last executing test programs: 3m6.362383408s ago: executing program 1 (id=161): r0 = syz_open_dev$evdev(&(0x7f00000007c0), 0x2, 0x2800) ioctl$EVIOCGABS20(r0, 0x80184520, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={r2, 0x2}, &(0x7f0000000240)=0x8) r3 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000001c0)={0x0, 0xf, 0x5, &(0x7f0000000000)={0xe, "25f210caf4d99a17ffffff7f066cc1d80085469289ab99912870fe4a59784bc987"}}) 3m6.361743051s ago: executing program 1 (id=163): mkdir(&(0x7f0000000280)='./file1\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRES16=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) mount(0x0, &(0x7f0000000300)='./file3\x00', &(0x7f00000000c0)='pvfs2\x00', 0x0, &(0x7f0000000380)='acl') syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r1, r2, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r3, 0xee01) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x40400, &(0x7f00000002c0)={[{@xino_off}, {@verity_require}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}, {@xino_off}, {@userxattr}], [{@euid_lt={'euid<', r1}}, {@hash}, {@appraise}, {@fowner_gt={'fowner>', r3}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@context={'context', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x31, 0x30, 0x63, 0x34, 0x38, 0x34, 0x62], 0x2d, [0x63, 0x38, 0x65, 0x39], 0x2d, [0x55, 0x32, 0x0, 0x62], 0x2d, [0x33, 0x32, 0x50, 0x38], 0x2d, [0x61, 0x0, 0x38, 0x33, 0x33, 0x62, 0x34, 0x37]}}}]}) syz_open_dev$video4linux(&(0x7f0000000600), 0xa, 0x60081) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) 3m5.533498879s ago: executing program 1 (id=173): syz_emit_ethernet(0x46, &(0x7f0000000840)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x3, 0x401, 0x63, 0x8}}}}}}, 0x0) r0 = fsopen(&(0x7f0000000200)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r2 = fsmount(r0, 0x0, 0x3) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000802, 0xee01, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x11c, r3, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xbcf8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x7d5fad48}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @mcast1, 0x3c}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x80) 2m49.700948706s ago: executing program 32 (id=173): syz_emit_ethernet(0x46, &(0x7f0000000840)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x3, 0x401, 0x63, 0x8}}}}}}, 0x0) r0 = fsopen(&(0x7f0000000200)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r2 = fsmount(r0, 0x0, 0x3) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000802, 0xee01, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x11c, r3, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xbcf8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x7d5fad48}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @mcast1, 0x3c}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x80) 2m37.7569273s ago: executing program 33 (id=549): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000305000000000000000000006dc4", @ANYRES32=0x0, @ANYBLOB="8b18010000000000240012800b0001006d61637365630000140002800500080000000000050007000000000008000500", @ANYRES32=r3], 0x4c}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) close(0xffffffffffffffff) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x541b, 0x0) r6 = fanotify_init(0x1a, 0x800) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r6, 0x641, 0x1028, r7, 0x0) fanotify_mark(r6, 0x1, 0x8000030, r7, 0x0) r8 = inotify_init() inotify_add_watch(r8, &(0x7f0000000000)='./file1\x00', 0x4000523) close(r5) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x20, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x401}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m26.611498856s ago: executing program 34 (id=618): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) readv(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ipvlan0\x00'}}, 0x1e) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r4, &(0x7f00000000c0)="1f", 0xffc0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = syz_open_pts(r2, 0x900) dup3(r5, r2, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000180)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000001800), 0x0, &(0x7f0000000a00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 2m26.197582132s ago: executing program 35 (id=497): add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=&(0x7f0000000040)}}) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000400000033000000ac1414bb00000000000000000000000000000000000000000000000000000000030000000000000004000000000000005700000000000000fdffffffffffffff000000000000010000000000000000007b00000000000000000080000000000000200000000000000000000000000000000000005cfd00000000000000000000000000000a000000aa0000000000000048000100686d616328736861312900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200017"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m15.527783798s ago: executing program 7 (id=760): r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x80000, 0x1}) (async) syz_io_uring_setup(0x1912, &(0x7f0000000040)={0x0, 0x9b0e, 0x400, 0x2, 0x5c}, &(0x7f0000000140), &(0x7f0000000180)=0x0) (async) acct(&(0x7f0000000000)='./file0\x00') (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000500)={r8, 0x3}, 0x8) (async) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000001740)={r8, 0x6, 0x3ff, 0x4, 0xfffe, 0xc7, 0x3, 0x24f5, {0x0, @in6={{0xa, 0x4e21, 0x6, @private1, 0x7}}, 0x800, 0x0, 0x9742, 0x3ff, 0x1}}, &(0x7f0000001800)=0xb0) syz_io_uring_submit(r2, r4, &(0x7f0000001700)=@IORING_OP_WRITEV={0x2, 0x4, 0x2004, @fd_index=0x1, 0x8, &(0x7f0000001640)=[{&(0x7f00000001c0)="ded0e51830cbc6384c7234b7d74b21dd31dd86bc44b5340e07ddcb06fa66d4de1d08fbd02b2227", 0x27}, {&(0x7f0000000200)="ca6088b5655436332169a252607b13483c2642b81c08246c5048ebded836789c2708d1284448b8951934b39a345d9bf085909f6ea5e81ba9ed04fbd069d620fd691935e3f5cdd47c1dc1ab2ccc3e229b032056539ce52ef6f299b4a758fd4239783f0273076dd8a65b8d16a285205eee4e8674b16cd7dbea136891282412330d38a6ef34bbf43786c5410680180566c55ee1f8e1e1c89058362a96dfb6f0787d8c179a5a01050f79c5e4bdeba2c5972118ec459bb9c717", 0xb7}, {&(0x7f00000002c0)="0c67a1de81ec", 0x6}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000300)="4ed644c75425c77ae13f6fe1c7c72717cf0a1c522c285c46f44ec85164d3598318ad25923311395951991a11d0e00b20d2a58fc77cd4065920e510d20bb63e6a2ff1121e6160d3185bb19787894a9fd190c2632ea7d1f0f25fb253cf49343e54207fb89f769258ab8cdb86aed3835775825ace04cff557ed386fb4cf779eac6199557955915ead417ebf6f3419cff365898fe47dc878eb11002595818d6232bba55a01bf2addba44a39529c5490b0f5292b7eab01ee491103115fe38d911ca58fff28d12fe5f93aabcf813951b0464bdf7059d1bc994f79a9ed49ae2", 0xdc}, {&(0x7f0000000400)="a80c59dc18f041fe0cf175bb16a094debd5d420cdd7f8031", 0x18}, {&(0x7f0000001480)="efef0d04672533ffd350cfedd6a82a507d15555cc740dd128b98afd6f7caab1bb0b34a115b3060c0a44f7ccbde8e19e12b094a99a78b5958cc7ce2f8bf6c1cc92ea0c7ddfb92d9d15e3b0566876356f80be8ac1b505be2", 0x57}, {&(0x7f0000001500)="1d52e7a12cd77d31341947fe2ee8bfec3da2d2cc6c221eeaf1081a241f70e67c5408bb12b9186a35ec16f69fee5291610501e629cc4f73bbaf3e145d66a06614422616010348d27d20fd3245d1e339f3de3e703d88d358e097f6b7224b2ffc24ccedc54b0bb89ce568288803b7fcc1ac3d416ca7b441390944730be97405a1887f8f2ae14259d6b3fb667157a6d64d5bb78a9908f241dce43881c82c21a4017a1f4976477a105d30", 