe, 0x3) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b16000000000000000002000008200004801c0001800900c8a6b3ff657f01006c617374000000000c00028008000140000000080900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x74}, 0x1, 0x0, 0x0, 0x850}, 0x40015) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0, @ANYRES8=r0, @ANYBLOB="b52c599d75ec1dba575898d4e2ad3dd5f6546da5c6197f106b12477beb7d05a1996a939787179d6f59e402250b5548270f207219bb0653a04804a8d2bde844e2ec8850bb6861fbc8d567a7690cf8286b2182b16dda2fee662187069192a7c353c7f3941957a4c97197e99fda00ed23be4c3c02cdfe089cfaac04adf034600d2f2b4d83cc2c", @ANYRESDEC=r0, @ANYRESDEC=r0]) 700.643285ms ago: executing program 4 (id=2873): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x7, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x670, 0x5, 0x678, 0x0, 0x0, 0xfeffffff, 0x330, 0x0, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x308, 0x330, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {0xff}, 0xe, 0x1c}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x3]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d8) rename(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00') 700.038511ms ago: executing program 6 (id=2874): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfc4e, 0x5, 0x101}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtfilter={0x4c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xffe3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29a}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c10200000006125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 610.526308ms ago: executing program 4 (id=2875): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x30]}}}}]}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rf', @ANYRESHEX=r1, @ANYBLOB]) read$midi(r0, 0x0, 0x3b) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) read$midi(r0, &(0x7f0000000040)=""/25, 0x19) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) 609.919529ms ago: executing program 8 (id=2876): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000000)=0x40081f4, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x3, 0x3, 0x2, 0xb, 0x10}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, 0x24}, 0x94) 540.820595ms ago: executing program 8 (id=2877): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, &(0x7f00000001c0)="d0511d637ef1965b0def74bd8c6c417b5d7bc63c1c2f2a7953f30b55e7608d5afc5583510bf9b177c9f66f3b77983a270eb6", 0x32, 0x40000, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0xf0, 0xf0, 0xffffffff, 0x390, 0xf0, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@local, @ipv6=@mcast1, @gre_key, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@private1, [], @ipv4=@private, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@empty, @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x1, 0x3ff, 0x5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x1, 0x3ff, 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x100, 0x47e3, 0x180}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/rt_acct\x00') ioctl$DVB_DEMUX_DMX_REMOVE_PID(r5, 0x40026f34, &(0x7f0000000380)) r6 = syz_open_dev$dri(&(0x7f00000002c0), 0xfffffffffffffffd, 0x41a341) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e80)=@filter={'filter\x00', 0xe, 0x4, 0x3f8, 0xffffffff, 0x0, 0x138, 0x258, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x26f], 0x9, 0x1, 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], 0x4e21, 0x4e23, 0x4e22, 0x4e22, 0x6, 0x9, 0x0, 0x4, 0x5}}}, {{@uncond, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@hbh={{0x48}, {0x1b1, 0x2, 0x0, [0xe8, 0x6, 0xe31, 0xf8a3, 0x7, 0x80, 0x2, 0x5, 0x1, 0x3, 0x5, 0x4, 0x5, 0x7, 0x3, 0x7], 0xb}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x4, 0x1}, {0x0, 0x4, 0x9}, 0x1, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e80)=@filter={'filter\x00', 0xe, 0x4, 0x3f8, 0xffffffff, 0x0, 0x138, 0x258, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x26f], 0x9, 0x1, 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], 0x4e21, 0x4e23, 0x4e22, 0x4e22, 0x6, 0x9, 0x0, 0x4, 0x5}}}, {{@uncond, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@hbh={{0x48}, {0x1b1, 0x2, 0x0, [0xe8, 0x6, 0xe31, 0xf8a3, 0x7, 0x80, 0x2, 0x5, 0x1, 0x3, 0x5, 0x4, 0x5, 0x7, 0x3, 0x7], 0xb}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x4, 0x1}, {0x0, 0x4, 0x9}, 0x1, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000080)={0x8, 0xe3, 0x8000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xb4, 0x7fff, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xb4, 0x7fff, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 540.44608ms ago: executing program 6 (id=2878): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="49aa259e0312df8ac7f7a8", 0xb}, {&(0x7f0000000c00)="ebe3a0e9796cf91647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfeb55b5bb9fa6935849e6098ed880500000000000000b37b4fe035bbb0958730487e49f48456d3fa99da6e0509aecc95aa0812ac33246a8be0ce726af2c958d59e8aa97c70151375a467", 0x75}], 0x2, 0x0, 0x0, 0x40001}], 0x1, 0x40810) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/85, 0x55}, {&(0x7f0000000400)=""/81, 0x8e}], 0x2}, 0x0) r3 = gettid() sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x3c}}, 0x8000) 439.477733ms ago: executing program 8 (id=2879): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r1, r2, 0x0, 0x8000fb00) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x6, 0x20000000, 0x7fffffff, 0x5}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1001}) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x10000}}}]}, 0x3c}}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) bind$packet(r10, &(0x7f0000000040)={0x11, 0x3, r9, 0x1, 0x0, 0x6, @local}, 0x14) sendto$packet(r10, &(0x7f0000000400)="00112233445566778899aabb08004500001c0000000040110000010101010101020001000100080000", 0x2a, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x10000}}}]}, 0x3c}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20) 438.974687ms ago: executing program 4 (id=2880): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80600, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100002, 0x189002) ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r1, 0xc0086448, &(0x7f0000000180)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000140)={0xbc, 0x0, 0x3}) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000054) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000200), 0x0, 0x0) r5 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wrmsr={0x65, 0x20, {0x830, 0x5}}], 0x20}) connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x1, 0x3, 0x3, 0x1, {0xa, 0x4e23, 0xf2e, @mcast2, 0xdf26}}}, 0x3a) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) setns(0xc9, 0x0) r7 = socket$netlink(0x10, 0x3, 0x12) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20804}, 0x44800) sendfile(r6, r6, 0x0, 0x200000) r8 = creat(&(0x7f0000000000)='./bus\x00', 0x39) io_setup(0x2, &(0x7f0000002380)=0x0) io_submit(r9, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x41, 0x1, 0x0, r8, 0x0, 0x0, 0xc00}]) ioctl$KVM_GET_CPUID2(r8, 0xc008ae91, &(0x7f00000001c0)={0x1, 0x0, [{}]}) close(r6) ioctl$KVM_RUN(r5, 0xae80, 0x0) r10 = dup(r5) syz_kvm_setup_cpu$x86(r2, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000070, 0x0, 0x20000000400009}]}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000540)={[0x1100, 0x710a, 0x3, 0x8, 0x1000, 0x0, 0x6, 0x8000000000000001, 0xf0, 0x80000004, 0x5, 0x3, 0x0, 0xfffffffffffffeff, 0x7, 0x3], 0xffffffff, 0xa0000}) 340.408422ms ago: executing program 6 (id=2881): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000003f80), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x84, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_SET_DESC={0x38, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x34, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xac}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x141080) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0xe, @pix={0x0, 0xe7, 0x58595556, 0x7, 0x3, 0x0, 0x8, 0xfffffffd, 0x0, 0x2000000, 0x2}}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xfffffffffffffffe) r5 = eventfd2(0x8001, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x104) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x802, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x103841, 0x186) lseek(r6, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000000)={0x1, 0xeeee0000, 0x4, r5}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000080)={0x890f, 0xeeee0000, 0x4, r5, 0x4}) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$netlink(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xc080}, 0x8000) ioctl$BLKRRPART(r0, 0x125f, 0x0) readv(r0, &(0x7f00000025c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/239, 0xef}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x3) 230.432413ms ago: executing program 6 (id=2882): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x3ff, "d6566ec69e957ca388b7b2f0ca6461d444dac536809b6b5a0b096292470e4362", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f00000000c0)={"2bff5be424aebd18410004e062e000000000020000000000c1ed2100", r0}) (async) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f00000000c0)={"2bff5be424aebd18410004e062e000000000020000000000c1ed2100", r0, 0xffffffffffffffff}) dup2(r1, 0xffffffffffffffff) (async) r2 = dup2(r1, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x401}, &(0x7f0000000380)=0x90) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={r5, 0x90, &(0x7f00000003c0)=[@in6={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, @in6={0xa, 0x4e24, 0x1, @remote, 0x66}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x9af, @remote, 0x1}, @in6={0xa, 0x4e24, 0x6c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb}, @in={0x2, 0x4e24, @local}]}, &(0x7f00000004c0)=0x10) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x30, r3, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_STATE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$SYNC_IOC_FILE_INFO(r0, 0xc0383e04, &(0x7f00000005c0)={""/32, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000500)=[{}, {}]}) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f0000000100)=""/107, &(0x7f00000001c0)=0x6b) 139.509462ms ago: executing program 6 (id=2883): epoll_create1(0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004010}, 0x20004040) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x2003) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='1\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x581100, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000000)={0x1, 0x0, [{0xd, 0xfffffff9, 0x8, 0x4, 0x9}]}) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x48, 0xd, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x0, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xfffffcd3, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "eb01"}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) write(r2, &(0x7f00000001c0)='1', 0x1) 648.347µs ago: executing program 8 (id=2884): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000103000000004800000001"], 0x114}], 0x1}, 0x24044010) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x14022, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r3}, 0x8) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x138) r4 = socket(0x10, 0x803, 0x0) keyctl$revoke(0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="48b800280000000000000f23c80f21f8350400b0000f23f8b9800000c00f3235000800000f300f0130410f09b92c0000000f32672e470f0748b84f00c0fe000000000f23d80f21f835800000c00f23f8c462c9933c40470f01baba3f0000b8010000000f01c1", 0x66}], 0x15, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$key(0xf, 0x3, 0x2) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x40}}, 0x0) sendmsg$key(r9, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbff}, 0x10}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtaction={0x218, 0x30, 0xb, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x204, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r11}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x1b0, 0x18, 0x0, 0x0, {{0xb}, {0xac, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x62, 0x101, 0x2, 0x0, 0x80000000}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x8001, 0x0, 0x4, 0x3802}}, @TCA_DEF_DATA={0x9, 0x3, '}#-}\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0x3, 0xffffffffffffffff, 0x1, 0x1}}, @TCA_DEF_DATA={0xd, 0x3, '/dev/ppp\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_DATA={0xf, 0x3, '/@}-^+&({!\x00'}, @TCA_DEF_DATA={0x8, 0x3, '%*,\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x3, 0x0, 0x1, 0x1}}, @TCA_DEF_DATA={0x6, 0x3, '@\x00'}]}, {0xdc, 0x6, "386b1cb715d6a35f83d166c93f5c69e95cb04e770454ba1442a8459c9018f5feacaea3c54ea7d67aadda91f0933af2658be1c85f669211daf1c490ed9ee4944248ef36a477b164b6769c2b95cbfb1c14bf0d4aadb2b450811d11f3415e918615ef78b694f8c4fb644f5ee76910a9e51c13f5ad5b480eee8d9ce50e92557bb4e63f14d7f38e1fccde8eabc8ece1adf001d4a559b137f81bbc8952da9a55e2b47c8b4fb90f3b72b10c1d40b1dbe074b796a729a7008dbf457b1befe25363fbb087c983928cc9d773368923351a91e910a7476a4fdd9c3d49af"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x218}}, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r4, 0xc0805841, &(0x7f00000002c0)={0x9, 0x6, 0x8, 0x1f, 0x2}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r11], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 0s ago: executing program 4 (id=2885): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000540)={{0xb, 0x6, 0x0, 0x2, '\x00', 0x281d}, 0x0, [0x1, 0x4ea3, 0x9, 0x56cd, 0x7, 0x4, 0x0, 0x80000001, 0x201, 0x1, 0x3fb, 0x1, 0x9, 0x7, 0x4, 0x10000, 0x4, 0x81, 0x80, 0xe8de, 0xfffffffffffffff9, 0x9, 0x201, 0x9, 0x1, 0x8, 0x1, 0x4, 0x401, 0x8000, 0x8, 0xffff, 0x57bf4b04, 0x4, 0x40000000000001, 0x6, 0x8, 0x100000000, 0x8, 0x7ff, 0x6, 0x401, 0x5, 0x401, 0x1ff, 0x10000, 0xee, 0xb7, 0x0, 0x5, 0xbe5, 0xa0000000000, 0x0, 0x1, 0x2, 0x8000000000000003, 0xd3d, 0xbbeb, 0x1, 0x6, 0x4, 0x6, 0x8001, 0x3, 0x1, 0x77, 0x646, 0xc58e, 0x5, 0x11ad, 0x5, 0x4, 0x8000, 0x100080, 0x10007f, 0x9, 0x1, 0x5, 0x8000000000000000, 0x2, 0x7, 0xa5, 0x1b13, 0x4, 0x85, 0x8, 0x3, 0xf75, 0x9, 0xb, 0xffffffffffff66e3, 0x0, 0x4, 0x200005e997b8e, 0x1, 0x0, 0x6, 0x4, 0x100, 0x1000000006, 0x6, 0x6, 0x0, 0xffffffffffffff95, 0x80000000000a, 0x108000001, 0xcc7c, 0x8, 0x0, 0x6, 0x800000000006, 0xfffffffffffffd96, 0x3f3, 0x1, 0x4, 0x4, 0x7, 0x5, 0x6, 0x1, 0xe1, 0xec1, 0x1, 0x5, 0xfff, 0x8, 0x80]}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="2ef20f0131b9000000800f01c1857af564d891de98045bb9df0200000f32420f63dec4a3c15f83b13700000066b837000f00d88ed066b8dd008ee866baf80cb862747b86ef0f01d166edf3410f598e00000100", 0x53}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): ted [ 219.165160][T13215] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 219.206875][T13220] syzkaller0: entered promiscuous mode [ 219.209173][T13220] syzkaller0: entered allmulticast mode [ 219.276167][T13224] syzkaller0: entered promiscuous mode [ 219.278668][T13224] syzkaller0: entered allmulticast mode [ 219.413437][T13237] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2202'. [ 219.485995][ T42] audit: type=1400 audit(1785393676.498:26227): avc: denied { map } for pid=13236 comm="syz.6.2202" path="/proc/432/net/igmp" dev="proc" ino=4026533074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 219.487814][T13237] overlayfs: missing 'lowerdir' [ 219.616609][T13246] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 219.663551][ T42] audit: type=1400 audit(1785393676.669:26228): avc: denied { connect } for pid=13247 comm="syz.6.