last executing test programs: 6m40.395123694s ago: executing program 32 (id=21): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x4000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000005c0)={'ip_vti0\x00', @multicast}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000300)=0x8, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01"], 0xf4}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FIGETBSZ(r4, 0x5421, &(0x7f0000000040)) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r6, 0x106, 0x1, 0x0, &(0x7f0000000340)=0xfffffffffffffdcb) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r3) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r7, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}]}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000895) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d004e24000006001c"], 0x2c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000428bd7000fddbdf25010000000800010062b09a833b03523cffbe5531015e60ca31a7c4583330e6787d7288864833fd63570978a374f99199103a74ad181fcc96d33dc47152fcd29fa914cd2163c1135f4b1229ed396ebfdc53c714c9c7e317c0ed0a9846041d27b3c144ffde0b6d7a146cd876712d237da4781e1583b77cb196cd3bbdb9b874dda0b093d3aa2cc23a4e08", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) socket(0x2, 0x0, 0x6) 6m38.842406052s ago: executing program 33 (id=55): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) read$FUSE(0xffffffffffffffff, &(0x7f00000016c0)={0x2020}, 0x2020) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x94, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x80, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) read$qrtrtun(r3, &(0x7f00000004c0)=""/57, 0x39) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) 6m38.109375987s ago: executing program 34 (id=38): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES32=r0], 0x1c}}, 0x804) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4810}, 0x40) (async, rerun: 32) r3 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) (rerun: 32) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @buffer={0x0, 0xbc, &(0x7f0000000580)=""/188}, &(0x7f00000000c0)="a109a81b133d", 0x0, 0x0, 0x10012, 0x0, 0x0}) 6m22.05851863s ago: executing program 35 (id=278): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in=@rand_addr=0x64010101, 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xaf}}, 0xf0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0xfffffd, {0x0, 0x0, 0x3, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL6={0x14, 0x8, @empty}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}]}, 0x4c}}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000280)={{r0, &(0x7f0000000000)='gtp\x00', 0x80200, &(0x7f0000000080)={@_ha_fsid={[0x8, 0x7]}, {0x24a, 0x7f, 0x7, 0xf10}}, 0xf2, &(0x7f0000000140), &(0x7f00000001c0)=0x8d}, {[0x7fff, 0x7f, 0x7, 0x18000]}, 0x6, 0x7b, &(0x7f0000000200)=""/123}) 5m21.081126089s ago: executing program 36 (id=1124): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400000020bd9ade59c3887fbbdbdf25020000000000000800000000080018004e1b4e24de889ab073055d6b974a52a1fa7fe516ce05784cd3a2220fa43dd0f88059d59e5bc68ada83a62f8c47136c2a264ed46bf2b98f51c1c702fb7d29b72533714208de2af1a135fa8a91983b00606b8479a1e9e0d5337da268a6de58661097fbf7f65b6c05ae0b8ff0a4820bd67900d0f8568c1323c3c0b2af21f145df35bcc0c49be4eaef2deb4486717ad969b1ebc575c588ab31a1fd26f2221b403d4eed32bd1c175dff0b00114f7d9c0b5e6c8dd0ad40c8e53414d34be12df80f4cbc94836828d7418ce1db80b83e77522d7a0c94c77fc59cd28e8ba5de413ffdc2fa5b870dcf63fb9be3e4f852476f9375f34679d12af9cb865fdff8a38b83e315024e9907e6e6e28f1a5689cb38092ed13551686d60dc7c8f0fb1da460a31b12e115ba2145ce651caf63119"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x28}}, 0x24040840) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 5m18.131143031s ago: executing program 37 (id=1136): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x10, @local, 0x7}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000240)="8f", 0x1}], 0x1}}], 0x1, 0x4004) 4m56.297053455s ago: executing program 38 (id=1402): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x84, @dev={0xac, 0x14, 0x14, 0x1e}, 0x4e21, 0x3, 'lblcr\x00', 0x1, 0x10000004, 0x40008}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40081271, &(0x7f0000000980)=0x4000) ioperm(0x0, 0x2, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x0, 0x6, 0x0) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000c00)='cramfs\x00', 0x4418, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000500)={{0x3c, @multicast1, 0x4e24, 0x0, 'rr\x00', 0x0, 0x5, 0x1e}, {@broadcast, 0x4e21, 0x3, 0x7, 0x5, 0x40}}, 0x44) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x5, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000440)={'nat\x00', 0x0, [0x3fe, 0x6, 0x1, 0x6, 0xfffffffc]}, &(0x7f0000000380)=0x54) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000002c0)="d74d05847d4d26aae118f5fc29b6f9d495c18c374da49bdcdf6daa22fa9a044b5b4992f069534cac7fec27cc7262c9bc549f243e1463a55ef352662184ab", 0x3e}, {&(0x7f0000000300)="0d76c5f03f96b1a5d303eeb1dc8782899725726d6344944834db5189c36538c21e417adb2353a191267bb6135dae2ddf25c7596c31a66e1977ec7fae9768085a74e6740e0caa5f7fb6af8e09fbd93dcba857c1684fe8cc9286711175348f986225", 0x61}, {&(0x7f0000000600)="61778ca971c4c8c9c82bace3a6e2d51469fcc38cc1d4f33fe2d9db75302d7ba5c841274b6b83bb4f67db1ca9ea31e9f14db08fa0bfe371701bd47995bc8c64a9bf090af16f558451f4af60031f4d5ce3ad59285860573a5c9dd98ce49bee6c519a2a796d9306f555be669d0c9c4c0e4db313835c0f57b68334670e3e7babd0809feeee7641494c8619d0c0dc4b8ebbe0e422556b7c9efdd04a3c617e0557fd91891d909cc882", 0xa6}], 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="4000000000000000000000000700000086090000000302031d830b59e0000001e0000001441c8e53ac1414bb000000090a01010100000009ac1414380000b6a5140000000000000000000000010010000b00000000000000140000000000000000000000020000005600000000000000"], 0x70}, 0x40000) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fdb000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x6, 0x0, 0x0) 4m41.772446811s ago: executing program 39 (id=1612): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x16181, 0x10) mkdirat(r4, &(0x7f0000000080)='./file0\x00', 0x39a) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff000}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) 4m30.937030034s ago: executing program 40 (id=1551): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "a29869d4569e66a86ec67ad146e3af1297285719389e89cd93a4f0aa3286d2c9", "b0d6d51242e17a74632663530b99b9d3e24d27c2e26c97cf0ad95672fc8405e3", "c08806e89dbef7f285b68439f6177d673f3597faa20b09363bd42f70f994504a", "734e4fb27afc00f8e40c06797ca8e4590ec9c11b613e64120664547e6513f7d8", "ba6fffe63e92222111755f77c3236c3b0af65e97695d11c1b7565c9fa0da60be", "51fc18255f69a9f5daebd3b3", 0x10, 0x80000000, 0x4, 0x6, 0x200}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000060000000410000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m54.113643946s ago: executing program 41 (id=2904): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = syz_open_dev$loop(&(0x7f0000000500), 0x800000000ffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000006fd, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89df3b7fbebffe60080b8785d960001000000000000004000", "2809e8db60a6000048224ad54afac11d875397bdb22d0000b420a1a93c5240ac00", "f4bd000000801900", [0x0, 0x31]}}) 2m53.842207471s ago: executing program 42 (id=2907): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/smt/control\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='1', 0x1) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000100)={'pcl818\x00', [0x100, 0xb, 0x1, 0x101, 0x6, 0x100, 0x3, 0x20000000, 0x8, 0xb, 0x2, 0x7, 0x8, 0x3fe, 0x10001, 0x1, 0x7, 0xc, 0xfe9, 0x1, 0x0, 0x2, 0x200007, 0x9, 0x48, 0xb, 0x7, 0xe9b9, 0x400, 0x6b, 0x2000008]}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) fsetxattr$security_evm(r1, &(0x7f0000000040), &(0x7f00000000c0)=@sha1={0x1, "2d10c69cd90b4d8c36bef01c1c698362ceefe361"}, 0x15, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='westwood', 0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x280, 0x9, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_EXPRESSIONS={0x118, 0x12, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x13}]}}}, {0x54, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x69}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x48, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xe2da}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7f}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_SET_EXPRESSIONS={0xe4, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, {0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x76}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x7d}, @NFTA_BYTEORDER_OP={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x50, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x3}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @redir={{0xa}, @void}}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x30}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}, @NFT_MSG_NEWOBJ={0x6c, 0x12, 0xa, 0x2, 0x0, 0x0, {0x3, 0x0, 0xa}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_DATA={0x58, 0x4, 0x0, 0x1, [@NFTA_CT_TIMEOUT_DATA={0x24, 0x3, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc}]}, @NFTA_CT_TIMEOUT_L4PROTO={0x5, 0x2, 0x21}, @NFTA_CT_TIMEOUT_DATA={0xc, 0x3, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CT_TIMEOUT_L4PROTO={0x5}, @NFTA_CT_TIMEOUT_DATA={0x4}, @NFTA_CT_TIMEOUT_L3PROTO={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_TIMEOUT_L3PROTO={0x6, 0x1, 0x1, 0x0, 0x892f}]}}, @NFT_MSG_DELOBJ={0x38, 0x14, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x38c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0x8, 0x720, 0x0, 0x0) 2m43.636205548s ago: executing program 43 (id=2997): r0 = socket(0x10, 0x3, 0x0) r1 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000)={r1}, &(0x7f0000000040)={'enc=', 'raw', ' hash=', {'sha3-512\x00'}}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0xfd00, 0x0, {0x2, 0x0, 0x3, 0x0, 0x4}, [@NHA_ID={0x8, 0x6, 0x1}, @NHA_OIF={0x8, 0x5, r2}]}, 0x28}}, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000340)) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r3, &(0x7f0000000640)=[{&(0x7f0000000140)='1', 0x1}], 0x1) read$FUSE(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@delchain={0x30, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xfff3, 0xffff}, {0x8, 0x1b}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40044}, 0x4814) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="04564a80f5f67b1df3fa74018541efb1f45e1bfed380ad20ac99aa5592dbb6d27745a8e2b466b5765d0cffb6c289bbc319", 0x31, 0x4000804, &(0x7f0000000100)={0x11, 0x19, r8, 0x1, 0x1, 0x6, @local}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0xfff8, 0xfffd}, 0x20) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r9, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="88000000", @ANYRES16=r11, @ANYBLOB="08002cbd7000fddbdf254c0000000800030069c4ffd66e6eaee722baf59f91c940b798758b12e4da7243748351a84eb0342628eba08342ba1162f424e2856a6a63f94440aca1c48c5de403fda20e13f5e95a067bcec1a7ec94c3b6cab9517f118e13a9c3f9d64e0367db3f014f5960f41cae4552422e3e6f2bb0e643cce7be6c1970e6dc1795d400e20f2f04c07511b7f1b6fc6979bfebe65a7194c24648bc68406b0cbdca86747ff8f15cc632479196535c0285ffda453e6dcf9882176c5bfbad1ce653586f1611a13024ceb34b732165d258d471190dfe6b", @ANYRES32=0x0, @ANYBLOB="0c00580005000000000000000c00580017000000000000000c00580027000000000000000c00580066000000000000000c00580015000000000000000c0058001e000000000000000c0058004f000000000000000c00580016000000000000000c0058007e00000000000000"], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x40d, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x100000000}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m30.89972016s ago: executing program 44 (id=3155): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r4) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf251b005b393d7eb9d4cb7d7464657673696d0000000f000200300800000000b6dd5b0423265c73890f879a6c3ff77edc869f334bd4b22b3a0d3115f3a3e74c9e211d73a15bae67b7fae0dad5ccfcc0200ffe7206bb30372479a4d5690e9018d8c09febb534ad6de043bedc6e4dfb47fde7d2fea0604f52ee3636e20ff6b8bbf5721aa8a488c015f047002920f415a7a3418e340ab15e8ce19c887931b6197860f3ee61"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {0x2, 0xffff}, {0x5, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000002080000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000350901000f0000009500000000000000b7020000000000007b9af8ff00000000b5090200feffffffdbaaf8fff1000000bf8200000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r7, @ANYRESHEX=r4], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010800000000000000000a00000011000300686173683a69702c6d61726b00000500050004000300000014000780050015000c0100000800114000000000050005000a0000000900020073797a32000000000500010007"], 0x60}}, 0x240c00c0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a000100000000000a00800000000000", @ANYRES32=r0, @ANYBLOB="0000000008001f00400000001400", @ANYRES64=r9, @ANYRES16, @ANYRES64=r8], 0x38}}, 0x0) 2m22.841685725s ago: executing program 45 (id=3046): r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000580)={0x0, 0x3, 0x461}) (async) r2 = fanotify_init(0xf00, 0x2) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') (async) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/45, 0x2d}], 0x1) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x100010, r0, 0xa1d34000) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000040)=0x8004) (async) read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r3, &(0x7f00000000c0)=0x58, 0x5) (async) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000019200)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110e0000006a00000f0007000000", @ANYRES32=r8, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) fanotify_mark(r2, 0x105, 0x8971, r0, 0x0) 2m14.212362982s ago: executing program 46 (id=3367): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f00000019c0)={0x1, [{0x1, 0x660, 0x8, &(0x7f0000000180)="fbb1de253a56af2a6201ea8dd68abdfe279cb13f6507326f32d044698acc3694feca681bae87fb21713f952bf11ee4140bb6259ca8ec1f8b655c946549230ead802fccd1403f29098de44b2bd6f06061f023e3adcd614f865352818a1b537db632743081dd6a6dd5e55cc1fa38c9ab79884f106e6e236c527ef90b8340ba6257809e96f12c68bd00c3d9d5615ef4284440890401db295f0d12ae92180a45dd322753661ffe60ea83ab3d9bf98d73619f0b0ecad6d4a824985c84b28cfb44d4da4f21fb6c8014cdf11306f2b8"}, {0x2, 0xf0, 0x1, &(0x7f0000000280)="fc0ff79a4fd10c9c4e461d8790ed7acf97ce06ab8717d200c2b83360fb69"}, {0x2, 0x8000, 0x2, &(0x7f00000002c0)="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"}, {0x1, 0x4b8, 0x8, &(0x7f00000012c0)="4e39415125d01de37284021939c1c4bc4f289ef1fa5fc1ce930588e0bb3091fc6439861440d75cc6253ff02fbc1e46fd2a476031678e6043b73eeb6b0eba779f6dce0b0d6036a399238dbcfd4e0957cdb68d95207ecf28c3d4816297de67d7c9b7ef54ab6159647a46d9cd66bc9a6b4220a964c6bbc5e717eb3a73b3d791f94619f3d1c2efeebe9f7bf52faec6ff827fc52880911cfb47"}, {0x1, 0x148, 0x256d, &(0x7f0000001380)="4af5d2ae3908baef6e1db480ce9d87469e190b6fb3cb3059f7cf388fe7c3fc4904249021b6803033e4"}, {0x0, 0x7f8, 0x0, &(0x7f00000013c0)="1dc1b874d7a8fd6d54053e50a805e8dddfcf8012a88251d3dae9f51ae0b5f4f9108b884977e5f6598dd497d6886a2f5956794478e83ea940a61228343235e0f3c0d799d864832332481084b633cf498fcea7886ce4dd490fd4bdf5341db907e26fd71b5dddc4458c06747afc527c7e7b95cf6ad4fdd49fbc2d0b590d4b538a22af73f71acd0501b89b05a2bef81a0ff29b2ad0e18b3b22748a3ccc8647ed88c47aec488918f26c9d012ec480d496d74285f871d146a7983cf5aa8ef848594e7c2debbf196157840a6fd73c342c3964a9e9e120639c84f6437602ad6e4879d9a4c66f3b11cc5adb6a7f3032263321603300aafe36c704444cf5e949ad2f5b46"}, {0x0, 0x148, 0xb41b, &(0x7f00000014c0)="424694526eaa0b6fa7fa43e1ed1517ec470a91528ee9e938448d9464542cc93cd8ef32942a9468b665"}, {0x0, 0x338, 0x8000, &(0x7f0000001500)="680b78f70c7fb6e57febf712cc48560b3954eecb8b2f8240ec37865a8fcff2988beacab8bde6f43bf2e04624be46451bd108a2b3c1a06e56dc9c9806417bc1d350f47f4879b06aa83e52616265b9f8ebcd4518cf25ab53d7ea5ca9aa896c3d7ef87304a64e9359"}, {0x3, 0x7a8, 0x1, &(0x7f0000001580)="f153fd944279c817cbcf11ddbe48da8b9983088c2b00f9e44516de3307c31f7a3a5304c29aecf4667f397ca4af4830ae206f24460a72ab1e316582597744246ba41a030d8a4e92b195cbe700b9a681972f97a79d39072d7383a910e31c980dc316df5ac6733be4e44f7c2fce8e9c930e7959fb0dc598380708d7ce072f001c9b68d326ae1dae81ac5ef3678d671e6c51e858c68c915f68d0bed2fcc16337c12e4eff561478fa26e390132e26a57a02ba432131015edc799c20ec36e77a7750b2fb638b5a79d3da00cee116c532f4a299834df0011d4e858762351f5aee16a5d42788a74009309b2fe9b01f03688ffb76ef9975b967"}, {0x1, 0x5f0, 0x7, &(0x7f0000001680)="1be78c7ece76ceb4eb8b550bde6406366250136f511544f265824645a2b4db5af6bdc04c7694e0948ca374e40a9cf7a17e2b4e5ae4606cc92f29a03dbf8ea37e88148dfb237127d288f50bce956e021f5b3bf506e2af066108de02da420a50b96ef6178a59fc3b4028304566787cbdf8d9b22f477271953e23fd2e8876fb9e437263631a857bda450479f37ee3c4087b54be7dd6df4be72e911205664e300d4231d5494238018e11132a9ba581b58f633bfed0b596568ba6b5740f1eca12"}, {0x3, 0x138, 0x7, &(0x7f0000001740)="6b949fb3b72981f567228a787f119cf479c62eac806af45936c3385a3f776ed14c8d8ef85fbe60"}, {0x0, 0xa8, 0x7, &(0x7f0000001780)="a33e64613de977b421164df10f04ca324b4e3275bf"}, {0x3, 0x1a8, 0xe, &(0x7f00000017c0)="97a7f3639a996fdc12223e9c393e9d5807e98dde498db9df448232e3a8eaa71fbc36e10629caf4c1fbda2446f1a1bf62ade915c0ac"}, {0x0, 0x378, 0x4, &(0x7f0000001800)="89808800bb1f09e78c6671a5d30e8cdacf61f4388a469faaeb661a10e6785bb13b23e883e73ed05810300fb673e672618f5969331d489ddd94fade7a2f8e93ae8c43164ecb2eab48db3f9f2a10b4d4226dcaab5fab99ebe873571d5e064f6df94f96f0e1ad2855b993f6c73024a8d8"}, {0x2, 0x770, 0xf522, &(0x7f0000001880)="be8447f11a53d8913b44a20e61e474c086af278c54625a37fd3c834c6d4bfd1a6f0773d7d9b6c8f3c42f8a4c2f0f1c121c223ef812c4bafb9a1e5c59e4ef66218ec84471aa4603fc07e570bb40a86da222b580fc5ae0980c5125caf364e54e9314abddcc4e959876d60e6ded645feabd602087b40e716e05da7e453446b8860d622b9767a2bad6bfad4ddd10c63f17a339a81d758789e3cca69682e69df7633aa9a1db9ff249c916488139b41565f3d3a1acc7709a890bf1b30fa3a7f5d1e6f115224f0cdc6c4f106db290dd15b912ec0ea10eacf5c41b0556b84d16ecae6f6726edaa654936684534e17ffeb6e5"}, {0x2, 0x18, 0x2, &(0x7f0000001980)="93db3a"}]}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtaction={0xbc, 0x30, 0x48b, 0x1, 0x0, {}, [{0xa8, 0x1, [@m_ctinfo={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x80000001, 0x0, 0x9, 0x5}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7fffffff}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @loopback, @multicast2, 0xff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0xb00}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41dcb50400000000b9800000c00f320908660fc7b20a0000000f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x5c}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000001c40)=[@in={0x2, 0x4622, @broadcast}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e22, 0x0, @mcast1, 0x5}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e22, 0x8, @private1, 0x2}, @in6={0xa, 0x4e24, 0x0, @private0, 0x2}, @in6={0xa, 0x4e20, 0x7fff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}], 0xc0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m8.426681845s ago: executing program 47 (id=3438): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000001c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @my=0x1, 0x0, 0x0, 0x6, 0x6}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 1m57.27171227s ago: executing program 48 (id=3535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDENABIO(r2, 0x4b36) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200001d0102030109026000030109"], 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e131d"], 0x16) (async) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, 0x0) mknod$loop(0x0, 0x8fff, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20004000) (async) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd1e, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0xfff2, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) 1m56.583365283s ago: executing program 49 (id=3542): syz_open_dev$hiddev(&(0x7f0000000040), 0x4, 0x303002) (async) r0 = syz_open_dev$hiddev(&(0x7f0000000040), 0x4, 0x303002) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="b702000004000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd000071d3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808980200000000000000334d83239d0c2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cae2ed4b4390af9a9ceefd07e002cab5ebfcaad34732181feb215139f15eafddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a58090000000000000094f22cdf550ef091a78098534f0d973058594000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca3905689a1f3db9c24db65c1e0001581d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86c0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8dd4fc7ea0000af3904ea0f3698cd9492794b8212a350d726bff873339c4cad4ead1348474250eda2c8067ab730c1d82a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c3fc74c00000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860e44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cd32941a815e3f3ceafe3065b9594fdcb24ebb6eddb9e87c9ecec7a42c0000abe1c6ea55887dfa18d0aea1b6eca5a883702b0bf3aefcb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3c0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5b0300000026d3c27e7945b29996e5cefbc9f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac2bc3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa1784d927aca9b8540534c5c49a0300cfbc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984ae4e679107a14bbb24851f6199eaf9a1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a55594616020f72f1c55ee3d325c7496a7c2f10cfeae16ae436751227378f0b1ee78bd33c50206700dd90b96a330f92bff736c83ca53e7f02b734d1a9292337e2be3896f7e7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cde00995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb6961c07b47521973cf0bb6f5530f6216b047b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d420e7b2a9e2f87f7b44949fe14c00000000000f47030c09f62d444b4981db81799776eeb4448278de519705fa8b56779bc8cc927b308c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dedc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982ebddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bffc30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def6132e4f8acf03438b1d01ccbe27e5be5b46304c2b7c1ad48b01c20024032e9b3bba7d6ceca38d3e96db049b92fc32ee34fe7b8419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab61213bf50000000000e1000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba3759fa55249b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be5732f29eed98d5b3688d80f7c66f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bb850f8035040ad9e57abe58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc053e64bfcfd057980136d6e9faca03b24fa300ef90bfe4ad364256937796f941c2fead94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808d409b5e36fc7fdd40080361427b6b9c118e5c9a0a1d5ca24886eb8a78796540635ac3530b9025d8bad0533a7f81b2188ec75a5fc9302e3815bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124bad23e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3018c7d48c4b6c2f6910975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df745ae7a4e446ca16d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf378ca2e577e206a758a3d46e45e7949c5b5069103009693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000b84b11308b6636b735b3c654cbc0000000000000019a4e9a9c2cbc906f97fd6eb00b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea02023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6085100d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac4bf5c06c6398c1b28bdd3f4c2353c330d8457cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a99d747d38ef5042053299b8e95decc637a022a49664742606cfdb2a3258498a6a0a82369d70177433e52b851ac396163ca09e6c22ad796a565cf23d87ae9be7235553aa6b8ab74842d3d4ba738b3fa997f079d225335f2af55644478e514aed8ba202805ad458d9ae6ab8d156f11f3cfe7def690f2bbbb463063664625223d23386540e0db96d8eb1755ad49ae817683de97a6dd32d584391302e65594b12bb2e6630217401031c8a1b964ca32f735421bbf64c9f1f9329e5cfda139ea79619e1d00a9a3ab49993362f30d191aa3387101feaa3e326190804eae2114437f8f4b27480900dd6511844a643886588fbdee7f8863a8dfdd75a9e128c6c15166a5f92d3c2d4952e5d07c59bfce0724a02600094c3369be3024edf451ff76a59855fd90353a0de907834bb77a059c56e92eed2f1415b3d8178453c7aecd8fbd161e2ffd66bcf2be175e45184f06bafd1c1c4fd7006a6c90d8afd126f1c51ee0f724ffbbed25a286c95d17c8b4297f8bba8efd565ecb157f0be244fb9657f737354b20e3a5012abb36052eec7a4fe9bc5b5283581b208d90d28d78f1c5422c3bcad67278e8bb88d7e6ccf72dd61319b44aa617d667000000000000a5edbd3e8605225681090853fc66a20e30fb9938e5886ae748236f5e071278763e070b2b75ce0a9e6870033d25dd19733152b01b507d812216e0f7fc89bbe200806f079e9515dd886a781a46ebe3da4c8307885b535109bb1678d08eeef3717bea30f64282ee844b6d64ec51b1221d175b59c1537089dfa803275ab6dcd40b1fe4e851597c1993a477c225201087b7b0977be62a71927bb01b705267aabe967add451795dfd5114726193415cc3e0784a37db8ab8b97a171bc4ad9593f7c750ad440a26b93d24ee8f080de0f2a16cbd5cd1f370bc1235d88d5cbd25acf91daa392731dab4c9c15015de2fded6332b6ebccf6e1588f3f1a5a3e853587a6843ee1a3f3c270e3ab4462bcff01c70b03e8f8c9d816d7d69e4040155e9f999ce4e366a816c6e7224f41df7eead6d6d214ed98708e1d269f4b469af2e2a2559258439758f4fded2780e736568c7eea209c5ed54a1beaf06013bb4b330d39518528a46d68b277faf926672650cad335ae285aeb0b0130a9c7016580a857722b9c51a5a37a856ccb9b6673f58ebfa66f1db4d041741e104cdd91efa4b3248ebecff3568f31b547b19a939708c3b4b45f46377b4a345248489ddef4bc87426717971de1c0049006d2fb99c311fa91c364749917ee81ea8fd51365449d568eadbad6aead6101b7e6582e793670492d814d58e4a9faa8a4a3027b230e8f5b2349fb3ff3c4365df6bd85aa7f76c388ef94f0155c81b04863624fb4708f83ebf93a51d1438d7761d4b1b929d9aa8faef691676834a2591b75205ede2e4a709c3a9899d06c5cb5a571159402e429c5cf839f49957aed76dc7db43f9fdc754e40d7c662ad7939a09bfdbc31deb0d327895afae1eca61820e09abc2c0ed5ce083aceb89c8e24ad45483d3128f0547869970dc84c8787a06046bf79f28a7678b03baeff239ce600d91a07236e255ff7ea441ff0602bb38d7aaa1c414a94c4e143ea2cca9d14a01bb70ff93057a03288bd71c45b025731765ca5250b162f08be1a29460a53f213bfb88a8e80e4c46dbfa5936894a95d27c4e90c151748f8ee457c29cb7e21deb805a9c5c6abf373a4bad5e1eaf8deff211a307626d8b27f4356755a8b3a8103e73bb2c7114e85ab2f2ee3f2ea8a4188a7d5917e790629887c1c51f56d10a8400fb4193dd79dd657ec190acfbd00e5b3a37b6205b6b5c438ebaaea9d47acc662e5ef3c51cc2add70aa9a6420abb168651d78e3a61b3007e5c86b03ffdaaebc7545061274f1b7bfefecea707423af2601bd1608abc6f7dc4bc1ab8933d11c825efb1308d2fc80d2c19d6e083bed16f8063497f59174a8e2d0500d4c1f5f0384fd8b54faa13ecde3080a17bd3b60191a8bc1cdc985d70c539e53c1b99a8e07"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000180), 