0xa8}, {&(0x7f00000015c0)="ca7280feb1d05e75875df91a69912483a7eb640a35e8a664a96941d71f065cd22a2d419e232c13e87c11c4ad1a300a87e77d82fcb634f0c8e0b2a14372c39119cb6f35a1dd7c079f221da6c98c2155b2", 0x50}], 0x9, 0x14, 0x0, {0x3, r5}}) (async) sendmmsg$inet_sctp(r0, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f0000000000)=[@init={0x18, 0x84, 0x0, {0x80, 0x10, 0x1, 0x9}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x30}], 0x1, 0x40) 2m15.47375827s ago: executing program 7 (id=762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = inotify_init1(0x0) r3 = inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x400) r4 = dup(r2) inotify_rm_watch(r4, r3) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=@newchain={0x47a8, 0x64, 0x100, 0x7, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xa, 0x5}, {0x5, 0xd}, {0x14, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x6}]}}, @filter_kind_options=@f_fw={{0x7}, {0x4768, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x10}}, @TCA_FW_MASK={0x8, 0x5, 0x8000}, @TCA_FW_CLASSID={0x8, 0x1, {0x1, 0xb}}, @TCA_FW_ACT={0x2e0, 0x4, [@m_ct={0x8c, 0x4, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "f2b8027f7733d788f74df31c28061279"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "9fb0b2f622f8086f7a9698ab764301d7"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @dev={0xac, 0x14, 0x14, 0x3e}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0x2c, 0x6, "76214c723e520ee09d70e91acab5bb8f28e0981b3bdaba03580da442688ee794e99218ee315dc4cf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0xe0, 0x1c, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x50}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xd82, 0x3, 0x1, 0x8000, 0x6}, 0xd}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x68, 0x6, "19ee5bf9e2bc61b211b15d2e376be320d61338cae76860bee6533dad6de0f75c8b5590672daa9089d73994f20b3a0d4345af6454b5aa9ae82555525fd45ba12379ebd3f45a0915b2ac1350bc63b9ff5af0b644ef18bb3b1f8a3e9f65a9a46b69853eaac0"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0xdc, 0x3, 0x0, 0x0, {{0xc}, {0x8c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5b1c, 0x7, 0x5, 0xff, 0x1}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7f}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8001, 0x7ff, 0x20000000, 0x0, 0x100}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x401, 0x8, 0x1, 0x0, 0x7fffffff}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x800, 0x7, 0x6, 0x40}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0xa}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0x3}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd}}]}, {0x25, 0x6, "002b640a69c3207aa1105513bd3d1222f3118c5a681cb7b2d6b848795c3e402938"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0x94, 0x1, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xf, 0x54, 0x2, 0xb, 0x1}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x450}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x101, 0x17, 0x5, 0x2, 0x1}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}]}, {0x1d, 0x6, "ab7bd5787b791ce1b050a6ab6880ef15c797e4f86733546f7f"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_FW_ACT={0x4464, 0x4, [@m_gact={0x178, 0xe, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x769, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xaab, 0x8, 0x8, 0x1, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1cab, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x18e7, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x8, 0x3, 0x7, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x19db, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xf6, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x6, 0x7, 0xd, 0x8}}]}, {0xc6, 0x6, "37d308fa9760a53ce548aee91de9535043ffb8e6346fb8dd70d688c9e9c94f50a93ace2ea49ecc2c11876f34e2c8ebe476383222f2a51163676fb81fb672704377d3b7fcc0a3f75d39428ecaefc05cb1ea46f40d5e8ad41d365822fe82f7b566dffa16c732bcfb224c3583f6e45c5cf5d1541a9effbc4ee9a18f93474e7f157e0aba47389758f69a33e11aeb470e2e247522285ae6e6e72552d776efc7124fda861acd76e6e63fce9a13c7b9fc4ca5ac77f79d47263cb1951f49b56a7ad058ef679a"}, {0xc, 0x7, {0x1, 0x6c100a828d54004f}}, {0xc, 0x8, {0x4, 0x1}}}}, @m_ife={0x1050, 0x13, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0xffffffff, 0x20000000, 0x4, 0xfffffffa}, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x3298, 0x19, 0x0, 0x0, {{0xb}, {0x3190, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x2, 0x35, 0x4, 0x2, 0xa66, 0x2, 0x7, 0x7, 0x7fff, 0x7, 0x6, 0x5, 0x6, 0x10001, 0x1, 0x8000, 0xff, 0x7b8f, 0xfffffffb, 0x2a, 0x2b, 0x6, 0x3, 0x1, 0x974, 0x39, 0x0, 0x0, 0x6, 0x34, 0x4, 0x5, 0x8000, 0x200, 0x4, 0x8, 0x2, 0xfff, 0x40, 0x80000001, 0x7, 0x8000, 0x7, 0x2, 0x2, 0x80000001, 0x6, 0x0, 0x7fff, 0x1, 0x0, 0x7fff, 0xf7, 0x6, 0x8, 0xf, 0x400, 0xfe37, 0x4, 0x4, 0xba, 0x7fff, 0x8, 0x8000, 0x9, 0x6, 0x5, 0x3ff, 0x9, 0x3, 0x0, 0x8, 0x2, 0x67a, 0x6, 0x100, 0xffffff7f, 0x1, 0xff, 0x2, 0xd1b, 0x5, 0x0, 0x60b, 0x6, 0x80, 0x0, 0x14000000, 0xd42, 0x1, 0x94a, 0x101, 0xfffffff9, 0x8001, 0x2, 0x7, 0x7, 0xa2d1, 0x3, 0x9bf, 0x6, 0x800, 0xa93, 0x7, 0x8, 0x8, 0x2, 0x1, 0x3, 0xfffffffb, 0x8, 0x4, 0x1, 0x3, 0x8, 0xa776, 0xfffff466, 0x5, 0x6, 0x1, 0xe4a2, 0xfff, 0x0, 0x80, 0x6, 0x7, 0x8, 0x7, 0xa, 0x6, 0x4, 0x80000001, 0xfffffffa, 0xfffffffd, 0x3, 0x10000, 0x2, 0x3, 0x34de, 0xa, 0x1, 0x1, 0x1, 0x4, 0x49, 0xfffffffb, 0x1, 0x3, 0x80, 0xc, 0x9, 0x5, 0x7, 0x8, 0x3, 0x6, 0x2, 0x6, 0x3, 0x3, 0x6, 0x7fff, 0x9, 0x6, 0x5, 0x62, 0xff, 0x2, 0x3, 0x3, 0x9, 0x6, 0x3, 0x9, 0xd, 0x2, 0x3, 0x4, 0x9, 0xfffffffd, 0x0, 0x1000, 0x8, 0x0, 0x9, 0x1, 0x2571, 0x1000, 0x6, 0x7, 0x7, 0x7, 0x0, 0x7f, 0x0, 0x5, 0x6, 0x200, 0x2, 0x3, 0x6, 0x7, 0x5, 0xf, 0x8, 0x1, 0x4, 0xf, 0x5, 0x4a729c3f, 0x4, 0x4, 0x1000, 0x8, 0x6, 0x61b7, 0x0, 0x1ff, 0x5, 0x1, 0x5, 0x0, 0x8, 0x7, 0x80000000, 0x9, 0x6, 0x9, 0x100, 0x5, 0x8001, 0x4, 0x4, 0x4, 0x0, 0xd490, 0x5, 0xe16, 0xfffffff7, 0x7, 0x9ac5, 0x2, 0x2, 0x7ff, 0x4, 0x8, 0x7, 0xfffff801, 0x251d, 0x2, 0xfffffff9, 0x4, 0x2, 0x5, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x6, 0x7, 0xa8f, 0x3, 0x3, 0x95cc, 0x3, 0x404000, 0x5, 0xb95, 0x0, 0x7, 0x5, 0x9a5, 0xfffffff7, 0x8, 0x0, 0xfff, 0x8, 0xfff, 0x2, 0x0, 0xfffffbff, 0x9, 0x3, 0xfffffffe, 0x3, 0x8, 0x4, 0xc, 0x0, 0x6, 0xd, 0x80000000, 0xc5b, 0x4, 0xb965, 0x7, 0x3e, 0x8bb, 0x8, 0x40, 0xffffffff, 0x6, 0x800, 0x9, 0x7, 0x5, 0x3, 0x9, 0x7, 0x2, 0x9, 0x6, 0x800, 0x8, 0x4, 0x3, 0x9, 0x8, 0x8a, 0xe1, 0x4e90, 0x2, 0x4, 0x8, 0xf1, 0x5, 0x6, 0x3, 0x4, 0xfffffff9, 0x21b5, 0x80000000, 0xc, 0x0, 0x3, 0x10001, 0x6, 0xae, 0x1, 0x40, 0x2, 0x5, 0x9, 0x2, 0x8, 0x9f, 0x0, 0x0, 0x10, 0xffff8000, 0xfffffff1, 0x5, 0x7ff, 0x9, 0x0, 0x6, 0xafa, 0xb4b, 0x0, 0x9, 0x80000000, 0x5, 0x4, 0x5, 0x8, 0x9, 0x5d, 0x6, 0x7, 0x8001, 0x7, 0x8, 0x2, 0x89f, 0x3, 0x8, 0x7fffffff, 0x1, 0x7, 0x4, 0xf4c, 0xb, 0x74, 0x7, 0x3, 0x9, 0xe, 0x5, 0x2c, 0x2, 0x1, 0x2, 0x8, 0x8, 0xae51, 0x7, 0xfffffff7, 0x80000001, 0x0, 0x0, 0x7f, 0x0, 0x58, 0x5f6642be, 0x9, 0x6, 0xffffff12, 0x4, 0x60b, 0x4, 0x4, 0x800, 0x80, 0x22, 0xffffffde, 0x5, 0xfffffffb, 0x4, 0x0, 0x9, 0x3, 0x800000, 0x5, 0x5, 0x0, 0x400, 0x1741, 0xc, 0x1735, 0x7ff, 0x1, 0x679e, 0x5, 0x3, 0x1, 0x0, 0x8, 0x76, 0x9, 0x6b8094b6, 0x8, 0x7, 0xb, 0x5, 0x0, 0x242, 0xcc00, 0x8, 0x3, 0xfb, 0x1, 0x0, 0x5, 0x5, 0x2, 0x6, 