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 219.722938][ T42] audit: type=1400 audit(1785393676.729:26229): avc: denied { append } for pid=13247 comm="syz.6.2205" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 219.777492][T13257] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2206'. [ 220.409746][T13256] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 220.417299][T13256] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 220.444259][ T5094] Bluetooth: hci3: Opcode 0x206a failed: -112 [ 220.449853][T13256] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 220.451844][T13256] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 220.461759][T13256] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 220.469696][T13256] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 220.475742][T13256] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 220.478417][T13256] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 220.491519][T13256] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 220.500731][T13256] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 220.502971][T13256] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 220.509599][T13256] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 220.666440][T13265] syzkaller0: entered promiscuous mode [ 220.670331][T13265] syzkaller0: entered allmulticast mode [ 220.680630][T13271] syzkaller0: entered promiscuous mode [ 220.683257][T13271] syzkaller0: entered allmulticast mode [ 220.687513][T13270] syz.7.2210 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 220.740873][T13276] IPv6: NLM_F_CREATE should be specified when creating new route [ 220.894111][ T5814] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 220.894439][T13278] netlink: 'syz.1.2213': attribute type 2 has an invalid length. [ 220.900902][ T42] audit: type=1400 audit(1785393677.909:26230): avc: denied { read } for pid=13277 comm="syz.1.2213" name="trace_pipe" dev="tracefs" ino=6264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 220.956931][T13285] netlink: 'syz.1.2217': attribute type 1 has an invalid length. [ 220.978526][T13280] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.996508][T13285] 8021q: adding VLAN 0 to HW filter on device bond6 [ 221.002466][T13291] input: syz1 as /devices/virtual/input/input19 [ 221.005040][T13291] input: failed to attach handler leds to device input19, error: -6 [ 221.065323][ T5814] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 221.071256][ T5814] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 221.074296][T13300] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 221.082632][ T5814] usb 11-1: config 0 interface 0 has no altsetting 0 [ 221.089689][ T5814] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 221.092636][ T5814] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 221.095588][ T5814] usb 11-1: Product: syz [ 221.096955][ T5814] usb 11-1: Manufacturer: syz [ 221.098493][ T5814] usb 11-1: SerialNumber: syz [ 221.101560][T13302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13302 comm=syz.7.2220 [ 221.101783][ T5814] usb 11-1: config 0 descriptor?? [ 221.110910][ T5814] hub 11-1:0.0: bad descriptor, ignoring hub [ 221.112949][ T5814] hub 11-1:0.0: probe with driver hub failed with error -5 [ 221.122379][ T5814] usb 11-1: selecting invalid altsetting 0 [ 221.144989][T13304] syz.1.2221 (13304): /proc/13303/oom_adj is deprecated, please use /proc/13303/oom_score_adj instead. [ 221.244903][ T42] audit: type=1326 audit(1785393678.259:26231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13306 comm="syz.7.2222" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe70e59df99 code=0x0 [ 221.331830][T13313] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2223'. [ 221.335248][T13313] netlink: 'syz.4.2223': attribute type 3 has an invalid length. [ 221.337764][T13313] netlink: 'syz.4.2223': attribute type 2 has an invalid length. [ 221.340227][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2223'. [ 221.577376][T13319] misc userio: No port type given on /dev/userio [ 221.903081][ T5094] Bluetooth: hci2: command 0x0406 tx timeout [ 222.022845][T13267] usb 11-1: reset high-speed USB device number 7 using dummy_hcd [ 222.030177][T13267] usb 11-1: device reset changed ep0 maxpacket size! [ 222.048501][ T5814] usb 11-1: USB disconnect, device number 7 [ 222.118620][T13336] netlink: 'syz.7.2227': attribute type 1 has an invalid length. [ 222.184344][T13336] bridge1: entered promiscuous mode [ 222.198517][T13336] bond2: (slave bridge1): making interface the new active one [ 222.202410][T13336] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 222.216301][T13336] bridge2: entered promiscuous mode [ 222.220178][T13336] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 222.230056][T13336] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 222.233009][ T5814] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 222.235721][T13336] SELinux: failed to load policy [ 222.265629][T13341] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 222.392629][ T5814] usb 11-1: Using ep0 maxpacket: 32 [ 222.397541][ T5814] usb 11-1: config 8 has an invalid interface number: 158 but max is 0 [ 222.400307][ T5814] usb 11-1: config 8 has no interface number 0 [ 222.402467][ T5814] usb 11-1: config 8 interface 158 has no altsetting 0 [ 222.407386][ T5814] usb 11-1: string descriptor 0 read error: -22 [ 222.409602][ T5814] usb 11-1: New USB device found, idVendor=04e7, idProduct=0020, bcdDevice=20.bc [ 222.412643][ T5814] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.462588][ T5094] Bluetooth: hci3: command 0x0405 tx timeout [ 222.542634][ T64] Bluetooth: hci4: command 0x0c1a tx timeout [ 222.542634][ T5094] Bluetooth: hci5: command 0x0405 tx timeout [ 222.622488][ T5814] usb 11-1: USB disconnect, device number 8 [ 222.753689][T13328] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 222.846579][ T42] audit: type=1400 audit(1785393679.860:26232): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=40256 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 222.869349][ T42] audit: type=1400 audit(1785393679.860:26233): avc: denied { recv } for pid=5664 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=40256 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 222.873663][T13350] netlink: 'syz.7.2231': attribute type 4 has an invalid length. [ 222.961891][T13357] sctp: [Deprecated]: syz.4.2234 (pid 13357) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.961891][T13357] Use struct sctp_sack_info instead [ 222.966069][T13358] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2235'. [ 223.158487][T13383] netlink: 'syz.6.2242': attribute type 1 has an invalid length. [ 223.161086][T13383] netlink: 220 bytes leftover after parsing attributes in process `syz.6.2242'. [ 223.317305][T13390] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2243'. [ 223.371948][ T8403] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 223.486647][T13398] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 223.542032][ T8403] usb 9-1: Using ep0 maxpacket: 8 [ 223.545611][ T8403] usb 9-1: unable to get BOS descriptor or descriptor too short [ 223.549118][ T8403] usb 9-1: config 8 has an invalid interface number: 254 but max is 0 [ 223.552072][ T8403] usb 9-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 223.555988][ T8403] usb 9-1: config 8 has no interface number 0 [ 223.557921][ T8403] usb 9-1: config 8 interface 254 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 223.565413][ T8403] usb 9-1: string descriptor 0 read error: -22 [ 223.569646][ T8403] usb 9-1: New USB device found, idVendor=12d1, idProduct=142a, bcdDevice= 0.00 [ 223.575012][ T8403] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.584909][ T8403] usb 9-1: rejected 1 configuration due to insufficient available bus power [ 223.585764][ T42] kauditd_printk_skb: 78 callbacks suppressed [ 223.585776][ T42] audit: type=1400 audit(1785393680.601:26312): avc: denied { read } for pid=13406 comm="syz.7.2249" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 223.594424][ T8403] usb 9-1: no configuration chosen from 1 choice [ 223.597471][ T42] audit: type=1400 audit(1785393680.601:26313): avc: denied { open } for pid=13406 comm="syz.7.2249" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 223.685767][ T42] audit: type=1400 audit(1785393680.701:26314): avc: denied { write } for pid=13411 comm="syz.7.2250" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 223.685886][ T5094] Bluetooth: hci5: unexpected event for opcode 0x200f [ 223.701843][ T42] audit: type=1400 audit(1785393680.701:26315): avc: denied { setopt } for pid=13411 comm="syz.7.2250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 223.831594][ T42] audit: type=1400 audit(1785393680.841:26316): avc: denied { map } for pid=13411 comm="syz.7.2250" path="socket:[49135]" dev="sockfs" ino=49135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 223.840573][ T42] audit: type=1400 audit(1785393680.851:26317): avc: denied { read accept } for pid=13411 comm="syz.7.2250" path="socket:[49135]" dev="sockfs" ino=49135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 223.981721][ T5094] Bluetooth: hci2: command 0x0406 tx timeout [ 224.376276][T13412] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2250'. [ 224.445563][ T42] audit: type=1400 audit(1785393681.451:26318): avc: denied { shutdown } for pid=13419 comm="syz.6.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 224.454132][ T42] audit: type=1400 audit(1785393681.461:26319): avc: denied { unlink } for pid=13419 comm="syz.6.2251" name="#3a" dev="tmpfs" ino=846 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 224.465115][ T42] audit: type=1400 audit(1785393681.461:26320): avc: denied { mount } for pid=13419 comm="syz.6.2251" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 224.475309][ T42] audit: type=1400 audit(1785393681.461:26321): avc: denied { unmount } for pid=13419 comm="syz.6.2251" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 224.483515][T13420] overlayfs: failed to verify upper root origin [ 224.527398][T13426] xt_time: unknown flags 0x78 [ 224.536646][T13428] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 224.541797][ T5094] Bluetooth: hci3: command 0x0405 tx timeout [ 224.623993][ T5094] Bluetooth: hci4: command 0x0c1a tx timeout [ 224.801461][ T1493] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 224.823895][T13440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2258'. [ 224.849967][T13440] qrtr: Invalid version 47 [ 224.951853][ T1493] usb 12-1: too many configurations: 9, using maximum allowed: 8 [ 224.955513][ T1493] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.958506][ T1493] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.963092][ T1493] usb 12-1: config 0 interface 0 has no altsetting 0 [ 224.966268][ T1493] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.969191][ T1493] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.973551][ T1493] usb 12-1: config 0 interface 0 has no altsetting 0 [ 224.979970][ T1493] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.983290][ T1493] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.986994][ T1493] usb 12-1: config 0 interface 0 has no altsetting 0 [ 224.992968][ T1493] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.998407][ T1493] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.007252][ T1493] usb 12-1: config 0 interface 0 has no altsetting 0 [ 225.018464][ T1493] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.022359][ T1493] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.022672][T13452] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 225.026403][ T1493] usb 12-1: config 0 interface 0 has no altsetting 0 [ 225.030773][T13453] netlink: 'syz.6.2262': attribute type 4 has an invalid length. [ 225.032748][ T1493] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.042605][ T1493] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.046773][ T1493] usb 12-1: config 0 interface 0 has no altsetting 0 [ 225.050458][ T1493] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.054854][ T1493] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.058659][ T1493] usb 12-1: config 0 interface 0 has no altsetting 0 [ 225.061986][ T1493] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.065689][ T1493] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.069469][ T1493] usb 12-1: config 0 interface 0 has no altsetting 0 [ 225.075122][ T1493] usb 12-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 225.076011][T13450] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 225.078475][ T1493] usb 12-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 225.084771][ T1493] usb 12-1: Product: syz [ 225.086651][ T1493] usb 12-1: Manufacturer: syz [ 225.088560][ T1493] usb 12-1: SerialNumber: syz [ 225.095277][ T1493] usb 12-1: config 0 descriptor?? [ 225.101093][ T1493] yurex 12-1:0.0: USB YUREX device now attached to Yurex #0 [ 225.223238][T13465] nbd: socks must be embedded in a SOCK_ITEM attr [ 225.230146][T13464] syzkaller0: entered promiscuous mode [ 225.231998][T13464] syzkaller0: entered allmulticast mode [ 225.312434][ T8403] usb 12-1: USB disconnect, device number 4 [ 225.320610][ T8403] yurex 12-1:0.0: USB YUREX #0 now disconnected [ 225.339267][T13462] md: could not open device unknown-block(0,0). [ 225.354284][T13462] md: md_import_device returned -6 [ 225.356164][T13465] md: superblock version 7173739 not known [ 225.358090][T13465] md: couldn't set array info. -22 [ 225.505953][T13480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2269'. [ 225.524314][T13480] team1: entered promiscuous mode [ 225.526646][T13480] team1: entered allmulticast mode [ 225.529215][T13480] 8021q: adding VLAN 0 to HW filter on device team1 [ 225.569283][T13484] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2270'. [ 225.630973][ T5814] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 225.780836][ T5814] usb 11-1: Using ep0 maxpacket: 8 [ 225.784762][ T5814] usb 11-1: config 0 has an invalid interface number: 186 but max is 0 [ 225.788049][ T5814] usb 11-1: config 0 has no interface number 0 [ 225.791224][ T5814] usb 11-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 225.795586][ T5814] usb 11-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 225.799715][ T5814] usb 11-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 225.804661][ T5814] usb 11-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 225.809284][ T5814] usb 11-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.816571][ T5814] usb 11-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 225.819897][ T5814] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.822998][ T5814] usb 11-1: Product: syz [ 225.824412][ T5814] usb 11-1: Manufacturer: syz [ 225.825940][ T5814] usb 11-1: SerialNumber: syz [ 225.829748][ T5814] usb 11-1: config 0 descriptor?? [ 226.033547][T13488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.044485][ T5814] iowarrior 11-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 226.046123][T13492] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 226.135178][ T5814] usb 9-1: USB disconnect, device number 17 [ 226.170076][T13498] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2274'. [ 226.193664][T13498] xfrm0 speed is unknown, defaulting to 1000 [ 226.222100][T13501] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 226.247216][ T1493] usb 11-1: USB disconnect, device number 9 [ 226.384256][T13507] xfrm0 speed is unknown, defaulting to 1000 [ 226.444624][T13510] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2276'. [ 226.448451][T13510] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2276'. [ 226.453111][T13510] Device name not specified. [ 226.453111][T13510] [ 226.456349][T13509] syzkaller0: entered promiscuous mode [ 226.458556][T13509] syzkaller0: entered allmulticast mode [ 226.459007][T13510] binder: 13506:13510 ioctl c00c620f 200000000500 returned -22 [ 226.630474][ T5094] Bluetooth: hci3: command 0x0405 tx timeout [ 226.700439][ T5094] Bluetooth: hci4: command 0x0c1a tx timeout [ 226.749132][T13528] debugfs: '1^!' already exists in 'ieee80211' [ 226.877965][T13535] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2285'. [ 226.884628][T13535] tipc: Enabling of bearer rejected, media not registered [ 226.909982][T13535] tmpfs: Bad value for 'nr_blocks' [ 226.994488][T13540] fuse: Bad value for 'fd' [ 227.075761][T13545] syzkaller0: entered promiscuous mode [ 227.078102][T13545] syzkaller0: entered allmulticast mode [ 227.280100][ T8403] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 227.464022][ T8403] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.476088][ T8403] usb 9-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 227.479547][ T8403] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 227.482926][ T8403] usb 9-1: Product: syz [ 227.484602][ T8403] usb 9-1: Manufacturer: syz [ 227.486174][T13563] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2295'. [ 227.499271][ T8403] usb_debug 9-1:1.0: debug converter detected [ 227.513897][ T8403] usb 9-1: debug converter now attached to ttyUSB0 [ 227.589510][T13568] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 227.701077][T13542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.709964][T13570] netlink: 'syz.4.2288': attribute type 15 has an invalid length. [ 227.714263][T13542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.723959][ T29] usb 9-1: USB disconnect, device number 18 [ 227.736978][ T29] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 227.741460][ T29] usb_debug 9-1:1.0: device disconnected [ 227.777109][T13579] kvm: kvm [13578]: vcpu0, guest