0x10}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000180), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) read$hiddev(r0, &(0x7f0000000080)=""/189, 0xbd) prctl$PR_GET_CHILD_SUBREAPER(0x25) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) close_range(r2, r0, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="02c83013000f0001000b7f0400b24703000e010300c37d090bcaa05496d311bf8af75e1e9dde78f89f5c8f9ca08145f9681566b8e3631f2521b923c51082bce0186fb874821d9f8b2b3301392bdd152605bc26eeea3e4d778447071aa42c591db5dd5f10dba77d8e47daf4567f6cc63d0da99bd1cc56e75cac1d1e5f8511326e4bd432b2e65ea6f8d544451909e4014e0154ff199e06aa2a512beb0649c63d084fcad52290be599d528f1dbd11043c"], 0x18) (async) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="02c83013000f0001000b7f0400b24703000e010300c37d090bcaa05496d311bf8af75e1e9dde78f89f5c8f9ca08145f9681566b8e3631f2521b923c51082bce0186fb874821d9f8b2b3301392bdd152605bc26eeea3e4d778447071aa42c591db5dd5f10dba77d8e47daf4567f6cc63d0da99bd1cc56e75cac1d1e5f8511326e4bd432b2e65ea6f8d544451909e4014e0154ff199e06aa2a512beb0649c63d084fcad52290be599d528f1dbd11043c"], 0x18) socket$inet6(0xa, 0x2, 0x2) 1m46.790111148s ago: executing program 50 (id=3596): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905097a63"], 0x0) (async) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) syz_usb_connect$uac2(0x0, 0xaa, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x86a, 0x3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x3, 0x1, 0x4, 0x60, 0x9, {0x8, 0xb, 0x1, 0x2, 0x1, 0x2, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0x3, 0x9, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x3, 0x0, 0x10, "", "a1"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x4, 0xc, 0xa, "", "a9"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x4, 0x3, 0x4, 0xa, "e9453a7708"}, @as_header={0x10, 0x24, 0x1, 0x0, 0x8, 0x2, 0x1, 0x7e, 0x3, 0xee}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x81, 0xaa, 0x6, {0x8, 0x25, 0x1, 0x2, 0xf, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x2, 0x6, 0x5, {0x8, 0x25, 0x1, 0x81, 0x3c, 0x4, 0x9}}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x5b, 0x7, 0x8, 0x8, 0x4}, 0x1c, &(0x7f00000001c0)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "e9a08140d7bba2c1c6bf35cf2ec3f6f9"}, @ptm_cap={0x3}]}, 0x9, [{0xc7, &(0x7f0000000200)=@string={0xc7, 0x3, "667508e016f0afd5edf479829474c6e9468ff585204f882a1e43501cb8eea38f93a6af1649809b85b6d131f5d33778e34e7c6b8655e3b99bc1faddca903dd052d14dce360dfb397f86cc0ca0b6a972796a523608f1cc325fb7f5cddf635d564330ede59060565531b699f41365ea0d157599b38fd57e84605afd9498243da284d2adc8e6fb54a85fabcbba8464b4eeb610013af2d957d6007727b17494c20755b81edc2f145c3b5db2f1bc40bf148e8d60336e2c7396862126806ec48b3dcaed7e05510f8c"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x455}}, {0x2d, &(0x7f0000000580)=@string={0x2d, 0x3, "313b6f95a665e0004a0dc12861f6d9c7ce635ea277f13f6945346966419bf7a71a19cdc7b6b4b773a88ab3"}}, {0xd8, &(0x7f0000000380)=@string={0xd8, 0x3, "fbf91b8e2b7d2a30982c1d0831357ae8f5da425392ce56cfb05047beb1c63ed2fc24b615c16f88a5b19b0092827c27744148fbe67c704b8a6ee1132ed81da50385f0e929953c48a65f46af3e609d1805d74841f4d4e789b19033068d13e993e7f8bd352a83ddeaf8a35edebc8957aac2d74d0b395f8c46bd99883783f66c35809e09cd8dd8ac7e7f687eac14f68b524c608d0d121bb5b7e8db588e1a331f086829138e1530758e34f548eff3d4c5b90c577649f4efbd6e81226d691383d62b59665151a062607c8b244a3e22f688721b5145ff986dc8"}}, {0x9f, &(0x7f0000000480)=@string={0x9f, 0x3, "99c243ea3946001c5ba7efa83e63bb6bafe68aaed6d69f084ee745cbba4578c14a78151c0ef3df69a6b347f228c2f7e6aa1497b36431112ff410a6804a8cd72c911de4f30c283c5cadcf7d90542dda3464a2cb2e45ca54032d51b8d75e5426215fd7a6f2388bc9778af3ccc1a54ae474b09462ec0c25c7c0da389502419d9e6efbc187a0cb238c6e7bb6f17710ae1b1508258ba5533b29a7d5acc4b4a6"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x44f}}, {0x61, &(0x7f0000000600)=@string={0x61, 0x3, "373e287203b700fd3f640d5ce5568bfd460f6c214469ae0ea19a17dadb767ed15d2ed3a45a786fff3e307da0a3ede0e5bf0a04ac061744c45b7a2aa873a7197127bf7ffa3ed4f3ba384a90d265d9ed1e5e401909ef048f9c752be854a57a08"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x42a}}]}) (async) r1 = socket(0x15, 0x5, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r1, 0x200000000114, 0x2716, &(0x7f00000006c0)=""/25, &(0x7f0000000000)=0x19) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000005c0)=0xfffffffd) 1m46.575087653s ago: executing program 51 (id=3477): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0900000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdff00000000ffff000000000000000000000000191700003da62beef719bf60d500632cb9e710c5ffe7df108d3f7e62101b7faaa2737499ff4ed6c192c3607904fc0cbabb899e42274a61e444847fb443d254abbb84de6d2753b3209640cf1cc1cbfb39597713663868b009122312f0748dd31c3907126bb33fad9acbbeb732b397a10380006c833ceb8a2531393360bc48225b7ca8b112e30e74544ddf24c43867ea3bd5f6a8bf8ee3278ef9d60074019e1f00000000000000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r1, 0x0, 0x0, 0x800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xffffffff, 0x6, 0x8e, 0x4, 0x3, 0x0, 0x200, 0xf96}}}}]}, 0x58}}, 0x2000400c) r6 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x61c7c039d0921a4e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r10, 0x40045532, &(0x7f0000000840)) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r12 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r12, 0xc2604111, &(0x7f0000000240)={0x5, [[0x1, 0x4, 0x1, 0x7f, 0x9, 0xa9, 0x6], [0x710f9e63, 0x5, 0x10001, 0x5, 0x3, 0x3, 0xef, 0xf], [0x2, 0x9, 0xffff, 0x0, 0x488, 0x5, 0x1000, 0x72]], '\x00', [{0x8, 0x6, 0x1, 0x0, 0x1, 0x1}, {0x3395, 0x100, 0x0, 0x1, 0x1, 0x1}, {0x719fd441, 0xffffffff, 0x1, 0x0, 0x0, 0x1}, {0x9, 0x5, 0x0, 0x1, 0x0, 0x1}, {0xfffffff7, 0x20, 0x1, 0x0, 0x1}, {0x6, 0x5, 0x0, 0x1, 0x1}, {0xc, 0x4, 0x0, 0x1, 0x0, 0x1}, {0x8, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x7, 0xfffffff4, 0x0, 0x0, 0x1, 0x1}, {0x3, 0xfffffffa, 0x1, 0x1}, {0x7fff, 0x4}, {0xa7, 0x1000}], '\x00', 0x3}) r13 = fsmount(r9, 0x0, 0x0) fchdir(r13) 1m41.20380934s ago: executing program 52 (id=3636): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x100) (async) r1 = syz_io_uring_setup(0x259a, &(0x7f0000000000)={0x0, 0xa548, 0x800, 0x1, 0x154}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001b00)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd_index=0x2, 0x1, 0x0, 0x0, 0x8, 0x1, {0x3, 0x0, 0x0, '\x00', 0x0}}) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x801e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) (async, rerun: 64) mount$afs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x800000, 0x0) syz_io_uring_submit(r7, r8, r4, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x24, 0x0, r6, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x2}}) (async) syz_io_uring_submit(r7, r3, r9, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x2e, 0x6000, @fd_index=0xa, 0x5, 0x0, 0x0, 0xb, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) (async) io_uring_enter(r1, 0x42be, 0xafb2, 0x8, 0x0, 0x0) (async, rerun: 64) setreuid(0xffffffffffffffff, 0xee00) (async, rerun: 64) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000000)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000100)={0x0, 0x200000081, 0xffff, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000500)={r10, "9218468d83031477854dede108d9f63c"}) (async, rerun: 64) ioctl$BLKCRYPTOIMPORTKEY(r0, 0xc0401289, &(0x7f0000001500)={&(0x7f0000000040)="c7bc5eb52e3168ad0d854d40a2a03a98bc05f2f0f0984396ae0fe8c260", 0x1d, &(0x7f0000000080)=""/3, 0x3}) (async, rerun: 64) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) r12 = accept4(r11, 0x0, 0x0, 0x800) sendmmsg$alg(r12, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x30, 0x40040}], 0x1, 0x40) (async) getpeername(r5, &(0x7f0000001540)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f00000015c0)=0x80) (async) sendmsg$RDMA_NLDEV_CMD_GET(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) (async) recvmsg(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), 0x38}, 0x40000061) (async) r13 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSMRU(r13, 0x40047452, 0x0) (async) r14 = socket(0x27, 0x3, 0x0) write(r14, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000001800000004000000", 0x1c) 1m38.975121555s ago: executing program 4 (id=3654): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x60) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x3f, 0x0, "a30b3b68af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000e00000033035551502f07b4001a00"}, 0xd8) read$dsp(r0, &(0x7f00000001c0)=""/95, 0x2) 1m38.873711178s ago: executing program 4 (id=3656): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 1m38.556942871s ago: executing program 4 (id=3657): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x955a, 0x0) (rerun: 64) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000080)={0x0, {0x4, 0x200}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000540)={0x1, 0xfffffffb, {}, {0xee01}, 0xffff, 0x7}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@gettaction={0x28, 0x32, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x28}}, 0x800) 1m38.482964031s ago: executing program 4 (id=3658): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = syz_open_dev$loop(&(0x7f0000000500), 0x800000000ffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000006fd, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89df3b7fbebffe60080b8785d9600010000000000000000000000001200", "2809e8db60a6000048224ad54afac11d875397bdb22d0000b420a1a93c5240ac00", "f4bd000000801900", [0x0, 0x31]}}) 1m38.381839353s ago: executing program 4 (id=3659): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket(0x40000000015, 0x5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0xd85fd000) (async) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x3f, &(0x7f00000008c0)=0x1, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x492dfc465ae32a8d}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='batadv_slave_1\x00') ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f00000000c0)) 1m38.087464155s ago: executing program 4 (id=3663): r0 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source\x00', &(0x7f0000000100)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140), &(0x7f0000000180)='127.0.0.1\x00', 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)={0x24, r1, 0x321, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x42}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x10) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='vers\x00', &(0x7f0000000200)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='proto\x00', &(0x7f0000000280)='tcp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='retrans\x00', &(0x7f0000000500)='10\x00', 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x420, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1m37.926772054s ago: executing program 53 (id=3663): r0 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source\x00', &(0x7f0000000100)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140), &(0x7f0000000180)='127.0.0.1\x00', 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)={0x24, r1, 0x321, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x42}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x10) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='vers\x00', &(0x7f0000000200)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='proto\x00', &(0x7f0000000280)='tcp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='retrans\x00', &(0x7f0000000500)='10\x00', 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x420, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1m21.513646991s ago: executing program 7 (id=3731): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x14, &(0x7f0000000d40)={&(0x7f0000000580)=@newtaction={0xa0, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x8c, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x64, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x0, 0x2, {0x5, 0x5, 0x10000000, 0xc, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_vlan={0x0, 0xa, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x0, 0x2, {{0x1, 0x3fc, 0x5, 0x3, 0x6}, 0x2}}, @TCA_VLAN_PARMS={0x0, 0x2, {{0xd, 0x9, 0x20000008, 0x3, 0x8}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x0, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x0, 0x3, 0xb7f}, @TCA_VLAN_PARMS={0x0, 0x2, {{0x5, 0xe, 0x6, 0xd2, 0x9}, 0x1}}, @TCA_VLAN_PARMS={0x0, 0x2, {{0x1, 0x5, 0x0, 0x1, 0xfffffffe}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x0, 0x3, 0x3d4}, @TCA_VLAN_PUSH_VLAN_ID={0x0, 0x3, 0x4e5}]}, {0x0, 0x6, "b774dd6fb66300fb580c823f35836c39b3e47d6f79db65266982179e493d9a30d3d10b94e61a01fb08359ebba2c8d02d0d6c8e0f38f916575ddf83ee4789393fd2e2471558a449133f8de9600c26e7cee08978fa50309fc4acbb01d05538a3044efd02a8398fa88cf08d270e295f47858e8fbd5f8998af7f1b37bab5da97a62841571e18723926ed65445e30acc5f30e8f25aeba18b8c837efc999c197bb5aa78c57b3b7"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x4, 0x3}}}}]}]}, 0xa0}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) recvfrom$inet(r1, &(0x7f0000000040)=""/48, 0x30, 0x40, &(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f00000000c0)={'sit0\x00', 0x0}) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000000100)={0x2b, @multicast1, 0x4e21, 0x4, 'rr\x00', 0x0, 0x9, 0x48}, 0x2c) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000)=0x1, 0x4) 1m19.329037571s ago: executing program 7 (id=3734): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1bf8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000007209000006000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000002c0)={0x0, 0x5a}) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000500)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="8c", 0xffe3}], 0x1}}], 0x1, 0x4000800) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1bf8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000007209000006000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000002c0)={0x0, 0x5a}) (async) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async) sendmmsg$inet(r1, &(0x7f0000000500)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="8c", 0xffe3}], 0x1}}], 0x1, 0x4000800) (async) 1m19.182106536s ago: executing program 7 (id=3738): syz_open_dev$dri(&(0x7f0000000340), 0x1, 0x22882) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088be", @ANYRESOCT], 0xfdef) 1m18.981509419s ago: executing program 7 (id=3740): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = syz_open_dev$loop(&(0x7f0000000500), 0x800000000ffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000006fd, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89df3b7fbebffe60080b8785d960001000000000000000000000000fe00", "2809e8db60a6000048224ad54afac11d875397bdb22d0000b420a1a93c5240ac00", "f4bd000000801900", [0x0, 0x31]}}) 1m18.978022776s ago: executing program 7 (id=3741): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000002c0)=0xb) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="f71c000000030101040000009507bd000000ee39b86e0000001b285acc9d00040e"], 0x1c}}, 0x40000) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5f", 0x5d}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873", 0x3f}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a9", 0x8e}, {&(0x7f0000000440)}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f0000000280)='0', 0x1}, {&(0x7f00000000c0)="27d9", 0x2}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r4, 0x0, 0x0, 0x800) accept4(r7, &(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000600)=0x80, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[], 0x6f4}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000040), 0xd71, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000180)={0x0, 0x2, 0x2, "e4815826b1af9d911c9e181942f697619ff1bcb06be129cd593711aab0d1884a", 0x3234564e}) recvmmsg(r4, &(0x7f0000008c80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x80}], 0x1, 0x40002102, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) 1m18.63523245s ago: executing program 7 (id=3744): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="0900000001001f", 0x7) socket$inet6(0xa, 0x80002, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x40, 0xd, 0x1, "1d"}, 0x0, 0x0, 0x0, 0x0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x22}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1m18.450488532s ago: executing program 54 (id=3744): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="0900000001001f", 0x7) socket$inet6(0xa, 0x80002, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x40, 0xd, 0x1, "1d"}, 0x0, 0x0, 0x0, 0x0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x22}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1m12.786023467s ago: executing program 1 (id=3815): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000d0401000000000000ffffffff00", @ANYRES32=0x0, @ANYBLOB="04240000090000000a0001004af29c3ff0490000140035006d6163766c616e300000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x830, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x2b, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) close(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') setns(0xc9, 0x0) r3 = socket$netlink(0x10, 0x3, 0x7) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x8, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0xffffff81, 0x41301}, [@IFLA_PHYS_SWITCH_ID={0x14, 0x24, "c608d3a18f4faad079a2dce972871a29"}, @IFLA_EXT_MASK={0x8, 0x1d, 0x15}, @IFLA_CARRIER={0x5}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$incfs(0xffffffffffffffff, 0x0, 0x111000, 0xa9f9f008915eafdb) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) setsockopt(r3, 0x1000, 0xfff, &(0x7f0000000280)="43613058f7f48f432564b3c0995929c08d030d80494e1aa7547e3db8a9cf5d7f5c9afbf1438f0a93c830bdd4559f6649754fe38128e9115e6c018cbb2adac0b6869c8b33c0e13959fc72e4e88a6a25b7da7f805f908f66897d4522100db9873ff9b4ede2e42b36ed5aa7287d9e26d994c0f00566f7e3f788764a0f3c64b4739f922ef798d8f76dc7ea292d6b229dbcf6aa81cbfb168dd2c89c810942e6b1a8367860b1a3a7629fa86f632bff7ef8ccb2c96ef0ea0af39f0519e17089d9b504e5992fa241c180cb56eb0f0a4871dcd232b6e6e52781bf9dc592d7fff59c1a74ef83ee36959a3cdc15a3f1c8629665f56511b1", 0xf2) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) r5 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x800) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f00000003c0)=0x1) write(r4, &(0x7f0000000580)='nfsd ::7.0.0.1 999999999 anonymous\n', 0x23) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x22000}, [@IFLA_LINKINFO={0x6, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}}, 0x0) getdents(r2, &(0x7f0000000700)=""/4096, 0x1000) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) 1m12.706833819s ago: executing program 1 (id=3816): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f00000009c0)={0x0, 0x8, 0x1, [0x3, 0x9, 0x4, 0x5, 0x5c9], [0x20000000000000, 0x6, 0x0, 0x0, 0x0, 0x5, 0x7fff, 0x8000000000000000, 0x401, 0x7ff, 0x400, 0xffffffffffffffff, 0x0, 0x0, 0xe, 0x9, 0x9, 0x3, 0x6, 0xf6e, 0x7fffffff, 0x7, 0x18, 0x10, 0x9, 0xb, 0x9, 0x5, 0x6, 0x2b, 0x7fff, 0x4, 0x1, 0x8, 0xfffffffffffff2d0, 0xfffffffffffffff8, 0x1, 0xd5, 0x7f, 0x8008000, 0x81, 0x3, 0x0, 0x8000000000000000, 0x8203, 0x3, 0x9, 0x7ff, 0x200, 0xdb6, 0x4, 0x8, 0x0, 0x8000, 0x1, 0x7881, 0x80000000, 0x3ff, 0x8, 0x7, 0xc, 0x100000000, 0x7b8b, 0x0, 0xd7, 0x2, 0xfffffffffffffffe, 0x7, 0x4, 0x80000001, 0x7, 0x5, 0x7ffffffffffffffe, 0x6, 0x9, 0x6, 0x9, 0x3, 0x3, 0x1, 0x6, 0x29a, 0x4, 0xd2e, 0x7fffffff, 0x4, 0x100000001, 0x80000001, 0x1ff, 0x2, 0x2, 0x3, 0x1, 0x0, 0x2, 0x1000000, 0x5, 0x4, 0xffffffff, 0x8000, 0x9, 0x8, 0x9, 0x8, 0x51f, 0x6, 0x400, 0xfa, 0x8, 0xffffffffffffffff, 0x6, 0x8, 0x100000000, 0x0, 0x1, 0x10000, 0x8, 0x100000000, 0x8000000000000000, 0x3, 0x100000000]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001900)={r2, "d6852c37e7ab6dbbbbcae153e177bb52"}) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_map={0x2, 0x4, 0x7, 0x7, 0xf8, 0xd}}) ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000380)={0xfffffff8, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r4 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@private2, 0x78, r5}) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x8916, &(0x7f0000000000)) (async) r6 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0x10, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfffffffd, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x201, 0x0, 0x0, 0xe}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a120, 0x60, {0xfffffff8}, 0xfffffffc}) (async) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@l2={0x1f, 0xb, @none, 0x0, 0x1}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="8a744540f3e99a775ab06cd5e893dc0119450bfd0eed8a19f2c4", 0x1a}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="a8000000000000000a01000004000000d2edfba53060679ff25ab7632bf34888001f8b8da9f61e1821ef98d7f4133d29c060c52e575373a93d9b46343bb63b0781b2c16ce5bacf4d4832a695150100000000000000d72dc0482d7bd2d52e0a43aade5141fd6ed469dac6ce40b9a01419636566aa94088a56be304df38bb8f17c8243cb94cbef0156d2db9adbcaec69b0d671d2b0e5e816356a765b2627ba2d175707503aa81a0701"], 0xa8}, 0x40) (async) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ocfs2\x00', 0x204001, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 1m10.677150616s ago: executing program 1 (id=3820): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000500)={@val={0xa, 0x8808}, @void, @eth={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "17007e", 0x0, 0x2c, 0xff, @remote, @mcast2}}}}}, 0x3a) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x4}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f00000004c0)='dummy_udc.0\n', 0xc) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x10000) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000288000002800d06d173aca90c66388f2458a3dfb000004000000020000800000001103000000ffffffff000000000000f6010000000002000000000000080200000000005f00"], 0x0, 0x44}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4048094) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r10, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, r11, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x14, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r8, 0x0, 0x1}, 0x48) syz_emit_ethernet(0x22, &(0x7f0000000700)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa080645000014000000007801010164e0000001000000"], 0x0) 1m10.240180076s ago: executing program 1 (id=3824): ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000180)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000580)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000240)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14) 1m10.153696859s ago: executing program 1 (id=3826): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) mkdirat(r1, &(0x7f0000000180)='./file0/file0\x00', 0xe9) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xe) 1m9.983758255s ago: executing program 1 (id=3829): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) listen(r2, 0x5) listen(r2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x114) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus/file0'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = syz_open_dev$loop(&(0x7f0000000500), 0x800000000ffff, 0x14f600) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) close(0x3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000006fd, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89df3b7fbebffe60080b8785d96000100", "2809e8db60a6000048224ad54afac11d875397bdb22d0000b420a1a93c5240ac00", "f4bd000000801900", [0x0, 0x31]}}) sendfile(r1, r0, &(0x7f0000000080)=0x1df4, 0x75) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703260000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40084a4) 53.806516317s ago: executing program 55 (id=3829): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) listen(r2, 0x5) listen(r2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x114) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus/file0'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = syz_open_dev$loop(&(0x7f0000000500), 0x800000000ffff, 0x14f600) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) close(0x3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000006fd, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89df3b7fbebffe60080b8785d96000100", "2809e8db60a6000048224ad54afac11d875397bdb22d0000b420a1a93c5240ac00", "f4bd000000801900", [0x0, 0x31]}}) sendfile(r1, r0, &(0x7f0000000080)=0x1df4, 0x75) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703260000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40084a4) 43.386446455s ago: executing program 3 (id=4097): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x154, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x128, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8}}, @TCA_RED_STAB={0x104, 0x2, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff100"}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}]}}]}, 0x154}}, 0x0) 43.266519946s ago: executing program 3 (id=4100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff2, 0xe}, {0x0, 0x9}, {0xffe0, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x20040054) syz_emit_ethernet(0x86, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000080045000078000000000001907864010101ac1414aa03019078230000004718000000000000002f0000ac141400ac1414bb0144440001ac1414bb00000000ac141423fd73d0e72549fb00000000000000000000000000e000000200000000ac1414aa00000000ac1414aa00000000e000000100000000000000"], 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x109001, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={@remote, 0x42, r2}) mkdir(&(0x7f0000000600)='./file0\x00', 0x102) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af83, &(0x7f0000000000)={0x1}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xfffffffffffffd6a) mount$9p_virtio(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='tranhvQ5rtioLdfltgid=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) 43.114609849s ago: executing program 3 (id=4104): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) creat(&(0x7f0000000ac0)='./file0\x00', 0x63) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 43.039509613s ago: executing program 3 (id=4105): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = syz_open_dev$loop(&(0x7f0000000500), 0x800000000ffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000006fd, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89df3b7fbebffe60080b8785d96000100000000000000000000000000000000000700", "2809e8db60a6000048224ad54afac11d875397bdb22d0000b420a1a93c5240ac00", "f4bd000000801900", [0x0, 0x31]}}) 43.039115925s ago: executing program 3 (id=4106): r0 = socket(0x40000000015, 0x5, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="09000000010000", 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="bd9ea93b7b055376ff070000af5ed10000040000", @ANYRES32, @ANYBLOB="ff0f00"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="0100000002000000040000000400"/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, r5}, 0x38) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/58, 0x3a}}], 0x1, 0x60010042, 0x0) 42.53210046s ago: executing program 3 (id=4107): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000ac0)={0xa, 0x4e24, 0x3, @mcast1, 0x7}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000004200)={0x2020}, 0x2020) 42.438730614s ago: executing program 56 (id=4107): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000ac0)={0xa, 0x4e24, 0x3, @mcast1, 0x7}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000004200)={0x2020}, 0x2020) 20.314727381s ago: executing program 8 (id=4334): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x204000, 0x0) (async) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) (async) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000000380)=0x0) (async) r3 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) (async) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r4, 0x0, 0x0}) (async) close(r4) (async) timer_settime(r2, 0x1, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) (async) timer_delete(r2) io_pgetevents(0x0, 0x200000c, 0x0, 0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={[0x6]}, 0x8}) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000000)={r8, 0x0, 0x352d, 0x4b2448d0, 0x6, 0x98fd}, &(0x7f0000000080)=0x14) (async) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) 20.245425749s ago: executing program 8 (id=4337): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1800}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x7}}]}, 0x30}}, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) (async) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x2) 20.186267666s ago: executing program 8 (id=4339): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000008d2410978bc640ab2bb3cc600000008fd01fef20034000008001200020000000000000000000000000000533fbdf0864a163e01be7449c1a908692adcac971f9e17c3be199d2c4924d4b34dc183573ab7a9432281d2069e30808710342b0ebd776a913d21986e6e2c809d5f78298129923cd9f524886a78aeb95bd6bcdace49a937ebeae31fb370c45fd670a3cb77a66a3a1e949ad346d6fd7ce239733bc9966a5434b0458d05eb082d6513c4c60c72b8c323b9e7facaf8ba89a6782ed546dee99f60f646c808b6065062c2b22da335c372af361c982c82e1961ddd6b0189dde98109ddde3e7c"], 0x24}, 0x1, 0x0, 0x0, 0x200400c8}, 0x4010) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000008d2410978bc640ab2bb3cc600000008fd01fef20034000008001200020000000000000000000000000000533fbdf0864a163e01be7449c1a908692adcac971f9e17c3be199d2c4924d4b34dc183573ab7a9432281d2069e30808710342b0ebd776a913d21986e6e2c809d5f78298129923cd9f524886a78aeb95bd6bcdace49a937ebeae31fb370c45fd670a3cb77a66a3a1e949ad346d6fd7ce239733bc9966a5434b0458d05eb082d6513c4c60c72b8c323b9e7facaf8ba89a6782ed546dee99f60f646c808b6065062c2b22da335c372af361c982c82e1961ddd6b0189dde98109ddde3e7c"], 0x24}, 0x1, 0x0, 0x0, 0x200400c8}, 0x4010) (async) 20.112199818s ago: executing program 8 (id=4341): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = syz_open_dev$loop(&(0x7f0000000500), 0x800000000ffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000006fd, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89df3b7fbebffe60080b8785d96000100000000000000000000000000000000000000000000000700", "2809e8db60a6000048224ad54afac11d875397bdb22d0000b420a1a93c5240ac00", "f4bd000000801900", [0x0, 0x31]}}) 20.006187689s ago: executing program 8 (id=4343): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x10, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="a905000000007464000100000000000000e5", 0x12}], 0x1}}], 0x1, 0x0) 19.756863669s ago: executing program 8 (id=4349): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000080)={'bond0\x00', 0x1000}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x170bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3972d, 0x4b7bc}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250200000002000005000000000500130001"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x8080) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r6) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e}}]}}, 0x0) ioctl$EVIOCRMFF(r6, 0x4004550e, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0x4, 0x101000) ioctl$VIDIOC_ENUMINPUT(r7, 0xc050561a, &(0x7f0000000140)={0x0, "cc8f07e27bfd847bae3821b60174201abce2dfcb1d7cb7d7072316ffeacec185", 0x3, 0x0, 0x1, 0xc00000, 0x20002, 0x8}) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 19.510749983s ago: executing program 57 (id=4349): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000080)={'bond0\x00', 0x1000}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x170bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3972d, 0x4b7bc}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250200000002000005000000000500130001"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x8080) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r6) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e}}]}}, 0x0) ioctl$EVIOCRMFF(r6, 0x4004550e, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0x4, 0x101000) ioctl$VIDIOC_ENUMINPUT(r7, 0xc050561a, &(0x7f0000000140)={0x0, "cc8f07e27bfd847bae3821b60174201abce2dfcb1d7cb7d7072316ffeacec185", 0x3, 0x0, 0x1, 0xc00000, 0x20002, 0x8}) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 13.121616227s ago: executing program 0 (id=4422): syz_emit_vhci(&(0x7f0000001000)=ANY=[@ANYBLOB="023a2aef5d02"], 0x4) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) 12.965318022s ago: executing program 0 (id=4424): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0xa, 0xd0e0000, 0x328, 0x100, 0x450, 0x1d8, 0x1d8, 0x450, 0x1d8, 0x3, 0x0, {[{{@ip={@local, @loopback, 0xffffffff, 0xff, 'batadv0\x00', 'erspan0\x00', {0xff}, {0xff}, 0x1, 0x3, 0x10}, 0x0, 0x2c8, 0x328, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xbbbd40b804cbae}}, @common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x7008, 0x4, [0x22, 0x36, 0x16, 0x35, 0x14, 0x8, 0x3, 0x8, 0x1f, 0x6, 0x2b, 0x3c, 0xc, 0x2d, 0x15, 0x3e], 0x2, 0xb, 0x7}}}, {{@uncond, 0x3202, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x7, 0x8001, 0x1, 'pptp\x00', 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffffffffffffffb1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'bridge_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='auto_da_alloc', 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000140)=@ethtool_cmd={0x3a, 0x80000000, 0x0, 0xd, 0x11, 0x3, 0x0, 0xfc, 0x0, 0xfa, 0x5, 0x0, 0x405, 0x5, 0x80, 0x4, [0xfffffffd, 0x1]}}) r5 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r6, &(0x7f0000001300)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) r8 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x2, 0x1a1880) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r8, 0xc1485544, &(0x7f00000003c0)) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x5, 0x2}, {0x1, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x8}}}, 0xd) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000001c0)='qnx4\x00', 0x208004, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000340)={'gretap0\x00', 0x0}) 12.81393259s ago: executing program 0 (id=4427): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @empty, 0x5}, 0x1c) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x4c, 0x0, "5aa1f50a3cb63c3635852b1d0b0ac8bbc455e170385fefb683affb65799f7a308ec96cd29e9b33df174bcdcf78a7bccda39e047719afe332de441e7e8e68bf5adbf7a35d75885fb07c3e40612a459451"}, 0xd8) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x9900) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x24044850}, 0x20000004) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x48081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00', 0x800005}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x7, 0x0, 0x80000}, 0x100}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r5}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) openat$incfs(r8, &(0x7f0000000000)='.pending_reads\x00', 0x2, 0x8) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r9, 0x11, 0x30, 0x0, 0x0) r10 = fanotify_init(0xf00, 0x1000) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r2, 0xc0205866, &(0x7f0000001240)={&(0x7f0000000040)=0x9, 0x3, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001200)}) fanotify_mark(r10, 0x105, 0x10000839, r8, 0x0) 12.65910691s ago: executing program 0 (id=4432): r0 = socket(0x10, 0x0, 0xfffffffa) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000140)={'batadv_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r3, r2, 0x25, 0x8, @void}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r5, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x5}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r5, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x5}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r5, 0x0, &(0x7f0000343000/0x3000)=nil, 0x3000, 0x9}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000040)={0x28, 0x2, r5, r5, 0xf, 0xfffffffffffffff8, 0x3fff}) (async) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000040)={0x28, 0x2, r5, r5, 0xf, 0xfffffffffffffff8, 0x3fff}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) (async) close_range(r6, 0xffffffffffffffff, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r8, &(0x7f0000000540)="28286d5f73638f33952a8fbf3318c5f56f6df3ae4b291d6e0cc9e7961db414a8914f6df033df38d627d906f474a6aed40310ef326e2d98a5d1ba7ac41ffd68ab3ad8dd0c808f64e3f4bc5be6513ef1ac66a6aaa17bd4918a20c7ed9fbf12b64c6d27", 0x62) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$setregs(0xf, r9, 0x3, &(0x7f0000000380)="e742a933f37ff726a51f1fb1010f93e96a837b8e11d417e6e3310bf49eea1fce838e98f50839bb743e63989194db03e84f2142edad4ac17451f607214b1f357bba9e2928cad039eb1deebd41e71d789bc1bac9e1f17d276ddd7fc1c9685ecee004c924c7df313107c7a2143cb413c0ecbbfe35daa22587eabc97d6548ba84ac5332650ca66edf4453b227ca7ff03de968b419779071b9fb5e2418fe35d3100149b") r10 = fsmount(r7, 0x1, 0x4) fchdir(r10) (async) fchdir(r10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='my_tracefs/events/task/task_rename/filter\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='my_tracefs/events/task/task_rename/filter\x00', 0x1c0) sendmsg$kcm(r1, &(0x7f0000001a40)={&(0x7f0000000240)=@phonet={0x23, 0x1, 0x2, 0x4}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000440)="25f1fd7e69c3c620d9544577f191dc4089732592ab3d2012b999d5291f82f1d65335f9184046f20afd84da6dbf76af03bcfd5e90c775dc6e10d8c3ab4311fa34d3f69febc9b834f0fccf9511b364bb054d2e254a08fb4e387fc9fd9d59fb2651d49ce9bd48164c63be994a66cfc569d33e3b1ccbd2125de6a0c854f45f642abda3568b5f1bbe97a572dc930e74e0f8a6e11c8e2b0a31f7dcf22218df8f41222f2826f4d77d9bafe79fce2a73cc7dbc9f9f7353e1688688a5ddb1466cb0c339931c1076aced42f5aa2f", 0xc9}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="9b12053771d5792da02934b300ff1a448328663fa108a1e4c91dfbab1a9c321822a1b3b96b3ea266deed14d2e7c9b1135c447e982a269b03c3e6da3fd110f9d23eb5b8b50e62a04a19c34341858f9c0872d516168fdc2e7a220dbdc248515c9511db0d07f2bf3b75472c2f", 0x6b}, {&(0x7f0000001900)="69731da805625793b96b9f8af64b5afbc146434398bac1f815a157521618a740c2241b7b82ee79be5f7bb63d4f776afdefa5af150da1ece7999140409d28ef3ab42c68283b3498d20c185ab556a6851f07ebdcedc7d369570084f953c96213d36ae41eee1fe560d013a49d5132043c038ad7005fd37a34076ddc5945cf99cfe236b7b1499138ba76d914d94cece49a4f79666a6d6450974c8088479a89", 0x9d}], 0x4, &(0x7f0000001a00)=ANY=[@ANYBLOB="3000000000005bb7370166b4f12e5bffc17952a7484f07fc61c0e67500"/48], 0x30}, 0x8000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)=@buf) fsmount(r8, 0x1, 0x0) 12.42927002s ago: executing program 0 (id=4433): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xffffbffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x28}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) r3 = fanotify_init(0x1a, 0x800) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r3, 0x441, 0x4800001a, r4, 0x0) (async) mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) (async) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x93) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) read(r0, &(0x7f0000000540)=""/157, 0x9d) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000e, 0x2072, 0xffffffffffffffff, 0xd0fb8000) (async) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001cc000/0x2000)=nil, &(0x7f0000c34000/0x3000)=nil, 0x2000, 0x1}) 11.980014724s ago: executing program 0 (id=4434): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x800) ioctl$sock_ifreq(r1, 0x89b0, &(0x7f0000000140)={'macvtap0\x00', @ifru_data=&(0x7f00000000c0)="ec3181ebd6b0f670104f927bcfb4b3c9be586be67ec8f6a01a635b54da7b2cbc"}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8228}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x25c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x3f}}}}, [@NL80211_ATTR_TESTDATA={0xdb, 0x45, "197c24196f3e9ff80cb73a5ae4911dcaf0652d6b2d39bbee69e68cf84ab044d8a5cc6932676d690cdd973377bc13c9715624ee4f2306c744cc0637a180412147d36b81c458a007d86f7892e78b46e6ad07f2412854c08361b37f4f14a8b4f1e4e3ea4df4d5df34899fe1fa1afebc2714037aef59371aa556dc808062f18e12aafbfcc468730a9ead189fb9a9c854662ad5b557e6433e1e75be90ad99896f5b4a30b3c65e438bb087fdcc93ed90c843c20d04bfa6dfe955edb070b6e171c42b8f9e3a78da2e0dc84637d14e5dcfbfa44ce47241a2a929d4"}, @NL80211_ATTR_TESTDATA={0x3f, 0x45, "b0457b02fbeb28da6d69996fbf781abb6f8f507909d8bf75aca4f6e8612a6651db4540da63495eb7e9fcd70bc02d663fe72da75efc5ca438d86b0b"}, @NL80211_ATTR_TESTDATA={0xc0, 0x45, "c51e4a45bec4671c12c2eeeee2f30855d4e60770c802d9073f121dd751bd823425747d7b0962200545febbac9298d1e019cf7eda428f07c48ce057ced2bc2b6e3fcf6f34694cfdd135312860e18463a6bfb5b4a2620065bcef72263e6c4efff85896cd218c0196d1abf451cd93447c67e94eb0fd2bd426d0eb23a2529102b8728bc46f834342f547fc5d0ac6efeea497a5e53ec19404feb1645fdde8280fdb2a7ddf01a4fd044431e9cd8fb45f4d94f246043db1d12070203dfb3269"}, @NL80211_ATTR_TESTDATA={0x19, 0x45, "5c3305bc715edd9dd37d83e5ee03a7e59565563f02"}, @NL80211_ATTR_TESTDATA={0x39, 0x45, "c3a0f69f444bf7cf2282521f4a8f4730e74ef335571498d6a28e4995b673d51e9c114792d25f403c350b34cd5904e29c4ded452b3d"}]}, 0x25c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r4, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) 11.765082615s ago: executing program 58 (id=4434): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x800) ioctl$sock_ifreq(r1, 0x89b0, &(0x7f0000000140)={'macvtap0\x00', @ifru_data=&(0x7f00000000c0)="ec3181ebd6b0f670104f927bcfb4b3c9be586be67ec8f6a01a635b54da7b2cbc"}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8228}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x25c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x3f}}}}, [@NL80211_ATTR_TESTDATA={0xdb, 0x45, "197c24196f3e9ff80cb73a5ae4911dcaf0652d6b2d39bbee69e68cf84ab044d8a5cc6932676d690cdd973377bc13c9715624ee4f2306c744cc0637a180412147d36b81c458a007d86f7892e78b46e6ad07f2412854c08361b37f4f14a8b4f1e4e3ea4df4d5df34899fe1fa1afebc2714037aef59371aa556dc808062f18e12aafbfcc468730a9ead189fb9a9c854662ad5b557e6433e1e75be90ad99896f5b4a30b3c65e438bb087fdcc93ed90c843c20d04bfa6dfe955edb070b6e171c42b8f9e3a78da2e0dc84637d14e5dcfbfa44ce47241a2a929d4"}, @NL80211_ATTR_TESTDATA={0x3f, 0x45, "b0457b02fbeb28da6d69996fbf781abb6f8f507909d8bf75aca4f6e8612a6651db4540da63495eb7e9fcd70bc02d663fe72da75efc5ca438d86b0b"}, @NL80211_ATTR_TESTDATA={0xc0, 0x45, "c51e4a45bec4671c12c2eeeee2f30855d4e60770c802d9073f121dd751bd823425747d7b0962200545febbac9298d1e019cf7eda428f07c48ce057ced2bc2b6e3fcf6f34694cfdd135312860e18463a6bfb5b4a2620065bcef72263e6c4efff85896cd218c0196d1abf451cd93447c67e94eb0fd2bd426d0eb23a2529102b8728bc46f834342f547fc5d0ac6efeea497a5e53ec19404feb1645fdde8280fdb2a7ddf01a4fd044431e9cd8fb45f4d94f246043db1d12070203dfb3269"}, @NL80211_ATTR_TESTDATA={0x19, 0x45, "5c3305bc715edd9dd37d83e5ee03a7e59565563f02"}, @NL80211_ATTR_TESTDATA={0x39, 0x45, "c3a0f69f444bf7cf2282521f4a8f4730e74ef335571498d6a28e4995b673d51e9c114792d25f403c350b34cd5904e29c4ded452b3d"}]}, 0x25c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r4, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) 3.207131523s ago: executing program 2 (id=4518): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='westwood', 0x8) sendto$inet(r0, &(0x7f0000000340)="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", 0x100, 0x4090, 0x0, 0x0) dup(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='nfsd\x00', 0x3, &(0x7f00000000c0)='\x00'/10) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r1], 0x64}, 0x1, 0x0, 0x0, 0x404c001}, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3.206765803s ago: executing program 5 (id=4519): ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/hardlockup_count', 0x40, 0x100) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/hardlockup_count', 0x40, 0x100) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4d, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) setns(0xc9, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/vmcoreinfo', 0x1000, 0x40) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/vmcoreinfo', 0x1000, 0x40) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002740)={0x2020}, 0x2020) read$eventfd(r0, &(0x7f0000002700), 0x8) (async) read$eventfd(r0, &(0x7f0000002700), 0x8) 3.055862509s ago: executing program 5 (id=4521): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x4) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0xfff8, 0xfffd}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000010001009500000000000000ef7e4f71e14a672abef8a5e62fdb86b72c2fc4feb3b4ba4872"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2}, 0x94) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x48000}, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x50, r0, 0x40e65000) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000240)={0x0, 0xb, 0x1, [0x1, 0x96, 0x9, 0x6, 0x6], [0x55c, 0xd5c, 0x7, 0x0, 0x9, 0x9, 0x7, 0x7, 0x0, 0x7fffffff, 0xb953, 0x7, 0x2, 0x7, 0x4, 0x3, 0x10, 0x3, 0xb1d2, 0x100, 0x9, 0x200, 0x4, 0x5ccf, 0x800, 0x9, 0x0, 0x5, 0x8000000000000001, 0x101, 0x4f71, 0x7, 0x5, 0xfff, 0x1291, 0x7ba974ba, 0x5, 0x2, 0xffffffff, 0x7ff, 0x1, 0x400, 0x3, 0x8, 0xe39, 0x9, 0x8, 0x3ff, 0xfffffffffffffffd, 0x5, 0x2, 0x5, 0x7, 0x1, 0x4, 0x7fffffffffffffff, 0x2, 0x4, 0x6, 0x5a, 0x3, 0x0, 0x2, 0x3, 0x3, 0x3, 0x9b7, 0x4, 0x8000000000000001, 0x200, 0x2, 0x1ff, 0x1, 0x7085, 0x0, 0x8000, 0x9, 0x1, 0x2715, 0xc, 0x5, 0x9, 0x8, 0x4, 0x100, 0x1, 0x5, 0x1, 0xb, 0xc, 0xfffffffffffffffe, 0xda, 0xe, 0xd7, 0x0, 0xffffffffffff7e6d, 0x0, 0x0, 0x3, 0xbf35, 0x8000000000000001, 0x3, 0x3, 0x7ff, 0x5, 0xfffffffffffffffb, 0x4, 0x2400000000, 0x7, 0x59, 0x7fffffffffffffff, 0x10, 0x5, 0x8, 0x3, 0x100000000, 0x9, 0x5, 0x6, 0x5, 0x40444bd]}) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xce) 3.00273027s ago: executing program 5 (id=4523): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x60) lstat(&(0x7f0000001480)='./file1\x00', &(0x7f00000005c0)) r2 = socket(0x400000000010, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x24, r4, 0x711, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000060020000000455a12a00090008000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2366e4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff000000000000000000f49956e4f98b53ced9802b", 0xd8}], 0x1}, 0x4008040) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000480)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000180)=@attr_riscv64=@attr_addr={0x0, 0x1, @aplic, &(0x7f0000000280)=0x5}) ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x37, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xfffffffffffffe16}, {0x8}}]}, 0x38}}, 0xc001) r11 = socket$unix(0x1, 0x5, 0x0) r12 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r12, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r12, 0x7a0, &(0x7f0000000200)={@my=0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0) r13 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r13, &(0x7f0000000140), 0x0}, 0x20) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r12, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r12, 0x7b1, &(0x7f0000002180)={&(0x7f0000001180)=[0xfff, 0x9fea, 0x0, 0x8, 0xc4a, 0xc, 0x3, 0x5, 0xf, 0x2, 0x6, 0x6, 0x7fff, 0x3, 0x7, 0x6, 0x5, 0x0, 0x3, 0x7df5, 0x2c, 0x348, 0xfffff26d, 0x1, 0xfb39, 0xffffffff, 0x7, 0x9f, 0xfba2, 0x3, 0x0, 0x0, 0x9, 0x0, 0x8, 0xbb5, 0x800, 0xfffffff6, 0x7, 0x8, 0x1, 0x0, 0x3, 0xbcfc, 0xc0a5, 0x1ff, 0x81, 0x1, 0x7, 0x4, 0x5, 0x0, 0xec, 0x5, 0x3, 0x1, 0x0, 0x4113, 0x3, 0x0, 0x9, 0xb0, 0x7, 0x800, 0x312d107d, 0xf69, 0x4, 0xf, 0x4000, 0x8, 0x7f, 0xb47, 0x2d, 0xebae, 0x8, 0x4, 0x1, 0x40, 0x6, 0x1, 0xfffffff9, 0x6, 0x5, 0x401, 0xd9, 0x10, 0xc, 0x7, 0xd0, 0x3, 0x5, 0x1, 0x5, 0xd43, 0x6, 0xf5b9, 0xffffffb3, 0x5, 0x7bf2, 0x800, 0x0, 0x80, 0x8, 0x6, 0xda, 0x200, 0x8, 0x9, 0x1, 0x4, 0x13e, 0x8, 0xfffffffc, 0x8, 0x1, 0x1, 0x0, 0x200, 0x4, 0x0, 0x81, 0x0, 0x1, 0x9, 0x0, 0x4, 0x0, 0xfffffffd, 0x10001, 0x80000000, 0x40, 0x6, 0x2, 0xf9, 0x77b70f3d, 0x93b, 0x0, 0x9, 0x0, 0x7fff, 0x9, 0x4, 0x3, 0x5b7, 0x0, 0x5df, 0x0, 0xb, 0x7fff, 0x5, 0xffff, 0xaa, 0xc, 0xa, 0x5, 0x3, 0x7, 0x195, 0xe, 0x6, 0x6, 0x0, 0x4, 0x5, 0x5, 0x9, 0x2, 0xe7, 0x55, 0x1, 0x2, 0x101, 0x80000000, 0x3, 0x1, 0x5, 0x10, 0x6, 0x100, 0x6, 0x0, 0xfffffffc, 0x1000, 0x5, 0x7ff, 0x10, 0xb, 0x4, 0xbad, 0xfffffffb, 0x401, 0xfffffff9, 0x7, 0x0, 0x1, 0x6, 0x7, 0x8e, 0x8, 0x5, 0x200, 0x0, 0xb, 0x7, 0xfffffffd, 0x2, 0x9f, 0x0, 0xfff, 0xe, 0x9, 0xd7ba, 0x6, 0x2, 0x12, 0xf08, 0x4, 0x4, 0x1, 0x4, 0x4e, 0x8, 0x0, 0xddf5, 0xfffffffe, 0xe, 0x12d9, 0x8, 0x2, 0x3, 0x800, 0x7f, 0x3f8a, 0x80000000, 0x2, 0x7fff, 0x5, 0x5, 0x3, 0x4, 0x7, 0x10000, 0x1, 0x6, 0x6, 0x6, 0x3, 0xd, 0x2, 0x7fffffff, 0x1, 0x9, 0x4, 0x8, 0x6, 0xffffffff, 0x0, 0x3, 0x80000000, 0x7fffffff, 0xf, 0xf, 0x9, 0x0, 0xfffffff7, 0x81, 0x4, 0x10, 0x1, 0x7, 0x5, 0x2, 0x1, 0x6, 0x0, 0x0, 0x5, 0x9, 0x3, 0x9, 0x4, 0x800, 0x81, 0x4, 0x2, 0x8, 0x7, 0xf, 0x4, 0x5, 0x2, 0x3, 0x2d, 0x6ca, 0x400, 0x3, 0x1000, 0x80000000, 0x18, 0x5, 0x0, 0x6, 0x2, 0x1, 0x5, 0x6, 0x5, 0x8, 0x5, 0x1, 0x8, 0x8, 0x1000, 0x0, 0x2, 0x7, 0x6, 0x4, 0x3ff, 0xf, 0x6, 0x51, 0x1, 0x38000, 0x8c2a, 0xfffffff3, 0x1, 0x5, 0xffffffff, 0x3, 0x4364, 0x8, 0x101, 0x5, 0x3, 0x9, 0x7fff, 0x1, 0x0, 0x3, 0xe, 0xeac8, 0xd, 0x0, 0x3ff, 0x1, 0x7fffffff, 0xc5b9, 0x2, 0x4, 0x4, 0x3bf, 0x7fffffff, 0x8, 0xd90, 0x4, 0xac000000, 0x7, 0x5, 0x5, 0x4, 0x3585, 0x5, 0x3, 0x0, 0x101, 0x198, 0x3ff, 0x67f, 0x80000000, 0xff, 0x2, 0x8, 0xb, 0xfffffffa, 0x5, 0x9, 0x9, 0x9, 0x55, 0x6, 0x5e, 0xfffffffc, 0xc0000000, 0x4a12, 0x10001, 0x63af3d29, 0x3ff, 0x5, 0x2, 0x5, 0xffffffff, 0x1, 0xc000000, 0x8, 0x4, 0xa, 0x8, 0x9, 0x8, 0xd6a, 0x2, 0xd, 0xfff, 0x7, 0x10001, 0x2, 0x0, 0x0, 0x4, 0x5, 0x7fff, 0x0, 0x3, 0x80, 0x2, 0x6, 0x0, 0xaa7, 0x240000, 0x800, 0x0, 0x32, 0xf, 0x7a4d, 0x3, 0xe, 0x9, 0x9, 0x6, 0xffff, 0x6, 0x1000, 0x7, 0xfffffff8, 0x8, 0x5, 0x6, 0xcdc7, 0x5, 0x1, 0x4, 0x40, 0x7, 0xed43, 0x1, 0x4, 0x2, 0xfff, 0xb4b, 0xbe2, 0x89f3, 0x2, 0x4, 0xfffffffd, 0x400, 0x401, 0x9, 0x40f1, 0x5, 0x5, 0x0, 0x3, 0x9, 0x5, 0xfffffffc, 0x1, 0x1ff, 0x400, 0x9, 0x10000, 0x3, 0xfffffffa, 0x5, 0x0, 0x0, 0xd, 0xfffffffd, 0x2, 0xfa, 0x6, 0x3, 0x7fffffff, 0x20000000, 0x3, 0x10, 0x1, 0x6cd, 0xb, 0xe1, 0x8, 0x9, 0x9, 0xfd, 0x5, 0x0, 0x2, 0x4, 0x7, 0x1a02, 0x9, 0x8, 0x8, 0x6, 0x9c, 0x4a, 0x0, 0xf3ff, 0x3, 0x5, 0x3fffc00, 0x401, 0x6672, 0x6, 0x80000000, 0xd, 0xc5, 0x9a, 0x6, 0x64a, 0x0, 0x1, 0x80, 0x6, 0x8, 0x6, 0x2, 0x9, 0x2, 0x2, 0x2, 0x41f, 0x10000, 0xfffffffc, 0x10, 0x9, 0x7, 0x2, 0x1, 0x8, 0x9, 0x3, 0x8, 0xfff, 0xdc, 0x8, 0x0, 0x1, 0x7, 0x0, 0x200, 0xfffffeff, 0x1, 0x4, 0xff, 0x3, 0x9, 0x2, 0x66, 0x6, 0x7, 0x4, 0x2, 0xb, 0x7fff, 0x5, 0x1, 0x98, 0x7, 0x1, 0x2, 0x1, 0x9, 0xffff, 0x2, 0x0, 0x994, 0x3, 0x6, 0x7, 0x1, 0x3, 0x9, 0x80000001, 0x2, 0x6, 0x5, 0x9, 0x1d, 0x16, 0x7, 0x3, 0x5, 0x7, 0xc, 0x400, 0x9, 0x0, 0xff, 0x4, 0x13a, 0x200, 0x6, 0x3, 0x7b, 0x4, 0xffff, 0x1, 0x4, 0x8, 0x3, 0x4, 0x5, 0x0, 0x0, 0x8, 0xf0, 0x7fffffff, 0x7a47, 0x0, 0x1, 0x40, 0x1, 0x7, 0x8, 0xc, 0x10000, 0x0, 0xa, 0x1, 0x1ff, 0x4, 0x3, 0x10, 0x7, 0x83, 0x1f7, 0x0, 0x3, 0x1, 0x4, 0x80000001, 0x4, 0x6, 0x5, 0x4, 0x0, 0x8020000, 0x5, 0x6, 0x6, 0xfd8, 0x3, 0xf, 0x1, 0x588, 0x9, 0x8, 0x77, 0x8001, 0x9f, 0x7, 0x5, 0xa, 0x63e0, 0x8, 0x6, 0x0, 0x5, 0x100, 0x3, 0x1ff, 0x9, 0x8, 0x4, 0x1, 0x7, 0x5, 0x1, 0x5, 0x3, 0x1000, 0x9531, 0x800, 0x6, 0x401, 0xfffffffa, 0xd, 0x1, 0x1ff, 0x7, 0xfffffffd, 0x0, 0x7, 0x8, 0x2, 0x7, 0x7, 0x0, 0xfffffffe, 0x9, 0x80000000, 0x2, 0x2, 0xf, 0x8, 0x1, 0x3, 0xc16, 0x8, 0x9, 0x1, 0x0, 0xfff, 0x94, 0x9f5c, 0x0, 0x1, 0xffffdbb0, 0x400, 0x4, 0x711c, 0x4, 0x4c, 0xfffffffd, 0x91dee37, 0x3ff, 0x80, 0x7fffffff, 0x0, 0x101, 0x2, 0x100, 0x8001, 0x7bc, 0x400, 0x3, 0x5, 0x57, 0x101, 0xd30, 0x10000, 0x81, 0x2, 0x6, 0x7, 0x3, 0xfff, 0x8, 0x0, 0xef, 0x9, 0x7, 0x10, 0xa, 0x10, 0xc, 0x5, 0xfff, 0xe7b, 0x8000, 0x88, 0x9, 0x2, 0x4, 0xfffffffa, 0xbbec, 0x6, 0x6, 0xffffffff, 0x2, 0x8, 0x3, 0x1000000, 0x8, 0x6, 0x761, 0x140000, 0xf, 0x1ff, 0x6, 0xcbfd, 0x4, 0xfffffffd, 0x716, 0x8, 0x547, 0xd44, 0x1000, 0xfffffff8, 0x9155, 0x2, 0x0, 0x6, 0x80000001, 0x6, 0x8, 0x9, 0x6, 0x75, 0x47eee9c0, 0x4, 0x5, 0x54, 0x3, 0x7, 0x6, 0x3, 0x0, 0x7, 0x2, 0xfffffffb, 0xb, 0x7fffffff, 0x7, 0x1, 0x5, 0x0, 0x101, 0x5, 0x10, 0x7ff, 0x7, 0xeb, 0x7, 0x200, 0xfb73, 0xe, 0x4, 0x3, 0x9, 0x9, 0x8, 0x5, 0x5, 0x95, 0x2, 0x7f6, 0x4, 0x9, 0x7f, 0x6, 0x2, 0x4, 0x7, 0x0, 0x0, 0x2, 0x44, 0x0, 0x1, 0xbd79, 0x0, 0x67, 0x3, 0x0, 0x366, 0x0, 0x8001, 0x7f, 0x1, 0x5, 0x2, 0x7, 0x7, 0x7, 0x6, 0x8, 0x5, 0x7, 0x8, 0xb54d, 0x3, 0x0, 0x4, 0x668, 0x5, 0x8000, 0x1, 0xffffffff, 0xa, 0x1, 0x0, 0x9, 0x7, 0x9, 0x1, 0x2, 0x3, 0x3, 0x2, 0x5, 0x7, 0x9, 0xffff, 0x4, 0x7fff, 0x3, 0xffffff01, 0xfa9, 0x3ff, 0x3cf, 0x4, 0xe, 0x8, 0x8, 0x6, 0x2, 0x4, 0xfffff029, 0x7fffffff, 0x1, 0xfffffff8, 0x8, 0x6, 0x9aa9, 0x6, 0x4, 0x7, 0x80000000, 0x347, 0x2c, 0x7f, 0x8001, 0x8, 0x5, 0x5, 0x3, 0x6, 0x8, 0x2, 0x6, 0x6, 0x3ff, 0x0, 0xb0, 0x0, 0x8, 0x3, 0x7fff, 0x5, 0x7, 0x952, 0x6, 0x9a3, 0x2000000, 0x9, 0x8, 0x9, 0x8, 0xffffff10, 0xe943, 0xfffff6f5, 0x2, 0xd8, 0x6, 0x0, 0xc, 0x1, 0x5, 0x7, 0xe, 0x10, 0x0, 0xffffffff, 0x8000, 0x8, 0x4, 0x6, 0x7f, 0x6, 0x5, 0x8, 0x21c00000, 0x2, 0x7e51df06, 0x244, 0x4c3c, 0xb77, 0x8, 0x3, 0xd, 0x89ba, 0x9, 0x7, 0x8000, 0x2, 0x6, 0x18, 0x6, 0x3, 0x6, 0xf8b6, 0xea4, 0x10000, 0x9, 0xd, 0xa, 0x10000000, 0x9, 0x2, 0x9, 0x8001, 0x2151c01f, 0x3, 0xaf8, 0xf7, 0x7, 0x4, 0x8000, 0x7, 0x200, 0x80000000, 0x7b, 0x2e, 0x80000001, 0x400, 0x6, 0x5, 0x6, 0xf1b, 0xffff, 0x5, 0x475], 0x6, 0x400, 0x9}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2.714014481s ago: executing program 5 (id=4526): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8030000"], 0x48}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x4e24, @broadcast}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES8=r3], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="20000000130001000300"/20, @ANYRES32=r2, @ANYBLOB="0100000001000000"], 0x20}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000780)='veth0\x00', 0x6) bind$inet6(r1, &(0x7f0000000880)={0xa, 0x5000, 0x0, @local}, 0x1c) connect$inet6(r1, &(0x7f0000000800)={0xa, 0x5000, 0x0, @remote}, 0x1c) write(r1, &(0x7f0000000900)="001122334455", 0x6) 2.233429583s ago: executing program 2 (id=4528): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket(0x8, 0x800, 0xdf5) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x4) r3 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) poll(&(0x7f00000000c0)=[{r3, 0x4}], 0x1, 0xfffffffb) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)={'tunl0\x00', r2, 0x7800, 0x80, 0x1000, 0x9, {{0xd, 0x4, 0x3, 0x23, 0x34, 0x65, 0x0, 0x5, 0x29, 0x0, @remote, @private=0xa010102, {[@generic={0x94, 0x10, "606d3e2f0ec5442b699563fb36a6"}, @ssrr={0x89, 0xb, 0x53, [@broadcast, @private=0xa010100]}, @generic={0x89, 0x2}]}}}}}) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) 1.903537466s ago: executing program 2 (id=4530): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) (async) r4 = socket$netlink(0x10, 0x3, 0x5) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0x0, r1, 'id0\x00'}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) (async) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000140)=0x2) (async) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x4, 0xfdfbff7d, 0x7, 0x2, "0c41920887e8d2b7921105000000000000006b", 0x4, 0x203}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000001c0)=0xc8) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a32000000001400078008000840060000b10800064000000fff0500050002000000050001000600000013000300686173683a6e65742c69666163650000"], 0x60}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r11, &(0x7f0000000240)={0x10000000}) (async) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24dac133", @ANYRES16=r9, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty=0xffffffff}}) 1.902979523s ago: executing program 5 (id=4531): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x154, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x128, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8}}, @TCA_RED_STAB={0x104, 0x2, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f100"}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}]}}]}, 0x154}}, 0x0) 1.824646801s ago: executing program 5 (id=4532): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x50, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe89, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r3, 0x7b9, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x200000ffc000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r3, 0x20, &(0x7f00000004c0)={&(0x7f0000000300)=""/150, 0x96, 0x0, &(0x7f00000003c0)=""/124, 0x7c}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)={0x6000000d}) epoll_pwait(r9, &(0x7f00000000c0)=[{}], 0x1, 0xfff, 0x0, 0x0) ioctl$TIOCNOTTY(r6, 0x5422) 1.742237303s ago: executing program 2 (id=4535): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) ioctl$OTPGETREGIONINFO(0xffffffffffffffff, 0x400c4d0f, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @loopback, 0x5}, 0x1c) setresuid(0xee01, 0xee01, 0x0) (async) syz_clone(0x44040000, &(0x7f00000001c0)="174fc45743a8e4db2a87de0bdf2a8c071d6155d42a", 0x15, &(0x7f0000000400), &(0x7f0000000480), &(0x7f00000004c0)="2bdc55fd1350806d7055c9a49926d7cf911c5a126f185e0f54de1a606a21778c30a37507d1a988592b53eb09ef2689dc8ba859b5928fb0543a912023ca31f40b1091607bb57bb2e53c4a436631500fb547484d3f7e861e696bfaf4f4dd6699fe02b38795354887f58dcf3f560ff7a108551abad6f3c13711cc8438af3914f9add395902161adb0aed0317a08f60fc8246ec0ac0374b06ae5a100fa44dce6a6728e2e8a1bf2d31fba1f") (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async, rerun: 32) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async, rerun: 64) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000686000/0x3000)=nil, 0x3000}}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) accept4(0xffffffffffffffff, &(0x7f0000000380)=@qipcrtr, &(0x7f0000000440)=0x80, 0xe68ceec28332174d) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d00)={'wlan1\x00', 0x0}) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd7000fcdbdf255100000008000300", @ANYRES32=r3, @ANYBLOB="05008a00040000000a0006000802110000010000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (rerun: 32) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000005bc0), 0x12) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0xc0ca42, 0x8dc9858b67ed75cc) 1.208796391s ago: executing program 6 (id=4539): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) readv(r1, &(0x7f0000002b80)=[{&(0x7f00000019c0)=""/4096, 0x1000}], 0x1) fcntl$setsig(r1, 0xa, 0x38) r2 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) readv(r2, &(0x7f0000002b80)=[{&(0x7f00000019c0)=""/4096, 0x1000}], 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002380)=@raw={'raw\x00', 0x701, 0x3, 0x270, 0x0, 0xb, 0x108, 0x108, 0x0, 0x1d8, 0x1c8, 0x1c8, 0x1d8, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'ip6erspan0\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@esp={{0x30}, {[], 0xd2857df73be921dd}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'veth1_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x4, 0x1, [0x23, 0x9, 0x31, 0x1a, 0x36, 0x4, 0x31, 0x6, 0xd, 0x2f, 0x2a, 0x1f, 0x3b, 0x37, 0x2b, 0x20], 0x2, 0xa}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d0) 1.091590506s ago: executing program 6 (id=4540): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000100)=@e={0xff, 0xc, 0x0, 0x0, @generic, 0x0, 0x0, 0x1}) (async) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) (async, rerun: 64) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz1\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x7, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0xfffffe01, 0xf, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x409, 0x0, 0xfc79, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x1, 0x8, 0x7, 0x9, 0x7, 0x101, 0x1000c3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x0, 0x8, 0x4, 0x8, 0x1, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1001, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x10000008, 0x5, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x807, 0xa, 0x9, 0x4000003, 0x8, 0x3, 0x2, 0x3, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0x7, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x3da, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0xfffffffe, 0x3, 0x3, 0x20b7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x4000007, 0x8, 0x2, 0x9, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x15ff4443, 0x7, 0x5, 0x5, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x200, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xd, 0x41, 0x3fd, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x37f, 0x8, 0x1, 0x95, 0x1, 0x1, 0x10, 0xc, 0x5396, 0x6161, 0x9, 0x105, 0x202, 0x8, 0x431, 0x7, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) (rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) 929.602062ms ago: executing program 9 (id=4541): r0 = socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_XSAVE2(r3, 0x9000aecf, &(0x7f0000002000/0x2000)=nil) write(r0, &(0x7f0000000040)="130000001a001f00030300f9002304000a04d6", 0x13) 924.615615ms ago: executing program 6 (id=4542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_cmd={0xa, 0x6, 0x7, 0x2, 0x3, 0xfc, 0x0, 0x6f, 0x5, 0x4, 0x80, 0x8, 0xfff, 0x74, 0x5, 0xf, [0xcd, 0x4]}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r3, 0x4) signalfd4(r3, &(0x7f0000000040)={[0x8]}, 0x8, 0x80000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0xb00}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 749.506678ms ago: executing program 9 (id=4543): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000004500000002"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x811}, 0x4000804) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x640100, 0x41}, 0x18) mkdirat(r3, &(0x7f0000000280)='./file0\x00', 0x11) 683.882426ms ago: executing program 6 (id=4544): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r3, 0x400454c9, &(0x7f00000007c0)=0x2) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001800050400000000000000001c140000fe00000100000000080009"], 0x2c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010007008c79"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 599.192911ms ago: executing program 9 (id=4545): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x8, &(0x7f0000000280)="1a000000", 0x4) sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1, 0x2404c8d5, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socket(0x21, 0xa, 0xd) r1 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x10, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="a905000000007464000100000000000000e5c06417e436a106993e1e5ad8311dabcd25ca", 0x24}], 0x1}}], 0x1, 0x0) 535.786534ms ago: executing program 9 (id=4546): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_ublk_setup_io_uring(0x4020, &(0x7f0000000340)={0x0, 0x20, 0x800, 0x1, 0x2ce}, &(0x7f0000000000)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x44, 0x0, r0, 0x0, 0x0, 0x0, 0x40000000}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000100)={0x20000000009, 0xffffffffffffffff, 0xc, {0x1000, 0x7}}, 0x1) 535.407939ms ago: executing program 2 (id=4547): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000001680)={0x2020}, 0x2020) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl(r0, 0x3b8e, &(0x7f0000000000)="10") ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000580)={0x28, 0x1, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000100)={0x18, r3, 0x1, 0x4}) ioctl(r0, 0x3b89, &(0x7f0000001000)="3000000004000000030000000600000000000000000000002d5d000004") r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0xbf56, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_NAPI(r6, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000fc0)='fdinfo/3\x00') pread64(r7, &(0x7f0000000000)=""/224, 0xe0, 0x2) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f00000006c0)=0x16) 396.811693ms ago: executing program 9 (id=4548): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x2, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xec}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048095}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20008084}, 0x20004000) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000f0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000007030000000000000000000a0000090900010073797a3000000041"], 0x20}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x120}}, 0x0) (async, rerun: 32) r3 = socket$inet(0x2, 0x2, 0x0) (rerun: 32) sendto$inet(r3, &(0x7f0000000500)="12345678", 0x8, 0x0, &(0x7f0000000600)={0x2, 0x1234, @loopback}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000daf3715ede9ef24200007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c000280040018"], 0x3c}, 0x1, 0x0, 0x0, 0x34009803}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRESDEC=r3, @ANYBLOB="0300003e74000000280012800a00010876786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a2dc91}, 0x4008840) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x1ff) write(r6, &(0x7f0000000800)='0x01', 0x4) (async) close(r6) (async) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000800}, 0xc, &(0x7f0000000240)={&(0x7f0000000840)={0xf0, r5, 0x420, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xa0}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40044}, 0x44004004) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 332.040394ms ago: executing program 6 (id=4549): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x40, 0x44a}) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000f00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x694}}, 0x2400c090) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000140)={{0x9, 0x0, 0x0, 0x1, 'syz0\x00', 0x200}, 0x6, 0x2, 0x4, 0x0, 0x0, 0xffffffff, 'syz1\x00', 0x0}) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, &(0x7f0000000780)={0x10, 0x8, 0x5}, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) (async) syz_ublk_setup_io_uring(0x3848, &(0x7f0000000300)={0x0, 0x4869, 0x400, 0x2, 0x3a7}, &(0x7f0000000380), &(0x7f00000003c0)=0x0, &(0x7f00000004c0)) (async) r9 = mmap$IORING_OFF_SQES(0x0, 0x7, 0x2000008, 0x50, r1, 0x10000000) (async) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x53, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@any_dev={0x4, 0x302, 0x0, 0x0, 0x1000, 0x3, r0}}}, &(0x7f00000005c0)) syz_ublk_add_dev(r1, r5, r8, r9, &(0x7f0000000640)={0x2e, 0x4, 0x0, r10, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000600)=@new_dev={0x1, 0x8b0, 0x0, 0x0, 0x1000, 0xffffffff, r0, 0x0, 0x10}}}, &(0x7f00000006c0)) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@dellinkprop={0x4c, 0x6d, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x49602, 0x80}, [@IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'virt_wifi0\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040060) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x0, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) sendfile(r13, r13, 0x0, 0x1000007fd) (async) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x2f) (async) pipe2$watch_queue(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r14, 0x5761, &(0x7f0000000f40)={0x6, 0x0, [{0x5, 0x835, 0x200, [0x6, 0xc, 0xa, 0x4, 0x609813c7, 0x5, 0x200, 0x7eb]}, {0x2, 0x3, 0x0, [0x97, 0x5, 0xd9b, 0x8001, 0x4, 0xe03e, 0xffffffff, 0xc]}, {0xbc, 0x902, 0x9, [0x7, 0x9, 0x7, 0x3, 0xa, 0x8, 0x9, 0x543e]}, {0xffffffff, 0x6, 0x0, [0x1, 0x2, 0x1, 0x6, 0x10000, 0x660a, 0x8]}, {0x9, 0x9315, 0x1ff, [0x9, 0xce85, 0xa, 0x1, 0x1, 0x747032ad, 0x10, 0x8]}, {0x6, 0x8, 0x5b0, [0xda0, 0x6, 0xd24, 0x3, 0xd02, 0x6766, 0x0, 0x8]}]}) (async) r15 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r15, 0x0, 0x0) 331.25961ms ago: executing program 9 (id=4550): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x4000000000000291}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r1, r2], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e0000003400028018000800060000000800030000000000080006000001000005000d000000000008"], 0x48}, 0x1, 0x0, 0x0, 0x40081e0}, 0x44000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r5, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 159.089836ms ago: executing program 6 (id=4551): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtaction={0x6c, 0x30, 0x20, 0x0, 0x10000000, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c}, {0x4}, {0x24}, {0xc}}}, @m_pedit={0x0, 0x1f, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0x0, 0x2, {{{0x2fc, 0x2, 0x3, 0xffffffff, 0x80000001}, 0x7, 0x3, [{0xccc, 0xe, 0x7, 0xf, 0x4, 0x6}, {0x5, 0x10000, 0x0, 0x7, 0x1, 0x5}, {0x1d, 0x5, 0x7, 0x0, 0x2, 0x8001}, {0xfde, 0xffffff1d, 0x3ff, 0xf36, 0x1, 0x5b}, {0x5, 0xfffffff0, 0xffff, 0x57, 0x8000, 0xf}, {0x1, 0x8, 0x1, 0x4, 0xffffffff, 0xb}, {0x401, 0x1, 0x9, 0x0, 0x3, 0x6}, {0x1, 0x1000, 0x100, 0x5, 0x7, 0x7}]}, [{0x81, 0xf, 0x4, 0x4, 0x99}, {0x3a, 0x7f, 0x0, 0x10000, 0x0, 0xb7}, {0x8, 0x8, 0x0, 0x0, 0x5, 0x7}, {0x4, 0x5, 0xb031, 0x8001, 0x800, 0x3}, {0xb4c, 0x0, 0x9, 0x6, 0x0, 0x9}, {0x3, 0x4, 0xc00000, 0x5, 0xf1, 0x6}, {0x7fffffff, 0x3, 0x8, 0xd, 0x9}, {0x8a, 0x8000, 0x8, 0x3, 0x1, 0xbb}, {0x2, 0xe279, 0x3ff, 0x1, 0x9, 0xfffffffb}, {0x200, 0x80, 0x8001, 0x0, 0x1, 0x2}, {0x3, 0xb, 0x6, 0x1, 0x0, 0xaedc}, {0x7, 0x9, 0xc3, 0x9aa, 0x9, 0x29}, {0x7, 0x8, 0x8, 0x80000001, 0x3}, {0x0, 0x3ff, 0xc42, 0x4, 0xa, 0x1}, {0x1, 0x6, 0x2c, 0x2, 0x0, 0x2}, {0x8, 0x7, 0x0, 0x0, 0x9, 0x3ff}, {0x8000, 0x2, 0x7, 0x2, 0x3, 0x1412}, {0x8, 0x101, 0x4, 0x1, 0x0, 0x28d}, {0x80, 0x9, 0x1, 0x0, 0xfffffffe, 0x800}, {0x3, 0x0, 0x3, 0x10000, 0xfffffe00, 0x5}, {0x10, 0xb, 0x7f, 0x4, 0x3, 0xfffffffa}, {0x2, 0x3, 0x7, 0x3, 0x4, 0x800}, {0x7, 0x8000, 0xfffffffc, 0x10, 0x5fbfb089, 0x8}, {0x5, 0xe, 0x5, 0x1, 0x3}, {0x8, 0x9, 0x101, 0x9, 0xcc, 0x3}, {0xffffffff, 0xfffff801, 0x8, 0x3, 0x6787, 0x4}, {0x5, 0x8, 0x1, 0x10000, 0xdee, 0x400}, {0x0, 0x15d2, 0x1, 0x7, 0x1, 0xf}, {0x8, 0x1, 0x0, 0x5, 0x2c, 0x5}, {0x10000, 0x3, 0x7855, 0x3a, 0x7, 0x1}, {0x1, 0xfffffffe, 0x200, 0x7, 0x6, 0x8}, {0x6, 0x7, 0x1, 0x0, 0x7, 0x5}, {0xffff56b9, 0x6, 0x1d7e, 0x8, 0x0, 0x38}, {0x3, 0x5, 0x800, 0x401, 0x9, 0x3}, {0x3, 0x8, 0xb9c, 0x401, 0x3}, {0x6, 0xffffb205, 0x60, 0x80, 0x6, 0x98f}, {0xffffff00, 0x7, 0x1, 0xe5f, 0x4, 0x5}, {0xffff, 0x2, 0xffffffff, 0x4, 0x9, 0x665}, {0x8, 0x4, 0x100, 0x401, 0x2, 0x9}, {0x6, 0x34e, 0x7, 0x6, 0x7fffffff, 0x7}, {0xd, 0x0, 0x8, 0xf, 0x4, 0x81}, {0x8, 0x7, 0xf1, 0x5, 0x3, 0x6}, {0x9, 0x5, 0x1, 0xfffffffc, 0x6, 0x30a6}, {0x1b2, 0x0, 0x3, 0x8, 0x0, 0xff}, {0xffffffff, 0x0, 0x8001, 0x2, 0x0, 0x9}, {0x0, 0xffffffff, 0x8, 0x50b, 0x6, 0x8}, {0x1, 0x6, 0x3c, 0x3, 0x6, 0x1000}, {0x7, 0x8000, 0x9, 0x7, 0x80000001, 0x4}, {0x0, 0x3, 0x5, 0x8, 0x163, 0x7fffffff}, {0x5, 0x0, 0x7f, 0x4, 0x1, 0x7f}, {0x401, 0x1, 0x1, 0x222e, 0x3, 0x9ee}, {0x0, 0x1000, 0x1, 0x4, 0xa, 0x1}, {0x3ff, 0x81, 0x3, 0xff, 0x2, 0x400}, {0x502, 0x81, 0xfffffff7, 0x1, 0x200, 0x1}, {0x2, 0x0, 0xa34, 0x7, 0x400, 0x7ff}, {0x40, 0x965b, 0xa1bc, 0x3, 0x2, 0x800}, {0x80000001, 0xfffffff8, 0xd, 0x2, 0x6, 0x6}, {0x1, 0x6, 0xfffff197, 0x7, 0x5bc6, 0x3}, {0x1, 0x12400, 0x1d2a, 0x0, 0x81a, 0x4}, {0x9, 0xce04, 0x0, 0x5, 0x1ff, 0xff}, {0x6, 0x3, 0x6, 0x3, 0x8856, 0x3}, {0x7fffffff, 0x9, 0x90000000, 0x4, 0xc000000, 0x9}, {0xc, 0x4, 0x4e6b, 0x401, 0x2, 0xff}, {0x3, 0x9, 0x1, 0xa, 0x3, 0x1}, {0x0, 0x3, 0x3ff, 0x2, 0x2, 0x9}, {0x3, 0xffffffff, 0x10001, 0x89, 0x4, 0x5}, {0x1, 0x6e65aff9, 0x0, 0x4, 0x8, 0x8}, {0xffffff33, 0x100, 0x5, 0x9, 0x0, 0xffff7fff}, {0xd08e, 0x1, 0x80, 0x3ff, 0x5, 0x3}, {0xfffffffb, 0xffffffff, 0x8, 0x7, 0x1, 0x1}, {0xd, 0x0, 0x9, 0x6, 0x9, 0x42d7d4da}, {0x3, 0xe, 0x3, 0x8, 0xfffffffc, 0x8}, {0xef, 0x101, 0x0, 0xde5, 0x9, 0x8}, {0x7, 0xb9d, 0x8000, 0x4, 0x4c, 0xdf}, {0x2, 0x10000, 0x10000, 0x1, 0x7fffffff, 0x1000}, {0xffffffff, 0x9, 0x9, 0xdac, 0x3, 0xfffffffb}, {0x4, 0x0, 0xfffff001, 0x2, 0x3, 0x1}, {0x4, 0x7fff, 0x0, 0x7, 0x3, 0x1ff}, {0x22f7, 0x6, 0x7ff, 0x9, 0x3, 0x7}, {0x6, 0x5, 0xa, 0xfffffffa, 0x6, 0xd35}, {0x200, 0x6, 0xdc, 0xf, 0x4, 0x4}, {0x6, 0xe, 0x8000, 0x3, 0xd, 0x4323}, {0x8, 0xfffffffd, 0x8, 0x5, 0xd}, {0xc, 0x8, 0xd11, 0x0, 0xffffff12, 0x2}, {0x9, 0xd, 0x8, 0x8, 0x8, 0x3}, {0x751, 0xa, 0xa13a, 0x2, 0x8, 0x7}, {0x7, 0x400, 0xfffffff7, 0x1, 0x40, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x5}, {0x5, 0x3, 0xea, 0x8, 0x0, 0x8000}, {0x8000, 0xfff, 0x1, 0x5, 0x1, 0x9}, {0xb4, 0xffffffff, 0x101, 0x1, 0x800, 0xffffffff}, {0x7ff, 0xf, 0x786, 0x10000, 0x3, 0x3}, {0x4, 0x3, 0x8, 0x1, 0x5, 0x3}, {0x6, 0xfffffff9, 0x1, 0x43b, 0x3, 0x7ff}, {0x7ff, 0x204000, 0x5, 0x5, 0x8, 0x10001}, {0x90ef, 0x8, 0x8, 0x53b6691f, 0xffff}, {0x5, 0xfffffe00, 0xb7, 0x0, 0x6, 0x8}, {0x5, 0x7b, 0x4, 0x3, 0x655e, 0x1}, {0x4, 0x7, 0x8, 0x3ff, 0x15b, 0x7}, {0x8, 0xb, 0x6, 0x401, 0x8, 0x3}, {0x7fffffff, 0xad09, 0x5, 0x12000, 0xe7b, 0x2}, {0x8, 0x6, 0x9, 0x29, 0x0, 0xfff}, {0x980, 0x2, 0x9, 0x0, 0x5, 0x80000000}, {0x9, 0xffffffff, 0x2, 0x3, 0x0, 0x3}, {0xbff, 0xee, 0x200, 0x6, 0x9, 0x10001}, {0x9, 0x401, 0xe0, 0x3e, 0x8000, 0x8}, {0x9, 0x2, 0x101, 0x7f, 0x2, 0x1e2}, {0x1, 0x7, 0x81, 0x8, 0x2, 0x9}, {0xb95, 0x0, 0x6, 0x9000, 0x8, 0x3}, {0x0, 0x5, 0x1, 0xffff, 0xff, 0x9}, {0x1, 0x4, 0x2, 0x0, 0xffff, 0x5}, {0x5072, 0x8, 0x5dc, 0x7, 0xffffff26, 0x2}, {0x0, 0x10001, 0x9, 0x8, 0x7, 0xd}, {0x1, 0x8, 0x5, 0x6, 0x8, 0x8}, {0xd48, 0x114, 0x7, 0x8, 0x6, 0x4903}, {0x3a, 0x1, 0x179, 0x7fff, 0x4, 0x8}, {0x0, 0x8, 0xa, 0xe, 0x10000, 0x80}, {0x5, 0x9, 0x0, 0x3ff, 0x1, 0x9}, {0x4, 0x4000400, 0x1, 0x3, 0x9}, {0xa31d, 0x9, 0x0, 0x2, 0x72a, 0x2}, {0x2, 0x0, 0x5, 0x80000000, 0xc, 0x1}, {0x2, 0x0, 0x6, 0x7, 0x800, 0x6}, {0x4, 0x8001, 0x0, 0x4, 0x9}, {0xc3f, 0x9, 0x8, 0xf, 0x3, 0x1}, {0x9, 0x6, 0x7f, 0x342, 0x10000000, 0x8}, {0x5, 0x5c39, 0x2107fd62, 0x5, 0xdf, 0x7ff}, {0x4, 0x4, 0xfff, 0x7, 0x6, 0x3}, {0x5, 0x8, 0x7, 0x0, 0xd16, 0xc201}], [{0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {}, {0x0, 0x1}, {}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x2}, {0x4}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x7}, {0x5}, {}, {0x2}, {0x3}, {0x4}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x3}, {}, {}, {0x2}, {0x3}, {0x5}, {0x0, 0x1}, {0x1}, {0x4}, {0x5}, {0x5}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x2, 0xc010160480882d86}, {0x1}, {}, {0x2, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x92df7064dd0a1c1a, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x2}, {0x2}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1, 0x1}]}}]}, {0x0, 0x6, "01e73ef9661dca8d765856ec131901801a6c72b33493"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x1, 0x2}}}}, @m_vlan={0x0, 0x6, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x0, 0x6, 0x1}]}, {0x0, 0x6, "752a8c3722491ed56327b5e8711f2e468c631385bde8526c8b37ddf626e51d92b074760a752f10221407f5fe8dd48fbf9254977eaa03544c4c6dac4c3bddb0a20f80069fd9c7a4fe3d6aa56a9be05f0f7d13ec873a64a5cece5265e743b1dd1a9cb22245c4667a75c0cb34819e0235b2f6fb6fb1d6ad9b039cb677787dfa4d1bb0a46124fd27e2f7597571bcb6d706a123439c01d621c756bc252ae5d621c1342ceff94d39058933e3cf4192b0030ac484ca"}, {}, {0x0, 0x8, {0x3, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) socket$unix(0x1, 0x5, 0x0) socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001800)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x0, 0x0, 0xc, 0x7ff, 0x1}, {0x4, 0x1, 0x0, 0xf, 0x0, 0x73}, 0xebd1, 0x5, 0x1480}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x48088}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r13 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r13, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) 0s ago: executing program 2 (id=4552): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x10, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="a905000000007464000100000000000000e5c06417e436a106993e1e5ad8311dabcd25ca", 0x24}], 0x1}}], 0x1, 0x0) (fail_nth: 7) kernel console output (not intermixed with test programs): read_partitions: partition scan of loop9 (3 x) failed (rc=-5) [ 401.730857][T20650] ubi16: attaching mtd0 [ 401.750903][T20650] ubi16: scanning is finished [ 401.752610][T20650] ubi16 error: ubi_read_volume_table: the layout volume was not found [ 401.891590][T20631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.897795][T20631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.959330][T20650] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 401.983135][ T36] Bluetooth: Error in BCSP hdr checksum [ 402.016236][ T5148] ldm_validate_partition_table(): Disk read failed. [ 402.018399][ T5148] Dev loop9: unable to read RDB block 0 [ 402.020211][ T5148] loop9: unable to read partition table [ 402.042420][T20675] xt_hl: Unknown Hop Limit match mode: 206 [ 402.115268][T20676] __nla_validate_parse: 1 callbacks suppressed [ 402.115282][T20676] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3808'. [ 402.115665][T20675] smpboot: CPU 1 is now offline [ 402.183909][T20675] smpboot: CPU 3 is now offline [ 402.225862][ T5148] ldm_validate_partition_table(): Disk read failed. [ 402.228693][ T5148] Dev loop9: unable to read RDB block 0 [ 402.230742][ T5148] loop9: unable to read partition table [ 402.296418][T20678] netlink: 'syz.9.3809': attribute type 11 has an invalid length. [ 402.386624][ T5148] ldm_validate_partition_table(): Disk read failed. [ 402.397123][ T5148] Dev loop9: unable to read RDB block 0 [ 402.399402][ T5148] loop9: unable to read partition table [ 402.407097][T20683] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 402.462727][T20683] VFS: Can't find a romfs filesystem on dev nullb0. [ 402.462727][T20683] [ 402.496343][ T5148] ldm_validate_partition_table(): Disk read failed. [ 402.498383][ T5148] Dev loop9: unable to read RDB block 0 [ 402.500154][ T5148] loop9: unable to read partition table [ 402.608129][ T5148] ldm_validate_partition_table(): Disk read failed. [ 402.619655][ T5148] Dev loop9: unable to read RDB block 0 [ 402.624484][ T5148] loop9: unable to read partition table [ 402.668598][T20699] netlink: 'syz.1.3816': attribute type 39 has an invalid length. [ 402.702786][T20698] (syz.1.3816,20698,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 402.707307][T20698] (syz.1.3816,20698,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 402.782363][T20698] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 402.832800][ T5148] ldm_validate_partition_table(): Disk read failed. [ 402.837818][ T5148] Dev loop9: unable to read RDB block 0 [ 402.840033][ T5148] loop9: unable to read partition table [ 402.859807][T20703] fuse: Unknown parameter '&d_ [ 402.859807][T20703] ' [ 403.774915][ T5746] Bluetooth: hci1: command tx timeout [ 404.117236][ T5746] Bluetooth: hci6: command 0x1003 tx timeout [ 404.130952][ T64] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 404.749351][T20712] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 404.776593][T20631] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 404.846015][ T5148] ldm_validate_partition_table(): Disk read failed. [ 404.848207][ T5148] Dev loop9: unable to read RDB block 0 [ 404.849987][ T5148] loop9: unable to read partition table [ 405.309828][T20734] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3827'. [ 405.327732][T20736] tipc: Started in network mode [ 405.329416][T20736] tipc: Node identity ac14140f, cluster identity 4711 [ 405.332083][T20736] tipc: New replicast peer: 172.30.0.4 [ 405.337639][T20736] tipc: Enabled bearer , priority 10 [ 405.539782][ T64] Bluetooth: hci3: ACL packet too small [ 406.008734][ T64] Bluetooth: hci1: command tx timeout [ 406.105591][T20773] IPVS: length: 44 != 8 [ 406.131768][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 406.131784][ T42] audit: type=1400 audit(649.323:1877): avc: denied { read } for pid=20774 comm="syz.8.3839" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.139542][T20775] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 406.178997][ T42] audit: type=1400 audit(649.323:1878): avc: denied { open } for pid=20774 comm="syz.8.3839" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.188265][ T42] audit: type=1400 audit(649.323:1879): avc: denied { ioctl } for pid=20774 comm="syz.8.3839" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.524298][ T1496] tipc: Node number set to 2886997007 [ 406.589903][ T42] audit: type=1400 audit(649.753:1880): avc: denied { mount } for pid=20804 comm="syz.9.3849" name="/" dev="overlay" ino=501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 406.619718][ T42] audit: type=1400 audit(649.781:1881): avc: denied { unmount } for pid=19025 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 406.705895][T20809] netlink: 'syz.8.3852': attribute type 10 has an invalid length. [ 406.709078][ T42] audit: type=1400 audit(649.865:1882): avc: denied { write } for pid=20810 comm="syz.9.3851" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.802459][T20813] kvm: user requested TSC rate below hardware speed [ 406.959209][ T24] usb 14-1: new high-speed USB device number 14 using dummy_hcd [ 407.123764][ T24] usb 14-1: Using ep0 maxpacket: 32 [ 407.132775][ T24] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.137721][ T24] usb 14-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 407.148807][ T24] usb 14-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 407.157916][ T24] usb 14-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 407.165599][ T24] usb 14-1: Product: syz [ 407.169166][ T24] usb 14-1: Manufacturer: syz [ 407.174686][ T24] usb 14-1: SerialNumber: syz [ 407.200080][ T24] input: appletouch as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:1.0/input/input39 [ 407.325406][T20828] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 407.383350][T20832] syzkaller0: entered promiscuous mode [ 407.385228][T20832] syzkaller0: entered allmulticast mode [ 407.555396][T20836] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3860'. [ 408.005342][T10505] usb 14-1: USB disconnect, device number 14 [ 408.071775][T10505] appletouch 14-1:1.0: input: appletouch disconnected [ 408.090547][ T64] Bluetooth: hci3: ACL packet too small [ 408.132007][T20859] netlink: 'syz.9.3867': attribute type 1 has an invalid length. [ 408.148680][T20859] 8021q: adding VLAN 0 to HW filter on device bond1 [ 408.163985][T20859] bond1: (slave gretap1): making interface the new active one [ 408.172104][T20859] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 408.185596][T20859] bond1 (unregistering): (slave gretap1): Releasing active interface [ 408.197456][T20859] bond1 (unregistering): Released all slaves [ 410.915815][T20842] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 411.099241][T20867] rdma_rxe: rxe_newlink: failed to add vcan0 [ 411.117537][T20865] Bluetooth: MGMT ver 1.23 [ 411.195816][T20888] overlayfs: failed to resolve './file1/file0': -20 [ 411.454553][T20897] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3877'. [ 411.457389][T20897] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3877'. [ 411.475304][T10505] hid (null): report_id 33474 is invalid [ 411.492675][T10505] hid-generic 0005:4C4A:5505.0008: collection stack underflow [ 411.499170][T10505] hid-generic 0005:4C4A:5505.0008: item 0 2 0 12 parsing failed [ 411.503736][T10505] hid-generic 0005:4C4A:5505.0008: probe with driver hid-generic failed with error -22 [ 411.520263][T20912] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3881'. [ 412.051653][T20938] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3889'. [ 412.054623][T20938] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3889'. [ 412.367415][T20952] FAULT_INJECTION: forcing a failure. [ 412.367415][T20952] name failslab, interval 1, probability 0, space 0, times 0 [ 412.381229][T20952] CPU: 2 UID: 0 PID: 20952 Comm: syz.3.3894 Tainted: G L syzkaller #0 PREEMPT(full) [ 412.381263][T20952] Tainted: [L]=SOFTLOCKUP [ 412.381269][T20952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 412.381280][T20952] Call Trace: [ 412.381304][T20952] [ 412.381311][T20952] dump_stack_lvl+0x100/0x190 [ 412.381396][T20952] should_fail_ex.cold+0x5/0xa [ 412.381421][T20952] should_failslab+0xc2/0x120 [ 412.381456][T20952] kmem_cache_alloc_noprof+0x91/0x6a0 [ 412.381478][T20952] ? __pud_alloc+0x4f6/0x690 [ 412.381503][T20952] ? __pmd_alloc+0xbf/0x950 [ 412.381531][T20952] __pmd_alloc+0xbf/0x950 [ 412.381555][T20952] ? __pud_alloc+0x4fb/0x690 [ 412.381579][T20952] __handle_mm_fault+0xa9c/0x2a00 [ 412.381612][T20952] ? mt_find+0x45e/0x8e0 [ 412.381667][T20952] ? __pfx___handle_mm_fault+0x10/0x10 [ 412.381694][T20952] ? __pfx_mt_find+0x10/0x10 [ 412.381732][T20952] ? find_vma+0xbf/0x140 [ 412.381753][T20952] ? __pfx_find_vma+0x10/0x10 [ 412.381776][T20952] handle_mm_fault+0x37b/0xa30 [ 412.381810][T20952] do_user_addr_fault+0x74c/0x12f0 [ 412.381855][T20952] exc_page_fault+0x6f/0xd0 [ 412.381877][T20952] asm_exc_page_fault+0x26/0x30 [ 412.381897][T20952] RIP: 0010:_copy_from_user+0x93/0xd0 [ 412.381938][T20952] Code: c2 ec fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 c9 51 5d fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 85 bc [ 412.381957][T20952] RSP: 0018:ffffc90006247d80 EFLAGS: 00050246 [ 412.381980][T20952] RAX: 0000000000000001 RBX: 0000200000000240 RCX: 0000000000000014 [ 412.381990][T20952] RDX: 0000000000000001 RSI: 0000200000000240 RDI: ffffc90006247df0 [ 412.382000][T20952] RBP: 0000000000000014 R08: 0000000000000001 R09: fffff52000c48fc0 [ 412.382011][T20952] R10: ffffc90006247e03 R11: 0000000000000000 R12: 0000000000000000 [ 412.382024][T20952] R13: ffffc90006247df0 R14: 0000000000000014 R15: 0000000000000000 [ 412.382049][T20952] move_addr_to_kernel+0x65/0x170 [ 412.382082][T20952] __sys_connect+0xb5/0x170 [ 412.382103][T20952] ? __pfx___sys_connect+0x10/0x10 [ 412.382123][T20952] ? __fget_files+0x21f/0x3d0 [ 412.382162][T20952] ? __pfx_ksys_write+0x10/0x10 [ 412.382185][T20952] __x64_sys_connect+0x72/0xb0 [ 412.382204][T20952] ? lockdep_hardirqs_on+0x78/0x100 [ 412.382226][T20952] do_syscall_64+0x115/0x870 [ 412.382248][T20952] ? clear_bhb_loop+0x40/0x90 [ 412.382271][T20952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.382289][T20952] RIP: 0033:0x7fe1c019e019 [ 412.382307][T20952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.382329][T20952] RSP: 002b:00007fe1c0fab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 412.382346][T20952] RAX: ffffffffffffffda RBX: 00007fe1c0425fa0 RCX: 00007fe1c019e019 [ 412.382357][T20952] RDX: 0000000000000014 RSI: 0000200000000240 RDI: 0000000000000004 [ 412.382368][T20952] RBP: 00007fe1c0fab090 R08: 0000000000000000 R09: 0000000000000000 [ 412.382379][T20952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.382390][T20952] R13: 00007fe1c0426038 R14: 00007fe1c0425fa0 R15: 00007ffd2e424098 [ 412.382414][T20952] [ 412.507016][ T42] audit: type=1400 audit(655.237:1883): avc: denied { write } for pid=20949 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.663436][ T42] audit: type=1400 audit(655.433:1884): avc: denied { write } for pid=20956 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.813645][ T42] audit: type=1400 audit(655.574:1885): avc: denied { write } for pid=20961 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.820616][T20967] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3897'. [ 412.820630][T20967] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3897'. [ 412.820650][T20967] netlink: 'syz.9.3897': attribute type 5 has an invalid length. [ 412.888821][ T42] audit: type=1400 audit(655.639:1886): avc: denied { write } for pid=20970 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.996353][ T42] audit: type=1400 audit(655.742:1887): avc: denied { write } for pid=20980 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 413.064474][ T42] audit: type=1400 audit(655.808:1888): avc: denied { write } for pid=20985 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 413.159205][ T42] audit: type=1400 audit(655.901:1889): avc: denied { write } for pid=20992 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 413.207587][ T42] audit: type=1400 audit(655.939:1890): avc: denied { write } for pid=20995 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 413.263415][ T42] audit: type=1400 audit(655.995:1891): avc: denied { remount } for pid=20989 comm="syz.9.3903" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 413.268723][T20990] devtmpfs: Cannot change global quota limit on remount [ 413.283591][T20990] netlink: 'syz.9.3903': attribute type 5 has an invalid length. [ 413.845087][T21035] CUSE: info not properly terminated [ 414.368681][T21011] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 414.519074][T21045] netlink: 'syz.9.3920': attribute type 1 has an invalid length. [ 414.521865][T21045] netlink: 'syz.9.3920': attribute type 1 has an invalid length. [ 414.623494][T21050] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 414.711632][ T42] audit: type=1400 audit(657.352:1892): avc: denied { write } for pid=21052 comm="syz.3.3923" name="/" dev="9p" ino=77885979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.748109][T21055] hfs: can't find a HFS filesystem on dev sr0 [ 414.788008][T21056] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 414.809007][T21055] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 414.824762][ T1496] usb 14-1: new high-speed USB device number 15 using dummy_hcd [ 414.986118][ T1496] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.990510][ T1496] usb 14-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 414.994649][ T1496] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.018744][ T1496] as10x_usb: device has been detected [ 415.021651][ T1496] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 415.058600][ T1496] usb 14-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 415.108139][ T1496] as10x_usb: error during firmware upload part1 [ 415.110425][ T1496] Registered device Abilis Systems DVB-Titan [ 415.305000][T21062] vlan2: entered allmulticast mode [ 415.360728][T21062] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3926'. [ 415.364755][T21062] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3926'. [ 415.368559][T21062] netlink: 'syz.8.3926': attribute type 12 has an invalid length. [ 415.376822][T21062] 9pnet_virtio: no channels available for device syz [ 415.505269][T21065] macvlan0: entered promiscuous mode [ 415.600614][ T64] Bluetooth: hci3: ACL packet too small [ 415.784682][T21076] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 415.852509][T21078] support for the xor transformation has been removed. [ 415.983850][ T24] usb 14-1: USB disconnect, device number 15 [ 416.042845][ T24] Unregistered device Abilis Systems DVB-Titan [ 416.043815][ T24] as10x_usb: device has been disconnected [ 416.068331][T21081] /dev/nullb0: Can't open blockdev [ 416.112738][T21083] input: syz0 as /devices/virtual/input/input40 [ 416.413498][T21100] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3939'. [ 416.586941][T21112] i2c i2c-0: new_device: Missing parameters [ 416.592366][T21112] cdns-usb3 pcspkr: error -ENXIO: IRQ host not found [ 417.189068][T21123] netlink: 252 bytes leftover after parsing attributes in process `syz.3.3948'. [ 417.298011][T21125] No source specified [ 417.720291][T10505] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 417.859308][T10505] usb 13-1: device descriptor read/64, error -71 [ 417.872219][T21158] fuse: Bad value for 'fd' [ 417.888598][T21158] xfs: Unknown parameter 'grpquota' [ 418.115485][T10505] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 418.202385][T21174] hfsplus: unable to find HFS+ superblock [ 418.267632][T10505] usb 13-1: device descriptor read/64, error -71 [ 418.296124][T21174] Can't find a SQUASHFS superblock on nullb0 [ 418.361334][T21186] netlink: 'syz.3.3968': attribute type 21 has an invalid length. [ 418.364618][T21186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3968'. [ 418.390212][T21191] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3969'. [ 418.398689][T18202] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.404291][T10505] usb usb13-port1: attempt power cycle [ 418.404844][ T5549] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.417333][ T5549] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.421849][ T5549] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.426672][T21191] netlink: 31 bytes leftover after parsing attributes in process `syz.9.3969'. [ 418.435014][T21191] netlink: 'syz.9.3969': attribute type 3 has an invalid length. [ 418.439038][T21191] netlink: 'syz.9.3969': attribute type 2 has an invalid length. [ 418.449548][T21191] netlink: 31 bytes leftover after parsing attributes in process `syz.9.3969'. [ 418.531077][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 418.531094][ T42] audit: type=1400 audit(660.917:1902): avc: denied { append } for pid=21197 comm="syz.3.3971" name="ptp0" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 418.641037][T21198] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 418.799431][T10505] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 418.821580][T10505] usb 13-1: device descriptor read/8, error -71 [ 418.828845][T21215] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3977'. [ 418.992616][ T1496] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 419.087686][T10505] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 419.121648][T10505] usb 13-1: device descriptor read/8, error -71 [ 419.151897][ T1496] usb 8-1: Using ep0 maxpacket: 32 [ 419.156049][ T1496] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 419.160378][ T1496] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 419.167283][ T1496] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 419.171646][ T1496] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 419.180363][ T1496] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 419.184076][ T1496] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.187173][ T1496] usb 8-1: Product: syz [ 419.188782][ T1496] usb 8-1: Manufacturer: syz [ 419.190546][ T1496] usb 8-1: SerialNumber: syz [ 419.205753][ C2] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 419.212019][ T1496] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input41 [ 419.249859][T10505] usb usb13-port1: unable to enumerate USB device [ 419.435664][ T1496] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 419.439185][ T1496] (id 0x00) [ 419.495825][ T1496] rc_core: IR keymap rc-imon-pad not found [ 419.497978][ T1496] Registered IR keymap rc-empty [ 419.501006][ T1496] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 419.507157][ T1496] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 419.661184][ T1496] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 419.676566][ T1496] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input42 [ 419.683872][ T1496] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:16> initialized [ 419.866458][T21212] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 419.873055][T20256] usb 8-1: USB disconnect, device number 16 [ 420.177993][T21234] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3981'. [ 420.271463][ T42] audit: type=1400 audit(662.555:1903): avc: denied { getopt } for pid=21237 comm="syz.9.3983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 420.279754][ T42] audit: type=1400 audit(662.564:1904): avc: denied { read write } for pid=21237 comm="syz.9.3983" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 420.290296][ T42] audit: type=1400 audit(662.564:1905): avc: denied { open } for pid=21237 comm="syz.9.3983" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 420.499607][T21253] sctp: [Deprecated]: syz.3.3990 (pid 21253) Use of int in max_burst socket option. [ 420.499607][T21253] Use struct sctp_assoc_value instead [ 420.507326][ T42] audit: type=1400 audit(662.770:1906): avc: denied { lock } for pid=21251 comm="syz.3.3990" path="uts:[4026533534]" dev="nsfs" ino=4026533534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 420.564778][T21255] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 420.704252][T21261] bond0 (unregistering): Released all slaves [ 420.763515][T21273] __nla_validate_parse: 2 callbacks suppressed [ 420.763560][T21273] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3996'. [ 420.881747][T21273] netlink: 1 bytes leftover after parsing attributes in process `syz.9.3996'. [ 420.989028][T21277] IPVS: persistence engine module ip_vs_pe_s not found [ 421.136827][T21296] netlink: 'syz.8.4000': attribute type 16 has an invalid length. [ 421.143244][T21296] netlink: 'syz.8.4000': attribute type 17 has an invalid length. [ 421.324747][T21302] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4002'. [ 421.331438][T21302] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4002'. [ 421.335494][T21302] netlink: 'syz.3.4002': attribute type 6 has an invalid length. [ 421.338197][T21302] netlink: 'syz.3.4002': attribute type 5 has an invalid length. [ 421.340996][T21302] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4002'. [ 421.354499][T21302] xt_hashlimit: size too large, truncated to 1048576 [ 421.399096][T21296] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.467867][T21296] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.655267][T21296] macvlan0: left promiscuous mode [ 421.814819][ T5817] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.819653][ T5817] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.825535][ T5817] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.829219][ T5817] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.890155][ T5746] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 421.911844][ T5746] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 421.921103][ T5746] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 421.926143][ T5746] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 421.929849][ T5746] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 422.320752][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.419279][T21313] xfrm0 speed is unknown, defaulting to 1000 [ 422.457024][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.675520][ T42] audit: type=1400 audit(664.801:1907): avc: denied { create } for pid=21337 comm="syz.8.4009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 422.691834][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.951705][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.972437][T21349] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 423.015017][T21349] SELinux: failed to load policy [ 423.093082][T21313] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.109028][T21313] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.128514][T21313] bridge_slave_0: entered allmulticast mode [ 423.139991][T21313] bridge_slave_0: entered promiscuous mode [ 423.151312][T21313] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.158363][T21313] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.165943][T21313] bridge_slave_1: entered allmulticast mode [ 423.181675][T21313] bridge_slave_1: entered promiscuous mode [ 423.299338][T21361] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4012'. [ 423.306290][T21313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.321207][T21313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.337628][T21361] xfrm1: entered promiscuous mode [ 423.343042][T21361] xfrm1: entered allmulticast mode [ 423.508867][T21313] team0: Port device team_slave_0 added [ 423.520367][T21313] team0: Port device team_slave_1 added [ 423.535282][ T42] audit: type=1400 audit(665.615:1908): avc: denied { create } for pid=21368 comm="syz.3.4017" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=llc_socket permissive=1 [ 423.614943][T21313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.618324][T21313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.635598][T21313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.643108][T21313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.645748][T21313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.656484][T21313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.685475][ T12] bridge_slave_1: left allmulticast mode [ 423.689286][ T12] bridge_slave_1: left promiscuous mode [ 423.696564][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.707129][ T12] bridge_slave_0: left allmulticast mode [ 423.709490][ T12] bridge_slave_0: left promiscuous mode [ 423.712121][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.922355][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.927818][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.933024][ T12] bond0 (unregistering): Released all slaves [ 424.028616][T21313] hsr_slave_0: entered promiscuous mode [ 424.032626][T21313] hsr_slave_1: entered promiscuous mode [ 424.036799][T21313] debugfs: 'hsr0' already exists in 'hsr' [ 424.041298][T21313] Cannot create hsr debugfs directory [ 424.079566][ T2162] block nbd0: Possible stuck request ffff888028817000: control (read@0,4096B). Runtime 300 seconds [ 424.207121][ T64] Bluetooth: hci6: command tx timeout [ 424.435617][T21378] netlink: 'syz.3.4019': attribute type 10 has an invalid length. [ 424.550942][T21378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.568918][T21378] \: (slave batadv0): Enslaving as an active interface with an up link [ 424.721423][ T12] hsr_slave_0: left promiscuous mode [ 424.730135][ T12] hsr_slave_1: left promiscuous mode [ 424.734661][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.748049][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.770348][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.780805][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.813788][ T12] veth1_macvtap: left promiscuous mode [ 424.817770][ T12] veth0_macvtap: left promiscuous mode [ 424.821767][ T12] veth1_vlan: left promiscuous mode [ 424.827310][ T12] veth0_vlan: left promiscuous mode [ 425.176046][ T12] team0 (unregistering): Port device team_slave_1 removed [ 425.196153][ T12] team0 (unregistering): Port device team_slave_0 removed [ 426.157708][T21348] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 426.220044][T21313] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 426.244503][T21313] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 426.250866][T21313] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 426.300003][T21313] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 426.316061][T21313] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 426.347059][T21313] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 426.357273][T21313] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 426.373449][ T42] audit: type=1400 audit(668.263:1909): avc: denied { write } for pid=21390 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.391604][T21313] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 426.433100][ T64] Bluetooth: hci6: command tx timeout [ 426.501610][ T42] audit: type=1400 audit(668.385:1910): avc: denied { write } for pid=21404 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.571814][T21313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.596456][ T5450] 8021q: adding VLAN 0 to HW filter on device eth6 [ 426.609001][T21313] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.619167][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.621454][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.631861][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.634182][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.693282][T21413] afs: Unknown parameter 'dyn' [ 426.742374][ T42] audit: type=1400 audit(668.609:1911): avc: denied { write } for pid=21414 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.905046][ T42] audit: type=1400 audit(668.759:1912): avc: denied { write } for pid=21422 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.986451][ T5450] 8021q: adding VLAN 0 to HW filter on device eth7 [ 427.182109][ T42] audit: type=1400 audit(669.021:1913): avc: denied { write } for pid=21436 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.195322][T21313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.307224][ T42] audit: type=1400 audit(669.143:1914): avc: denied { write } for pid=21445 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.441926][ T5450] 8021q: adding VLAN 0 to HW filter on device eth8 [ 427.593984][ T42] audit: type=1400 audit(669.405:1915): avc: denied { write } for pid=21458 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.603091][T21313] veth0_vlan: entered promiscuous mode [ 427.609100][T21313] veth1_vlan: entered promiscuous mode [ 427.710200][T21313] veth0_macvtap: entered promiscuous mode [ 427.734270][T21313] veth1_macvtap: entered promiscuous mode [ 427.751242][ T42] audit: type=1400 audit(669.555:1916): avc: denied { write } for pid=21465 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.779910][T21313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.799025][T21313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.895560][ T5450] 8021q: adding VLAN 0 to HW filter on device eth9 [ 428.000936][ T5549] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.028174][ T5549] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.084765][ T42] audit: type=1400 audit(669.863:1917): avc: denied { write } for pid=21478 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.149282][T11806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.165054][T11806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.182346][ T5817] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.219130][ T42] audit: type=1400 audit(669.994:1918): avc: denied { write } for pid=21483 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.244674][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.250073][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.257025][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.638747][T21509] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 428.651228][T21508] tipc: Enabled bearer , priority 29 [ 428.655426][ T64] Bluetooth: hci6: command tx timeout [ 428.945752][T21528] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 428.954885][T21528] syzkaller1: linktype set to 776 [ 428.967765][T21528] openvswitch: netlink: Unknown key attributes 20 [ 429.197472][T21546] netlink: 'syz.3.4053': attribute type 1 has an invalid length. [ 429.200443][T21546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4053'. [ 429.929545][T21597] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 429.998813][T21610] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4071'. [ 430.246305][T21623] syzkaller0: entered promiscuous mode [ 430.249070][T21623] syzkaller0: entered allmulticast mode [ 430.278074][T21618] xfrm0 speed is unknown, defaulting to 1000 [ 430.436300][T21636] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 430.505005][T21606] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 430.573236][T21645] clocksource: Switched to clocksource acpi_pm [ 430.574001][T21645] clocksource: Switched to clocksource tsc [ 430.574414][T21645] scsi_nl_rcv_msg: discarding partial skb [ 