0x4, 0x1, 0x1, 0x2, 0x3, 0x3, 0x7, 0x2, 0x7, 0x0, 0xa22, 0x4, 0x415, 0x5, 0x4, 0xc, 0x9, 0x6, 0x4, 0x7, 0x1000, 0x6, 0xd, 0x9, 0x9, 0x27, 0x0, 0x1, 0x6, 0x2, 0xcbe, 0x3, 0x0, 0x9, 0x9, 0x8, 0x73f, 0x1, 0x6, 0x2, 0x2, 0x2, 0x4, 0x9, 0x1, 0x27d5b096, 0x8b82, 0x4, 0x2, 0x4, 0x2, 0xae2, 0x4, 0x1, 0x6, 0x6, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffff8d6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x6, 0x10001, 0x8000, 0x4, 0xffff8000, 0x7ca8, 0xffff, 0x1, 0x31b8, 0x6, 0xfffffff8, 0xa, 0x6, 0x517fc29b, 0x6, 0x5, 0x2, 0x4, 0x1, 0x4, 0x119, 0x5, 0xfffff800, 0x1000, 0x7, 0xfffffffc, 0x6a, 0x16df, 0x3, 0x7, 0x6, 0x17, 0x4, 0x5, 0x8000, 0x4, 0x4, 0x40, 0x7ff, 0x0, 0x1, 0x1, 0x2, 0x5, 0x5, 0x1, 0x1, 0x9fe, 0x3, 0x2, 0x0, 0xfffffff6, 0x1, 0xcb4, 0x101, 0x2, 0x4, 0x0, 0x784, 0x8, 0x7, 0x6, 0x7f, 0x9, 0x80, 0x3, 0x8, 0xfffffff7, 0x8, 0x6, 0x9, 0x2, 0x0, 0x1, 0x6, 0x24, 0x1, 0xd, 0x0, 0x48, 0x5, 0xf9c6, 0x9, 0x0, 0x800, 0xffffffff, 0x9, 0x3, 0x7fff, 0x3, 0x80000, 0x8, 0x8, 0x6, 0x8, 0x3, 0x4, 0x1, 0xffffffff, 0x4, 0x3, 0x8, 0x1, 0x3a3b80, 0x6, 0xfffffffc, 0x4, 0x5, 0x3, 0x7a74, 0xa1f0, 0x6, 0xfff, 0x3, 0x9, 0x4, 0x8, 0xffffffff, 0xffffe02c, 0x5, 0x1, 0x8, 0x6, 0x800, 0xe, 0x8, 0xed6, 0x9, 0x8000, 0x47f93e4a, 0x1, 0x5, 0x6, 0x4, 0x80000000, 0x6, 0x1340000, 0x2, 0x7fffffff, 0xb, 0x1, 0x0, 0x9, 0x5, 0x1000, 0x5, 0x2b7, 0x1, 0x41, 0x5, 0xf, 0x7, 0xe84, 0x1, 0xd7, 0x7, 0x4, 0x1, 0x3, 0x7fc00000, 0x0, 0xd, 0x9, 0x1, 0x400, 0x9, 0x947, 0x8, 0x6, 0x88, 0x8, 0x7, 0xfe8e, 0x4, 0x9, 0x5, 0x8, 0xffffff80, 0x1, 0x0, 0x4fbf, 0x3, 0x7fffffff, 0x0, 0xc0a, 0x6, 0x2cb, 0x2, 0x418e, 0x7, 0x10, 0x4, 0x3, 0xcc, 0x0, 0x6, 0x7, 0x1, 0x9, 0x4, 0x7f, 0x39cf, 0xfff, 0x46, 0x80, 0x3ff, 0xe4000000, 0xfffffff9, 0x8001, 0x7, 0x191, 0x3, 0x8, 0x5, 0x8001, 0x7, 0x5, 0x8, 0x9fcc, 0x1, 0x7, 0xe, 0x5, 0xd3c, 0x9, 0xf, 0x2bcf0461, 0xfffffffb, 0x1, 0x6, 0x23298fd, 0x81, 0xfffffffc, 0x10001, 0x9, 0x9, 0x2, 0xffffffff, 0x5, 0x9, 0x5, 0x76d3, 0x80000000, 0x9, 0xfffffff7, 0x80000001, 0x10000, 0x5, 0x3, 0x3, 0x0, 0x7ff, 0x8, 0x800, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x10000, 0x8, 0x8, 0x9, 0x1, 0x7, 0x0, 0x3, 0x2, 0x7fffffff, 0x8, 0x7fff, 0xd, 0x100, 0x4, 0x9, 0x2, 0x40, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0x4ab, 0x80000001, 0xd6, 0x800, 0x4, 0x6, 0x3, 0x7, 0x9, 0x7fffffff, 0xa1, 0x9, 0x6, 0xfffffffb, 0x25d, 0xffff, 0x2, 0x600, 0x975f, 0x4, 0x80, 0x80, 0x9, 0x200, 0x6, 0x401, 0x2, 0xff, 0x8001, 0x7, 0x2, 0x9, 0x7ff, 0x2, 0x80, 0x401, 0x2, 0x9, 0x5, 0x91, 0xaae1, 0x80, 0x1d8f, 0x9, 0x1ff, 0x0, 0x3, 0x3000000, 0xfff, 0x2, 0x200, 0x80000001, 0xcc, 0x5, 0x0, 0x3, 0x4, 0x6, 0x101, 0x8001, 0x0, 0xb87c, 0x6, 0x9, 0x8001, 0x5, 0x5, 0x3, 0x59, 0x200, 0xbb, 0x3ee, 0x0, 0x1363, 0x5, 0x0, 0x6, 0x0, 0xc4c, 0x8001, 0x6, 0x2, 0x6, 0x1, 0x3eb8b8f2, 0xfb, 0xfffff800, 0x2, 0x101, 0x8, 0xfffffffb, 0x2, 0x1, 0xfffffff7, 0x0, 0x3, 0x5, 0x0, 0xc, 0x8, 0x4, 0x0, 0x3, 0x0, 0x1, 0x1, 0x7ff, 0xfffffff7, 0x9, 0x4, 0x10001, 0x5be1, 0x7, 0x9, 0x6, 0x7ff, 0x9, 0x1f1d57c9, 0x10001, 0x10, 0x2, 0x8, 0x1ff, 0x4, 0x4, 0x6, 0x5, 0x2, 0x9, 0x7, 0x18, 0x1, 0xe6c4, 0x4, 0xd, 0x46a9, 0x8, 0x3, 0x2, 0x8, 0xc, 0x3, 0x6, 0x4, 0x6, 0x1, 0x40, 0x8000, 0x600, 0xffffff79, 0x401, 0x6, 0x2, 0x2, 0x3, 0x6, 0xf86, 0x9, 0x9, 0xffffff21, 0xf, 0x5, 0xf, 0x9, 0x7, 0x3, 0x9, 0x3, 0x0, 0x8, 0x2, 0x5, 0x2, 0x3ff, 0xfffffff4, 0xfffffff7, 0xa471, 0x0, 0x1, 0x4, 0x6, 0x6, 0xb, 0x5, 0xed5, 0x1d9456d6, 0x9, 0x3, 0x3, 0x6, 0x0, 0x6, 0x7b, 0x4, 0x494, 0x1, 0x7fff, 0x8001, 0x8, 0x7f, 0x7, 0x685f, 0x10000, 0xfffffbff, 0xe, 0x10000000, 0x5b67, 0x3, 0x58b66a48, 0x658, 0x5, 0x2aa6, 0x80, 0x7f, 0xffffffff, 0x7, 0x2, 0xdff7, 0x6, 0x79af91db, 0xc, 0x2, 0x9, 0x9, 0xcd4, 0x6800, 0xe39, 0x6, 0xb, 0xfffffff9]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xb70f}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0xcab, 0x5, 0xac, 0x6, 0x0, 0x4, 0x7ff, 0x5, 0x0, 0x3, 0x0, 0x9, 0x4, 0xcce, 0x2, 0x81, 0x4, 0x101, 0x8, 0x1, 0x5, 0x8, 0x9, 0x1000, 0x7, 0xb126, 0x101, 0xffffffff, 0x5, 0x200, 0xe, 0xc, 0x7f, 0x4, 0x200, 0x8, 0x75f7, 0x40, 0x54bf, 0x7, 0x0, 0xc16b, 0xdc0, 0x0, 0x4, 0xc, 0x49ac, 0x200, 0x6, 0xfb, 0x2, 0x800, 0xea, 0xfffffffe, 0x2, 0x101, 0x1, 0xffffffff, 0x0, 0x4, 0xfff, 0x9, 0x6e, 0x6, 0x0, 0x7f, 0x7f, 0x101, 0x3, 0xffff1a4b, 0x0, 0x7ff, 0x4, 0xfffffff9, 0xd, 0x364e, 0xb, 0x6, 0x40, 0x81, 0x4, 0x7, 0x5, 0x4, 0xfffffff9, 0x1, 0x2, 0x5, 0x0, 0x1b, 0xef4, 0x10000, 0x3, 0xfffff4ae, 0xaf06, 0xcc04, 0x7, 0x0, 0x7fffffff, 0xf, 0x100, 0x1, 0x9, 0xffff8e2f, 0x6, 0x4, 0x0, 0x101, 0x2, 0xe, 0x5, 0xc59f111, 0x8, 0x101, 0x8, 0x4, 0xa, 0x2, 0x23, 0x1, 0x1, 0x4, 0x4, 0x2, 0x1, 0x10000, 0x80, 0xe3, 0x9a2b, 0x10, 0x13c, 0x2, 0x6, 0x5, 0x101, 0x400, 0x9, 0x800, 0x0, 0x7, 0xffffffff, 0x7, 0x4, 0x9, 0x6, 0x7, 0x5, 0x8, 0x4, 0x9, 0x2, 0x38, 0x43, 0xb, 0x25, 0x6, 0x1000, 0xc05, 0x20000, 0x6, 0x3, 0x6, 0x400000, 0x4, 0x0, 0x5, 0x20000, 0x3, 0x2, 0x1, 0x68bafea2, 0x1, 0x3, 0x95, 0x7ff, 0x6, 0x4, 0x2, 0x200, 0x9, 0x10, 0x10001, 0x9, 0x80000001, 0x1, 0x20, 0x1ff, 0x7, 0x800, 0x0, 0x100, 0xfffffff9, 0xdd4, 0x2, 0x1, 0x90000, 0x1, 0x7f, 0x400, 0x10000000, 0x3, 0x9, 0x4, 0xc3, 0xfffffff9, 0x3, 0xe, 0x7, 0x91e2, 0xf, 0x7, 0x6, 0x1, 0x1, 0x401, 0x5, 0x40, 0x3, 0x5, 0x4, 0x8ec6, 0x1, 0x8, 0x7dee, 0xf, 0x5, 0x800, 0xeeb5, 0x9, 0x6, 0x2, 0x4, 0x81, 0x1000, 0xc0000000, 0x10, 0x2, 0x7, 0x7fffffff, 0x20, 0x0, 0x7a, 0x80, 0x1, 0x8, 0x3, 0x6, 0x81, 0x1ff, 0xfffffffb, 0x7fffffff, 0x3, 0xa351, 0x9, 0x7f]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xbd1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x6, 0x3, 0x8, 0x8, {0x2, 0x1, 0x4, 0x9, 0x2f, 0xc}, {0x2b, 0x0, 0x0, 0x0, 0x57, 0x922}, 0x8001, 0x0, 0xffff}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x2, 0x6, 0x8, 0x10001, 0xfff, 0x9, 0xe, 0x6, 0x7, 0x8, 0x7fffffff, 0x8, 0x10001, 0x0, 0xb274, 0x570, 0x7fffffff, 0x1, 0x9, 0x1000, 0xc803, 0xecc, 0x1, 0x328b84cd, 0xffff4a61, 0x2, 0xe36, 0xf, 0x1, 0xe5, 0xdc, 0xc, 0xa, 0x6, 0x8, 0x0, 0x6, 0x7fffffff, 0x0, 0x8, 0x10040, 0xae4a, 0x326a, 0x2, 0x1, 0x7328, 0x401, 0x1, 0x6, 0x8, 0x5, 0xffff, 0x0, 0x6, 0x10001, 0x7, 0x5, 0x1, 0x4, 0xfffffffb, 0xffff, 0x8da, 0x0, 0xfffffff2, 0xffffff42, 0x1, 0x5, 0x7, 0x5, 0x6, 0x4, 0x8, 0x9, 0xfffffffc, 0x3, 0xca, 0x53, 0xfffffff9, 0x4000, 0x7fff, 0xffffffff, 0x200, 0x5, 0x8, 0xd4d, 0x9, 0x6, 0x200, 0x1, 0x2, 0x9, 0x7, 0x8, 0xe7, 0x4, 0x6, 0x670, 0xffff, 0x6, 0xa37f, 0x7, 0x2, 0x100, 0x100, 0xffffffff, 0x9, 0x401, 0x8, 0x2, 0x60d, 0x1, 0x1, 0xff, 0xfffffe00, 0x9, 0x2, 0x41d, 0x9, 0x1, 0x200, 0xa2, 0x4, 0x834c, 0xc64, 0x7, 0x2, 0x4, 0x7fffffff, 0x9, 0x8000, 0x88d7, 0x6, 0x0, 0x7, 0xa2, 0x2, 0x26f, 0x8ab, 0x0, 0xa111, 0x1, 0x8, 0x6, 0x7082, 0x0, 0x4, 0x2, 0xf, 0x9, 0x9, 0x1, 0x2, 0x80000000, 0x2f08f7a1, 0x1, 0x40, 0x5, 0xe715, 0x2, 0x6, 0x4, 0xe, 0x7, 0x5, 0xfe9, 0x1, 0x9, 0x800, 0x9, 0xffff, 0x80, 0x9, 0x6, 0x3, 0x6, 0xa, 0x0, 0x2, 0x2, 0x3, 0x8, 0xee70, 0x7f, 0xffffffff, 0x1ff, 0x2, 0xfff, 0x9, 0x6d41, 0xd, 0x7, 0x3ff, 0xbe, 0xffff, 0x6, 0x3ff, 0x2, 0x1, 0x5, 0x101, 0x662, 0x1, 0x8, 0x3ff, 0x6, 0x5, 0x5, 0x78c0, 0x7, 0x7, 0x4, 0x557, 0x7, 0x6, 0x8, 0x6, 0x6, 0x4, 0xfffff144, 0x1f4d1330, 0x8, 0x424, 0x1d3a, 0x8, 0x3000, 0xb, 0x9, 0x3, 0x1238b01c, 0x6, 0x7fff, 0xfffffffc, 0x3, 0x7, 0xf061, 0x0, 0x800, 0x6, 0x2, 0x4, 0x0, 0x2c9, 0x3675, 0x7, 0x9, 0x5, 0x0, 0x5, 0x5, 0xfe4, 0x8, 0x1, 0x2, 0x81, 