rIP: 0x5408d Unhandled WRMSR(0x4000007b) = 0x3f [ 227.928115][T13585] bond0: entered promiscuous mode [ 227.930928][T13585] bond_slave_0: entered promiscuous mode [ 227.933223][T13585] bond_slave_1: entered promiscuous mode [ 227.936628][T13585] batadv0: entered promiscuous mode [ 227.941386][T13585] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 227.944477][T13585] bond0: left promiscuous mode [ 227.945979][T13585] bond_slave_0: left promiscuous mode [ 227.947792][T13585] bond_slave_1: left promiscuous mode [ 227.950172][T13585] batadv0: left promiscuous mode [ 227.980350][T13587] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 228.133089][T13596] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 228.348150][T13603] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 228.510479][T13611] overlayfs: failed lookup in lower (newroot/161, name='file1', err=-40): overlapping layers [ 228.588063][T13618] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2313'. [ 228.591280][ T42] kauditd_printk_skb: 87 callbacks suppressed [ 228.591296][ T42] audit: type=1400 audit(1785393685.593:26409): avc: denied { write } for pid=13614 comm="syz.7.2312" name="/" dev="9p" ino=82313361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.592122][T13618] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2313'. [ 228.593933][ T42] audit: type=1400 audit(1785393685.593:26410): avc: denied { add_name } for pid=13614 comm="syz.7.2312" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.600284][T13618] netlink: 'syz.6.2313': attribute type 18 has an invalid length. [ 228.618132][ T42] audit: type=1400 audit(1785393685.603:26411): avc: denied { create } for pid=13614 comm="syz.7.2312" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 228.626291][ T42] audit: type=1400 audit(1785393685.603:26412): avc: denied { associate } for pid=13614 comm="syz.7.2312" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 228.700310][ T5094] Bluetooth: hci3: command 0x0405 tx timeout [ 228.822301][ T42] audit: type=1400 audit(1785393685.833:26413): avc: denied { ioctl } for pid=13625 comm="syz.7.2314" path="socket:[52662]" dev="sockfs" ino=52662 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 228.830723][ T42] audit: type=1400 audit(1785393685.833:26414): avc: denied { setopt } for pid=13625 comm="syz.7.2314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 228.858592][ T42] audit: type=1400 audit(1785393685.863:26415): avc: denied { setopt } for pid=13627 comm="syz.7.2316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 229.189499][ T29] usb 12-1: new full-speed USB device number 5 using dummy_hcd [ 229.283689][ T42] audit: type=1400 audit(1785393686.293:26416): avc: denied { create } for pid=13652 comm="syz.4.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 229.343489][ T29] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.351952][ T29] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 229.360422][ T29] usb 12-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 229.379176][ T29] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.387497][ T29] usb 12-1: config 0 descriptor?? [ 229.393000][ T29] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 229.396279][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 229.412918][ T42] audit: type=1400 audit(1785393686.423:26417): avc: denied { create } for pid=13661 comm="syz.6.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 229.414788][T13660] syzkaller0: entered promiscuous mode [ 229.415177][T13662] nbd: socks must be embedded in a SOCK_ITEM attr [ 229.426148][T13660] syzkaller0: entered allmulticast mode [ 229.435308][ T42] audit: type=1400 audit(1785393686.423:26418): avc: denied { bind } for pid=13661 comm="syz.6.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 229.444870][ T29] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 229.455977][ T29] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 229.463768][ T29] usb 12-1: media controller created [ 229.476666][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 229.495126][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 229.513630][ T29] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 229.517540][ T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb12/12-1/input/input21 [ 229.530325][ T29] dvb-usb: schedule remote query interval to 150 msecs. [ 229.532609][ T29] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 229.605204][T13670] syzkaller0: entered promiscuous mode [ 229.607629][T13670] syzkaller0: entered allmulticast mode [ 229.683971][ T61] usb 12-1: USB disconnect, device number 5 [ 229.723269][ T61] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 230.043616][T13685] netlink: 'syz.4.2336': attribute type 49 has an invalid length. [ 230.050923][T13685] bond0: (slave bond_slave_0): Releasing backup interface [ 230.112313][T13685] bond_slave_0: entered promiscuous mode [ 230.114525][T13685] bond_slave_0: entered allmulticast mode [ 230.294538][T13690] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 230.297621][T13690] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 230.307427][T13690] vhci_hcd vhci_hcd.0: Device attached [ 230.384085][T13693] vhci_hcd: connection closed [ 230.387606][ T5785] vhci_hcd vhci_hcd.7: stop threads [ 230.404907][ T5785] vhci_hcd vhci_hcd.7: release socket [ 230.420668][ T5785] vhci_hcd vhci_hcd.7: disconnect device [ 230.454509][T13706] syzkaller0: entered promiscuous mode [ 230.456386][T13706] syzkaller0: entered allmulticast mode [ 230.488843][ T61] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 230.725538][T13715] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 230.730794][T13715] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 230.736035][T13715] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 230.901841][T13723] SELinux: policydb string length 1852383348 does not match expected length 8 [ 230.904849][T13723] SELinux: failed to load policy [ 230.954776][T13725] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 230.964983][T13725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.162720][T13729] syzkaller0: entered promiscuous mode [ 231.164569][T13729] syzkaller0: entered allmulticast mode [ 231.456978][T13734] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 231.460807][T13734] block device autoloading is deprecated and will be removed. [ 231.518251][T13731] md: superblock version 12389 not known [ 231.519972][T13731] md: couldn't set array info. -22 [ 231.560495][T13743] syzkaller0: entered promiscuous mode [ 231.562216][T13743] syzkaller0: entered allmulticast mode [ 231.576266][T13743] tipc: Started in network mode [ 231.578771][T13743] tipc: Node identity 7e1249ee9647, cluster identity 4711 [ 231.582926][T13743] tipc: Enabled bearer , priority 0 [ 231.604123][T13745] syzkaller0: entered promiscuous mode [ 231.606018][T13745] syzkaller0: entered allmulticast mode [ 231.641523][T13743] loop4: detected capacity change from 0 to 7 [ 231.684953][T13743] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 231.686689][T13743] loop4: partition table partially beyond EOD, truncated [ 231.689504][T13743] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 231.704084][T13742] tipc: Resetting bearer [ 231.750249][T13742] tipc: Disabling bearer [ 231.784459][ T5145] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 231.786290][ T5145] loop4: partition table partially beyond EOD, truncated [ 231.789386][ T5145] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 231.817168][T13749] synth uevent: /bus/platform/drivers/intel_xhci_usb_sw: unknown uevent action string [ 231.824949][T13749] No such timeout policy "syz1" [ 231.828439][T13749] netlink: 'syz.4.2354': attribute type 8 has an invalid length. [ 231.869877][ T5145] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 231.871888][ T5145] loop4: partition table partially beyond EOD, truncated [ 231.879430][ T5145] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 231.939869][ T9114] udevd[9114]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 231.963712][T13757] syzkaller0: entered promiscuous mode [ 231.965561][T13757] syzkaller0: entered allmulticast mode [ 232.155269][T13771] __nla_validate_parse: 3 callbacks suppressed [ 232.155282][T13771] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2361'. [ 232.428811][T13783] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.494450][T13790] syzkaller0: entered promiscuous mode [ 232.496289][T13790] syzkaller0: entered allmulticast mode [ 232.686828][T13798] 9pnet_fd: Insufficient options for proto=fd [ 232.776731][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2374'. [ 232.783397][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2374'. [ 232.914635][T13810] openvswitch: netlink: Duplicate key (type 6). [ 232.918807][T13810] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2373'. [ 233.007202][T13808] xfrm0 speed is unknown, defaulting to 1000 [ 233.009578][ T9] usb 11-1: new full-speed USB device number 10 using dummy_hcd [ 233.082075][T13807] netlink: 'syz.4.2375': attribute type 12 has an invalid length. [ 233.159197][ T9] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.162181][T13808] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2375'. [ 233.162558][ T9] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 233.168925][ T9] usb 11-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 233.171295][T13808] openvswitch: netlink: Flow actions attr not present in new flow. [ 233.171838][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.183784][ T9] usb 11-1: config 0 descriptor?? [ 233.187599][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 233.189835][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 233.193200][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 233.200348][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 233.202751][ T9] usb 11-1: media controller created [ 233.206004][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 233.218540][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 233.222028][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 233.229098][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb11/11-1/input/input22 [ 233.235401][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 233.239096][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 233.400405][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 233.408023][ T9] dvb-usb: error while querying for an remote control event. [ 233.546587][ T9] usb 11-1: USB disconnect, device number 10 [ 233.576550][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 233.650860][ T42] kauditd_printk_skb: 46 callbacks suppressed [ 233.650877][ T42] audit: type=1400 audit(1785393690.665:26465): avc: denied { mount } for pid=13845 comm="syz.7.2384" name="/" dev="configfs" ino=2075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 233.665025][ T42] audit: type=1400 audit(1785393690.665:26466): avc: denied { search } for pid=13845 comm="syz.7.2384" name="/" dev="configfs" ino=2075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 233.674300][ T42] audit: type=1400 audit(1785393690.665:26467): avc: denied { search } for pid=13845 comm="syz.7.2384" name="usb_gadget" dev="configfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 233.688023][ T42] audit: type=1400 audit(1785393690.665:26468): avc: denied { search } for pid=13845 comm="syz.7.2384" name="g1" dev="configfs" ino=16723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 233.695568][ T42] audit: type=1400 audit(1785393690.665:26469): avc: denied { search } for pid=13845 comm="syz.7.2384" name="usb_gadget" dev="configfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 233.703797][ T42] audit: type=1400 audit(1785393690.665:26470): avc: denied { search } for pid=13845 comm="syz.7.2384" name="/" dev="configfs" ino=2075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 233.711198][ T42] audit: type=1400 audit(1785393690.665:26471): avc: denied { search } for pid=13845 comm="syz.7.2384" name="usb_gadget" dev="configfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 233.721840][ T42] audit: type=1400 audit(1785393690.665:26472): avc: denied { search } for pid=13845 comm="syz.7.2384" name="/" dev="configfs" ino=2075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 233.729430][ T42] audit: type=1400 audit(1785393690.665:26473): avc: denied { search } for pid=13845 comm="syz.7.2384" name="usb_gadget" dev="configfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 233.737847][ T42] audit: type=1400 audit(1785393690.665:26474): avc: denied { search } for pid=13845 comm="syz.7.2384" name="g1" dev="configfs" ino=16723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 233.813582][T13862] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2388'. [ 233.822565][T13863] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2388'. [ 233.865870][T13862] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 233.872505][T13862] @0: renamed from bond_slave_1 (while UP) [ 233.985822][T13871] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2391'. [ 234.022097][T13866] Process accounting resumed [ 234.022681][T13873] Invalid option length (480) for dns_resolver key [ 234.152367][T13877] bond2: ARP target 9.0.0.0 is already present [ 234.163179][T13877] bond2: option arp_ip_target: invalid value (9) [ 234.166779][T13877] bond2 (unregistering): Released all slaves [ 234.285782][T13893] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2397'. [ 236.377583][T13885] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 236.377679][ T5094] Bluetooth: hci2: command 0x0406 tx timeout [ 237.192636][T13885] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 237.195606][T13885] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 237.199702][T13885] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 237.345272][T13911] 9pnet_fd: Insufficient options for proto=fd [ 237.446045][T13918] input: syz0 as /devices/virtual/input/input23 [ 237.472605][T13918] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 237.480986][T13920] overlayfs: workdir and upperdir must reside under the same mount [ 238.341157][T13931] xt_NFQUEUE: number of total queues is 0 [ 238.353417][T13932] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2407'. [ 238.457518][ T5094] Bluetooth: hci3: command 0x0405 tx timeout [ 238.490878][T13936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.497185][T13936] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 238.577582][ T9850] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 238.607686][ T5814] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 238.729223][ T9850] usb 12-1: unable to get BOS descriptor or descriptor too short [ 238.735819][ T9850] usb 12-1: config 4 has an invalid interface number: 13 but max is 0 [ 238.739056][ T9850] usb 12-1: config 4 has no interface number 0 [ 238.741075][ T9850] usb 12-1: config 4 interface 13 has no altsetting 0 [ 238.744800][ T9850] usb 12-1: New USB device found, idVendor=0bda, idProduct=0184, bcdDevice=6f.98 [ 238.748642][ T9850] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.751497][ T9850] usb 12-1: Product: syz [ 238.752839][ T9850] usb 12-1: Manufacturer: syz [ 238.754394][ T9850] usb 12-1: SerialNumber: syz [ 238.788272][ T5814] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 238.792928][ T5814] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 238.795825][ T5814] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 238.800043][ T5814] usb 9-1: config 0 interface 0 has no altsetting 0 [ 238.803394][ T5814] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 238.806182][ T5814] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 238.809659][ T5814] usb 9-1: config 0 interface 0 has no altsetting 0 [ 238.812566][ T5814] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 238.816015][ T5814] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 238.820256][ T5814] usb 9-1: config 0 interface 0 has no altsetting 0 [ 238.823591][ T5814] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 238.827070][ T5814] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 238.831293][ T5814] usb 9-1: config 0 interface 0 has no altsetting 0 [ 238.834775][ T5814] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 238.838278][ T5814] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 238.842433][ T5814] usb 9-1: config 0 interface 0 has no altsetting 0 [ 238.845796][ T5814] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 238.849651][ T5814] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 238.853823][ T5814] usb 9-1: config 0 interface 0 has no altsetting 0 [ 238.857129][ T5814] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 238.860913][ T5814] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 238.865131][ T5814] usb 9-1: config 0 interface 0 has no altsetting 0 [ 238.868231][ T5814] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 238.871681][ T5814] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 238.875151][ T5814] usb 9-1: config 0 interface 0 has no altsetting 0 [ 238.879088][ T5814] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 238.882054][ T5814] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 238.884697][ T5814] usb 9-1: Product: syz [ 238.886035][ T5814] usb 9-1: Manufacturer: syz [ 238.887613][ T5814] usb 9-1: SerialNumber: syz [ 238.890823][ T5814] usb 9-1: config 0 descriptor?? [ 238.900690][ T5814] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 238.969400][ T9850] ums-realtek 12-1:4.13: USB Mass Storage device detected [ 239.102553][ T9850] usb 12-1: USB disconnect, device number 6 [ 239.127068][ T42] kauditd_printk_skb: 34 callbacks suppressed [ 239.127080][ T42] audit: type=1400 audit(1785393696.135:26509): avc: denied { watch watch_reads } for pid=13940 comm="syz.6.2410" path="/210" dev="tmpfs" ino=1127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 239.206496][ C1] usb 9-1: yurex_control_callback - control failed: -71 [ 239.211707][ T9] usb 9-1: USB disconnect, device number 19 [ 239.211779][T13932] yurex 9-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 239.220304][ T42] audit: type=1400 audit(1785393696.235:26510): avc: denied { ioctl } for pid=13945 comm="syz.6.2411" path="socket:[57416]" dev="sockfs" ino=57416 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 239.221152][ T9] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 239.249982][ T42] audit: type=1400 audit(1785393696.265:26511): avc: denied { name_bind } for pid=13926 comm="syz.4.2407" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 239.267954][ T5094] Bluetooth: hci5: command 0x0405 tx timeout [ 239.267986][ T64] Bluetooth: hci4: command 0x0c1a tx timeout [ 239.498475][T13953] netlink: 'syz.7.2412': attribute type 23 has an invalid length. [ 239.505772][T13953] loop7: detected capacity change from 0 to 16384 [ 239.691162][T13954] loop7: detected capacity change from 16384 to 0 [ 239.691674][ C1] I/O error, dev loop7, sector 15616 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 239.791489][T13956] 9pnet_fd: Insufficient options for proto=fd [ 239.808809][ T42] audit: type=1400 audit(1785393696.825:26512): avc: denied { execute } for pid=13957 comm="syz.4.2414" path="/448/blkio.bfq.group_wait_time" dev="tmpfs" ino=2371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 239.842149][ T42] audit: type=1400 audit(1785393696.855:26513): avc: denied { bind } for pid=13961 comm="syz.4.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 239.848054][ T42] audit: type=1400 audit(1785393696.865:26514): avc: denied { listen } for pid=13961 comm="syz.4.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 239.854165][ T42] audit: type=1400 audit(1785393696.865:26515): avc: denied { write } for pid=13961 comm="syz.4.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 239.862730][ T42] audit: type=1400 audit(1785393696.875:26516): avc: denied { write } for pid=13961 comm="syz.4.2415" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 239.898498][ T42] audit: type=1400 audit(1785393696.915:26517): avc: denied { append } for pid=13965 comm="syz.4.2416" name="nbd4" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 239.910899][ T42] audit: type=1400 audit(1785393696.925:26518): avc: denied { ioctl } for pid=13965 comm="syz.4.2416" path="socket:[55525]" dev="sockfs" ino=55525 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 240.019544][T13977] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 240.044293][T13984] netlink: 'syz.6.2420': attribute type 1 has an invalid length. [ 240.056079][T13984] 8021q: adding VLAN 0 to HW filter on device bond2 [ 240.064710][T13977] netlink: zone id is out of range [ 240.066460][T13977] netlink: zone id is out of range [ 240.068264][T13977] netlink: zone id is out of range [ 240.069934][T13977] netlink: zone id is out of range [ 240.071610][T13977] netlink: zone id is out of range [ 240.073250][T13977] netlink: zone id is out of range [ 240.148112][T13984] bond2: (slave geneve2): making interface the new active one [ 240.151635][T13984] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 240.463862][T14013] 0: reclassify loop, rule prio 0, protocol 03 [ 240.681309][T14030] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 240.844887][T14047] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 240.957984][T14052] comedi comedi2: board detection failed [ 241.132479][T14059] 9pnet_fd: Insufficient options for proto=fd [ 241.337520][ T64] Bluetooth: hci5: command 0x0405 tx timeout [ 241.548286][T14077] macvlan0: entered promiscuous mode [ 241.565938][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802dfcb800: rx timeout, send abort [ 242.072046][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802dfcb800: abort rx timeout. Force session deactivation [ 242.290500][T14096] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 242.414052][T14099] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 242.680471][ T5094] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 242.689286][ T5094] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 242.692712][ T5094] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 242.695949][T14113] loop8: detected capacity change from 0 to 7 [ 242.701247][ T5094] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 242.701937][ T5094] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 242.733735][T14113] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 242.747976][T14113] loop8: partition table partially beyond EOD, truncated [ 242.755971][T14113] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 242.771460][T14113] loop8: p2 start 121280928 is beyond EOD, truncated [ 242.819026][ T9114] udevd[9114]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 242.886588][T14134] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2465'. [ 242.979379][T14131] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 243.005769][ T9754] bond0: (slave syz_tun): Releasing backup interface [ 243.034823][T14115] xfrm0 speed is unknown, defaulting to 1000 [ 243.197449][ T149] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 243.210567][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.214867][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.337743][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.349608][ T149] usb 12-1: config index 0 descriptor too short (expected 39, got 27) [ 243.349790][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.353880][ T149] usb 12-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 243.358813][ T149] usb 12-1: config 0 interface 0 has no altsetting 0 [ 243.362766][ T149] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 243.365536][ T149] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 243.369084][ T149] usb 12-1: Product: syz [ 243.370502][ T149] usb 12-1: Manufacturer: syz [ 243.372028][ T149] usb 12-1: SerialNumber: syz [ 243.385742][ T149] usb 12-1: config 0 descriptor?? [ 243.389115][ T149] hub 12-1:0.0: bad descriptor, ignoring hub [ 243.391178][ T149] hub 12-1:0.0: probe with driver hub failed with error -5 [ 243.395112][ T149] usb 12-1: selecting invalid altsetting 0 [ 243.440691][T14179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14179 comm=syz.6.2476 [ 243.535613][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.539451][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.551306][T14115] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.553932][T14115] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.557112][T14115] bridge_slave_0: entered allmulticast mode [ 243.562162][T14115] bridge_slave_0: entered promiscuous mode [ 243.567788][T14115] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.571125][T14115] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.574005][T14115] bridge_slave_1: entered allmulticast mode [ 243.578165][T14115] bridge_slave_1: entered promiscuous mode [ 243.598232][T14115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.601236][T14182] syzkaller0: entered promiscuous mode [ 243.603027][T14182] syzkaller0: entered allmulticast mode [ 243.610880][T14115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.648794][T14186] overlay: Unknown parameter 'nd/pcmC#D#p' [ 243.672414][T14115] team0: Port device team_slave_0 added [ 243.675902][T14115] team0: Port device team_slave_1 added [ 243.694779][ T41] usb 12-1: USB disconnect, device number 7 [ 243.704918][T14115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.708596][T14115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.731312][T14115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.743711][T14115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.746562][T14115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.759879][T14115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.830914][T14189] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 243.856613][T14115] hsr_slave_0: entered promiscuous mode [ 243.860203][T14115] hsr_slave_1: entered promiscuous mode [ 243.863083][T14115] debugfs: 'hsr0' already exists in 'hsr' [ 243.865366][T14115] Cannot create hsr debugfs directory [ 243.949867][ T13] bridge_slave_1: left allmulticast mode [ 243.952253][ T13] bridge_slave_1: left promiscuous mode [ 243.954261][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.961233][ T13] bridge_slave_0: left allmulticast mode [ 243.963889][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.033313][T14197] program syz.6.2480 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.037161][T14197] ata1.00: non-matching transfer count (-1459617792/0) [ 244.039171][ T7235] SELinux: failure in sel_netif_sid_slow(), invalid network interface (126) [ 244.055651][ T7235] SELinux: failure in sel_netif_sid_slow(), invalid network interface (97) [ 244.276493][ T13] bond1 (unregistering): (slave gretap1): Releasing active interface [ 244.282768][T14211] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 244.285534][T14211] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 244.290137][T14211] vhci_hcd vhci_hcd.0: Device attached [ 244.308017][ T7235] SELinux: failure in sel_netif_sid_slow(), invalid network interface (126) [ 244.337427][ T13] bond3 (unregistering): (slave bridge2): Releasing active interface [ 244.349910][T14211] 9pnet: p9_errstr2errno: server reported unknown error [ 244.357811][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.363927][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.372768][ T13] bond0 (unregistering): Released all slaves [ 244.383783][ T13] bond1 (unregistering): Released all slaves [ 244.394362][ T13] bond2 (unregistering): Released all slaves [ 244.414466][ T13] bond3 (unregistering): Released all slaves [ 244.429512][ T13] bond4 (unregistering): Released all slaves [ 244.442978][ T13] bond5 (unregistering): Released all slaves [ 244.453620][ T13] bond6 (unregistering): Released all slaves [ 244.521263][T14223] syzkaller0: entered promiscuous mode [ 244.523897][T14223] syzkaller0: entered allmulticast mode [ 244.538796][ T1493] usb 51-1: new high-speed USB device number 3 using vhci_hcd [ 244.648191][ T13] tipc: Left network mode [ 244.774034][ T42] kauditd_printk_skb: 46 callbacks suppressed [ 244.774049][ T42] audit: type=1400 audit(1785393701.785:26565): avc: denied { write } for pid=14228 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.783068][ T64] Bluetooth: hci1: command tx timeout [ 244.811776][T14236] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2489'. [ 244.834298][ T42] audit: type=1400 audit(1785393701.845:26566): avc: denied { write } for pid=14238 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.861814][T14237] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2489'. [ 244.883123][T14245] bridge0: port 3(veth0) entered blocking state [ 244.886501][T14245] bridge0: port 3(veth0) entered disabled state [ 244.889195][T14245] veth0: entered allmulticast mode [ 244.891786][T14245] veth0: entered promiscuous mode [ 244.893908][T14245] bridge0: port 3(veth0) entered blocking state [ 244.895927][T14245] bridge0: port 3(veth0) entered forwarding state [ 244.900288][T14237] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2489'. [ 244.908201][ T5447] 8021q: adding VLAN 0 to HW filter on device eth6 [ 244.915128][T14245] bridge0: port 4(veth1) entered blocking state [ 244.915490][T14237] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2489'. [ 244.919122][T14245] bridge0: port 4(veth1) entered disabled state [ 244.924398][T14245] veth1: entered allmulticast mode [ 244.926990][T14245] veth1: entered promiscuous mode [ 244.929793][T14245] bridge0: port 4(veth1) entered blocking state [ 244.932214][T14245] bridge0: port 4(veth1) entered forwarding state [ 245.004651][T14249] 9pnet_fd: Insufficient options for proto=fd [ 245.059169][ T42] audit: type=1400 audit(1785393702.065:26567): avc: denied { write } for pid=14252 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.068363][T14115] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 245.074149][T14115] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 245.087900][T14212] vhci_hcd: connection reset by peer [ 245.091213][T14115] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 245.095316][ T12] vhci_hcd vhci_hcd.7: stop threads [ 245.097055][ T12] vhci_hcd vhci_hcd.7: release socket [ 245.107069][ T42] audit: type=1400 audit(1785393702.115:26568): avc: denied { write } for pid=14260 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.108093][ T12] vhci_hcd vhci_hcd.7: disconnect device [ 245.116390][T14115] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 245.121929][T14115] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 245.131253][T14115] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 245.134242][T14115] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 245.149641][T14115] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 245.165942][ T5447] 8021q: adding VLAN 0 to HW filter on device eth7 [ 245.198919][T14264] syzkaller0: entered promiscuous mode [ 245.201787][T14264] syzkaller0: entered allmulticast mode [ 245.291841][ T13] hsr_slave_0: left promiscuous mode [ 245.294392][ T13] hsr_slave_1: left promiscuous mode [ 245.301737][ T42] audit: type=1400 audit(1785393702.315:26569): avc: denied { write } for pid=14272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.311522][ T13] veth1_macvtap: left promiscuous mode [ 245.313798][ T13] veth0_macvtap: left promiscuous mode [ 245.316082][ T13] veth1_vlan: left promiscuous mode [ 245.319304][ T13] veth0_vlan: left promiscuous mode [ 245.327409][ T149] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 245.363352][ T42] audit: type=1400 audit(1785393702.375:26570): avc: denied { write } for pid=14275 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.500223][ T149] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.504700][ T149] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.509879][ T149] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 245.515199][ T149] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 245.519302][ T149] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.531287][ T149] usb 11-1: config 0 descriptor?? [ 245.627193][T14287] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2499'. [ 245.630825][T14287] netlink: 'syz.7.2499': attribute type 7 has an invalid length. [ 245.633981][T14287] netlink: 'syz.7.2499': attribute type 8 has an invalid length. [ 245.636463][T14287] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2499'. [ 245.661789][ T13] team0 (unregistering): Port device team_slave_1 removed [ 245.674692][ T13] team0 (unregistering): Port device team_slave_0 removed [ 245.741598][ T42] audit: type=1326 audit(1785393702.755:26571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14256 comm="syz.6.2493" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdae6d9df99 code=0x0 [ 245.754439][ T149] usbhid 11-1:0.0: can't add hid device: -71 [ 245.758346][ T149] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 245.766474][ T149] usb 11-1: USB disconnect, device number 11 [ 245.771730][T14115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.775783][ T5447] 8021q: adding VLAN 0 to HW filter on device eth8 [ 245.820951][T14115] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.836583][ T9343] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.839641][ T9343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.888607][ T9343] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.891121][ T9343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.937248][ T42] audit: type=1400 audit(1785393702.945:26572): avc: denied { create } for pid=14292 comm="syz.4.2501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 245.994688][ T42] audit: type=1400 audit(1785393703.005:26573): avc: denied { write } for pid=14297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.074854][ T42] audit: type=1400 audit(1785393703.085:26574): avc: denied { write } for pid=14306 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.111351][ T5447] 8021q: adding VLAN 0 to HW filter on device eth9 [ 246.203813][T14115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.299623][T14331] synth uevent: /bus/platform/drivers/intel_xhci_usb_sw: unknown uevent action string [ 246.406327][T14340] 9pnet_fd: Insufficient options for proto=fd [ 246.457162][T14115] veth0_vlan: entered promiscuous mode [ 246.466099][T14115] veth1_vlan: entered promiscuous mode [ 246.492399][T14115] veth0_macvtap: entered promiscuous mode [ 246.503834][T14115] veth1_macvtap: entered promiscuous mode [ 246.529908][T14115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.536206][T14115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.557949][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.567689][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.578958][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.583271][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.626097][ T1309] block nbd2: Possible stuck request ffff888029f05080: control (read@0,1024B). Runtime 120 seconds [ 246.631262][ T1309] block nbd2: Possible stuck request ffff888029f05240: control (read@1024,1024B). Runtime 120 seconds [ 246.638301][ T1309] block nbd2: Possible stuck request ffff888029f05400: control (read@2048,1024B). Runtime 120 seconds [ 246.643339][ T1309] block nbd2: Possible stuck request ffff888029f055c0: control (read@3072,1024B). Runtime 120 seconds [ 246.748262][T14366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32800 sclass=netlink_route_socket pid=14366 comm=syz.7.2517 [ 246.772794][ T9345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.780109][ T9345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.822531][ T9347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.827422][ T9347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.858105][ T64] Bluetooth: hci1: command tx timeout [ 246.862010][T14373] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 246.870494][T14375] 9pnet_fd: Insufficient options for proto=fd [ 246.969506][T14387] syzkaller0: entered promiscuous mode [ 246.972157][T14387] syzkaller0: entered allmulticast mode [ 246.972161][T14384] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2521'. [ 247.157416][T14406] efs: cannot read volume header [ 247.265599][T14417] syzkaller0: entered promiscuous mode [ 247.268003][T14417] syzkaller0: entered allmulticast mode [ 247.281477][T14417] erspan1: entered promiscuous mode [ 247.351876][T14419] 9pnet_fd: Insufficient options for proto=fd [ 247.378346][ T8403] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 247.397790][T14421] syzkaller0: entered promiscuous mode [ 247.399557][T14421] syzkaller0: entered allmulticast mode [ 247.522441][T14427] syzkaller0: entered promiscuous mode [ 247.524606][T14427] syzkaller0: entered allmulticast mode [ 247.528252][T14427] FAULT_INJECTION: forcing a failure. [ 247.528252][T14427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.528589][T14426] syzkaller0: entered promiscuous mode [ 247.532205][T14427] CPU: 1 UID: 0 PID: 14427 Comm: syz.8.2533 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.532223][T14427] Tainted: [L]=SOFTLOCKUP [ 247.532228][T14427] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 247.532236][T14427] Call Trace: [ 247.532249][T14427] [ 247.532254][T14427] dump_stack_lvl+0x100/0x190 [ 247.532285][T14427] should_fail_ex.cold+0x5/0xa [ 247.532305][T14427] _copy_from_user+0x2e/0xd0 [ 247.532329][T14427] copy_msghdr_from_user+0x9f/0x4c0 [ 247.532360][T14427] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 247.532386][T14427] ___sys_sendmsg+0x106/0x1e0 [ 247.532405][T14427] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.532422][T14427] ? __lock_acquire+0x49f/0x1a40 [ 247.532443][T14427] ? get_pid_task+0x106/0x250 [ 247.532482][T14427] __sys_sendmsg+0x160/0x210 [ 247.532498][T14427] ? __pfx___sys_sendmsg+0x10/0x10 [ 247.532520][T14427] do_syscall_64+0x115/0x870 [ 247.532538][T14427] ? clear_bhb_loop+0x40/0x90 [ 247.532553][T14427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.532564][T14427] RIP: 0033:0x7f558019df99 [ 247.532575][T14427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.532586][T14427] RSP: 002b:00007f5581102028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.532604][T14427] RAX: ffffffffffffffda RBX: 00007f5580425fa0 RCX: 00007f558019df99 [ 247.532611][T14427] RDX: 0000000000004005 RSI: 00002000000000c0 RDI: 0000000000000006 [ 247.532618][T14427] RBP: 00007f5581102090 R08: 0000000000000000 R09: 0000000000000000 [ 247.532625][T14427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.532631][T14427] R13: 00007f5580426038 R14: 00007f5580425fa0 R15: 00007ffeed00ba88 [ 247.532646][T14427] [ 247.543397][ T8403] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.545604][T14426] syzkaller0: entered allmulticast mode [ 247.549278][ T8403] usb 12-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 247.620108][ T8403] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 247.623542][ T8403] usb 12-1: Product: syz [ 247.625365][ T8403] usb 12-1: Manufacturer: syz [ 247.664378][ T8403] usb_debug 12-1:1.0: debug converter detected [ 247.672710][ T8403] usb 12-1: debug converter now attached to ttyUSB0 [ 247.862872][ T5814] usb 12-1: USB disconnect, device number 8 [ 247.877255][ T5814] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 247.881154][ T5814] usb_debug 12-1:1.0: device disconnected [ 247.910697][T14439] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2536'. [ 248.134713][T14441] xt_connbytes: Forcing CT accounting to be enabled [ 248.235880][T14447] (syz.8.2539,14447,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 248.239545][T14447] (syz.8.2539,14447,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 248.422341][T14461] syzkaller0: entered promiscuous mode [ 248.424287][T14461] syzkaller0: entered allmulticast mode [ 248.471538][T14458] CIFS: VFS: Unknown vers= option specified: -B]ąRB ,gWy 2"/>4Z ҄FYcIGQB*0⑒V&SmZ)`sAk!Owz"RLL|ZuWG4&޺[G [ 248.558193][T14463] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2545'. [ 248.755161][T14475] ntfs3(nbd4): try to read out of volume at offset 0x0 [ 248.873449][T14485] syzkaller0: entered promiscuous mode [ 248.875379][T14485] syzkaller0: entered allmulticast mode [ 248.937561][ T64] Bluetooth: hci1: command tx timeout [ 248.943030][T14483] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 248.974568][T14488] 9pnet_fd: Insufficient options for proto=fd [ 249.130848][T14497] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 249.132841][T14497] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 249.136963][T14497] vhci_hcd vhci_hcd.0: Device attached [ 249.141641][T14498] vhci_hcd: connection closed [ 249.143312][ T13] vhci_hcd vhci_hcd.8: stop threads [ 249.146644][ T13] vhci_hcd vhci_hcd.8: release socket [ 249.148679][ T13] vhci_hcd vhci_hcd.8: disconnect device [ 249.228093][ T7235] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 249.290875][T14502] netlink: 'syz.6.2558': attribute type 4 has an invalid length. [ 249.296934][T14502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=14502 comm=syz.6.2558 [ 249.301051][T14502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=14502 comm=syz.6.2558 [ 249.305878][T14502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=14502 comm=syz.6.2558 [ 249.310853][T14502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=14502 comm=syz.6.2558 [ 249.315808][T14502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=14502 comm=syz.6.2558 [ 249.320920][T14502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=14502 comm=syz.6.2558 [ 249.326057][T14502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=14502 comm=syz.6.2558 [ 249.379070][ T7235] usb 9-1: not running at top speed; connect to a high speed hub [ 249.383792][ T7235] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 249.388958][ T7235] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 249.392826][ T7235] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.402498][ T7235] garmin_gps 9-1:1.0: Garmin GPS usb/tty converter detected [ 249.415313][T14505] syzkaller0: entered promiscuous mode [ 249.417171][T14505] syzkaller0: entered allmulticast mode [ 249.418110][ T7235] usb 9-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 249.421502][T14505] FAULT_INJECTION: forcing a failure. [ 249.421502][T14505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.426933][T14505] CPU: 0 UID: 0 PID: 14505 Comm: syz.6.2559 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.426952][T14505] Tainted: [L]=SOFTLOCKUP [ 249.426956][T14505] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 249.426964][T14505] Call Trace: [ 249.426969][T14505] [ 249.426974][T14505] dump_stack_lvl+0x100/0x190 [ 249.427008][T14505] should_fail_ex.cold+0x5/0xa [ 249.427030][T14505] _copy_from_iter+0x1f4/0x1690 [ 249.427059][T14505] ? __pfx__copy_from_iter+0x10/0x10 [ 249.427075][T14505] ? find_held_lock+0x2b/0x80 [ 249.427102][T14505] ? dev_get_by_index+0x180/0x380 [ 249.427124][T14505] ? dev_get_by_index+0x180/0x380 [ 249.427141][T14505] packet_sendmsg+0x1bb3/0x5100 [ 249.427169][T14505] ? avc_has_perm_noaudit+0x2fa/0x3b0 [ 249.427195][T14505] ? sock_has_perm+0x25a/0x2f0 [ 249.427210][T14505] ? __pfx_sock_has_perm+0x10/0x10 [ 249.427230][T14505] ? __pfx_packet_sendmsg+0x10/0x10 [ 249.427247][T14505] ? selinux_socket_sendmsg+0x198/0x2f0 [ 249.427280][T14505] ____sys_sendmsg+0xa4d/0xbe0 [ 249.427308][T14505] ? __pfx_packet_sendmsg+0x10/0x10 [ 249.427322][T14505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.427346][T14505] ___sys_sendmsg+0x190/0x1e0 [ 249.427366][T14505] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.427383][T14505] ? __lock_acquire+0x49f/0x1a40 [ 249.427398][T14505] ? get_pid_task+0x106/0x250 [ 249.427437][T14505] __sys_sendmsg+0x160/0x210 [ 249.427452][T14505] ? __pfx___sys_sendmsg+0x10/0x10 [ 249.427482][T14505] do_syscall_64+0x115/0x870 [ 249.427507][T14505] ? clear_bhb_loop+0x40/0x90 [ 249.427532][T14505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.427550][T14505] RIP: 0033:0x7fdae6d9df99 [ 249.427566][T14505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.427579][T14505] RSP: 002b:00007fdae7bc3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.427591][T14505] RAX: ffffffffffffffda RBX: 00007fdae7025fa0 RCX: 00007fdae6d9df99 [ 249.427599][T14505] RDX: 0000000000004005 RSI: 00002000000000c0 RDI: 0000000000000006 [ 249.427605][T14505] RBP: 00007fdae7bc3090 R08: 0000000000000000 R09: 0000000000000000 [ 249.427612][T14505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.427619][T14505] R13: 00007fdae7026038 R14: 00007fdae7025fa0 R15: 00007ffcd1e4f9d8 [ 249.427634][T14505] [ 249.610728][ T7235] usb 9-1: USB disconnect, device number 20 [ 249.622456][ T7235] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 249.628323][ T7235] garmin_gps 9-1:1.0: device disconnected [ 249.658213][ T1493] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 249.680819][T14515] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2562'. [ 249.752970][T14525] 9pnet_fd: Insufficient options for proto=fd [ 249.775851][T14523] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 249.876125][T14531] syz.8.2566: attempt to access beyond end of device [ 249.876125][T14531] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 249.881087][T14531] gfs2: error -5 reading superblock [ 249.976547][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 249.976564][ T42] audit: type=1400 audit(1785393706.985:26601): avc: denied { bind } for pid=14532 comm="syz.7.2567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 249.987644][ T42] audit: type=1400 audit(1785393706.995:26602): avc: denied { name_bind } for pid=14532 comm="syz.7.2567" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 249.995431][ T42] audit: type=1400 audit(1785393706.995:26603): avc: denied { node_bind } for pid=14532 comm="syz.7.2567" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 250.137595][ T9850] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 250.171827][ T42] audit: type=1400 audit(1785393707.185:26604): avc: denied { write } for pid=14545 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.213566][T14550] syzkaller0: entered promiscuous mode [ 250.215396][T14550] syzkaller0: entered allmulticast mode [ 250.216233][ T42] audit: type=1400 audit(1785393707.225:26605): avc: denied { write } for pid=14549 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.224174][T14550] FAULT_INJECTION: forcing a failure. [ 250.224174][T14550] name failslab, interval 1, probability 0, space 0, times 0 [ 250.231176][T14552] syzkaller0: entered promiscuous mode [ 250.231217][T14550] CPU: 0 UID: 0 PID: 14550 Comm: syz.8.2569 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.231236][T14550] Tainted: [L]=SOFTLOCKUP [ 250.231240][T14550] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 250.231247][T14550] Call Trace: [ 250.231252][T14550] [ 250.231257][T14550] dump_stack_lvl+0x100/0x190 [ 250.231290][T14550] should_fail_ex.cold+0x5/0xa [ 250.231311][T14550] should_failslab+0xc2/0x120 [ 250.231333][T14550] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 250.231353][T14550] ? __alloc_skb+0x5b7/0x710 [ 250.231376][T14550] ? __alloc_skb+0x140/0x710 [ 250.231391][T14550] __alloc_skb+0x140/0x710 [ 250.231404][T14550] ? __alloc_skb+0x5b7/0x710 [ 250.231416][T14550] ? __pfx___alloc_skb+0x10/0x10 [ 250.231433][T14550] alloc_skb_with_frags+0xdd/0x760 [ 250.231449][T14550] ? __might_fault+0xc5/0x140 [ 250.231461][T14550] ? __might_fault+0xc5/0x140 [ 250.231474][T14550] sock_alloc_send_pskb+0x801/0x980 [ 250.231489][T14550] ? _copy_from_iter+0x270/0x1690 [ 250.231515][T14550] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 250.231528][T14550] ? find_held_lock+0x2b/0x80 [ 250.231556][T14550] ? dev_get_by_index+0x180/0x380 [ 250.231571][T14550] ? dev_get_by_index+0x180/0x380 [ 250.231588][T14550] packet_sendmsg+0x1eda/0x5100 [ 250.231609][T14550] ? avc_has_perm_noaudit+0x2fa/0x3b0 [ 250.231634][T14550] ? sock_has_perm+0x25a/0x2f0 [ 250.231650][T14550] ? __pfx_sock_has_perm+0x10/0x10 [ 250.231669][T14550] ? __pfx_packet_sendmsg+0x10/0x10 [ 250.231686][T14550] ? selinux_socket_sendmsg+0x198/0x2f0 [ 250.231706][T14550] ____sys_sendmsg+0xa4d/0xbe0 [ 250.231730][T14550] ? __pfx_packet_sendmsg+0x10/0x10 [ 250.231745][T14550] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.231769][T14550] ___sys_sendmsg+0x190/0x1e0 [ 250.231789][T14550] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.231807][T14550] ? __lock_acquire+0x49f/0x1a40 [ 250.231821][T14550] ? get_pid_task+0x106/0x250 [ 250.231860][T14550] __sys_sendmsg+0x160/0x210 [ 250.231876][T14550] ? __pfx___sys_sendmsg+0x10/0x10 [ 250.231898][T14550] do_syscall_64+0x115/0x870 [ 250.231917][T14550] ? clear_bhb_loop+0x40/0x90 [ 250.231931][T14550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.231944][T14550] RIP: 0033:0x7f558019df99 [ 250.231955][T14550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.231967][T14550] RSP: 002b:00007f5581102028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.231980][T14550] RAX: ffffffffffffffda RBX: 00007f5580425fa0 RCX: 00007f558019df99 [ 250.231987][T14550] RDX: 0000000000004005 RSI: 00002000000000c0 RDI: 0000000000000006 [ 250.231994][T14550] RBP: 00007f5581102090 R08: 0000000000000000 R09: 0000000000000000 [ 250.232001][T14550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.232008][T14550] R13: 00007f5580426038 R14: 00007f5580425fa0 R15: 00007ffeed00ba88 [ 250.232023][T14550] [ 250.290692][ T9850] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 250.290740][ T9850] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 250.290761][ T9850] usb 11-1: config 0 interface 0 has no altsetting 0 [ 250.296858][ T9850] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 250.298971][T14552] syzkaller0: entered allmulticast mode [ 250.300802][ T9850] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 