430.856231][T21642] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 430.881519][ T64] Bluetooth: hci6: command tx timeout [ 431.114127][ T12] bond0: (slave bond_slave_0): interface is now down [ 431.146674][ T12] bond0: (slave bond_slave_1): interface is now down [ 431.247647][ T12] bond0: (slave bond_slave_0): interface is now down [ 431.255303][ T12] bond0: (slave bond_slave_1): interface is now down [ 431.363364][ T12] bond0: now running without any active interface! [ 431.371967][T21694] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 431.384312][T21694] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4090'. [ 431.391083][T21682] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4086'. [ 431.672872][T21713] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4094'. [ 431.681520][T21713] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4094'. [ 431.729915][T21718] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4094'. [ 431.734092][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 431.734107][ T42] audit: type=1400 audit(673.282:1946): avc: denied { write } for pid=21714 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.763745][T21718] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4094'. [ 431.797499][T21721] tipc: Enabled bearer , priority 10 [ 431.809901][T21713] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4094'. [ 431.826775][T21721] tipc: Disabling bearer [ 431.857542][ T12] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.861265][ T12] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.864992][ T12] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.869232][ T12] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.083184][T21744] random: crng reseeded on system resumption [ 432.092355][T20256] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 432.109380][ T42] audit: type=1400 audit(673.628:1947): avc: denied { ioctl } for pid=21736 comm="syz.3.4100" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 432.257574][T20256] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 432.266461][T20256] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 432.276787][T20256] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 103, changing to 10 [ 432.295551][T20256] usb 13-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 432.309588][T20256] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 432.314542][T20256] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 432.316796][ T24] usb 14-1: new high-speed USB device number 16 using dummy_hcd [ 432.322799][T20256] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 129, changing to 11 [ 432.322829][T20256] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 1088, setting to 64 [ 432.332500][T20256] usb 13-1: New USB device found, idVendor=0582, idProduct=0040, bcdDevice= 0.40 [ 432.332528][T20256] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.332549][T20256] usb 13-1: Product: ꒟銗秦ᳩ芗쒪⠂촹運쭇⭾艢䟻챑鹴_ƀ׊밺뺞㶄ꀑ鉇症ూ裈௖퐊뀴硗슚撗ᳬ靈뢞ఠ鉠蘠卟㎻去룽㜑詤퉷祇槳銐㞷咒⧿鑩窃ᧀ裊쉹乱屁䍧裿腃뾜쁿哰季⍒鍫鍖쐡㔈憲ꛌሠ챤眖勤滘鴧㒴治겐펷ꀚ늦湥㓊䏗튛ꘉ猪翨记䷋毨埐R [ 432.332579][T20256] usb 13-1: Manufacturer: 爯⡕쒳礷僩跺欙仞勻笄와⼘ʮ곉輗釼薪ⷠЇ䛗㼺풌었蘞矋究鹪኶旻ﻔу㞱協鶉✜੔⬕瑧瀠圹響 [ 432.332600][T20256] usb 13-1: SerialNumber: 憻ㄭ︳ﺳ蠅먦㾚点咡騎๏펛눬垸䃓癸㋋喛氒饟先瞃ެ颵맴쭝샂ຖዥꈫ㦗Ṵﭖ읈㔅露햔䔟霟腠쵥;牒ق뛽냠鳝꽄惓̼幹绬꿔₌滺펄἖籅ﻄ茤歔ꣀꀺ⏀ꮙ᧹⍫숣ꢢ֫ᶑᗿࣾᐏ쾙遏逸⹗鳉棳岌௝뻚犮책花䪊觉蟅뼆萨ᘾ걇횳䅙┖⋅⟆꽉ᱪ憊 [ 432.362287][T21727] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 432.508524][ T24] usb 14-1: device descriptor read/64, error -71 [ 432.583893][T11647] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 432.688650][T18202] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.692862][T18202] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.722750][T11647] usb 11-1: device descriptor read/64, error -71 [ 432.764989][ T24] usb 14-1: new high-speed USB device number 17 using dummy_hcd [ 432.816109][T21727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.820941][T21727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.824910][T21727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.836730][T21727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.846166][T18202] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.849661][T20256] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 432.856224][T20256] usb 13-1: invalid MIDI in EP 0 [ 432.862089][T18202] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.903960][ T24] usb 14-1: device descriptor read/64, error -71 [ 432.938368][T20256] snd-usb-audio 13-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 432.946242][T20256] usb 13-1: USB disconnect, device number 10 [ 432.964950][T11246] udevd[11246]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb13/13-1/13-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 432.979026][T11647] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 433.015084][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 433.026878][ T24] usb usb14-port1: attempt power cycle [ 433.029714][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 433.030372][T18202] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.034747][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 433.035966][T18202] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.037520][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 433.042806][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 433.127281][T18202] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.128455][T11647] usb 11-1: device descriptor read/64, error -71 [ 433.130952][T18202] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.251832][T11647] usb usb11-port1: attempt power cycle [ 433.336780][T18202] bridge_slave_1: left allmulticast mode [ 433.342268][T18202] bridge_slave_1: left promiscuous mode [ 433.353427][T18202] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.358959][T18202] bridge_slave_0: left allmulticast mode [ 433.361966][T18202] bridge_slave_0: left promiscuous mode [ 433.364705][T18202] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.381766][T18202] tipc: Resetting bearer [ 433.388479][ T24] usb 14-1: new high-speed USB device number 18 using dummy_hcd [ 433.407337][ T24] usb 14-1: device descriptor read/8, error -71 [ 433.561930][T18202] tipc: Disabling bearer [ 433.595289][T18202] \ (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.601454][T18202] \ (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.606581][T18202] \ (unregistering): (slave batadv0): Releasing backup interface [ 433.614729][T11647] usb 11-1: new high-speed USB device number 23 using dummy_hcd [ 433.624934][T18202] \ (unregistering): Released all slaves [ 433.633302][T11647] usb 11-1: device descriptor read/8, error -71 [ 433.673411][ T24] usb 14-1: new high-speed USB device number 19 using dummy_hcd [ 433.707691][T21757] xfrm0 speed is unknown, defaulting to 1000 [ 433.716302][T18202] tipc: Disabling bearer [ 433.717691][ T24] usb 14-1: device descriptor read/8, error -71 [ 433.724395][T18202] tipc: Left network mode [ 433.836344][ T24] usb usb14-port1: unable to enumerate USB device [ 433.883464][ T42] audit: type=1400 audit(675.294:1948): avc: denied { write } for pid=21773 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.899008][T11647] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 433.920111][T11647] usb 11-1: device descriptor read/8, error -71 [ 434.030428][ T42] audit: type=1400 audit(675.434:1949): avc: denied { write } for pid=21779 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 434.041549][T11647] usb usb11-port1: unable to enumerate USB device [ 434.163827][T18202] hsr_slave_0: left promiscuous mode [ 434.168154][T18202] hsr_slave_1: left promiscuous mode [ 434.171064][T18202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.174073][T18202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.187414][T18202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.196541][T18202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.214042][T18202] veth1_macvtap: left promiscuous mode [ 434.216481][T18202] veth0_macvtap: left promiscuous mode [ 434.224696][T18202] veth1_vlan: left promiscuous mode [ 434.227004][T18202] veth0_vlan: left promiscuous mode [ 434.293486][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 434.551556][T18202] team0 (unregistering): Port device team_slave_1 removed [ 434.568799][T18202] team0 (unregistering): Port device team_slave_0 removed [ 434.672506][ T5450] 8021q: adding VLAN 0 to HW filter on device eth11 [ 434.930968][T21801] openvswitch: netlink: Multiple metadata blocks provided [ 434.954931][ T42] audit: type=1400 audit(676.295:1950): avc: denied { write } for pid=21796 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 435.023573][ T42] audit: type=1400 audit(676.360:1951): avc: denied { write } for pid=21804 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 435.057564][T21757] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.060744][T21757] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.064351][T21757] bridge_slave_0: entered allmulticast mode [ 435.067512][T21757] bridge_slave_0: entered promiscuous mode [ 435.089485][T21757] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.094135][T21757] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.105912][T21757] bridge_slave_1: entered allmulticast mode [ 435.109064][T21757] bridge_slave_1: entered promiscuous mode [ 435.152227][ T5450] 8021q: adding VLAN 0 to HW filter on device eth12 [ 435.173130][T21757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.185670][T21757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.222348][T21757] team0: Port device team_slave_0 added [ 435.233782][ T5746] Bluetooth: hci1: command tx timeout [ 435.234514][T21757] team0: Port device team_slave_1 added [ 435.272058][T21757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.285003][ T42] audit: type=1400 audit(676.604:1952): avc: denied { write } for pid=21809 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 435.292333][T21757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.312244][T21757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.323426][T21757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.327418][T21757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.348066][T21757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.357715][ T42] audit: type=1400 audit(676.669:1953): avc: denied { write } for pid=21814 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 435.463140][ T5450] 8021q: adding VLAN 0 to HW filter on device eth13 [ 435.507626][T21757] hsr_slave_0: entered promiscuous mode [ 435.514510][T21757] hsr_slave_1: entered promiscuous mode [ 435.519029][T21757] debugfs: 'hsr0' already exists in 'hsr' [ 435.523026][T21757] Cannot create hsr debugfs directory [ 435.724051][ T42] audit: type=1400 audit(677.015:1954): avc: denied { write } for pid=21828 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 435.742800][T21823] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 435.811612][T21836] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4120'. [ 435.820072][T21836] openvswitch: netlink: Flow actions attr not present in new flow. [ 435.863044][ T42] audit: type=1400 audit(677.137:1955): avc: denied { write } for pid=21837 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 435.900423][T21836] zonefs (loop6) ERROR: Not a zoned block device [ 435.933808][ T5450] 8021q: adding VLAN 0 to HW filter on device eth18 [ 436.120802][T21850] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4125'. [ 436.215609][T21845] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4123'. [ 436.224192][T21848] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4123'. [ 436.439244][T21863] rdma_rxe: rxe_newlink: failed to add vcan0 [ 436.449906][T21863] netlink: 199784 bytes leftover after parsing attributes in process `syz.9.4128'. [ 436.455809][T21863] netlink: 'syz.9.4128': attribute type 1 has an invalid length. [ 436.623163][T21872] tipc: Started in network mode [ 436.626508][T21872] tipc: Node identity 7f000001, cluster identity 4711 [ 436.631076][T21872] tipc: Enabling of bearer rejected, failed to enable media [ 436.849573][T21878] vxfs: WRONG superblock magic 00000000 at 1 [ 436.851764][T21878] vxfs: WRONG superblock magic 00000000 at 8 [ 436.853606][T21878] vxfs: can't find superblock. [ 437.069874][T21901] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4137'. [ 437.075844][T21902] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4136'. [ 437.078865][T21901] openvswitch: netlink: Flow actions attr not present in new flow. [ 437.135122][T21901] zonefs (loop9) ERROR: Not a zoned block device [ 437.207310][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 437.207321][ T42] audit: type=1400 audit(678.400:1960): avc: denied { write } for pid=21898 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 437.369461][ T42] audit: type=1400 audit(678.550:1961): avc: denied { write } for pid=21912 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 437.407539][T21917] comedi comedi4: comedi_config --init_data is deprecated [ 437.456511][ T5746] Bluetooth: hci1: command tx timeout [ 437.522553][T21926] sysfs: Unknown parameter '{P:/Qg; \`e>;' [ 437.573007][ T5746] Bluetooth: hci3: ACL packet too small [ 437.712293][T21757] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 437.726934][T21757] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 437.731151][T21757] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 437.741725][T21757] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 437.747939][T21757] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 437.764151][T21757] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 437.768935][T21757] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 437.800159][T21757] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 437.806246][ T42] audit: type=1400 audit(678.962:1962): avc: denied { write } for pid=21931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 437.815331][T21939] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4145'. [ 437.847384][T21947] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4145'. [ 437.914267][ T42] audit: type=1400 audit(679.065:1963): avc: denied { write } for pid=21950 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 437.955829][T21757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.986343][T21757] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.007317][T11806] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.009750][T11806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.031096][T11806] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.033406][T11806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.109241][ T42] audit: type=1400 audit(679.243:1964): avc: denied { write } for pid=21957 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.254050][ T42] audit: type=1400 audit(679.383:1965): avc: denied { write } for pid=21972 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.338679][ T42] audit: type=1326 audit(679.458:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21981 comm="syz.8.4153" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f2b9e019 code=0x7ffc0000 [ 438.363994][ T42] audit: type=1326 audit(679.467:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21981 comm="syz.8.4153" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f2b9e019 code=0x7ffc0000 [ 438.386399][ T42] audit: type=1326 audit(679.467:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21981 comm="syz.8.4153" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f2b9e019 code=0x7ffc0000 [ 438.407355][ T42] audit: type=1326 audit(679.467:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21981 comm="syz.8.4153" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa7f2b9e019 code=0x7ffc0000 [ 438.929542][T22015] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 44 [ 438.936786][T21757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.451126][T21757] veth0_vlan: entered promiscuous mode [ 439.463739][T21757] veth1_vlan: entered promiscuous mode [ 439.504771][T21757] veth0_macvtap: entered promiscuous mode [ 439.523187][T21757] veth1_macvtap: entered promiscuous mode [ 439.544277][T21757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.551248][T21757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.575115][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.583986][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.609428][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.625624][T10505] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 439.680672][T18202] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.680881][ T5746] Bluetooth: hci1: command tx timeout [ 439.787478][T10505] usb 11-1: device descriptor read/64, error -71 [ 439.805021][ T9289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.814278][ T9289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.874144][T11806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.884662][T11806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.014650][T22064] fuse: Bad value for 'group_id' [ 440.023031][T22064] fuse: Bad value for 'group_id' [ 440.065344][T10505] usb 11-1: new high-speed USB device number 26 using dummy_hcd [ 440.126507][T22074] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 440.202435][T10505] usb 11-1: device descriptor read/64, error -71 [ 440.332045][T10505] usb usb11-port1: attempt power cycle [ 440.572385][T22102] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 440.582997][T22099] team0: Device vlan3 is already an upper device of the team interface [ 440.627434][T22107] befs: (nullb0): No write support. Marking filesystem read-only [ 440.662963][T22107] befs: (nullb0): invalid magic header [ 440.694665][T10505] usb 11-1: new high-speed USB device number 27 using dummy_hcd [ 440.717947][T10505] usb 11-1: device descriptor read/8, error -71 [ 440.789082][T22116] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4177'. [ 440.958638][ T5746] Bluetooth: hci3: Invalid handle: 0xffc9 > 0x0eff [ 440.985451][T10505] usb 11-1: new high-speed USB device number 28 using dummy_hcd [ 441.016372][T10505] usb 11-1: device descriptor read/8, error -71 [ 441.143905][T10505] usb usb11-port1: unable to enumerate USB device [ 441.324721][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 441.495631][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 441.499877][ T9] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 441.503707][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.528932][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 441.531850][ T9] pvrusb2: ********** [ 441.533711][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 441.537686][ T9] pvrusb2: Important functionality might not be entirely working. [ 441.545674][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 441.550414][ T9] pvrusb2: ********** [ 441.762205][ T2522] pvrusb2: Invalid write control endpoint [ 441.902357][ T5746] Bluetooth: hci1: command tx timeout [ 441.973144][ T2522] pvrusb2: Invalid write control endpoint [ 441.980535][ T2522] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 441.995404][ T2522] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 441.999994][ T2522] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 442.004126][ T2522] pvrusb2: Device being rendered inoperable [ 442.026511][T22135] pvrusb2: Attempted to execute control transfer when device not ok [ 442.033386][T22158] __nla_validate_parse: 2 callbacks suppressed [ 442.033405][T22158] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4182'. [ 442.039810][ T2522] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 442.046333][ T2522] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 442.051778][T22158] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4182'. [ 442.065152][T22158] geneve2: entered promiscuous mode [ 442.067576][T22158] geneve2: entered allmulticast mode [ 442.070624][ T2522] pvrusb2: Attached sub-driver cx25840 [ 442.074115][ T2522] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 442.080319][ T2522] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 442.096033][T11647] usb 10-1: USB disconnect, device number 4 [ 442.243598][ T9] usb 14-1: new high-speed USB device number 20 using dummy_hcd [ 442.404301][ T9] usb 14-1: Using ep0 maxpacket: 32 [ 442.408933][ T9] usb 14-1: config 2 has an invalid interface number: 194 but max is 0 [ 442.415123][ T9] usb 14-1: config 2 has no interface number 0 [ 442.419467][ T9] usb 14-1: config 2 interface 194 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 833 [ 442.425548][ T9] usb 14-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024 [ 442.431307][ T9] usb 14-1: config 2 interface 194 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 442.438941][ T9] usb 14-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 442.442328][ T9] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.462461][T22154] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 442.465099][T22154] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 442.608632][T22166] hpfs: Bad magic ... probably not HPFS [ 442.740109][ T9] usb 14-1: string descriptor 0 read error: -71 [ 442.745961][ T9] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 442.870699][T22176] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4195'. [ 442.887960][T22176] netlink: 'syz.6.4195': attribute type 30 has an invalid length. [ 442.894471][T22177] netlink: 'syz.6.4195': attribute type 10 has an invalid length. [ 442.901421][ T9] usb 14-1: USB disconnect, device number 20 [ 442.913623][T22179] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4195'. [ 442.917988][T22179] netlink: 'syz.6.4195': attribute type 30 has an invalid length. [ 442.980935][ T5549] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.996760][ T5549] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.001633][ T5549] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.012206][ T5549] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.136010][ T10] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 443.416185][T20256] libceph: mon0 (1)[c::]:6789 socket error on write [ 443.496951][ T42] kauditd_printk_skb: 83 callbacks suppressed [ 443.496968][ T42] audit: type=1400 audit(684.287:2053): avc: denied { read } for pid=22206 comm="syz.9.4204" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 443.517452][ T42] audit: type=1400 audit(684.305:2054): avc: denied { open } for pid=22206 comm="syz.9.4204" path="/dev/btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 443.539028][ T42] audit: type=1400 audit(684.305:2055): avc: denied { ioctl } for pid=22206 comm="syz.9.4204" path="/dev/btrfs-control" dev="devtmpfs" ino=1341 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 443.555333][ T42] audit: type=1400 audit(684.315:2056): avc: denied { execmem } for pid=22206 comm="syz.9.4204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 443.592203][T22216] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4205'. [ 443.645763][T22218] netlink: 'syz.9.4206': attribute type 4 has an invalid length. [ 443.921141][ T1496] usb 14-1: new high-speed USB device number 21 using dummy_hcd [ 443.968285][ T9] libceph: mon0 (1)[c::]:6789 socket error on write [ 444.018118][T22188] ceph: No mds server is up or the cluster is laggy [ 444.065653][ T42] audit: type=1400 audit(684.820:2057): avc: denied { write } for pid=22227 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.066211][ T1496] usb 14-1: device descriptor read/64, error -71 [ 444.274889][ T42] audit: type=1400 audit(685.017:2058): avc: denied { write } for pid=22241 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.359285][ T1496] usb 14-1: new high-speed USB device number 22 using dummy_hcd [ 444.498464][ T1496] usb 14-1: device descriptor read/64, error -71 [ 444.543065][ T42] audit: type=1400 audit(685.269:2059): avc: denied { mount } for pid=22252 comm="syz.8.4215" name="/" dev="9p" ino=77885979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 444.597429][ T42] audit: type=1400 audit(685.325:2060): avc: denied { write } for pid=22249 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.614202][ T42] audit: type=1400 audit(685.335:2061): avc: denied { unmount } for pid=19806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 444.622070][ T1496] usb usb14-port1: attempt power cycle [ 444.781287][ T42] audit: type=1400 audit(685.494:2062): avc: denied { write } for pid=22259 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.903294][T22264] kvm: kvm [22263]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 444.980096][ T1496] usb 14-1: new high-speed USB device number 23 using dummy_hcd [ 445.002789][ T1496] usb 14-1: device descriptor read/8, error -71 [ 445.190256][T22280] CIFS: Unable to determine destination address [ 445.256869][ T1496] usb 14-1: new high-speed USB device number 24 using dummy_hcd [ 445.284248][T22285] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4220'. [ 445.284759][ T1496] usb 14-1: device descriptor read/8, error -71 [ 445.288185][T22285] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4220'. [ 445.408250][ T1496] usb usb14-port1: unable to enumerate USB device [ 445.815710][T22291] [U] zͻi[27| [ 445.817113][T22291] [U] BswAerOU]~A`1eX!j5i5y2ڂ_S"qh$6\P[2*/Wb_$0A7 Xۖ(wc# =g< [ 445.821527][T22291] [U] Iwub:lEeiBHk^VI|ȥ\xd [ 445.823888][T22291] [U] |KIH;F~{Iӎ=Mkq%hd9!@a*lz~`E=[>meLhc`'u~+ۤmͷLXX舂i 'j3e=:3/C_81(FW [ 445.837883][T22291] [U] 8)X)YvxRĻbmbN@ox;JD, [ 445.839988][T22291] [U] *Cn3v7KEXgt_3 [ 445.841623][T22291] [U] D/QazҬEHgE1$_ks=R@ [ 445.843417][T22291] [U] ϼcEv @ [ 445.844736][T22291] [U] a% [ 445.846139][T22291] [U] @cÏ_-ƱZ&<Z9ah_L@bKÈs3JJ5D;wWˆUuyLbҳ53ż{4XRQrH=M"/@ opS~{Pӡ~i*T~W)Q~ȵ_ߜͬz~Vq۪` [ 445.852272][T22291] [U] f1p3 [ 445.853375][T22291] [U] N0[L;a_l&kMC [ 445.854960][T22291] [U] r6w^gP$u4~GCߚpkFtw~@L1 [ 445.859087][T22290] [U] :K!:Y咑;Rdma9tbt= Ҫ+sS i-YJc (ґx|]k|_V҉T8MNi׎ͪY΃zAM"ev3KěO0q]^)?