0x1ff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x400}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x2, 0x0, 0x7fffffff, 0xc, 0x9, 0x7, 0xc9e6, 0x69998297, 0x6, 0x1, 0x4, 0x100, 0x8, 0x200, 0x455, 0x9, 0x401, 0x1db, 0x714, 0x50, 0x6902, 0xd, 0x40, 0x2, 0x5, 0x2, 0xfffffff9, 0x4, 0xb, 0x2178, 0x6, 0xfffffff7, 0xaea5, 0x7066, 0x5, 0x17e, 0xb, 0x7, 0x2, 0x9, 0x1, 0x3, 0x7, 0x9, 0x2, 0x4, 0x6, 0x80, 0x2, 0x9, 0x1000, 0x6, 0x1, 0x8, 0x4, 0x3ff, 0x9fe3, 0x7, 0x7, 0x0, 0xfffff001, 0xb, 0xff, 0x9, 0x4, 0xfffffff8, 0x3, 0x6, 0xffff, 0x1, 0x3ff, 0x5e, 0x3, 0xb, 0x1, 0x492, 0x100, 0x8, 0x1, 0x1ff, 0x0, 0x8, 0x3, 0x80, 0x800, 0xf, 0x9, 0x3, 0x5, 0x5, 0x1, 0x4e, 0x2, 0x7ff, 0x4, 0x80, 0x10000, 0xf, 0x3, 0xb01, 0x81, 0x5, 0x1d, 0xf, 0x5, 0xfffffffc, 0x6408, 0x8, 0x9, 0x5, 0x3, 0x8a, 0x9, 0x8, 0x1, 0x4458, 0x21, 0x818, 0x3, 0x3, 0x9, 0x80000000, 0xa6, 0x7, 0x7, 0x5, 0xfffff9d1, 0x4, 0x6, 0x4, 0x9, 0xf, 0x9, 0x4, 0x6, 0x3, 0x1, 0xff, 0xfffffff9, 0x8, 0x6, 0x7fffffff, 0x40, 0x3f1, 0x9, 0xe0, 0x80, 0x4, 0x1, 0xfff, 0x200, 0x6, 0xc168, 0xfffffffd, 0x7ff, 0x7, 0xfff, 0x1, 0x8001, 0x216, 0x7, 0x5, 0x9, 0x5, 0x59, 0x8, 0x7, 0x4, 0x6, 0x1000, 0x8, 0x72, 0x1, 0x4, 0x1000, 0x0, 0x62ac7f99, 0x0, 0x7, 0x9, 0x5, 0x5, 0xffffffff, 0x6b800000, 0x6, 0x0, 0x7, 0xfffffffa, 0x1, 0x1000000, 0x101, 0x9, 0x8, 0x401, 0x4, 0x10000, 0xf, 0x81, 0x4, 0x7f, 0x4, 0xfff, 0x1, 0x8000, 0x1000, 0x0, 0x316c, 0x4, 0xfffffffd, 0x6, 0x92, 0x7ff, 0x3ff, 0x40, 0x2, 0x5, 0x7, 0x4478, 0x0, 0x7, 0x81, 0x7400, 0x3, 0xc, 0x8001, 0xaf2, 0xb, 0x8, 0xbd0e, 0x3, 0x2, 0xf, 0x9, 0x0, 0xffffff66, 0x0, 0x8000, 0xba, 0x4, 0xffffffff, 0x7, 0x2, 0x10001, 0x8000, 0x81, 0x80, 0x3, 0x40, 0xffffffff, 0x7fffffff, 0x0, 0x2, 0x1, 0x5, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1000}], [@TCA_POLICE_RATE={0x404, 0x2, [0xd4, 0x6, 0x6, 0x8, 0xfcac, 0x3, 0x8, 0x5a8, 0x4b, 0x7, 0xf5, 0x200, 0x5, 0x9acc, 0x9, 0xb, 0x5, 0x3449, 0x4, 0x8775, 0x4, 0x2, 0x7, 0x5, 0x7, 0x3, 0x9, 0x7fffffff, 0xfff, 0x32e, 0x4, 0xef, 0x7fffffff, 0x10000, 0x734, 0x2, 0x6, 0xffff, 0x1000, 0x6, 0x7, 0x7, 0xfff, 0x2, 0x0, 0x8, 0x5, 0x9f8, 0x4, 0x7, 0x101, 0x6ce, 0x3ff, 0x81, 0x4, 0xa2, 0xe2, 0x5, 0x2000, 0x4, 0x4, 0xff, 0x515edfd0, 0xfff, 0x10, 0x9, 0x5, 0x2, 0x3, 0x6000, 0x800, 0x4, 0x9, 0x7fffffff, 0xac2, 0xffffffff, 0x7ff, 0x7, 0x9, 0x9, 0x9, 0x7ff, 0x4, 0x7, 0x8, 0x10, 0x8, 0x7, 0x81, 0x9, 0xe, 0xfffffffc, 0x0, 0xd48e, 0x7, 0x101, 0x1, 0xb76b, 0x9, 0x0, 0x0, 0x7, 0x6, 0x7fffffff, 0x54, 0x800, 0x851, 0x53ab2136, 0x0, 0x8792, 0x1ff, 0x2, 0x2, 0x8, 0x6, 0xffff, 0xff, 0x5, 0xad, 0x1, 0x0, 0x5, 0x8, 0x4, 0xfffffffb, 0xa9, 0x3, 0x3, 0x6, 0x6, 0x9, 0xfa, 0x8, 0x7, 0x520, 0x7, 0x7e1, 0x10001, 0x1, 0x9, 0x10, 0x3, 0x8, 0x3, 0x7ff, 0x0, 0x7b49, 0x3, 0x9, 0x3, 0x9, 0x7, 0x9, 0x101, 0x100, 0x38f, 0x0, 0x1, 0x3ff, 0x9, 0xffff, 0x3, 0x7, 0x7f, 0xffff, 0x3, 0x6, 0x9, 0x7fffffff, 0x4, 0x7, 0x5, 0x7, 0x8, 0x100, 0x2, 0x40, 0xc, 0xffffffff, 0x10001, 0x2, 0x10, 0x3, 0x5000, 0x2, 0x4, 0x3, 0x2, 0x3, 0x401, 0x80000001, 0x8, 0xd7f, 0xfffffff1, 0x4a, 0xea, 0x9, 0x8, 0x3, 0x2, 0x8, 0x1, 0x4, 0x8001, 0xfc000000, 0x0, 0x1, 0x5, 0x3, 0x8001, 0x6, 0x7ff, 0x7fff, 0xff, 0x7ff, 0xffff, 0x6ed7, 0x7, 0x3, 0x7e32, 0x0, 0xffffffff, 0x8, 0x0, 0x1, 0x1, 0x5a, 0x8, 0x6, 0xc, 0x1ff, 0x3, 0xfffffffa, 0x2, 0x5, 0x2, 0x10, 0xff9, 0x98, 0x401, 0x1888000, 0x6, 0x97f2, 0x2, 0x2, 0xf60, 0x65e3, 0x2, 0x6, 0x81, 0x414, 0x3, 0x0, 0x2, 0xe5, 0xfffffff3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x7, 0x8, 0x1, 0x0, 0x1, 0x7, 0x6, 0xfd34, 0x7, 0x3, 0x798f, 0x1, 0x6, 0x9, 0x8, 0x6, 0x28f, 0x6, 0x0, 0x8, 0x1, 0x5, 0xfff, 0x2, 0x5, 0x6, 0xfff, 0x0, 0x4, 0xfffff801, 0xffffff6c, 0x2fd1, 0x3, 0x6, 0x7, 0x1, 0x1, 0x1ff, 0xfffffffe, 0x6, 0x200, 0x7, 0xda, 0x9119, 0xfff, 0x5, 0x0, 0x7f, 0x9, 0x7, 0x4, 0x1, 0x4eee, 0x8000, 0x1, 0x6, 0x43679696, 0x3, 0x7fffffff, 0x2, 0x1, 0x5, 0x101, 0xffff8000, 0x8, 0x4, 0x3, 0x5, 0x8, 0x9, 0x3, 0x80000001, 0x6, 0x8c31, 0x2, 0x7, 0x7, 0x5, 0x5, 0xa, 0x3ff, 0x7, 0x8001, 0x8, 0x1, 0xfffffffd, 0x4, 0x360, 0xdb, 0x2008, 0x2, 0xdf41, 0x3, 0x71f9, 0x38, 0xc64e, 0x0, 0x6, 0x0, 0x800, 0x0, 0x7ff, 0xfa6, 0x9, 0xf, 0x9, 0x8338, 0x4, 0x401, 0x3, 0x9, 0x5, 0xc5, 0x850, 0x2, 0x4, 0x3, 0x7f, 0x4, 0x7fff, 0xdfa, 0x74673169, 0x0, 0x5, 0xfffffc01, 0x36e4, 0x101, 0x9, 0x40, 0x0, 0x2, 0x8, 0xfff, 0x7fff, 0x7, 0x7, 0x8, 0x2de, 0xfffffff4, 0x1000, 0x8, 0x1110, 0x907a, 0x5, 0xd, 0x2e2, 0x1, 0xfffffffd, 0x5, 0x9, 0xe45, 0x8000, 0x0, 0x5, 0x3, 0x2, 0xbe88, 0x7, 0x6, 0x94, 0x5, 0x0, 0x9f6, 0x3, 0x0, 0xfffff1bd, 0x1, 0x0, 0xff, 0x8000, 0xb, 0xb, 0x0, 0x8, 0x8, 0x26, 0x7cf, 0x8, 0x7, 0x90, 0x80000000, 0x2, 0x14, 0x0, 0xffff0000, 0x751f, 0x9, 0x1, 0x7, 0x7fff, 0x2, 0x5, 0xd6, 0x9, 0x0, 0x0, 0x81, 0x5, 0x7, 0x733, 0x4, 0x7fff, 0x2287, 0xffff9f2f, 0xffffffff, 0x5, 0xa, 0xf2, 0x29, 0x1000, 0x3, 0x7, 0xe, 0x4, 0x10, 0x4c, 0xc65, 0x7, 0x8001, 0x0, 0x95e, 0x954, 0x200, 0x9, 0xb, 0x101, 0x10001, 0xc, 0xb45, 0x1, 0x101, 0x3, 0x2, 0x81, 0x7, 0x7ff, 0x4, 0x7, 0x7f, 0xe, 0x4, 0x981c, 0x2, 0x7f, 0x0, 0x8, 0x2, 0x10001, 0x9, 0x1, 0x0, 0x4, 0x4, 0x6, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x100}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x1, 0x7ff, 0x8768af2, 0x8, 0x2, 0x6, 0x1ff, 0xa9, 0x4, 0x8, 0x34, 0xfffffffa, 0x4, 0x8, 0x3, 0x80, 0x6, 0x400, 0xfffffffa, 0x9, 0xffffff4f, 0x1, 0x80000000, 0xdf, 0x7fff, 0x8001, 0x2, 0xfffffff1, 0x7, 0x8000, 0x0, 0x8, 0x1, 0x4, 0x7f, 0xfffffffe, 0xfffffff4, 0x9, 0x0, 0x36d5, 0x0, 0x9, 0xfffffffb, 0x3, 0x8, 0x401, 0x0, 0x3, 0x84f, 0x66, 0x5, 0x1, 0x9, 0x81, 0x9, 0x0, 0xffffffff, 0x2, 0x4, 0x101, 0x5, 0x0, 0x2b00000, 0xf14, 0x9cdd, 0x9, 0x3, 0x8, 0x6, 0x1, 0x1, 0x7fff, 0x7fff, 0x4, 0x0, 0x881, 0x10001, 0xa690, 0x3, 0x2, 0x33, 0x4, 0x7, 0x9, 0xde7, 0x2, 0x3, 0x5ac, 0x0, 0x0, 0xcd, 0x0, 0x292, 0x1000, 0x6d8, 0x0, 0x7, 0x5, 0x5, 0x10000, 0x9, 0x0, 0x8, 0x3, 0x9, 0x6, 0x3, 0x684d406f, 0x5, 0xf, 0x3ff, 0xe6d2, 0x2, 0x9, 0x3, 0x4, 0x3, 0x1, 0x8, 0x3, 0x9, 0x0, 0x2, 0x3, 0x521, 0x6, 0x7, 0x0, 0x88e, 0x2, 0x100, 0x10001, 0x7, 0x5, 0x80000001, 0xa653, 0x5, 0x8, 0xebf, 0x7fffffff, 0xb4, 0x8, 0xfffffe00, 0x7302, 0x97c, 0x1, 0x51, 0x10, 0xb, 0x3ff, 0xffffffff, 0x80000000, 0xffffff16, 0x6, 0x9, 0x7ff, 0x4, 0x9, 0x8, 0x70000, 0x6, 0x7, 0xb0, 0x12, 0x1, 0x1, 0xfffff800, 0x2, 0xbd1, 0x60b1, 0x6, 0x67b, 0x7, 0x4, 0xff, 0x10000, 0xf2, 0x7, 0x7d, 0xd, 0x2, 0x4, 0xfffffff2, 0x4, 0x9, 0x1, 0xeb4b, 0x0, 0x1e8, 0x7, 0x7, 0x1, 0x4, 0x300, 0x5, 0x1, 0x9, 0xfffffffd, 0x0, 0x0, 0x6, 0x200, 0x7, 0x1, 0x8, 0xe0, 0x8, 0x8001, 0x60000, 0x1, 0x1, 0x6, 0x5, 0x6, 0x6, 0x1d71, 0x4, 0x7f, 0x6, 0x903, 0xff, 0x7, 0x2, 0x1ff, 0x7fff, 0x400, 0x2e, 0x4, 0x4, 0x5, 0x7, 0xea3, 0x40000000, 0x8d1, 0x21, 0x4, 0x9, 0x8000, 0x3, 0xc, 0x81, 0xe3, 0x42, 0x6, 0xfbb7, 0x6, 0xfff, 0x4, 0x5c800, 0x5, 0x70, 0x6, 0xd, 0x4, 0xe]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xffc, 0x0, 0xa, 0x3ff, 0xfffff699, 0x2, 0x5, 0x9, 0x5, 0xb5b, 0x8, 0x3800, 0x1, 0x0, 0x8, 0x800, 0x80000000, 0x5, 0x100, 0xffff8001, 0xa, 0x10000, 0x9, 0x60e11a44, 0x4cf1, 0x6, 0xffffffff, 0x1, 0x8000, 0x80, 0x795, 0x6, 0x8, 0x7, 0x2, 0xf, 0x5, 0x10, 0x2, 0x3, 0x3ff, 0x80, 0x90000000, 0x8000, 0x62, 0x3, 0x4, 0x5, 0x3, 0xf, 0x2, 0x4, 0x399, 0x8, 0x36, 0x60, 0x0, 0x90, 0x7, 0x4, 0xfffffffc, 0x3, 0xc, 0x2, 0x401, 0x8, 0x3a, 0x5, 0x9, 0x8000, 0x4, 0x39, 0x3, 0x8e, 0x2, 0x5fb7, 0xfffffffc, 0xc4, 0x68, 0x1, 0x8001, 0x0, 0xf79b, 0xa, 0xffff8000, 0x0, 0x6, 0x2, 0xe, 