250.375634][ T9850] usb 11-1: Product: syz [ 250.381878][ T9850] usb 11-1: Manufacturer: syz [ 250.384044][ T9850] usb 11-1: SerialNumber: syz [ 250.391454][ T9850] usb 11-1: config 0 descriptor?? [ 250.395862][ T9850] hub 11-1:0.0: bad descriptor, ignoring hub [ 250.398475][ T9850] hub 11-1:0.0: probe with driver hub failed with error -5 [ 250.404117][ T9850] usb 11-1: selecting invalid altsetting 0 [ 250.480567][ T42] audit: type=1400 audit(1785393707.495:26606): avc: denied { mount } for pid=14555 comm="syz.4.2571" name="/" dev="ramfs" ino=60647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 250.530402][T14560] bridge_slave_1: left allmulticast mode [ 250.532796][T14560] bridge_slave_1: left promiscuous mode [ 250.535396][T14560] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.545410][T14560] bridge_slave_0: left allmulticast mode [ 250.549214][ T42] audit: type=1400 audit(1785393707.565:26607): avc: denied { read } for pid=14561 comm="syz.4.2573" name="usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 250.559084][T14560] bridge_slave_0: left promiscuous mode [ 250.559235][T14560] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.577754][ T42] audit: type=1400 audit(1785393707.565:26608): avc: denied { open } for pid=14561 comm="syz.4.2573" path="/dev/usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 250.589911][ T42] audit: type=1400 audit(1785393707.595:26609): avc: denied { ioctl } for pid=14561 comm="syz.4.2573" path="/dev/usbmon0" dev="devtmpfs" ino=738 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 250.624082][ T42] audit: type=1400 audit(1785393707.635:26610): avc: denied { write } for pid=14563 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.663230][T14571] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2574'. [ 250.707983][ T41] usb 11-1: USB disconnect, device number 12 [ 250.862349][T14588] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2579'. [ 250.943147][T14593] 9pnet_fd: Insufficient options for proto=fd [ 250.943702][T14594] syzkaller0: entered promiscuous mode [ 250.949200][T14594] syzkaller0: entered allmulticast mode [ 250.978361][T14590] syzkaller0: entered promiscuous mode [ 250.980860][T14590] syzkaller0: entered allmulticast mode [ 251.018073][ T64] Bluetooth: hci1: command tx timeout [ 251.066708][T14598] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2583'. [ 251.077024][T14598] vxcan3: entered promiscuous mode [ 251.177040][T14608] FAT-fs (nullb0): bogus number of reserved sectors [ 251.180047][T14608] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 251.223196][T14610] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 251.236803][T14610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2585'. [ 251.240434][T14610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2585'. [ 251.420780][T14633] netlink: 'syz.8.2590': attribute type 32 has an invalid length. [ 251.620005][T14653] 9pnet_fd: Insufficient options for proto=fd [ 251.653196][T14655] syzkaller0: entered promiscuous mode [ 251.655632][T14655] syzkaller0: entered allmulticast mode [ 251.762582][T14659] gfs2: error -5 reading superblock [ 251.811049][T14665] lo speed is unknown, defaulting to 1000 [ 251.813568][T14665] lo speed is unknown, defaulting to 1000 [ 251.816531][T14665] lo speed is unknown, defaulting to 1000 [ 251.824948][T14665] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 251.831325][T14665] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 251.838591][T14665] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 251.856528][T14665] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 251.884508][T14665] lo speed is unknown, defaulting to 1000 [ 251.891549][T14665] lo speed is unknown, defaulting to 1000 [ 251.895326][T14665] lo speed is unknown, defaulting to 1000 [ 251.902813][T14665] lo speed is unknown, defaulting to 1000 [ 251.906768][T14665] lo speed is unknown, defaulting to 1000 [ 251.911265][T14665] lo speed is unknown, defaulting to 1000 [ 251.927428][ C2] vcan0: j1939_tp_rxtimer: 0xffff88802ed87000: rx timeout, send abort [ 251.930429][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff88802ed87000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 251.980502][T14672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.297523][ T7235] usb 11-1: new full-speed USB device number 13 using dummy_hcd [ 252.459589][ T7235] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.462942][ T7235] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 252.465930][ T7235] usb 11-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 252.468932][ T7235] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.472820][ T7235] usb 11-1: config 0 descriptor?? [ 252.484335][ T7235] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 252.486594][ T7235] dvb-usb: bulk message failed: -22 (3/0) [ 252.502235][ T7235] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 252.505541][ T7235] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 252.508053][ T7235] usb 11-1: media controller created [ 252.511078][ T7235] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.519154][ T7235] dvb-usb: bulk message failed: -22 (6/0) [ 252.525499][ T7235] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 252.530142][ T7235] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb11/11-1/input/input25 [ 252.536858][ T7235] dvb-usb: schedule remote query interval to 150 msecs. [ 252.539455][ T7235] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 252.683531][ T7235] usb 11-1: USB disconnect, device number 13 [ 252.721011][T14686] syzkaller0: entered promiscuous mode [ 252.723487][T14686] syzkaller0: entered allmulticast mode [ 252.732741][ T7235] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 252.764160][T14689] 9pnet_fd: Insufficient options for proto=fd [ 252.914673][T14697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=274 sclass=netlink_route_socket pid=14697 comm=syz.7.2607 [ 253.093205][T14703] program syz.8.2611 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.162662][T14709] syzkaller0: entered promiscuous mode [ 253.164949][T14709] syzkaller0: entered allmulticast mode [ 253.245301][ T64] Bluetooth: hci4: unexpected event for opcode 0x200a [ 253.248899][T14711] netlink: 'syz.6.2615': attribute type 13 has an invalid length. [ 253.310703][T14711] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2615'. [ 253.312298][T14717] 9pnet_fd: Insufficient options for proto=fd [ 253.314693][T14711] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2615'. [ 253.352654][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2617'. [ 253.419899][T14725] overlayfs: missing 'lowerdir' [ 253.493276][T14725] xfrm0 speed is unknown, defaulting to 1000 [ 253.498770][T14725] lo speed is unknown, defaulting to 1000 [ 253.571018][T14739] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.696474][T14751] fuse: Bad value for 'fd' [ 254.011138][ T64] Bluetooth: hci5: unexpected event for opcode 0x0c6d [ 254.305355][T14785] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2638'. [ 254.309298][T14785] netlink: 30 bytes leftover after parsing attributes in process `syz.7.2638'. [ 254.355822][T14792] 9pnet_fd: Insufficient options for proto=fd [ 254.465386][T14797] vxcan3: entered promiscuous mode [ 254.570008][T14802] nbd: illegal input index 67111936 [ 254.670532][T14804] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 254.902411][T14835] netlink: 'syz.6.2650': attribute type 2 has an invalid length. [ 255.017623][T14845] netlink: 'syz.4.2655': attribute type 1 has an invalid length. [ 255.045754][T14845] bond2: entered promiscuous mode [ 255.048252][T14845] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.054824][T14845] GUP no longer grows the stack in syz.4.2655 (14845): 200000004000-20000000a000 (200000002000) [ 255.060165][T14845] CPU: 2 UID: 0 PID: 14845 Comm: syz.4.2655 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.060185][T14845] Tainted: [L]=SOFTLOCKUP [ 255.060189][T14845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 255.060198][T14845] Call Trace: [ 255.060210][T14845] [ 255.060216][T14845] dump_stack_lvl+0x100/0x190 [ 255.060266][T14845] gup_vma_lookup.cold+0x83/0x96 [ 255.060286][T14845] __get_user_pages+0x241/0x32a0 [ 255.060319][T14845] ? find_held_lock+0x2b/0x80 [ 255.060345][T14845] ? mtree_load+0x311/0xa90 [ 255.060376][T14845] ? __pfx___get_user_pages+0x10/0x10 [ 255.060402][T14845] get_user_pages_remote+0x3d2/0xb10 [ 255.060426][T14845] ? mas_root_expand+0x6e0/0x750 [ 255.060449][T14845] ? __pfx_get_user_pages_remote+0x10/0x10 [ 255.060483][T14845] __access_remote_vm+0x3bb/0x890 [ 255.060506][T14845] ? __pfx___access_remote_vm+0x10/0x10 [ 255.060520][T14845] ? proc_pid_cmdline_read+0x31b/0x9a0 [ 255.060545][T14845] ? proc_pid_cmdline_read+0x4aa/0x9a0 [ 255.060565][T14845] proc_pid_cmdline_read+0x552/0x9a0 [ 255.060585][T14845] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 255.060605][T14845] ? rw_verify_area+0xce/0x6d0 [ 255.060629][T14845] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 255.060650][T14845] vfs_readv+0x5d8/0x8d0 [ 255.060671][T14845] ? __pfx_vfs_readv+0x10/0x10 [ 255.060698][T14845] ? __fget_files+0x21f/0x3d0 [ 255.060722][T14845] ? do_preadv+0x1ac/0x270 [ 255.060737][T14845] do_preadv+0x1ac/0x270 [ 255.060754][T14845] ? __pfx_do_preadv+0x10/0x10 [ 255.060774][T14845] do_syscall_64+0x115/0x870 [ 255.060795][T14845] ? clear_bhb_loop+0x40/0x90 [ 255.060810][T14845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.060822][T14845] RIP: 0033:0x7f4ed759df99 [ 255.060832][T14845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.060845][T14845] RSP: 002b:00007f4ed84f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 255.060861][T14845] RAX: ffffffffffffffda RBX: 00007f4ed7825fa0 RCX: 00007f4ed759df99 [ 255.060868][T14845] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000006 [ 255.060875][T14845] RBP: 00007f4ed7634ec4 R08: 00000000fffffff9 R09: 0000000000000000 [ 255.060882][T14845] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 255.060888][T14845] R13: 00007f4ed7826038 R14: 00007f4ed7825fa0 R15: 00007ffe27c93ca8 [ 255.060903][T14845] [ 255.181585][T14853] ipvlan0: entered allmulticast mode [ 255.183347][T14853] bond2: entered allmulticast mode [ 255.224943][T14853] bond2: (slave bridge4): making interface the new active one [ 255.238252][T14853] bridge4: entered promiscuous mode [ 255.240570][T14853] bridge4: entered allmulticast mode [ 255.244238][T14853] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 255.405694][T14860] syzkaller0: entered promiscuous mode [ 255.407777][T14860] syzkaller0: entered allmulticast mode [ 255.434984][T14858] netlink: 'syz.7.2657': attribute type 1 has an invalid length. [ 255.438637][T14858] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 255.441585][T14856] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 255.513492][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 255.514561][ T42] audit: type=1400 audit(1785393712.525:26633): avc: denied { create } for pid=14863 comm="syz.8.2659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 255.580510][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.583337][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.587891][ T42] audit: type=1400 audit(1785393712.595:26634): avc: denied { name_bind } for pid=14867 comm="syz.4.2660" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 255.624780][ T42] audit: type=1400 audit(1785393712.635:26635): avc: denied { ioctl } for pid=14871 comm="syz.8.2662" path="socket:[62547]" dev="sockfs" ino=62547 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 255.682905][ T42] audit: type=1326 audit(1785393712.695:26636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14830 comm="syz.6.2650" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae6d9df99 code=0x7fc00000 [ 255.702477][ T42] audit: type=1400 audit(1785393712.715:26637): avc: denied { append } for pid=14876 comm="syz.4.2663" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 255.702923][T14877] __nla_validate_parse: 4 callbacks suppressed [ 255.702933][T14877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2663'. [ 255.748034][T14874] FAULT_INJECTION: forcing a failure. [ 255.748034][T14874] name failslab, interval 1, probability 0, space 0, times 0 [ 255.753759][T14874] CPU: 0 UID: 0 PID: 14874 Comm: syz.8.2665 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.753813][T14874] Tainted: [L]=SOFTLOCKUP [ 255.753821][T14874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 255.753833][T14874] Call Trace: [ 255.753841][T14874] [ 255.753850][T14874] dump_stack_lvl+0x100/0x190 [ 255.753904][T14874] should_fail_ex.cold+0x5/0xa [ 255.753938][T14874] should_failslab+0xc2/0x120 [ 255.753972][T14874] __kmalloc_noprof+0xfc/0x820 [ 255.754001][T14874] ? __pfx_dynamic_dname+0x10/0x10 [ 255.754046][T14874] ? tomoyo_encode2+0xfb/0x3c0 [ 255.754077][T14874] tomoyo_encode2+0xfb/0x3c0 [ 255.754098][T14874] tomoyo_encode+0x29/0x50 [ 255.754115][T14874] tomoyo_realpath_from_path+0x18c/0x690 [ 255.754139][T14874] tomoyo_path_number_perm+0x23c/0x580 [ 255.754165][T14874] ? tomoyo_path_number_perm+0x22e/0x580 [ 255.754192][T14874] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 255.754257][T14874] ? find_held_lock+0x2b/0x80 [ 255.754298][T14874] ? __fget_files+0x215/0x3d0 [ 255.754318][T14874] ? hook_file_ioctl_common+0x140/0x440 [ 255.754338][T14874] ? __fget_files+0x215/0x3d0 [ 255.754361][T14874] ? __fget_files+0x21f/0x3d0 [ 255.754386][T14874] security_file_ioctl+0xd3/0x230 [ 255.754425][T14874] __x64_sys_ioctl+0xb7/0x210 [ 255.754454][T14874] do_syscall_64+0x115/0x870 [ 255.754483][T14874] ? clear_bhb_loop+0x40/0x90 [ 255.754506][T14874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.754540][T14874] RIP: 0033:0x7f558019df99 [ 255.754558][T14874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.754577][T14874] RSP: 002b:00007f5581102028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 255.754595][T14874] RAX: ffffffffffffffda RBX: 00007f5580425fa0 RCX: 00007f558019df99 [ 255.754607][T14874] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 255.754618][T14874] RBP: 00007f5581102090 R08: 0000000000000000 R09: 0000000000000000 [ 255.754629][T14874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.754639][T14874] R13: 00007f5580426038 R14: 00007f5580425fa0 R15: 00007ffeed00ba88 [ 255.754666][T14874] [ 255.754877][T14874] ERROR: Out of memory at tomoyo_realpath_from_path. [ 255.796606][ T42] audit: type=1400 audit(1785393712.805:26638): avc: denied { append } for pid=14884 comm="syz.6.2667" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 255.799996][T14874] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 255.955821][ T42] audit: type=1400 audit(1785393712.965:26639): avc: denied { connect } for pid=14900 comm="syz.6.2672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 256.004517][T14905] netlink: 3544 bytes leftover after parsing attributes in process `syz.6.2674'. [ 256.008547][T14905] syzkaller0: entered promiscuous mode [ 256.010410][T14905] syzkaller0: entered allmulticast mode [ 256.034727][T14896] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 256.165725][T14918] syzkaller0: entered promiscuous mode [ 256.167950][T14918] syzkaller0: entered allmulticast mode [ 256.196025][T14920] netlink: 199784 bytes leftover after parsing attributes in process `syz.7.2679'. [ 256.201670][T14920] netlink: 'syz.7.2679': attribute type 1 has an invalid length. [ 256.418962][T14934] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 256.421858][T14934] FAULT_INJECTION: forcing a failure. [ 256.421858][T14934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.426234][T14934] CPU: 3 UID: 0 PID: 14934 Comm: syz.8.2682 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.426260][T14934] Tainted: [L]=SOFTLOCKUP [ 256.426266][T14934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 256.426284][T14934] Call Trace: [ 256.426296][T14934] [ 256.426303][T14934] dump_stack_lvl+0x100/0x190 [ 256.426346][T14934] should_fail_ex.cold+0x5/0xa [ 256.426372][T14934] _copy_to_user+0x32/0xd0 [ 256.426398][T14934] simple_read_from_buffer+0xcb/0x170 [ 256.426419][T14934] proc_fail_nth_read+0x1af/0x230 [ 256.426443][T14934] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 256.426470][T14934] ? rw_verify_area+0xce/0x6d0 [ 256.426502][T14934] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 256.426526][T14934] vfs_read+0x1e4/0xb40 [ 256.426554][T14934] ? __pfx_vfs_read+0x10/0x10 [ 256.426577][T14934] ? __fget_files+0x215/0x3d0 [ 256.426600][T14934] ? __fget_files+0x21f/0x3d0 [ 