ס8ⅴS ܝXeݢ%4, priority 10 [ 455.327314][T22687] loop5: detected capacity change from 0 to 7 [ 455.357285][T22687] Dev loop5: unable to read RDB block 7 [ 455.365254][T22687] loop5: unable to read partition table [ 455.387502][T22687] loop5: partition table beyond EOD, truncated [ 455.394411][T22687] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 455.426703][ T5148] Dev loop5: unable to read RDB block 7 [ 455.428726][ T5148] loop5: unable to read partition table [ 455.431712][ T5148] loop5: partition table beyond EOD, truncated [ 455.605978][ T42] audit: type=1400 audit(695.619:2089): avc: denied { bind } for pid=22704 comm="syz.9.4350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 455.789837][T22703] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 455.986980][ T42] audit: type=1400 audit(695.984:2090): avc: denied { append } for pid=22726 comm="syz.6.4355" name="mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 455.991891][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 456.003683][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 456.021037][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 456.027148][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 456.033967][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 456.153595][ T42] audit: type=1400 audit(696.134:2091): avc: denied { write } for pid=22730 comm="syz.6.4356" name="c_chmask" dev="configfs" ino=111018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 456.154837][T22731] tipc: Started in network mode [ 456.169952][ T42] audit: type=1400 audit(696.134:2092): avc: denied { open } for pid=22730 comm="syz.6.4356" path="/88/my_configfs/usb_gadget/g1/functions/uac2.usb0/c_chmask" dev="configfs" ino=111018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 456.174900][T22731] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 456.198869][ T2162] block nbd0: Possible stuck request ffff888028817000: control (read@0,4096B). Runtime 330 seconds [ 456.202070][T22731] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 456.214061][T22731] tipc: Enabled bearer , priority 10 [ 456.414480][T22723] xfrm0 speed is unknown, defaulting to 1000 [ 456.512226][T22757] program syz.9.4362 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 456.517988][T19821] tipc: Node number set to 2130706433 [ 456.709856][T22723] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.712969][T22723] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.719215][T22723] bridge_slave_0: entered allmulticast mode [ 456.733929][T11647] usb 11-1: new full-speed USB device number 29 using dummy_hcd [ 456.738071][T22723] bridge_slave_0: entered promiscuous mode [ 456.754446][T22723] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.761468][T22723] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.770058][T22723] bridge_slave_1: entered allmulticast mode [ 456.773853][T22723] bridge_slave_1: entered promiscuous mode [ 456.799314][T22723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.804174][T22723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.836040][T22765] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 456.836586][T22723] team0: Port device team_slave_0 added [ 456.853209][T22723] team0: Port device team_slave_1 added [ 456.895361][T22723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.898452][T22723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.918201][T11647] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 456.923925][T22723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.925209][T11647] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.931284][T22723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.934294][T11647] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 456.937950][T22723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.941970][T11647] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.956073][T22772] netlink: 'syz.9.4366': attribute type 1 has an invalid length. [ 456.957474][T22723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.975592][T22772] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 456.981070][T22772] IPv6: NLM_F_CREATE should be set when creating new route [ 457.001157][T22772] netlink: 'syz.9.4366': attribute type 1 has an invalid length. [ 457.004583][T22772] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 457.009619][T22772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=22772 comm=syz.9.4366 [ 457.081594][T22723] hsr_slave_0: entered promiscuous mode [ 457.084412][T22723] hsr_slave_1: entered promiscuous mode [ 457.094116][T22723] debugfs: 'hsr0' already exists in 'hsr' [ 457.099821][T22723] Cannot create hsr debugfs directory [ 457.179148][T11647] usb 11-1: usb_control_msg returned -32 [ 457.183953][T11647] usbtmc 11-1:16.0: can't read capabilities [ 457.373744][T22723] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.429771][T11647] tipc: Node number set to 1 [ 457.513307][T22723] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.623339][T22723] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.742481][T22723] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.972765][T22723] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 457.980757][T22723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 457.985321][T22723] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 457.991578][T22723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 458.012134][T22723] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 458.031469][T22723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 458.040523][T22723] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 458.056704][T22723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 458.192101][T22723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.240071][T22723] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.266807][T11815] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.269853][T11815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.317803][ T5746] Bluetooth: hci3: command tx timeout [ 458.338088][T11815] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.341202][T11815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.512276][T22804] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4373'. [ 458.575361][T22809] loop5: detected capacity change from 0 to 7 [ 458.851190][T22812] loop5: detected capacity change from 7 to 0 [ 458.856075][T22809] ldm_validate_partition_table(): Disk read failed. [ 458.859762][T22809] Dev loop5: unable to read RDB block 0 [ 458.864811][T22809] loop5: unable to read partition table [ 458.867014][T22809] loop5: partition table beyond EOD, truncated [ 458.869238][T22809] loop_reread_partitions: partition scan of loop5 (|:G53Dxx=eh#]ǛY,>qE%|) failed (rc=-5) [ 458.892408][T22810] support for cryptoloop has been removed. Use dm-crypt instead. [ 458.944879][T22723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.130261][T22723] veth0_vlan: entered promiscuous mode [ 459.174812][T22723] veth1_vlan: entered promiscuous mode [ 459.208798][T22723] veth0_macvtap: entered promiscuous mode [ 459.220281][T22723] veth1_macvtap: entered promiscuous mode [ 459.272398][T22723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.294490][T22723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.355007][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.371531][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.409724][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.417613][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.509913][ T9289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.521615][ T9289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.544092][T10505] usb 14-1: new high-speed USB device number 26 using dummy_hcd [ 459.645936][ T9294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.649147][ T9294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.680321][ T42] audit: type=1400 audit(699.428:2093): avc: denied { mount } for pid=22723 comm="syz-executor" name="/" dev="gadgetfs" ino=6138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 459.687493][ T1496] usb 11-1: USB disconnect, device number 29 [ 459.699256][ T5746] Bluetooth: hci1: ACL packet too small [ 459.711243][T10505] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 459.723582][T10505] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 459.735634][T10505] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 459.745571][T10505] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 459.754617][T10505] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.792204][T10505] usb 14-1: config 0 descriptor?? [ 459.796367][T22831] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 459.840817][T22845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4386'. [ 459.876099][T22844] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 459.974073][ T42] audit: type=1400 audit(699.709:2094): avc: denied { setattr } for pid=22838 comm="syz.0.4352" name="NETLINK" dev="sockfs" ino=112300 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 459.982587][T22846] i2c i2c-0: Failed to register i2c client ptn36502 at 0x1a (-16) [ 460.160860][T22862] ip_tables: iptables: counters copy to user failed while replacing table [ 460.233662][ T42] audit: type=1400 audit(699.952:2095): avc: denied { ioctl } for pid=22865 comm="syz.6.4394" path="socket:[112309]" dev="sockfs" ino=112309 ioctlcmd=0x5881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 460.314575][ T42] audit: type=1400 audit(700.017:2096): avc: denied { ioctl } for pid=22869 comm="syz.6.4396" path="/dev/ptyr1" dev="devtmpfs" ino=144 ioctlcmd=0x5430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 460.356825][ T1496] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 460.463787][ T42] audit: type=1400 audit(700.167:2097): avc: denied { remount } for pid=22828 comm="syz.9.4379" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 460.470809][T22829] devpts: Unknown parameter 'NۯFbM'Num~%Yv܂w9-|q3r7؎' [ 460.481940][T10505] usbhid 14-1:0.0: can't add hid device: -71 [ 460.486196][T10505] usbhid 14-1:0.0: probe with driver usbhid failed with error -71 [ 460.494730][T10505] usb 14-1: USB disconnect, device number 26 [ 460.538276][ T5746] Bluetooth: hci3: command tx timeout [ 460.544698][ T1496] usb 10-1: config 1 has an invalid interface number: 80 but max is 2 [ 460.547462][ T1496] usb 10-1: config 1 has an invalid interface number: 236 but max is 2 [ 460.552235][ T1496] usb 10-1: config 1 has an invalid interface number: 252 but max is 2 [ 460.555226][ T1496] usb 10-1: config 1 has no interface number 0 [ 460.557534][ T1496] usb 10-1: config 1 has no interface number 1 [ 460.560984][ T1496] usb 10-1: config 1 has no interface number 2 [ 460.563479][ T1496] usb 10-1: config 1 interface 236 altsetting 5 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 460.567634][ T1496] usb 10-1: config 1 interface 236 altsetting 5 has a duplicate endpoint with address 0x84, skipping [ 460.571312][ T1496] usb 10-1: config 1 interface 80 has no altsetting 0 [ 460.573620][ T1496] usb 10-1: config 1 interface 236 has no altsetting 0 [ 460.575951][ T1496] usb 10-1: config 1 interface 252 has no altsetting 0 [ 460.580213][ T1496] usb 10-1: New USB device found, idVendor=07ca, idProduct=b568, bcdDevice= c.ac [ 460.585898][ T1496] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.588507][ T1496] usb 10-1: Product: 눰뫜큆Ḧ삧⾊꠽金燠될輮ꋝ䌍癩⦀雥紥ᙔလŠ덱ꫡ懻 [ 460.592354][ T1496] usb 10-1: Manufacturer: Љ [ 460.594173][ T1496] usb 10-1: SerialNumber: ь [ 460.824590][T22860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.832414][T22860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.839425][T22860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.846676][T22860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.925015][ T1496] dvb-usb: found a 'AVerMedia AVerTV DVB-T Express' in cold state, will try to load a firmware [ 460.936229][ T1496] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 460.939300][ T1496] dib0700: firmware download failed at 7 with -22 [ 460.946187][ T1496] dvb-usb: found a 'AVerMedia AVerTV DVB-T Express' in cold state, will try to load a firmware [ 460.950262][ T1496] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 460.953394][ T1496] dib0700: firmware download failed at 7 with -22 [ 460.961980][ T1496] usb-storage 10-1:1.252: USB Mass Storage device detected [ 461.050187][ T1496] dvb-usb: found a 'AVerMedia AVerTV DVB-T Express' in cold state, will try to load a firmware [ 461.060323][ T1496] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 461.067874][ T1496] dib0700: firmware download failed at 7 with -22 [ 461.100988][ T1496] usb 10-1: USB disconnect, device number 6 [ 461.223221][T20256] IPVS: starting estimator thread 0... [ 461.225586][T22889] netlink: 'syz.0.4403': attribute type 21 has an invalid length. [ 461.248421][T22889] libceph: secret too big 3051 [ 461.319419][T22890] IPVS: using max 48 ests per chain, 115200 per kthread [ 461.436391][ T42] audit: type=1400 audit(701.075:2098): avc: denied { ioctl } for pid=22907 comm="syz.9.4408" path="socket:[113292]" dev="sockfs" ino=113292 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 461.469124][T22910] netlink: 'syz.0.4409': attribute type 11 has an invalid length. [ 461.484262][T22910] netlink: 'syz.0.4409': attribute type 4 has an invalid length. [ 461.779998][T22922] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4414'. [ 462.262913][ T5746] Bluetooth: hci3: ACL packet too small [ 462.354100][T22951] ALSA: seq fatal error: cannot create timer (-19) [ 462.576483][T22973] 9pnet_fd: p9_fd_create_tcp (22973): problem connecting socket to 127.0.0.1 [ 462.602938][ T6375] libceph: connect (1)127.0.0.1:6789 error -22 [ 462.605099][ T6375] libceph: mon0 (1)127.0.0.1:6789 connect error [ 462.619724][T22966] ALSA: seq fatal error: cannot create timer (-19) [ 462.619777][ T42] audit: type=1400 audit(702.179:2099): avc: denied { read } for pid=22965 comm="syz.0.4427" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 462.655681][ T42] audit: type=1400 audit(702.179:2100): avc: denied { read } for pid=22965 comm="syz.0.4427" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 462.667664][ T42] audit: type=1400 audit(702.179:2101): avc: denied { open } for pid=22965 comm="syz.0.4427" path="/15/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 462.678130][ T42] audit: type=1400 audit(702.179:2102): avc: denied { read } for pid=22965 comm="syz.0.4427" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 462.762577][ T5746] Bluetooth: hci3: command tx timeout [ 462.825421][T11647] usb 14-1: new high-speed USB device number 27 using dummy_hcd [ 462.922974][T19821] libceph: connect (1)127.0.0.1:6789 error -22 [ 462.926210][T19821] libceph: mon0 (1)127.0.0.1:6789 connect error [ 463.023499][T11647] usb 14-1: config index 0 descriptor too short (expected 45, got 36) [ 463.026950][T11647] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.031852][T11647] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.039971][T11647] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 463.044285][T11647] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 463.047265][T11647] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.058049][T11647] usb 14-1: config 0 descriptor?? [ 463.465374][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.487752][T19821] libceph: connect (1)127.0.0.1:6789 error -22 [ 463.490862][T19821] libceph: mon0 (1)127.0.0.1:6789 connect error [ 463.525847][T11647] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 463.680814][T11647] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 463.773372][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 463.774172][T21313] svc: failed to register nfsdv3 RPC service (errno 111). [ 463.809926][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 463.810370][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.822173][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 463.828838][T21313] svc: failed to register nfsaclv3 RPC service (errno 111). [ 463.828853][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 463.845588][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 463.848459][T21313] failed to unregister tcp with rpcbind [ 463.964331][T21313] svc: failed to register nfsdv3 RPC service (errno 97). [ 463.970741][T21313] svc: failed to register nfsaclv3 RPC service (errno 97). [ 463.975054][T21313] failed to unregister tcp with rpcbind [ 464.091547][T10505] libceph: connect (1)127.0.0.1:6789 error -22 [ 464.103291][T10505] libceph: mon0 (1)127.0.0.1:6789 connect error [ 464.205779][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.315083][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.387792][T10505] libceph: connect (1)127.0.0.1:6789 error -22 [ 464.397294][T22995] xfrm0 speed is unknown, defaulting to 1000 [ 464.401403][T10505] libceph: mon0 (1)127.0.0.1:6789 connect error [ 464.428321][T11647] usb 11-1: new high-speed USB device number 30 using dummy_hcd [ 464.490775][ T1496] libceph: connect (1)127.0.0.1:6789 error -22 [ 464.494112][ T1496] libceph: mon0 (1)127.0.0.1:6789 connect error [ 464.610255][T11647] usb 11-1: Using ep0 maxpacket: 8 [ 464.637222][T11647] usb 11-1: config 0 has an invalid interface number: 143 but max is 0 [ 464.648852][T11647] usb 11-1: config 0 has no interface number 0 [ 464.659694][T11647] usb 11-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 464.687445][T11647] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.702135][T11647] usb 11-1: config 0 descriptor?? [ 464.841541][ T12] bridge_slave_1: left allmulticast mode [ 464.846912][T11647] viperboard 11-1:0.143: version 0.00 found at bus 011 address 030 [ 464.856598][ T12] bridge_slave_1: left promiscuous mode [ 464.866809][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.873310][ T12] bridge_slave_0: left allmulticast mode [ 464.875726][ T12] bridge_slave_0: left promiscuous mode [ 464.891105][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.916747][T11647] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 464.920441][T11647] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5 [ 464.970130][T20256] libceph: connect (1)127.0.0.1:6789 error -22 [ 464.976122][T20256] libceph: mon0 (1)127.0.0.1:6789 connect error [ 465.001130][T23036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.026694][T23036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.049651][T23015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.054418][T23015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.194001][T10228] usb 14-1: reset high-speed USB device number 27 using dummy_hcd [ 465.227322][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.232894][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.237126][ T12] bond0 (unregistering): Released all slaves [ 465.263970][ T7423] usb 11-1: USB disconnect, device number 30 [ 465.367280][ T42] kauditd_printk_skb: 106 callbacks suppressed [ 465.367292][ T42] audit: type=1400 audit(704.753:2209): avc: denied { write } for pid=23039 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.476746][ T42] audit: type=1400 audit(704.855:2210): avc: denied { write } for pid=23045 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.538014][T22995] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.541079][T22995] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.543729][T22995] bridge_slave_0: entered allmulticast mode [ 465.547643][T22995] bridge_slave_0: entered promiscuous mode [ 465.559873][ T5450] 8021q: adding VLAN 0 to HW filter on device eth10 [ 465.562953][T22995] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.567202][T22995] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.570060][T22995] bridge_slave_1: entered allmulticast mode [ 465.574274][T22995] bridge_slave_1: entered promiscuous mode [ 465.687086][T22995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.706425][T22995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.743199][T23048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23048 comm=syz.5.4445 [ 465.751160][T22995] team0: Port device team_slave_0 added [ 465.759784][T22972] ceph: No mds server is up or the cluster is laggy [ 465.760341][T22976] ceph: No mds server is up or the cluster is laggy [ 465.777787][T22995] team0: Port device team_slave_1 added [ 465.836798][ T12] hsr_slave_0: left promiscuous mode [ 465.842642][ T12] hsr_slave_1: left promiscuous mode [ 465.845828][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.857568][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.868793][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.876969][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.953604][ T42] audit: type=1400 audit(705.305:2211): avc: denied { write } for pid=23050 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.991770][T23059] program syz.9.4447 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 465.996240][T23059] netlink: 700 bytes leftover after parsing attributes in process `syz.9.4447'. [ 466.022665][ T12] veth1_macvtap: left promiscuous mode [ 466.032937][ T12] veth0_macvtap: left promiscuous mode [ 466.038807][ T12] veth1_vlan: left promiscuous mode [ 466.045707][ T12] veth0_vlan: left promiscuous mode [ 466.075790][ T42] audit: type=1400 audit(705.417:2212): avc: denied { write } for pid=23060 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.095024][ T5746] Bluetooth: hci3: command tx timeout [ 466.259091][T23063] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 466.356177][T23072] CIFS: Attempting to mount //127.0.0.1/share [ 466.366961][T23072] CIFS: VFS: Error connecting to socket. Aborting operation. [ 466.370141][T23072] CIFS: VFS: cifs_mount failed w/return code = -22 [ 466.514164][T23079] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4455'. [ 466.617868][ T42] audit: type=1400 audit(705.922:2213): avc: denied { mount } for pid=23082 comm="syz.5.4457" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 466.667671][ T12] team0 (unregistering): Port device team_slave_1 removed [ 466.683208][ T12] team0 (unregistering): Port device team_slave_0 removed [ 466.718955][ T9] usb 14-1: USB disconnect, device number 27 [ 466.844910][ T5450] 8021q: adding VLAN 0 to HW filter on device eth19 [ 466.897118][T20256] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 466.903396][T22995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.908888][T22995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.925604][T22995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.939307][T22995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.942171][T22995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.952388][T22995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.028668][T23080] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 467.064702][T22995] hsr_slave_0: entered promiscuous mode [ 467.074296][T22995] hsr_slave_1: entered promiscuous mode [ 467.081548][T20256] usb 10-1: Using ep0 maxpacket: 32 [ 467.084145][T22995] debugfs: 'hsr0' already exists in 'hsr' [ 467.086962][T22995] Cannot create hsr debugfs directory [ 467.087932][T20256] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 467.097162][T20256] usb 10-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 467.101466][T20256] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.104846][T20256] usb 10-1: Product: ఌ [ 467.143366][T20256] usb 10-1: Manufacturer: ဇ [ 467.145546][T20256] usb 10-1: SerialNumber: ᑀཏ従脣볿蹔ƨ┰䁋䕆ɟᣯ羚꘬ [ 467.181141][ T42] audit: type=1400 audit(706.456:2214): avc: denied { write } for pid=23097 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 467.344462][ T42] audit: type=1400 audit(706.605:2215): avc: denied { write } for pid=23102 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 467.446743][ T12] IPVS: stop unused estimator thread 0... [ 467.520317][ T5450] 8021q: adding VLAN 0 to HW filter on device eth20 [ 467.582857][T23108] fuse: Bad value for 'user_id' [ 467.584505][T23108] fuse: Bad value for 'user_id' [ 467.589777][T23108] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4462'. [ 467.675506][ T42] audit: type=1400 audit(706.914:2216): avc: denied { execute } for pid=23110 comm="syz.6.4463" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=114733 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 467.691083][ T42] audit: type=1400 audit(706.924:2217): avc: denied { write } for pid=23109 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 467.746542][ T42] audit: type=1400 audit(706.980:2218): avc: denied { write } for pid=23114 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 467.804110][ T5450] 8021q: adding VLAN 0 to HW filter on device eth21 [ 467.834657][T23118] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 467.839905][T23118] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 467.842648][T23118] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 467.845074][T23118] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 467.871795][T23118] xfrm0 speed is unknown, defaulting to 1000 [ 467.964089][T23124] overlay: Unknown parameter 'fsname' [ 468.160745][T11815] Bluetooth: (null): Invalid header checksum [ 468.163071][T11815] Bluetooth: (null): Invalid header checksum [ 468.167593][T23133] Invalid argument reading file caps for ./file0 [ 468.275441][ T61] Bluetooth: (null): Too short H5 packet [ 468.294448][ T61] Bluetooth: (null): Invalid header checksum [ 468.317674][ T5746] Bluetooth: hci3: command tx timeout [ 468.392984][ T61] Bluetooth: (null): Invalid header checksum [ 468.511194][ T36] Bluetooth: (null): Invalid header checksum [ 468.629458][T11815] Bluetooth: (null): Invalid header checksum [ 468.745337][ T36] Bluetooth: (null): Invalid header checksum [ 468.754159][T22995] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 468.765781][T22995] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 468.770544][T22995] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 468.785326][T22995] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 468.792656][T22995] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 468.802235][T22995] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 468.806638][T22995] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 468.818560][T22995] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 468.863066][ T36] Bluetooth: (null): Invalid header checksum [ 468.913541][T22995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.953519][T22995] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.966930][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.970003][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.981648][ T61] Bluetooth: (null): Invalid header checksum [ 468.997694][T23176] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 469.036737][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.039614][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.171309][T23184] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4478'. [ 469.182238][T23184] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4478'. [ 469.240529][T23188] Bluetooth: (null): Invalid header checksum [ 469.259917][ T9289] Bluetooth: (null): Invalid header checksum [ 469.697456][T22995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.764518][T23220] netlink: 'syz.9.4486': attribute type 1 has an invalid length. [ 469.772399][T23220] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 469.837842][T22995] veth0_vlan: entered promiscuous mode [ 469.870064][T20256] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 