0x10001, 0x800, 0xe0, 0x9, 0x9, 0x3, 0x139, 0x6, 0x8, 0x1, 0x5, 0x0, 0x4, 0x3, 0x7fff, 0xfffffff9, 0xb, 0x7fa, 0x3, 0x9, 0x0, 0x5, 0x1, 0x0, 0x991a, 0x7f, 0x0, 0x5, 0x8, 0x6, 0x4824, 0x7ff, 0x1, 0x4, 0x401, 0x7ff, 0x5, 0x6, 0xfffffffa, 0x79, 0x1, 0x8, 0x9, 0x8d, 0x2, 0x8, 0x1, 0xa, 0xd, 0xce, 0x8, 0x100, 0x3, 0x81, 0x6, 0x6, 0xfffffffa, 0x7d9, 0x2, 0x7, 0x7, 0x4, 0x4, 0x5, 0x8, 0x80000000, 0x5d599b95, 0x8, 0x1099, 0x5, 0x38bb4881, 0x9, 0x4, 0x1, 0xffff, 0x7, 0x1, 0x2, 0x1, 0xae, 0x278, 0x8, 0xb, 0x4, 0x401, 0xa8, 0xd474, 0x7, 0x3, 0x6, 0x9, 0x6, 0x3, 0x3, 0x80000001, 0x18, 0x6, 0x8, 0x6, 0x7, 0x9c4d, 0x1, 0x4, 0x9, 0x700000, 0x9, 0x2, 0x4, 0x2, 0x8, 0x1, 0xa, 0x8, 0x274b, 0x9, 0x10, 0x3, 0x401, 0x7, 0x2, 0x6, 0x8, 0x7ff, 0x4, 0x10, 0x9, 0x6, 0x156a, 0x6, 0x200, 0x4, 0x8, 0x3, 0x9, 0x1, 0x5, 0x2, 0x3, 0x3, 0x10, 0x80, 0x8, 0x0, 0x8c1, 0x2f, 0x2, 0x60000000, 0x997, 0x4, 0xf0, 0xe72, 0x3, 0x4, 0xf, 0xaf, 0x67d, 0x1, 0x1, 0xfcb, 0x3, 0x2, 0x3, 0x4, 0x0, 0x2, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffff8}], [@TCA_POLICE_RATE={0x404, 0x2, [0x41, 0x800, 0x8, 0xfffffffa, 0x0, 0x72, 0x6f, 0x8, 0x40, 0x9, 0x0, 0x1, 0x2, 0x0, 0x0, 0x2, 0x1, 0xab, 0x0, 0xfffffffb, 0xf, 0x6, 0x2, 0x8, 0xb, 0x3, 0x5, 0x40, 0x4, 0x4, 0x7, 0xe, 0x400, 0x6, 0x0, 0x5, 0x1, 0x6, 0x9, 0x3, 0xb, 0xbad, 0x1, 0x40, 0x6, 0x6, 0x6, 0x4c7, 0xff, 0x1, 0x2, 0x0, 0x28c, 0x8000, 0xd, 0xdb01, 0x2, 0x5, 0x400, 0x4, 0x5, 0xffffffff, 0x7, 0xf31e, 0x7, 0x2, 0x7fff, 0x8e1, 0x57f5, 0x0, 0x5, 0x3, 0x1, 0x1, 0x2, 0x10, 0x7e44, 0xffffffff, 0xa300000, 0x1000, 0x4, 0x1b91, 0x3, 0x1, 0x2, 0x6, 0x2, 0x7, 0x1, 0xff80, 0x4, 0xf, 0x6, 0x0, 0x400, 0x1, 0x9, 0xd, 0xfffffff0, 0x5, 0x5, 0x2a4c, 0x9, 0x1, 0xffffffff, 0x5, 0x6d, 0x4, 0x2, 0x6, 0x10000, 0x51a9, 0x767a, 0x5, 0x1, 0x4, 0x3, 0x7ff, 0x6, 0x800, 0xe8e8, 0x6, 0xfffffffc, 0x0, 0x8, 0x9, 0x5, 0x5, 0xfffffffa, 0x7, 0x5, 0x740d, 0x80, 0x8, 0x4, 0x9eb, 0x43d3, 0x888, 0x9, 0x7, 0x8001, 0x4, 0x7, 0xb, 0x8, 0x7ff, 0x4f6fffed, 0x0, 0x40, 0x4, 0x5, 0xff, 0x4, 0xf73c, 0x8, 0x9, 0x1, 0x3, 0x4, 0x3f5, 0x3, 0x8, 0x4, 0x7, 0x10000, 0xffff, 0x356d, 0x1400000, 0x1, 0x2, 0x5, 0x3, 0x9, 0x0, 0x0, 0x80, 0x8, 0x7d, 0x1, 0x5e89, 0x9, 0x1, 0xe, 0xb7, 0x4, 0x8, 0x6, 0x7, 0x101, 0x7, 0x8, 0x4, 0x4, 0x1, 0x5, 0x34, 0xbf5, 0x239, 0x401, 0x7, 0x7, 0x4, 0x4, 0xffffffff, 0x101, 0x4, 0x8, 0x4, 0xfff, 0x5, 0x9, 0x573, 0x0, 0xe, 0x1, 0x80000000, 0x6, 0x3, 0x0, 0xff, 0x0, 0x40, 0xb54, 0x0, 0x0, 0x2e, 0x2, 0x4, 0x6, 0x40, 0x7, 0x3, 0x9, 0x5, 0x0, 0x3, 0x5, 0x8, 0x1, 0x8, 0x7d47, 0x6, 0x5, 0x101, 0x11b73759, 0x1, 0x4, 0x100, 0x1, 0x86c5, 0x7, 0x2, 0x8000000, 0x4, 0xffffffff, 0x56]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x5, 0x3, 0xfff, 0x1, {0x2, 0x1, 0x6, 0x1000, 0x2d25, 0x9}, {0x8, 0x1, 0x10, 0x877, 0x400, 0x807b}, 0x4, 0x8, 0x8}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffff800}]]}, {0xde, 0x6, "f4008cdd0746c1020a5d64357809b647ce75da8ebfb8200763726059dd753f5844f07f155b6879054b36df3ce0c62d1ca08861c028b527af0d0643747629f246063c36d62c71552de9476cd739c062f224facc24b08a4095df6339f7f1ea5c72102ead67a1d1281e27ed7a04db4aea9241d5f71b78896f68899762538832ea1b212bd915c4cb457cba389325884c283174cfd816d114d14d74cad276d04ddf18ace67dbde279b03cf2064ce777e4b65540a9b7d47442b41ee28e36e821a26732e4204038b14a8d1b988041997f2dd42fd19914709d2e1442f014"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0x1}}]}}]}, 0x47a8}, 0x1, 0x0, 0x0, 0x20000004}, 0x81) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m15.272706201s ago: executing program 7 (id=765): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff, 0x9}, {0xffff, 0xfff4}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xd, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xc, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x8009, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) shutdown(r0, 0x1) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x2}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xd, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x3000, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x111, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xff, 0x2, 0x1, 0x2, 0x90, 0x22, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "f4b3b4f1"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x400000, 0x8, 0x0, 0x4}, {0x6, 0x24, 0x1a, 0x2, 0x40}, [@mdlm_detail={0x52, 0x24, 0x13, 0xa, "98c43b9f8223751b870b014335df4532a481ad42f07f0192ac8ac1943783b15f25da8e05c39f6728d1e0d0443aed227168c5cefc4e53cfa9e2c3fa5d77026bdefe32f929e1bc4f17f20bfed5d332"}, @mdlm={0x15}, @mdlm_detail={0x33, 0x24, 0x13, 0x9, "b5e8e7a566b05c18ee317088ba36194615a9a04a7a4bde58a768d6ef41b8244ca8ba682dc2e78d5a5dd5e6b5b0d2d4"}, @call_mgmt={0x3, 0x24, 0x1, 0x0, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x40, 0x3, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xd, 0x5, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x250, 0xa, 0x81, 0x3}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x3, 0x0, 0x7f, 0x10}, 0x24, &(0x7f00000001c0)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x4, 0x0, 0x800, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x51, "f41585b084546e91983717ed518d603b"}]}, 0x5, [{0x54, &(0x7f0000000200)=@string={0x54, 0x3, "07dd37c46f63561e3b21887032f0f391904c42791c0fb45282a7b78fae61694df6696c744fdffb227e6a009cfc4ff032c7cf97a3efe3a1d4a88f42cef36f633d93056e89af7c9dfadfafa468185b536b145c"}}, {0x8a, &(0x7f00000002c0)=@lang_id={0x0, 0x3, 0x408}}, {0x102, &(0x7f0000000700)=@string={0x102, 0x3, "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"}}, {0x75, &(0x7f0000000480)=@string={0x75, 0x3, "e5b0ffc5d886e2d272f292139ef1c8ef6ac54e77a0873eae91c21f2ec45e73c856d2d366cbc04bbd01e35efa3eaad5e27ce19725376f24cda053f4f7ce123e861ec96727c09d18edb192d48df728769a71f72bc545c93ab1cd44c5efd9c662cf91aaf8d661dcb353900b34f4f44d6a639993e4"}}, {0x67, &(0x7f0000000500)=@string={0x67, 0x3, "c68327766cbeb13f3e5a35184d14a742de6916fd2ce7374add789327a1899533df818cc9bd0d42e048475e5873034cfed29f3de678c136df1e8c738ce8d1bf772aa6cfd5dac66b9e713e4a0d70bc8e838c04f1afd67a3a35bc9c54727cb2e256f9ae701ba8"}}]}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r10 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$inet_int(r9, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) 2m13.982181584s ago: executing program 7 (id=777): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009bcef25ef000004000280140003007866f4f7b4c408b280606f72"], 0x48}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r1 = syz_usbip_server_init(0x70560fb0414ed81) writev(r1, &(0x7f0000000040), 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) shmget$private(0x0, 0x4000, 0x2, &(0x7f00004d2000/0x4000)=nil) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000540)={0x3}) write$uinput_user_dev(r5, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x0, 0x4000}, 0x0, [0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x389, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x400, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x9fb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd700000000000010000000500040002"], 0x38}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) writev(r6, &(0x7f0000000180), 0x100000000000003c) ioctl$UI_SET_PROPBIT(r5, 0x5501, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_GET_CAP(r8, 