256.426623][T14934] ksys_read+0x12a/0x250 [ 256.426646][T14934] ? __pfx_ksys_read+0x10/0x10 [ 256.426677][T14934] do_syscall_64+0x115/0x870 [ 256.426704][T14934] ? clear_bhb_loop+0x40/0x90 [ 256.426726][T14934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.426743][T14934] RIP: 0033:0x7f558015e7ce [ 256.426758][T14934] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 256.426773][T14934] RSP: 002b:00007f5581101fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 256.426799][T14934] RAX: ffffffffffffffda RBX: 00007f55811026c0 RCX: 00007f558015e7ce [ 256.426810][T14934] RDX: 000000000000000f RSI: 00007f55811020a0 RDI: 0000000000000007 [ 256.426820][T14934] RBP: 00007f5581102090 R08: 0000000000000000 R09: 0000000000000000 [ 256.426831][T14934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.426841][T14934] R13: 00007f5580426038 R14: 00007f5580425fa0 R15: 00007ffeed00ba88 [ 256.426866][T14934] [ 256.549519][T14951] /dev/sg0: Can't lookup blockdev [ 256.691456][T14954] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 256.736362][ T42] audit: type=1400 audit(1785393713.745:26640): avc: denied { getopt } for pid=14962 comm="syz.4.2690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 256.898769][T14971] bond0: (slave batadv0): Releasing backup interface [ 256.912569][T14971] bridge_slave_0: left allmulticast mode [ 256.915094][T14971] bridge_slave_0: left promiscuous mode [ 256.921605][T14971] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.947380][T14971] bridge_slave_1: left promiscuous mode [ 256.952298][T14971] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.964853][T14971] bond0: (slave c@0): Releasing backup interface [ 256.977628][T14971] team0: Port device team_slave_0 removed [ 256.984599][T14971] team0: Port device team_slave_1 removed [ 256.987851][T14971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.992214][T14971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.995121][T14971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.003301][T14971] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 257.020673][T14975] team0: Device vlan2 is already an upper device of the team interface [ 257.065643][T14980] loop2: detected capacity change from 0 to 7 [ 257.073302][T14980] Dev loop2: unable to read RDB block 7 [ 257.075677][T14980] loop2: AHDI p1 p2 p3 [ 257.077159][T14980] loop2: partition table partially beyond EOD, truncated [ 257.081180][T14980] loop2: p1 start 1601398130 is beyond EOD, truncated [ 257.085370][T14980] loop2: p2 start 1702059890 is beyond EOD, truncated [ 257.104090][T14980] netlink: 'syz.4.2695': attribute type 11 has an invalid length. [ 257.107470][T14980] netlink: 'syz.4.2695': attribute type 4 has an invalid length. [ 257.110898][T14980] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2695'. [ 257.117137][T14982] fuse: Bad value for 'user_id' [ 257.121240][T14982] fuse: Bad value for 'user_id' [ 257.141025][T14984] syzkaller0: entered promiscuous mode [ 257.141046][T14984] syzkaller0: entered allmulticast mode [ 257.195030][T14987] netlink: 'syz.8.2696': attribute type 4 has an invalid length. [ 257.201224][T14987] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2696'. [ 257.376930][ T42] audit: type=1400 audit(1785393714.385:26641): avc: denied { write } for pid=14995 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.404297][T15005] PKCS8: Unsupported PKCS#8 version [ 257.483155][ T42] audit: type=1400 audit(1785393714.495:26642): avc: denied { write } for pid=15010 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.616011][T15024] fuse: Bad value for 'fd' [ 257.698304][T15032] sg_write: data in/out 197376/110 bytes for SCSI command 0x8-- guessing data in; [ 257.698304][T15032] program syz.7.2709 not setting count and/or reply_len properly [ 257.878168][T15039] syzkaller0: entered promiscuous mode [ 257.880539][T15039] syzkaller0: entered allmulticast mode [ 258.281105][T15054] geneve1: mtu less than device minimum [ 258.407870][ T149] usb 11-1: new full-speed USB device number 14 using dummy_hcd [ 258.563915][ T149] usb 11-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 258.572056][ T149] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 258.580318][ T149] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 258.584072][ T149] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 258.599344][ T149] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 258.609908][ T149] usb 11-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 258.612981][ T149] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.616324][ T149] usb 11-1: Product: syz [ 258.618263][ T149] usb 11-1: Manufacturer: syz [ 258.620361][ T149] usb 11-1: SerialNumber: syz [ 258.624882][ T149] usb 11-1: config 0 descriptor?? [ 258.628159][T15045] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 258.638798][ T149] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input27 [ 258.653767][ C3] kbtab 11-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 258.667860][ C3] kbtab 11-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 258.672504][T15079] new mount options do not match the existing superblock, will be ignored [ 258.832036][ T8403] usb 11-1: USB disconnect, device number 14 [ 259.745496][T15035] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 259.864884][T15085] ftl_cs: FTL header not found. [ 260.149304][T15085] block2mtd: mtd1: [/dev/loop0] erase_size = 128KiB [131072] [ 261.189435][T15066] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2716'. [ 261.236780][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 261.236797][ T42] audit: type=1400 audit(1785393718.245:26668): avc: denied { write } for pid=15091 comm="syz.4.2719" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 261.240747][T15092] 9pnet_fd: p9_fd_create_unix (15092): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 261.245906][ T42] audit: type=1326 audit(1785393718.255:26669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15094 comm="syz.7.2720" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe70e59df99 code=0x0 [ 261.283711][ T42] audit: type=1400 audit(1785393718.265:26670): avc: denied { write } for pid=15090 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.296783][T15100] netlink: 'syz.7.2720': attribute type 6 has an invalid length. [ 261.318706][ T42] audit: type=1400 audit(1785393718.325:26671): avc: denied { write } for pid=15098 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.442046][ T42] audit: type=1400 audit(1785393718.455:26672): avc: denied { write } for pid=15114 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.502086][ T42] audit: type=1400 audit(1785393718.515:26673): avc: denied { write } for pid=15121 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.605669][T15132] netlink: 45 bytes leftover after parsing attributes in process `syz.8.2728'. [ 261.625550][T15128] XFS (nbd6): SB validate failed with error -5. [ 261.731865][T15141] syzkaller0: entered promiscuous mode [ 261.733883][T15141] syzkaller0: entered allmulticast mode [ 261.741538][T15139] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 261.766995][T15139] EXT4-fs (nbd8): unable to read superblock [ 261.976581][ T42] audit: type=1400 audit(1785393718.985:26674): avc: denied { write } for pid=15158 comm="syz.6.2736" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 262.086022][ T42] audit: type=1400 audit(1785393719.095:26675): avc: denied { listen } for pid=15166 comm="syz.8.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 262.091817][T15168] xt_CT: You must specify a L4 protocol and not use inversions on it [ 262.096132][ T42] audit: type=1400 audit(1785393719.105:26676): avc: denied { connect } for pid=15166 comm="syz.8.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 262.118963][T15171] veth0_vlan: entered allmulticast mode [ 262.123619][T15171] 9pnet_fd: p9_fd_create_tcp (15171): problem binding to privport [ 262.595106][T15196] syzkaller0: entered promiscuous mode [ 262.598400][T15196] syzkaller0: entered allmulticast mode [ 262.656249][ T42] audit: type=1400 audit(2000000000.000:26677): avc: denied { create } for pid=15198 comm="syz.7.2747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 262.663385][T15196] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2746'. [ 262.665010][T15200] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2747'. [ 262.668963][T15204] SELinux: security_context_str_to_sid (4msevS:"-XF@) failed with errno=-22 [ 262.668993][T15197] SELinux: security_context_str_to_sid (4msevS:"-XF@) failed with errno=-22 [ 262.689612][ T5145] pmem0: [POWERTEC] [ 262.758742][T15213] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2750'. [ 262.892733][T15231] syzkaller0: entered promiscuous mode [ 262.907470][T15231] syzkaller0: entered allmulticast mode [ 263.035527][T15246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=15246 comm=syz.6.2762 [ 263.092965][T15252] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2763'. [ 263.116600][T15254] 9pnet_fd: Insufficient options for proto=fd [ 263.127241][T15251] xfrm0 speed is unknown, defaulting to 1000 [ 263.131797][T15251] lo speed is unknown, defaulting to 1000 [ 263.132586][T15250] xfrm0 speed is unknown, defaulting to 1000 [ 263.144370][T15250] lo speed is unknown, defaulting to 1000 [ 263.175641][T15252] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15252 comm=syz.4.2763 [ 263.305569][T15268] Need at least one configuration in g1. [ 263.324687][T15268] udc usbip-vudc.0: failed to start g1: -22 [ 263.328586][T15268] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 263.361612][T15268] UDC core: g1: couldn't find an available UDC or it's busy [ 263.492466][T15280] syzkaller0: entered promiscuous mode [ 263.494401][T15280] syzkaller0: entered allmulticast mode [ 263.626419][T15284] Bluetooth: hci3: Frame reassembly failed (-84) [ 263.646834][ T9343] Bluetooth: hci3: Frame reassembly failed (-84) [ 263.653198][ T9343] Bluetooth: hci3: Frame reassembly failed (-84) [ 263.739304][T15289] binder: 15288:15289 ioctl 40106e8c 200000000180 returned -22 [ 263.743386][T15289] binder: BINDER_SET_CONTEXT_MGR already set [ 263.745541][T15289] binder: 15288:15289 ioctl 4018620d 200000004a80 returned -16 [ 263.905837][T15299] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 264.141928][T15311] syzkaller0: entered promiscuous mode [ 264.144183][T15311] syzkaller0: entered allmulticast mode [ 264.246454][T15314] fuse: Unknown parameter 'kIit(l:PZ9n' [ 264.281960][T15314] syzkaller0: entered promiscuous mode [ 264.284092][T15314] syzkaller0: entered allmulticast mode [ 264.986281][T15339] exFAT-fs (nullb0): invalid boot record signature [ 264.989493][T15339] exFAT-fs (nullb0): failed to read boot sector [ 264.992881][T15339] exFAT-fs (nullb0): failed to recognize exfat type [ 265.348664][T15343] 9pnet_fd: Insufficient options for proto=fd [ 265.657670][ T5094] Bluetooth: hci3: command 0x1003 tx timeout [ 265.660317][ T64] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 266.348674][ T9850] IPVS: starting estimator thread 0... [ 266.422324][T15358] sd 0:0:0:0: PR command failed: 1026 [ 266.424907][T15358] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 266.428568][T15358] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 266.447573][T15359] IPVS: using max 26 ests per chain, 62400 per kthread [ 267.447565][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 267.447578][ T42] audit: type=1400 audit(2000000004.789:26693): avc: denied { append } for pid=15371 comm="syz.4.2799" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 267.519970][ T42] audit: type=1400 audit(2000000004.859:26694): avc: denied { getopt } for pid=15377 comm="syz.4.2802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 267.546719][T15380] kAFS: unable to lookup cell '1' [ 267.586270][T15382] syzkaller0: entered promiscuous mode [ 267.589784][T15382] syzkaller0: entered allmulticast mode [ 267.628383][T15386] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2806'. [ 267.638307][T15378] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 267.696860][T15395] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2809'. [ 267.699880][T15395] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2809'. [ 267.706658][T15395] geneve3: entered promiscuous mode [ 267.710182][T15395] geneve3: entered allmulticast mode [ 267.773236][T15408] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2811'. [ 267.777227][ T42] audit: type=1400 audit(2000000005.109:26695): avc: denied { getopt } for pid=15407 comm="syz.8.2811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 267.867448][ T42] audit: type=1400 audit(2000000005.199:26696): avc: denied { ioctl } for pid=15418 comm="syz.4.2815" path="socket:[63290]" dev="sockfs" ino=63290 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 267.935783][T15424] syzkaller0: entered promiscuous mode [ 267.938181][T15424] syzkaller0: entered allmulticast mode [ 268.072689][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.072697][T15429] binder: BINDER_SET_CONTEXT_MGR already set [ 268.072791][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.077340][T15429] binder: 15427:15429 ioctl 4018620d 200000000100 returned -16 [ 268.079070][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.080764][T15429] binder: BINDER_SET_CONTEXT_MGR already set [ 268.083631][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.086053][T15429] binder: 15427:15429 ioctl 4018620d 200000000100 returned -16 [ 268.089783][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.089840][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.089894][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.089950][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.090011][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.090064][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.090116][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.090173][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.090250][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.090301][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.090399][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.090455][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.090533][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.090582][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.090633][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.090686][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.090763][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.090816][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.090865][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.090917][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.090996][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.091047][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.091097][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.091152][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.091438][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.091553][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.091609][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.091674][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.091794][T15428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.527049][T15444] block device autoloading is deprecated and will be removed. [ 268.595059][T15448] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2824'. [ 268.641383][T15452] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2826'. [ 268.757637][T15462] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8 [ 268.760338][T15462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.763963][ T64] Bluetooth: hci4: unexpected event for opcode 0x0c57 [ 268.809324][T15465] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2832'. [ 268.875902][T15465] vxcan3: entered promiscuous mode [ 268.878291][ T42] audit: type=1326 audit(2000000006.219:26697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15474 comm="syz.7.2834" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe70e59df99 code=0x0 [ 269.087830][T15488] netlink: 'syz.6.2837': attribute type 1 has an invalid length. [ 269.090427][T15488] netlink: 'syz.6.2837': attribute type 1 has an invalid length. [ 269.099665][T15490] debugfs: '1^!' already exists in 'ieee80211' [ 269.134584][T15492] syzkaller0: entered promiscuous mode [ 269.136571][T15492] syzkaller0: entered allmulticast mode [ 269.181330][T15494] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 269.243292][ T42] audit: type=1400 audit(2000000006.579:26698): avc: denied { append } for pid=15496 comm="syz.6.2841" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 