469.874350][T20256] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 469.887844][T20256] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 469.892232][T22995] veth1_vlan: entered promiscuous mode [ 469.914287][T20256] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 469.919762][T23232] FAULT_INJECTION: forcing a failure. [ 469.919762][T23232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.925112][T20256] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 469.933658][T20256] snd-usb-audio 10-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 469.937008][T23232] CPU: 2 UID: 0 PID: 23232 Comm: syz.6.4490 Tainted: G L syzkaller #0 PREEMPT(full) [ 469.937027][T23232] Tainted: [L]=SOFTLOCKUP [ 469.937031][T23232] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 469.937038][T23232] Call Trace: [ 469.937054][T23232] [ 469.937059][T23232] dump_stack_lvl+0x100/0x190 [ 469.937122][T23232] should_fail_ex.cold+0x5/0xa [ 469.937143][T23232] _copy_from_user+0x2e/0xd0 [ 469.937170][T23232] copy_msghdr_from_user+0x9f/0x4c0 [ 469.937196][T23232] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 469.937210][T23232] ? __pfx__kstrtoull+0x10/0x10 [ 469.937224][T23232] ___sys_sendmsg+0x106/0x1e0 [ 469.937237][T23232] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.937254][T23232] ? find_held_lock+0x2b/0x80 [ 469.937278][T23232] __sys_sendmmsg+0x20c/0x440 [ 469.937294][T23232] ? __pfx___sys_sendmmsg+0x10/0x10 [ 469.937309][T23232] ? ksys_write+0x190/0x250 [ 469.937333][T23232] ? fput+0x79/0x100 [ 469.937346][T23232] ? ksys_write+0x1ac/0x250 [ 469.937356][T23232] ? __pfx_ksys_write+0x10/0x10 [ 469.937368][T23232] __x64_sys_sendmmsg+0x9c/0x100 [ 469.937382][T23232] ? lockdep_hardirqs_on+0x78/0x100 [ 469.937412][T23232] do_syscall_64+0x115/0x870 [ 469.937429][T23232] ? clear_bhb_loop+0x40/0x90 [ 469.937448][T23232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.937463][T23232] RIP: 0033:0x7fa35f39e019 [ 469.937477][T23232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.937494][T23232] RSP: 002b:00007fa360256028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 469.937523][T23232] RAX: ffffffffffffffda RBX: 00007fa35f625fa0 RCX: 00007fa35f39e019 [ 469.937534][T23232] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000004 [ 469.937543][T23232] RBP: 00007fa360256090 R08: 0000000000000000 R09: 0000000000000000 [ 469.937552][T23232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.937562][T23232] R13: 00007fa35f626038 R14: 00007fa35f625fa0 R15: 00007ffcf5aacf38 [ 469.937585][T23232] [ 469.987714][T20256] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 470.042819][T22995] veth0_macvtap: entered promiscuous mode [ 470.082255][T20256] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 470.092797][T22995] veth1_macvtap: entered promiscuous mode [ 470.165363][T22995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.194886][T22995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.206095][T20256] snd-usb-audio 10-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 470.214671][T20256] usb 10-1: USB disconnect, device number 7 [ 470.349030][ T6334] udevd[6334]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.351480][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.363935][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.411117][T23252] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 470.457671][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.545761][ T5746] Bluetooth: hci3: command tx timeout [ 470.647056][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.673134][T23260] Invalid source name [ 470.675618][T23260] UBIFS error (pid: 23260): cannot open "ubifs", error -22 [ 470.677015][ T9294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.706039][ T9294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.847811][ T9294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.859851][ T9294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.874192][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 470.874204][ T42] audit: type=1400 audit(709.909:2237): avc: denied { write } for pid=23261 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.026880][ T42] audit: type=1400 audit(710.049:2238): avc: denied { write } for pid=23273 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.176044][T23282] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4504'. [ 471.219520][ T42] audit: type=1400 audit(710.227:2239): avc: denied { write } for pid=23284 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.322494][T23297] netlink: 'syz.2.4506': attribute type 64 has an invalid length. [ 471.325191][T23297] netlink: 'syz.2.4506': attribute type 4 has an invalid length. [ 471.327762][T23297] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4506'. [ 471.369868][ T42] audit: type=1400 audit(710.367:2240): avc: denied { write } for pid=23298 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.591753][ T42] audit: type=1400 audit(710.583:2241): avc: denied { write } for pid=23306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.602759][T23311] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4511'. [ 471.693210][ T42] audit: type=1400 audit(710.667:2242): avc: denied { write } for pid=23313 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.723270][T23314] program syz.6.4511 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 471.862538][ T42] audit: type=1400 audit(710.835:2243): avc: denied { write } for pid=23321 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.904190][T23324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23324 comm=syz.5.4513 [ 471.953640][ T42] audit: type=1400 audit(710.919:2244): avc: denied { write } for pid=23328 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.968292][T23330] binder: 23329:23330 ioctl c0306201 200000000340 returned -14 [ 471.971245][T23330] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4515'. [ 472.113827][ T42] audit: type=1400 audit(711.069:2245): avc: denied { write } for pid=23333 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.230711][ T42] audit: type=1400 audit(711.172:2246): avc: denied { write } for pid=23350 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.290563][T23356] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4521'. [ 472.314848][T23358] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 472.405011][T23361] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4523'. [ 472.430853][T23365] netlink: 'syz.9.4524': attribute type 64 has an invalid length. [ 472.441840][T23365] netlink: 'syz.9.4524': attribute type 4 has an invalid length. [ 472.452631][T23365] netlink: 152 bytes leftover after parsing attributes in process `syz.9.4524'. [ 472.460889][T23365] SELinux: ebitmap: empty map [ 472.462764][T23365] SELinux: failed to load policy [ 472.612953][ T12] bridge0: left allmulticast mode [ 472.615340][ T12] pimreg: left allmulticast mode [ 472.762925][ T5746] Bluetooth: hci3: command tx timeout [ 472.889364][ T12] bond5 (unregistering): (slave erspan2): Releasing active interface [ 472.901319][ T12] erspan2 (unregistering): left promiscuous mode [ 472.968967][T23380] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4527'. [ 472.973118][T23381] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4527'. [ 473.010677][ T12] bond6 (unregistering): (slave geneve2): Releasing active interface [ 473.160096][ T12] bond1 (unregistering): Released all slaves [ 473.177748][ T12] bond2 (unregistering): Released all slaves [ 473.195505][ T12] bond3 (unregistering): Released all slaves [ 473.229221][ T12] bond4 (unregistering): Released all slaves [ 473.235825][T23390] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20003 [ 473.256658][ T12] bond0 (unregistering): Released all slaves [ 473.278011][ T12] bond5 (unregistering): Released all slaves [ 473.304447][ T12] bond6 (unregistering): Released all slaves [ 473.323861][ T12] bond7 (unregistering): Released all slaves [ 473.635257][T23414] netlink: 168 bytes leftover after parsing attributes in process `syz.9.4537'. [ 473.639239][ T12] tipc: Left network mode [ 473.641196][T23414] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4537'. [ 473.648133][T23414] batadv0: entered promiscuous mode [ 473.666318][T23414] macsec1: entered promiscuous mode [ 473.670159][T23414] macsec1: entered allmulticast mode [ 473.673993][T23414] batadv0: entered allmulticast mode [ 473.677907][T23414] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 473.731768][T23414] batadv0: left allmulticast mode [ 473.733702][T23414] batadv0: left promiscuous mode [ 474.243179][T23425] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4540'. [ 474.257579][T23425] netlink: 'syz.6.4540': attribute type 6 has an invalid length. [ 474.275083][T23425] netlink: 'syz.6.4540': attribute type 5 has an invalid length. [ 474.285896][T23425] netlink: 'syz.6.4540': attribute type 4 has an invalid length. [ 474.767169][T23436] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4544'. [ 474.885978][T23443] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 474.927136][T23446] xt_nfacct: accounting object `syz0' does not exist [ 475.023707][ T12] hsr_slave_0: left promiscuous mode [ 475.025833][ T12] hsr_slave_1: left promiscuous mode [ 475.026460][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.033713][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.048057][T23454] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4549'. [ 475.055122][T23454] snd_dummy snd_dummy.0: control 0:0:1:syz0:512 is already present [ 475.055419][T23454] snd_dummy snd_dummy.0: control 0:0:1:syz0:512 is already present [ 475.055533][T23454] snd_dummy snd_dummy.0: control 0:0:1:syz0:512 is already present [ 475.055634][T23454] snd_dummy snd_dummy.0: control 0:0:1:syz0:512 is already present [ 475.055810][T23454] snd_dummy snd_dummy.0: control 0:0:1:syz0:512 is already present [ 475.055905][T23454] snd_dummy snd_dummy.0: control 0:0:1:syz0:512 is already present [ 475.055962][T23454] snd_dummy snd_dummy.0: control 0:0:1:syz0:512 is already present [ 475.056022][T23454] snd_dummy snd_dummy.0: control 0:0:1:syz0:512 is already present [ 475.056084][T23454] snd_dummy snd_dummy.0: control 0:0:1:syz0:512 is already present [ 475.328762][ T43] INFO: task syz.3.3046:16968 blocked in I/O wait for more than 143 seconds. [ 475.342359][ T43] Tainted: G L syzkaller #0 [ 475.349136][ T43] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 475.364039][ T43] task:syz.3.3046 state:D stack:25112 pid:16968 tgid:16967 ppid:16249 task_flags:0x400140 flags:0x00080002 [ 475.375122][T23463] FAULT_INJECTION: forcing a failure. [ 475.375122][T23463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.393393][ T43] Call Trace: [ 475.394964][ T43] [ 475.396330][ T43] __schedule+0x125c/0x6730 [ 475.398272][ T43] ? __pfx___schedule+0x10/0x10 [ 475.400367][ T43] ? find_held_lock+0x2b/0x80 [ 475.402661][T23463] CPU: 0 UID: 0 PID: 23463 Comm: syz.2.4552 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.402694][T23463] Tainted: [L]=SOFTLOCKUP [ 475.402701][T23463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 475.402712][T23463] Call Trace: [ 475.402719][T23463] [ 475.402728][T23463] dump_stack_lvl+0x100/0x190 [ 475.402755][T23463] should_fail_ex.cold+0x5/0xa [ 475.402779][T23463] _copy_from_iter+0x1f4/0x1690 [ 475.402812][T23463] ? __pfx__copy_from_iter+0x10/0x10 [ 475.402841][T23463] ? xfrm_lookup_route+0x6a/0x200 [ 475.402874][T23463] raw_sendmsg+0x1efe/0x3590 [ 475.402909][T23463] ? __pfx_raw_sendmsg+0x10/0x10 [ 475.402935][T23463] ? avc_has_perm+0x135/0x1e0 [ 475.402991][T23463] ? __pfx_avc_has_perm+0x10/0x10 [ 475.403013][T23463] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 475.403059][T23463] ? __pfx_raw_sendmsg+0x10/0x10 [ 475.403086][T23463] inet_sendmsg+0x11c/0x140 [ 475.403113][T23463] ____sys_sendmsg+0x9c9/0xbe0 [ 475.403140][T23463] ? __pfx_inet_sendmsg+0x10/0x10 [ 475.403166][T23463] ? __pfx_____sys_sendmsg+0x10/0x10 [ 475.403196][T23463] ? __pfx__kstrtoull+0x10/0x10 [ 475.403220][T23463] ___sys_sendmsg+0x190/0x1e0 [ 475.403242][T23463] ? __pfx____sys_sendmsg+0x10/0x10 [ 475.403271][T23463] ? find_held_lock+0x2b/0x80 [ 475.403326][T23463] __sys_sendmmsg+0x20c/0x440 [ 475.403355][T23463] ? __pfx___sys_sendmmsg+0x10/0x10 [ 475.403378][T23463] ? ksys_write+0x190/0x250 [ 475.403413][T23463] ? fput+0x79/0x100 [ 475.403435][T23463] ? ksys_write+0x1ac/0x250 [ 475.403452][T23463] ? __pfx_ksys_write+0x10/0x10 [ 475.403472][T23463] __x64_sys_sendmmsg+0x9c/0x100 [ 475.403494][T23463] ? lockdep_hardirqs_on+0x78/0x100 [ 475.403517][T23463] do_syscall_64+0x115/0x870 [ 475.403536][T23463] ? clear_bhb_loop+0x40/0x90 [ 475.403561][T23463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.403579][T23463] RIP: 0033:0x7f71e959e019 [ 475.403594][T23463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.403613][T23463] RSP: 002b:00007f71ea49b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 475.403631][T23463] RAX: ffffffffffffffda RBX: 00007f71e9825fa0 RCX: 00007f71e959e019 [ 475.403642][T23463] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000004 [ 475.403653][T23463] RBP: 00007f71ea49b090 R08: 0000000000000000 R09: 0000000000000000 [ 475.403664][T23463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.403680][T23463] R13: 00007f71e9826038 R14: 00007f71e9825fa0 R15: 00007ffdaaa74398 [ 475.403706][T23463] [ 475.508586][ T43] ? schedule+0x225/0x2c0 [ 475.510014][ T43] schedule+0xdd/0x2c0 [ 475.511266][ T43] io_schedule+0x8a/0xf0 [ 475.512590][ T43] folio_wait_bit_common+0x414/0xa70 [ 475.514268][ T43] ? folio_wait_bit_common+0x2a0/0xa70 [ 475.515978][ T43] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 475.517779][ T43] ? __pfx_wake_page_function+0x10/0x10 [ 475.519495][ T43] ? __pfx___might_resched+0x10/0x10 [ 475.521206][ T43] ? compaction_free+0x17d/0x470 [ 475.522803][ T43] ? move_to_new_folio+0x201/0x4e0 [ 475.524370][ T43] migrate_pages_batch+0x7a1/0x45c0 [ 475.525994][ T43] ? __pfx_compaction_alloc+0x10/0x10 [ 475.527598][ T43] ? __pfx_compaction_free+0x10/0x10 [ 475.529206][ T43] ? __pfx_migrate_pages_batch+0x10/0x10 [ 475.531194][ T43] ? ktime_expiry_to_cycles+0xc0/0x2c0 [ 475.532886][ T43] ? __pfx_remove_migration_pte+0x10/0x10 [ 475.534626][ T43] migrate_pages_sync+0x4db/0x880 [ 475.536153][ T43] ? __pfx_compaction_alloc+0x10/0x10 [ 475.537829][ T43] ? __pfx_compaction_free+0x10/0x10 [ 475.539501][ T43] ? __pfx_migrate_pages_sync+0x10/0x10 [ 475.541801][ T43] migrate_pages+0x1a83/0x2850 [ 475.543341][ T43] ? isolate_migratepages_block+0xd74/0x61d0 [ 475.545169][ T43] ? __pfx_compaction_alloc+0x10/0x10 [ 475.546861][ T43] ? __pfx_compaction_free+0x10/0x10 [ 475.548561][ T43] ? __pfx_migrate_pages+0x10/0x10 [ 475.550413][ T43] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 475.552926][ T43] ? folio_putback_lru+0x8f/0xe0 [ 475.554861][ T43] ? putback_movable_pages+0x7e0/0xbd0 [ 475.556983][ T43] compact_zone+0x243c/0x4420 [ 475.558822][ T43] ? debug_object_free+0x295/0x550 [ 475.560854][ T43] ? __pfx_debug_object_free+0x10/0x10 [ 475.563211][ T43] ? __pfx_compact_zone+0x10/0x10 [ 475.565178][ T43] ? __flush_work+0x928/0xcb0 [ 475.566961][ T43] ? __flush_work+0x928/0xcb0 [ 475.568547][ T43] compact_node+0x17f/0x2c0 [ 475.570128][ T43] ? __pfx_compact_node+0x10/0x10 [ 475.571737][ T43] ? __lru_add_drain_all+0x441/0x650 [ 475.573469][ T43] sysctl_compaction_handler+0x141/0x210 [ 475.575250][ T43] proc_sys_call_handler+0x47f/0x5a0 [ 475.577074][ T43] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 475.579346][ T43] ? splice_from_pipe_next+0x1ec/0x5a0 [ 475.581472][ T43] iter_file_splice_write+0x830/0x10b0 [ 475.583616][ T43] ? copy_splice_read+0x739/0xbb0 [ 475.585673][ T43] ? __pfx_iter_file_splice_write+0x10/0x10 [ 475.587971][ T43] ? __pfx_copy_splice_read+0x10/0x10 [ 475.590077][ T43] ? __pfx_iter_file_splice_write+0x10/0x10 [ 475.592429][ T43] direct_splice_actor+0x192/0x690 [ 475.594357][ T43] splice_direct_to_actor+0x345/0xa30 [ 475.596729][ T43] ? __pfx_direct_splice_actor+0x10/0x10 [ 475.598818][ T43] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 475.601115][ T43] do_splice_direct+0x174/0x240 [ 475.602856][ T43] ? __pfx_do_splice_direct+0x10/0x10 [ 475.604752][ T43] ? avc_policy_seqno+0x9/0x20 [ 475.606365][ T43] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 475.608235][ T43] ? rw_verify_area+0xce/0x6d0 [ 475.609643][ T43] do_sendfile+0xadc/0xe20 [ 475.610927][ T43] ? __pfx_do_sendfile+0x10/0x10 [ 475.612566][ T43] __x64_sys_sendfile64+0x154/0x220 [ 475.614179][ T43] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 475.616103][ T43] do_syscall_64+0x115/0x870 [ 475.617573][ T43] ? clear_bhb_loop+0x40/0x90 [ 475.619015][ T43] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.620837][ T43] RIP: 0033:0x7f9af719e019 [ 475.622196][ T43] RSP: 002b:00007f9af810f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 475.624733][ T43] RAX: ffffffffffffffda RBX: 00007f9af7425fa0 RCX: 00007f9af719e019 [ 475.627449][ T43] RDX: 00002000000000c0 RSI: 0000000000000004 RDI: 0000000000000008 [ 475.629853][ T43] RBP: 00007f9af723500c R08: 0000000000000000 R09: 0000000000000000 [ 475.632294][ T43] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 475.634664][ T43] R13: 00007f9af7426038 R14: 00007f9af7425fa0 R15: 00007ffceb0800f8 [ 475.637092][ T43] [ 475.638175][ T43] [ 475.638175][ T43] Showing all locks held in the system: [ 475.640582][ T43] 6 locks held by kworker/u32:0/12: [ 475.642163][ T43] 1 lock held by khungtaskd/43: [ 475.643626][ T43] #0: ffffffff8ebe8200 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 475.646666][ T43] 1 lock held by udevd/5148: [ 475.648327][ T43] 1 lock held by udevd/6061: [ 475.653509][ T43] #0: ffff888028693350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 475.656564][ T43] 2 locks held by getty/13531: [ 475.658085][ T43] #0: ffff88802ba120a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 475.663220][ T43] #1: ffffc90006eef2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 475.666541][ T43] 1 lock held by syz.3.3046/16968: [ 475.668181][ T43] #0: ffff88805a024450 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 475.680039][ T43] 1 lock held by syz.0.3477/18822: [ 475.681927][ T43] #0: ffff888028693350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 475.686746][ T43] 2 locks held by syz-executor/21757: [ 475.688473][ T43] 2 locks held by syz.9.4550/23456: [ 475.694212][ T43] #0: ffffffff9122c1e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 475.701457][ T43] #1: ffffffff90aa0200 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 [ 475.706070][ T43] 1 lock held by syz.6.4551/23459: [ 475.707674][ T43] #0: ffffffff90aa0200 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x23e/0x47c0 [ 475.715499][ T43] 1 lock held by syz.6.4551/23460: [ 475.717118][ T43] #0: ffffffff90aa0200 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 475.720296][ T43] 1 lock held by syz.6.4551/23461: [ 475.721887][ T43] #0: ffffffff90aa0200 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 475.725514][ T43] 1 lock held by syz.6.4551/23464: [ 475.727206][ T43] #0: ffffffff90aa0200 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 475.730084][ T43] 1 lock held by syz.6.4551/23465: [ 475.731791][ T43] #0: ffffffff90aa0200 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x331/0x10e0 [ 475.735246][ T43] 1 lock held by syz.6.4551/23468: [ 475.736910][ T43] #0: ffffffff90aa0200 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x23e/0x47c0 [ 475.739709][ T43] 1 lock held by syz.6.4551/23469: [ 475.741236][ T43] #0: ffffffff90aa0200 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 475.743872][ T43] 1 lock held by modprobe/23471: [ 475.745884][ T43] [ 475.746625][ T43] ============================================= [ 475.746625][ T43] [ 475.756914][ T43] NMI backtrace for cpu 0 [ 475.756928][ T43] CPU: 0 UID: 0 PID: 43 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 475.756944][ T43] Tainted: [L]=SOFTLOCKUP [ 475.756949][ T43] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 475.756955][ T43] Call Trace: [ 475.756960][ T43] [ 475.756965][ T43] dump_stack_lvl+0x100/0x190 [ 475.756984][ T43] nmi_cpu_backtrace.cold+0x12d/0x151 [ 475.756999][ T43] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 475.757015][ T43] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 475.757029][ T43] sys_info+0x141/0x190 [ 475.757044][ T43] watchdog+0xcb1/0x1030 [ 475.757066][ T43] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 475.757079][ T43] ? __pfx_watchdog+0x10/0x10 [ 475.757092][ T43] ? __kthread_parkme+0x18c/0x230 [ 475.757109][ T43] ? kthread+0x13a/0x450 [ 475.757119][ T43] ? __pfx_watchdog+0x10/0x10 [ 475.757131][ T43] kthread+0x370/0x450 [ 475.757140][ T43] ? __pfx_kthread+0x10/0x10 [ 475.757152][ T43] ret_from_fork+0x72b/0xd50 [ 475.757168][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 475.757184][ T43] ? __switch_to+0x800/0x10f0 [ 475.757196][ T43] ? __pfx_kthread+0x10/0x10 [ 475.757207][ T43] ret_from_fork_asm+0x1a/0x30 [ 475.757228][ T43] [ 475.757276][ T43] Sending NMI from CPU 0 to CPUs 2: [ 475.800731][ C2] NMI backtrace for cpu 2 [ 475.800749][ C2] CPU: 2 UID: 0 PID: 21757 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 475.800766][ C2] Tainted: [L]=SOFTLOCKUP [ 475.800770][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 475.800776][ C2] RIP: 0010:debug_check_no_obj_freed+0x200/0x630 [ 475.800797][ C2] Code: 0f 85 f1 03 00 00 49 8b 06 48 85 c0 0f 84 49 03 00 00 48 89 c2 31 f6 49 89 df 4c 89 74 24 28 48 c1 ea 03 89 f3 42 80 3c 22 00 <0f> 85 dd 00 00 00 48 8d 78 18 83 c3 01 4c 8b 30 48 89 fa 48 c1 ea [ 475.800807][ C2] RSP: 0018:ffffc900034a74c0 EFLAGS: 00000046 [ 475.800817][ C2] RAX: ffff8881140c15e8 RBX: 0000000000000000 RCX: ffffffff81e64668 [ 475.800824][ C2] RDX: 1ffff110228182bd RSI: 0000000000000000 RDI: ffffc900034a7430 [ 475.800830][ C2] RBP: ffffc900034a75e8 R08: 0000000000000001 R09: fffff52000694e86 [ 475.800837][ C2] R10: 0000000000000003 R11: 0000000000000000 R12: dffffc0000000000 [ 475.800843][ C2] R13: ffff88803cbe8000 R14: ffffffff9b9d6790 R15: ffff88803cbe9000 [ 475.800862][ C2] FS: 000055556d6af500(0000) GS:ffff8880d5fd8000(0000) knlGS:0000000000000000 [ 475.800886][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 475.800895][ C2] CR2: 00007f8d087f1e9c CR3: 0000000065dde000 CR4: 0000000000352ef0 [ 475.800901][ C2] Call Trace: [ 475.800905][ C2] [ 475.800911][ C2] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 475.800930][ C2] ? __page_table_check_zero+0x27f/0x410 [ 475.800946][ C2] ? __page_table_check_zero+0x284/0x410 [ 475.800959][ C2] free_unref_folios+0x437/0x1710 [ 475.800971][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 475.800984][ C2] folios_put_refs+0x585/0xaa0 [ 475.801001][ C2] ? __pfx_folios_put_refs+0x10/0x10 [ 475.801017][ C2] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 475.801030][ C2] shmem_undo_range+0x5e5/0x1570 [ 475.801043][ C2] ? __pfx_shmem_undo_range+0x10/0x10 [ 475.801059][ C2] ? __kernel_text_address+0xd/0x30 [ 475.801070][ C2] ? unwind_get_return_address+0x59/0xa0 [ 475.801081][ C2] ? arch_stack_walk+0xa6/0xf0 [ 475.801102][ C2] ? kasan_save_stack+0x3f/0x50 [ 475.801114][ C2] ? kasan_save_stack+0x30/0x50 [ 475.801125][ C2] ? kasan_record_aux_stack+0xa7/0xc0 [ 475.801140][ C2] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 475.801155][ C2] shmem_evict_inode+0x3a5/0xbe0 [ 475.801166][ C2] ? inode_wait_for_writeback+0x171/0x390 [ 475.801182][ C2] ? __pfx_shmem_evict_inode+0x10/0x10 [ 475.801193][ C2] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 475.801209][ C2] ? find_held_lock+0x2b/0x80 [ 475.801218][ C2] ? evict+0x37e/0xad0 [ 475.801230][ C2] ? evict+0x37e/0xad0 [ 475.801243][ C2] ? __pfx_shmem_evict_inode+0x10/0x10 [ 475.801253][ C2] evict+0x3c2/0xad0 [ 475.801266][ C2] ? __pfx_evict+0x10/0x10 [ 475.801279][ C2] ? iput.part.0+0x981/0x1050 [ 475.801293][ C2] iput.part.0+0x989/0x1050 [ 475.801307][ C2] iput+0x35/0x40 [ 475.801319][ C2] filename_unlinkat+0x466/0x730 [ 475.801331][ C2] ? __pfx_filename_unlinkat+0x10/0x10 [ 475.801345][ C2] ? do_getname+0x191/0x390 [ 475.801359][ C2] __x64_sys_unlink+0x46/0x70 [ 475.801370][ C2] do_syscall_64+0x115/0x870 [ 475.801382][ C2] ? clear_bhb_loop+0x40/0x90 [ 475.801394][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.801403][ C2] RIP: 0033:0x7f158959d107 [ 475.801412][ C2] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 475.801421][ C2] RSP: 002b:00007fff6379f868 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 475.801430][ C2] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f158959d107 [ 475.801436][ C2] RDX: 00007fff6379f890 RSI: 00007fff6379f920 RDI: 00007fff6379f920 [ 475.801442][ C2] RBP: 00007fff6379f920 R08: 00007fff637a0920 R09: 00000000ffffffff [ 475.801449][ C2] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff637a09b0 [ 475.801455][ C2] R13: 00007f158963445c R14: 000000000006f6e6 R15: 00007fff637a09f0 [ 475.801465][ C2] [ 475.916951][ T12] team0 (unregistering): Port device team_slave_1 removed [ 475.920881][ T43] Kernel panic - not syncing: hung_task: blocked tasks [ 475.920900][ T43] CPU: 0 UID: 0 PID: 43 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 475.920918][ T43] Tainted: [L]=SOFTLOCKUP [ 475.920922][ T43] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 475.920930][ T43] Call Trace: [ 475.920935][ T43] [ 475.920941][ T43] dump_stack_lvl+0x100/0x190 [ 475.920961][ T43] vpanic+0x552/0x970 [ 475.920972][ T43] ? __pfx_vpanic+0x10/0x10 [ 475.920985][ T43] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 475.920999][ T43] panic+0xd1/0xe0 [ 475.921009][ T43] ? __pfx_panic+0x10/0x10 [ 475.921022][ T43] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 475.921033][ T43] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 475.921044][ T43] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 475.921061][ T43] ? watchdog.cold+0x1ec/0x234 [ 475.921073][ T43] ? watchdog+0xcc1/0x1030 [ 475.921088][ T43] watchdog.cold+0x1fd/0x234 [ 475.921103][ T43] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 475.921116][ T43] ? __pfx_watchdog+0x10/0x10 [ 475.921130][ T43] ? __kthread_parkme+0x18c/0x230 [ 475.921148][ T43] ? kthread+0x13a/0x450 [ 475.921158][ T43] ? __pfx_watchdog+0x10/0x10 [ 475.921175][ T43] kthread+0x370/0x450 [ 475.921190][ T43] ? __pfx_kthread+0x10/0x10 [ 475.921207][ T43] ret_from_fork+0x72b/0xd50 [ 475.921228][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 475.921245][ T43] ? __switch_to+0x800/0x10f0 [ 475.921257][ T43] ? __pfx_kthread+0x10/0x10 [ 475.921268][ T43] ret_from_fork_asm+0x1a/0x30 [ 475.921290][ T43] [ 475.922040][ T43] Kernel Offset: disabled