0xc010640c, &(0x7f0000000000)={0x8}) write$input_event(r3, &(0x7f00000005c0), 0x18) r9 = io_uring_setup(0x3111, &(0x7f0000000780)={0x0, 0x6, 0x2000, 0x88, 0x1cd}) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x5) close(r9) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x4, 0x7f}}, 0x30) 2m13.076288581s ago: executing program 7 (id=788): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r0, 0x1, 0x48, &(0x7f00000002c0)=""/174, &(0x7f0000000100)=0xae) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x1000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0xfffd, 0x0, 0x0, "e872185081e6c67e"}) r3 = io_uring_setup(0x7c08, &(0x7f0000000080)={0x0, 0xf88a, 0x0, 0x1, 0x273}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000015c0)={0xbd2, 0x0, &(0x7f0000001540)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000140)=""/82, 0x52}, {&(0x7f0000001380)=""/210, 0xd2}, {&(0x7f0000001480)=""/163, 0xa3}, {&(0x7f0000000000)=""/19, 0x13}], &(0x7f0000000280)=[0x6d9, 0xc50, 0xb], 0x5}, 0x20) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f00000001c0)={0x400, 0xf0, 0x40, 0x384, 0xbbb7, 0x2, 0x20, 0xffffffff, {}, {0x402, 0x2}, {0x0, 0x3, 0x20}, {0x0, 0x8}, 0x0, 0x3f0, 0x80, 0x4, 0x0, 0xff, 0x0, 0x10001, 0x0, 0xfffffffd, 0x0, 0x4, 0x9, 0x1, 0x2, 0x8}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000001600)='$&}#:!\x00') 2m12.858054807s ago: executing program 7 (id=792): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140)='7', 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) setresuid(0x0, 0xee00, 0x0) syz_clone(0x53065000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r0, 0xc49, 0x7721, 0x16, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x24005010}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1ff}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f00000003c0)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0x34, 0x24, 0x2, 0xffffffff, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xb, 0x5}, {0xe}, {0xb, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x44044}, 0x4048884) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r6, 0x0, 0x12, &(0x7f0000000240)=0x6, 0x4) write$dsp(r5, &(0x7f0000000900)='B', 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r5, 0x0) close(r5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) 2m12.779931361s ago: executing program 36 (id=792): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140)='7', 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) setresuid(0x0, 0xee00, 0x0) syz_clone(0x53065000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r0, 0xc49, 0x7721, 0x16, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x24005010}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1ff}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f00000003c0)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0x34, 0x24, 0x2, 0xffffffff, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xb, 0x5}, {0xe}, {0xb, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x44044}, 0x4048884) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r6, 0x0, 0x12, &(0x7f0000000240)=0x6, 0x4) write$dsp(r5, &(0x7f0000000900)='B', 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r5, 0x0) close(r5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) 1m39.559185753s ago: executing program 3 (id=1128): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x2}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}]}}]}, 0x40}}, 0x4048000) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xc}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x40) 1m39.505893762s ago: executing program 3 (id=1130): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xb, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c81c500", @ANYRES16=0x0, @ANYRESOCT=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4008010) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x28, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}]}]}, 0x28}}, 0x0) 1m39.500897967s ago: executing program 3 (id=1132): r0 = socket$inet6(0xa, 0x3, 0xff) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) r1 = syz_io_uring_complete(0x0) faccessat2(r1, &(0x7f0000000080)='./file0\x00', 0x40, 0x1100) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair(0x1d, 0x2, 0xfffffffd, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"aa648c2ab4cfd33d46c2d83ec30872d0", 0x0, 0x0, {0x6f, 0x2}, {0x3, 0xffffffff}, 0x100000000, [0x400, 0x5, 0x5, 0x1, 0x1000, 0x7, 0x80000001, 0x8, 0x6, 0xffffffffffffe3ce, 0x100000000, 0x5, 0x1, 0x5, 0x6, 0x80]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000800)={0x0, 0x9, 0x1, [0x2, 0xffffffff80000001, 0xc6d, 0x2, 0x1], [0x100, 0x40, 0xffffffffffff7fff, 0xffffffffffffff01, 0x5, 0x23a2276f, 0x8, 0x807, 0x10, 0x5, 0x0, 0x100000001, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x7, 0x9, 0x9, 0x659, 0xd0, 0x7fffffffffffffff, 0x6d, 0x7fffffffffffffff, 0x4, 0x9, 0x3, 0x3, 0x4, 0x2, 0x8, 0x8, 0x9, 0x9, 0x8, 0x3, 0xff, 0x4, 0xf0b, 0x3, 0x9, 0xd9b, 0x7, 0x6, 0xbb5, 0x7, 0x2, 0x2, 0x3ff, 0x4f0c, 0x40, 0x8, 0x0, 0x6, 0x2, 0x1, 0x8, 0xd, 0x5971, 0x6, 0x401, 0x3, 0x70c, 0x9, 0x80000000, 0x5, 0xd88, 0x400000000000007, 0x8001, 0x1ff, 0x1000000000000005, 0x8001, 0x9, 0x5, 0x4, 0xfffffffffffffffb, 0x9, 0x81, 0x8, 0x6, 0x3, 0x400, 0xa, 0x45a, 0x5, 0x50, 0xfffffffffffffff4, 0x5, 0x8adc, 0x2, 0x0, 0x7, 0x1, 0xfffffffd, 0xb, 0x4, 0xa3, 0x7, 0x0, 0x1800000000000, 0x9, 0x2, 0xfffffffffffffff9, 0x8, 0x7, 0xdf, 0xfba, 0x100000001, 0x8000, 0x0, 0x8, 0x7, 0xb971, 0x1, 0xaca6, 0x8, 0x1000003, 0x9, 0x81]}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000c40)={{r2}, r3, 0xa, @unused=[0x91f0584, 0x4fb, 0x0, 0x1004], @devid=r4}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r7, 0xc018aec0, &(0x7f00000000c0)={0x1}) sendmsg$nl_route(r5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, 0x0, &(0x7f0000000a00)) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff9, 0x3, 0x7, 0x5, 0x3, 0xffffffffffffffff}) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000340)={0xd, 0x1}) syz_open_procfs(r9, &(0x7f0000000380)='net/udp\x00') vmsplice(r1, &(0x7f0000000300)=[{&(0x7f0000000200)="c2e5a05cbecdd8298be7020955d6863ec384f0044055151d3bf15d80b8a8808b316045dfc4f2ab1adab0fa3878778ab47aa2c4aa85465f6bd134a4ea5c28484e33ec03c72508efe251961a5fe72d799817f09df5b66d822d526af8403158eb102ef32f3633d7272c2097451f384213ac7faf37b9af1f9d30ed7050773b68a8c1d1cce02f63bda8d8efc5f95e7aba2cef0ea93d23271f74601e65801c448ecd7a49493e4eb6ed90308ab56c7187aa2a3159d1618bf0560dad615a4ab81f9584f6cbf8841f5e577196d96e9a081b1ab23caadf5dfbf4bac8e0ff2376491b6ca0f143200c1eade6be", 0xe7}, {&(0x7f00000000c0)="d1eb35e8ae6b784b34be", 0xa}], 0x2, 0x5) socket$nl_generic(0x10, 0x3, 0x10) mount$binderfs(0x0, 0x0, 0x0, 0x4847, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRES8]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x20080, &(0x7f0000000100)) read$FUSE(r1, &(0x7f00000040c0)={0x2020}, 0xfffffeae) 1m39.345096094s ago: executing program 3 (id=1133): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f00000000c0)=[{r3, 0x200}], 0x1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x9a7}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x200, 0x1, 0xffffffffffffffff, 0xeeb, 