269.253144][ T42] audit: type=1400 audit(2000000006.589:26699): avc: denied { ioctl } for pid=15496 comm="syz.6.2841" path="/dev/btrfs-control" dev="devtmpfs" ino=1341 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 269.278799][ T42] audit: type=1400 audit(2000000006.609:26700): avc: denied { kexec_image_load } for pid=15501 comm="syz.6.2842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 269.752150][T15512] XFS (loop7): SB validate failed with error -5. [ 269.802694][ T7235] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 269.830322][ T25] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 269.882937][T15521] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2848'. [ 269.883000][T15520] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2848'. [ 269.957506][ T7235] usb 11-1: device descriptor read/64, error -71 [ 269.974980][T15525] netlink: 'syz.8.2846': attribute type 4 has an invalid length. [ 269.978608][T15525] netlink: 17 bytes leftover after parsing attributes in process `syz.8.2846'. [ 270.056622][T15528] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 270.061274][ T42] audit: type=1400 audit(2000000007.399:26701): avc: denied { getopt } for pid=15524 comm="syz.8.2846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 270.207484][ T7235] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 270.337480][ T7235] usb 11-1: device descriptor read/64, error -71 [ 270.451567][ T7235] usb usb11-port1: attempt power cycle [ 270.787470][ T7235] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 270.809537][ T7235] usb 11-1: device descriptor read/8, error -71 [ 270.900783][T15544] 9pnet_fd: Insufficient options for proto=fd [ 271.047480][ T7235] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 271.073229][ T7235] usb 11-1: device descriptor read/8, error -71 [ 271.101296][T15563] xt_hashlimit: size too large, truncated to 1048576 [ 271.181025][ T7235] usb usb11-port1: unable to enumerate USB device [ 271.186722][T15569] netlink: 'syz.7.2860': attribute type 12 has an invalid length. [ 271.191163][ T42] audit: type=1400 audit(2000000008.529:26702): avc: denied { getopt } for pid=15568 comm="syz.7.2860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 271.267846][ T29] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 271.305028][T15570] cgroup: fork rejected by pids controller in /syz7 [ 271.429494][ T29] usb 9-1: unable to get BOS descriptor or descriptor too short [ 271.433826][ T29] usb 9-1: not running at top speed; connect to a high speed hub [ 271.437333][ T29] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 271.448990][ T29] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 271.453959][ T29] usb 9-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 271.458827][ T29] usb 9-1: config 14 has no interface number 0 [ 271.460915][ T29] usb 9-1: config 14 has no interface number 1 [ 271.463173][ T29] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 271.466761][ T29] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 271.472532][ T29] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 271.477387][ T29] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.480564][ T29] usb 9-1: config 14 interface 57 has no altsetting 0 [ 271.482699][ T29] usb 9-1: config 14 interface 228 has no altsetting 0 [ 271.488045][ T29] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 271.491017][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.493675][ T29] usb 9-1: Product: syz [ 271.495006][ T29] usb 9-1: Manufacturer: syz [ 271.496506][ T29] usb 9-1: SerialNumber: syz [ 271.759689][T15643] syzkaller0: entered promiscuous mode [ 271.763005][T15643] syzkaller0: entered allmulticast mode [ 271.904992][ T29] legousbtower 9-1:14.57: interrupt endpoints not found [ 272.114417][ T29] legousbtower 9-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 272.120685][ T29] legousbtower 9-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 272.143622][ T29] usb 9-1: USB disconnect, device number 21 [ 272.184639][ T29] legousbtower 9-1:14.228: LEGO USB Tower #-160 now disconnected [ 272.373802][T15666] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 272.504619][T15671] nfs4: Unknown parameter '00000000000000000003' [ 272.551124][T15673] syzkaller0: entered promiscuous mode [ 272.552961][T15673] syzkaller0: entered allmulticast mode [ 272.636893][T15679] 9pnet_fd: Insufficient options for proto=fd [ 272.702515][T15681] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 272.725311][T15681] x_tables: duplicate underflow at hook 2 [ 272.727744][T15682] x_tables: duplicate underflow at hook 2 [ 272.831672][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 272.831684][ T42] audit: type=1400 audit(2000000010.169:26706): avc: denied { create } for pid=15688 comm="syz.4.2880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 272.848672][T15690] scsi_nl_rcv_msg: discarding partial skb [ 272.850649][ T42] audit: type=1400 audit(2000000010.189:26707): avc: denied { write } for pid=15688 comm="syz.4.2880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 272.893410][ T42] audit: type=1400 audit(2000000010.229:26708): avc: denied { relabelfrom } for pid=15689 comm="syz.8.2879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 272.911886][ T42] audit: type=1400 audit(2000000010.229:26709): avc: denied { relabelto } for pid=15689 comm="syz.8.2879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 272.936777][T15694] pmem0: [POWERTEC] [ 272.977631][T15692] 0: reclassify loop, rule prio 0, protocol 03 [ 273.180009][T15704] __nla_validate_parse: 5 callbacks suppressed [ 273.180022][T15704] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2883'. [ 273.243456][T15706] sctp: [Deprecated]: syz.8.2884 (pid 15706) Use of struct sctp_assoc_value in delayed_ack socket option. [ 273.243456][T15706] Use struct sctp_sack_info instead [ 273.274390][T15709] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 273.422650][T15711] team0 (unregistering): Port device team_slave_0 removed [ 273.443308][T15711] team0 (unregistering): Port device team_slave_1 removed [ 273.496193][ T9850] lo speed is unknown, defaulting to 1000 [ 273.500364][ T9850] syz0: Port: 1 Link ACTIVE [ 273.592366][T15701] ------------[ cut here ]------------ [ 273.594518][T15701] Memory manager not clean during takedown. [ 273.596386][T15701] WARNING: drivers/gpu/drm/drm_mm.c:965 at drm_mm_takedown+0x62/0x280, CPU#3: syz.6.2883/15701 [ 273.599688][T15701] Modules linked in: [ 273.601453][T15701] CPU: 3 UID: 0 PID: 15701 Comm: syz.6.2883 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.604828][T15701] Tainted: [L]=SOFTLOCKUP [ 273.606194][T15701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 273.609753][T15701] RIP: 0010:drm_mm_takedown+0x62/0x280 [ 273.611501][T15701] Code: 8b 43 38 48 39 c5 75 16 e8 eb bf 44 fc 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc e8 d5 bf 44 fc 48 8d 3d ae 71 68 0b <67> 48 0f b9 3a 48 c7 c0 e0 f3 46 8e 48 ba 00 00 00 00 00 fc ff df [ 273.617999][T15701] RSP: 0018:ffffc90006bdf790 EFLAGS: 00010283 [ 273.619928][T15701] RAX: 0000000000028807 RBX: ffff888027231068 RCX: ffffc9000850b000 [ 273.623115][T15701] RDX: 0000000000080000 RSI: ffffffff85c5a06b RDI: ffffffff912e1220 [ 273.623164][ T42] audit: type=1400 audit(2000000010.959:26710): avc: denied { mount } for pid=15716 comm="syz.4.2886" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 273.625652][T15701] RBP: ffff8880272310a0 R08: 0000000000000007 R09: 0000000000000000 [ 273.635841][T15701] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888028a69d80 [ 273.638362][T15701] R13: ffff888028a69d98 R14: ffffffff85c47d70 R15: 0000000000000000 [ 273.640961][T15701] FS: 00007fdae7bc36c0(0000) GS:ffff8880d60dc000(0000) knlGS:0000000000000000 [ 273.643780][T15701] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 273.645846][T15701] CR2: 000000110c3acd75 CR3: 0000000037feb000 CR4: 0000000000352ef0 [ 273.648574][T15701] Call Trace: [ 273.649638][T15701] [ 273.650271][ T42] audit: type=1400 audit(2000000010.989:26711): avc: denied { unmount } for pid=8150 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 273.650607][T15701] ? __pfx_drm_gem_init_release+0x10/0x10 [ 273.659000][T15701] drm_managed_release+0x1bb/0x540 [ 273.660855][T15701] ? __pfx_virtio_gpu_release+0x10/0x10 [ 273.663530][T15701] drm_dev_put.part.0+0xca/0x140 [ 273.665702][T15701] drm_dev_put+0x1f/0x30 [ 273.667676][T15701] virtio_dev_remove+0xb8/0x170 [ 273.670140][T15701] ? __pfx_virtio_dev_remove+0x10/0x10 [ 273.671955][T15701] device_remove+0xcb/0x180 [ 273.673489][T15701] device_release_driver_internal+0x44e/0x620 [ 273.675573][T15701] bus_remove_device+0x2bc/0x560 [ 273.677230][T15701] ? __pfx_bus_remove_device+0x10/0x10 [ 273.679400][T15701] ? __pfx_device_remove_attrs+0x10/0x10 [ 273.681189][T15701] device_del+0x376/0x9b0 [ 273.682570][T15701] ? __pfx_device_del+0x10/0x10 [ 273.684184][T15701] ? __pfx___might_resched+0x10/0x10 [ 273.685928][T15701] ? __pfx_pci_device_is_present+0x10/0x10 [ 273.687869][T15701] device_unregister+0x1d/0xe0 [ 273.689420][T15701] unregister_virtio_device+0x39/0x60 [ 273.691163][T15701] virtio_pci_remove+0x7c/0x110 [ 273.692715][T15701] pci_device_remove+0xb2/0x1d0 [ 273.694300][T15701] ? __pfx_pci_device_remove+0x10/0x10 [ 273.695999][T15701] device_remove+0xcb/0x180 [ 273.697503][T15701] device_release_driver_internal+0x44e/0x620 [ 273.699416][T15701] pci_stop_bus_device+0x120/0x160 [ 273.701027][T15701] pci_stop_and_remove_bus_device+0x58/0xa0 [ 273.702852][T15701] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 273.704892][T15701] remove_store+0x123/0x140 [ 273.706350][T15701] ? __pfx_remove_store+0x10/0x10 [ 273.708237][T15701] ? find_held_lock+0x2b/0x80 [ 273.709759][T15701] ? sysfs_file_kobj+0xe4/0x290 [ 273.711642][T15701] ? sysfs_file_kobj+0xe4/0x290 [ 273.713236][T15701] ? __pfx_remove_store+0x10/0x10 [ 273.714976][T15701] dev_attr_store+0x58/0x80 [ 273.716447][T15701] ? __pfx_dev_attr_store+0x10/0x10 [ 273.718549][T15701] sysfs_kf_write+0xf2/0x150 [ 273.720053][T15701] kernfs_fop_write_iter+0x3e0/0x5f0 [ 273.721901][T15701] ? __pfx_sysfs_kf_write+0x10/0x10 [ 273.723827][T15701] vfs_write+0x6ac/0x1050 [ 273.725622][T15701] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 273.728010][T15701] ? __pfx_vfs_write+0x10/0x10 [ 273.729554][T15701] ksys_write+0x12a/0x250 [ 273.730788][T15701] ? __pfx_ksys_write+0x10/0x10 [ 273.732212][T15701] do_syscall_64+0x115/0x870 [ 273.733721][T15701] ? clear_bhb_loop+0x40/0x90 [ 273.735253][T15701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.737125][T15701] RIP: 0033:0x7fdae6d9df99 [ 273.738930][T15701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.745189][T15701] RSP: 002b:00007fdae7bc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 273.748058][T15701] RAX: ffffffffffffffda RBX: 00007fdae7025fa0 RCX: 00007fdae6d9df99 [ 273.750599][T15701] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 273.753096][T15701] RBP: 00007fdae6e34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 273.755587][T15701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.758102][T15701] R13: 00007fdae7026038 R14: 00007fdae7025fa0 R15: 00007ffcd1e4f9d8 [ 273.760609][T15701] [ 273.761629][T15701] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 273.763930][T15701] CPU: 3 UID: 0 PID: 15701 Comm: syz.6.2883 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.767250][T15701] Tainted: [L]=SOFTLOCKUP [ 273.768636][T15701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 273.771774][T15701] Call Trace: [ 273.772888][T15701] [ 273.773848][T15701] dump_stack_lvl+0x100/0x190 [ 273.775354][T15701] vpanic+0x552/0x970 [ 273.776629][T15701] ? __pfx_vpanic+0x10/0x10 [ 273.778073][T15701] panic+0xd1/0xe0 [ 273.779265][T15701] ? __pfx_panic+0x10/0x10 [ 273.780697][T15701] check_panic_on_warn.cold+0x19/0x34 [ 273.782389][T15701] ? drm_mm_takedown+0x62/0x280 [ 273.783947][T15701] __warn.cold+0x191/0x318 [ 273.785477][T15701] __report_bug+0x30f/0x440 [ 273.786983][T15701] ? drm_mm_takedown+0x62/0x280 [ 273.788519][T15701] ? __pfx___report_bug+0x10/0x10 [ 273.790109][T15701] ? device_release_driver_internal+0x44e/0x620 [ 273.792059][T15701] ? pci_stop_bus_device+0x120/0x160 [ 273.793745][T15701] ? pci_stop_and_remove_bus_device+0x58/0xa0 [ 273.796162][T15701] ? drm_mm_takedown+0x5b/0x280 [ 273.797759][T15701] report_bug_entry+0xe1/0x290 [ 273.799274][T15701] ? drm_mm_takedown+0x62/0x280 [ 273.800832][T15701] handle_bug+0x1cd/0x2a0 [ 273.802239][T15701] exc_invalid_op+0x17/0x50 [ 273.803711][T15701] asm_exc_invalid_op+0x1a/0x20 [ 273.805296][T15701] RIP: 0010:drm_mm_takedown+0x62/0x280 [ 273.807038][T15701] Code: 8b 43 38 48 39 c5 75 16 e8 eb bf 44 fc 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc e8 d5 bf 44 fc 48 8d 3d ae 71 68 0b <67> 48 0f b9 3a 48 c7 c0 e0 f3 46 8e 48 ba 00 00 00 00 00 fc ff df [ 273.812960][T15701] RSP: 0018:ffffc90006bdf790 EFLAGS: 00010283 [ 273.814880][T15701] RAX: 0000000000028807 RBX: ffff888027231068 RCX: ffffc9000850b000 [ 273.817338][T15701] RDX: 0000000000080000 RSI: ffffffff85c5a06b RDI: ffffffff912e1220 [ 273.819705][T15701] RBP: ffff8880272310a0 R08: 0000000000000007 R09: 0000000000000000 [ 273.822144][T15701] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888028a69d80 [ 273.824629][T15701] R13: ffff888028a69d98 R14: ffffffff85c47d70 R15: 0000000000000000 [ 273.827132][T15701] ? __pfx_drm_gem_init_release+0x10/0x10 [ 273.828919][T15701] ? drm_mm_takedown+0x5b/0x280 [ 273.830478][T15701] ? __pfx_drm_gem_init_release+0x10/0x10 [ 273.832271][T15701] drm_managed_release+0x1bb/0x540 [ 273.833921][T15701] ? __pfx_virtio_gpu_release+0x10/0x10 [ 273.835656][T15701] drm_dev_put.part.0+0xca/0x140 [ 273.837218][T15701] drm_dev_put+0x1f/0x30 [ 273.838567][T15701] virtio_dev_remove+0xb8/0x170 [ 273.840331][T15701] ? __pfx_virtio_dev_remove+0x10/0x10 [ 273.842487][T15701] device_remove+0xcb/0x180 [ 273.844301][T15701] device_release_driver_internal+0x44e/0x620 [ 273.846592][T15701] bus_remove_device+0x2bc/0x560 [ 273.848519][T15701] ? __pfx_bus_remove_device+0x10/0x10 [ 273.850670][T15701] ? __pfx_device_remove_attrs+0x10/0x10 [ 273.852918][T15701] device_del+0x376/0x9b0 [ 273.854581][T15701] ? __pfx_device_del+0x10/0x10 [ 273.856524][T15701] ? __pfx___might_resched+0x10/0x10 [ 273.858618][T15701] ? __pfx_pci_device_is_present+0x10/0x10 [ 273.860910][T15701] device_unregister+0x1d/0xe0 [ 273.862825][T15701] unregister_virtio_device+0x39/0x60 [ 273.864916][T15701] virtio_pci_remove+0x7c/0x110 [ 273.866862][T15701] pci_device_remove+0xb2/0x1d0 [ 273.868766][T15701] ? __pfx_pci_device_remove+0x10/0x10 [ 273.870918][T15701] device_remove+0xcb/0x180 [ 273.872656][T15701] device_release_driver_internal+0x44e/0x620 [ 273.875062][T15701] pci_stop_bus_device+0x120/0x160 [ 273.877071][T15701] pci_stop_and_remove_bus_device+0x58/0xa0 [ 273.879392][T15701] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 273.881943][T15701] remove_store+0x123/0x140 [ 273.883757][T15701] ? __pfx_remove_store+0x10/0x10 [ 273.885703][T15701] ? find_held_lock+0x2b/0x80 [ 273.887579][T15701] ? sysfs_file_kobj+0xe4/0x290 [ 273.889455][T15701] ? sysfs_file_kobj+0xe4/0x290 [ 273.891037][T15701] ? __pfx_remove_store+0x10/0x10 [ 273.892630][T15701] dev_attr_store+0x58/0x80 [ 273.894112][T15701] ? __pfx_dev_attr_store+0x10/0x10 [ 273.895893][T15701] sysfs_kf_write+0xf2/0x150 [ 273.897366][T15701] kernfs_fop_write_iter+0x3e0/0x5f0 [ 273.899051][T15701] ? __pfx_sysfs_kf_write+0x10/0x10 [ 273.900701][T15701] vfs_write+0x6ac/0x1050 [ 273.902083][T15701] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 273.904009][T15701] ? __pfx_vfs_write+0x10/0x10 [ 273.905925][T15701] ksys_write+0x12a/0x250 [ 273.907627][T15701] ? __pfx_ksys_write+0x10/0x10 [ 273.909554][T15701] do_syscall_64+0x115/0x870 [ 273.911379][T15701] ? clear_bhb_loop+0x40/0x90 [ 273.913288][T15701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.915605][T15701] RIP: 0033:0x7fdae6d9df99 [ 273.917368][T15701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.924820][T15701] RSP: 002b:00007fdae7bc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 273.928065][T15701] RAX: ffffffffffffffda RBX: 00007fdae7025fa0 RCX: 00007fdae6d9df99 [ 273.931134][T15701] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 273.934156][T15701] RBP: 00007fdae6e34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 273.937218][T15701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.940310][T15701] R13: 00007fdae7026038 R14: 00007fdae7025fa0 R15: 00007ffcd1e4f9d8 [ 273.943393][T15701] [ 273.945299][T15701] Kernel Offset: disabled [ 273.946997][T15701] Rebooting in 86400 seconds..