0x5}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x10) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) gettid() (async) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) (async) ppoll(&(0x7f00000000c0)=[{r3, 0x200}], 0x1, 0x0, 0x0, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x9a7}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x200, 0x1, 0xffffffffffffffff, 0xeeb, 0x5}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x10) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$TCFLSH(r0, 0x400455c8, 0x1) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) 1m39.133268083s ago: executing program 3 (id=1134): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xcafe, 0xc000, 0x2, 0x20002f9}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x4}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001c00010029bd700000dcdf2507000000", @ANYRES32=r3, @ANYBLOB="80007f0a0a0002000180c2000003000006000500042c8e"], 0x30}, 0x1, 0x0, 0x0, 0x20004001}, 0x4040004) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) (async) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xcafe, 0xc000, 0x2, 0x20002f9}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) (async) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x4}) (async) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001c00010029bd700000dcdf2507000000", @ANYRES32=r3, @ANYBLOB="80007f0a0a0002000180c2000003000006000500042c8e"], 0x30}, 0x1, 0x0, 0x0, 0x20004001}, 0x4040004) (async) 1m39.13183226s ago: executing program 3 (id=1135): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004) 1m23.093453285s ago: executing program 37 (id=1135): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004) 54.972562113s ago: executing program 6 (id=1735): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600040000000000000000000003003e00ebffffff940200000200000040000000000000000000000000000000000000002d8f38000200feff0500030001000000030000002dffffffffffffff06000000002447000800000000000000a12f0002000000000700000000000000010000000000000003000000050000832e328bc3fb5813b51a6cf840e308000000006fac8700000010000008000000000600000000000000310000000000000006000000000000004601000000000000"], 0xb0) close(r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x1008001, 0x0) 54.882403966s ago: executing program 6 (id=1736): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/121, &(0x7f0000000180)=0x79) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0012000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipmr_delroute={0x24, 0x19, 0x1, 0x70bd2e, 0x800000, {0x80, 0x20, 0x0, 0x40, 0xfc, 0x4, 0x0, 0x5, 0x2400}, [@RTA_MARK={0x8, 0x10, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) 54.881890816s ago: executing program 6 (id=1737): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848350000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x80, 0x0, 0x0, 0xff, 0x2, 0xff, 0x0, 0x400}, [@RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x4, 0x0, 0x4, 0x0, 0x80, 0x30, 0xb9}}}}}]}, 0x44}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd9, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xdf, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x20, 0x8, 0x5, 0x19, {{0xd, 0x4, 0x2, 0x0, 0x34, 0x66, 0x0, 0xe, 0x4, 0x0, @multicast1, @multicast2, {[@rr={0x7, 0x1f, 0xb6, [@dev={0xac, 0x14, 0x14, 0x29}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010101, @multicast2]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000500)={'wg0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x0, 0xdc, &(0x7f0000000600)=[{}, {}], 0x10, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xec, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, r7, 0x25, 0x0, @val=@netkit}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'sit0\x00', &(0x7f0000000840)={'sit0\x00', 0x0, 0x40, 0x7800, 0xd, 0x80000000, {{0x2e, 0x4, 0x0, 0x8, 0xb8, 0x64, 0x0, 0xf3, 0x2f, 0x0, @broadcast, @private=0xa010102, {[@noop, @cipso={0x86, 0x32, 0x0, [{0x0, 0x4, "ef31"}, {0x6, 0xa, "6ed6abca18e236d8"}, {0x7, 0x2}, {0x2, 0x6, "a6cafb6e"}, {0x5, 0xd, "cef045f532c3169011853a"}, {0x7, 0x9, "bc780e305d4047"}]}, @timestamp_addr={0x44, 0x44, 0x66, 0x1, 0xf, [{@rand_addr=0x64010102, 0xff}, {@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@rand_addr=0x64010102, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2b9ff556}, {@broadcast}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x74}, {@multicast2, 0x400}]}, @noop, @cipso={0x86, 0x2a, 0x0, [{0x2, 0x4, "c3c7"}, {0x2, 0x8, "3a9be6385ffc"}, {0x6, 0x9, "87e877d030ab27"}, {0x1, 0xb, "4a8a574be75ae311ef"}, {0x7, 0x4, "7abe"}]}]}}}}}) r10 = socket$packet(0x11, 0x2, 0x300) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001000390400000000fbdbdf2500000000", @ANYRES32=r12, @ANYBLOB="01980400419a04001800128008000100677470000c00028008000100", @ANYRES32], 0x38}}, 0x0) sendto$packet(r10, &(0x7f0000000540)="05d98ea95e04c0d35bb5f75deff207fb646788c55c6d8f9631a19fc79856af417ca2df90c0ce598cae7fe4d4013cda2a345d836d", 0x34, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r12, 0x1, 0x4, 0x6, @random="ae639550b3be"}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000009c0)=[0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe8, &(0x7f0000000a40)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0xd5, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d40)={'ip6_vti0\x00', &(0x7f0000000cc0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x7f, 0x8001, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x8000, 0x1, 0x4, 0xffffffff}}) r16 = socket$nl_route(0x10, 0x3, 0x0) r17 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r17, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r16, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r18, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'veth0_virt_wifi\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000dc0)={0x0, @loopback, @multicast1}, &(0x7f0000000e00)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000e40)={@local, 0x0}, &(0x7f0000000e80)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001180)={&(0x7f0000000ec0)={0x2bc, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xcfb309e21d0ffa1a}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x50}, 0x4840) 54.787503393s ago: executing program 6 (id=1738): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={'\x00', 0x0, 0x0, {0xfffffffffffffff8, 0x10000}, {0x6, 0x6}, 0xab4, [0x5, 0x7a, 0x1, 0x4000000005, 0x40, 0x66, 0x1, 0x5f, 0x2, 0xffffffffffffffff, 0x10, 0x4, 0x6, 0xffdffffffffffff7, 0x621, 0xa]}) (async) r0 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcd\v\x00\x00\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0x0, 0x0}) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0xf, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8490}, 0x80) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x3) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VT_ACTIVATE(r4, 0x5606, 0x2) close(r2) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x1b) io_setup(0x251, &(0x7f0000000080)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f0000000140)={0x25, 0x0, 0x41, 0x8, 0x0, r5, 0x0, 0x0, 0x4000, 0x0, 0x0, r5}]) recvmsg$can_raw(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000900)=""/110, 0x6e}], 0x1}, 0x40000040) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 34.409635117s ago: executing program 1 (id=1971): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000fbff27bd7002fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14100400040004001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r4 = fsopen(&(0x7f00000001c0)='nfsd\x00', 0x1) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x2, 0x3, 0x6, 0x84000, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0xfb, 0x85, 0x6, 0xb, "6903e17c9a836ac5fcaaeaa072178457", "f94729f80d65deae75c5bdbe3f045ffcadc9032bbf56ed263c1fcbe167463ff4007646096e9ec9a76ecb5a8b02424fe14d419e4d3f151e01e0584dfff4bb69d117515344d2351492f00990f8a903dd66262caa59906c07312df4330cb422c701cff20c75752cf615bb685a6a549927e8"}, 0x85, 0x3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x1f4, 0x0, 0x0, 0x54}, 0x9c) fchdir(r6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 22.717709339s ago: executing program 8 (id=2110): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140081001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00", @ANYRES32=r0, @ANYBLOB="080004007f00", @ANYRES64=r0], 0x50}}, 0x0) 22.631739408s ago: executing program 8 (id=2111): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x800, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x0, 0x4}, 0x9c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2142, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r5 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x4d8101, 0x0) mmap(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x100000c, 0x40010, r5, 0x25fa1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22.377970219s ago: executing program 8 (id=2112): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 22.171297286s ago: executing program 8 (id=2113): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a5c000000060a0b04000000000000000002000000300004802c0001800a00010071756575650000001c0002800600024000060000060001400003000006000340000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x84}}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), r2) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x14, r3, 0xf1aad47e89fb43b5, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f00000007c0)={r0, &(0x7f0000000580)='port1\x00', 0x44400, &(0x7f0000000680)={@_ha_fsid={[0xe, 0x4]}, {0x7, 0xfe, 0x0, 0x9}}, 0x0, &(0x7f0000000740), &(0x7f0000000780)=0x9}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000800)={[0x6, 0x0, 0x1ff, 0x3, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x2, 0x7, 0x8, 0x0, 0x4, 0x7fff, 0x101], 0x6000, 0x8000}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x5, 0x3}, 'port1\x00', 0x44, 0xa00b2, 0x10000000, 0x8000088, 0x6, 0x40003, 0x9}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000300)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r5, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x1, 0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000006c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x9, 0x6}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x4) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000280)={0x0, @loopback, @multicast1}, &(0x7f0000000340)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0xc4, r7, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9a}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40800}, 0x4008010) 22.076036259s ago: executing program 8 (id=2114): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) iopl(0x3) iopl(0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="016155bdf000fbdbdf251c0000000c00018008000100", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40006) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x804) (async) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x14, 0x17, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xd2e}, {}, {}, [@ldst={0x1, 0x2, 0x4, 0x0, 0xb, 0xfffffffffffffffe, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0xd, 0x9, 0x5, 0x2, 0x10}, @call={0x85, 0x0, 0x0, 0x2c}, @generic={0x6, 0xd, 0x5, 0x401, 0x2}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xe}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0xffff0000, 0x0, 0x0, 0x41000, 0x43, '\x00', r3, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x2, 0xe, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000340)=[r8, r8, r8, 0x1, r8, r8, r8, r8, r8, r8], &(0x7f00000004c0)=[{0x2, 0x1, 0xa, 0x2}], 0x10, 0xfffffff7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r8}, 0x0, &(0x7f0000000000)=r9}, 0x20) (async) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd60"], 0x0) (async) r10 = socket$packet(0x11, 0x3, 0x300) (async) r11 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r11) (async) pread64(r0, &(0x7f00000005c0)=""/11, 0xb, 0x80000000) (async) getsockname$packet(r11, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) (async) sendto$packet(r10, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0x6f, 0x40000, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 21.748018291s ago: executing program 8 (id=2115): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)=ANY=[@ANYBLOB="71756f74612c75737271756f74615f696e6f640000040000001b0000000000000000"]) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)=""/4096, 0x1000) chdir(&(0x7f0000000000)='./file0\x00') r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004, 0x4000010, r0, 0xed09d000) 21.619638618s ago: executing program 39 (id=2115): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)=ANY=[@ANYBLOB="71756f74612c75737271756f74615f696e6f640000040000001b0000000000000000"]) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)=""/4096, 0x1000) chdir(&(0x7f0000000000)='./file0\x00') r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004, 0x4000010, r0, 0xed09d000) 18.411291897s ago: executing program 40 (id=1971): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000fbff27bd7002fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14100400040004001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r4 = fsopen(&(0x7f00000001c0)='nfsd\x00', 0x1) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x2, 0x3, 0x6, 0x84000, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0xfb, 0x85, 0x6, 0xb, "6903e17c9a836ac5fcaaeaa072178457", "f94729f80d65deae75c5bdbe3f045ffcadc9032bbf56ed263c1fcbe167463ff4007646096e9ec9a76ecb5a8b02424fe14d419e4d3f151e01e0584dfff4bb69d117515344d2351492f00990f8a903dd66262caa59906c07312df4330cb422c701cff20c75752cf615bb685a6a549927e8"}, 0x85, 0x3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x1f4, 0x0, 0x0, 0x54}, 0x9c) fchdir(r6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 11.993919956s ago: executing program 9 (id=2206): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r2, 0x0, r3}) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000cc0)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x250, 0x0, 0x250, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x27}, 0x1000000, 0xff, 'wg1\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'team_slave_0\x00', 'team0\x00', {0xff}, {}, 0x62, 0x3, 0xc}, 0x287, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x3, 0xf4, 'kmp\x00', "377da29a98a85027440fb1647c5950ecfd45c615dfd84bacf537ed92ac620b95fe75775bfa0c1f3636674f1bc9affc23d45f6e27b674720897315a51a5338ca0ac2dd6b5b2d96bd558dc767e923d15aba2f74dff1149e15f5ba483d804234a06e4bc7d462efc9092f876f845199bb88c0f39fec8f07125d04e8375b370fdb68d", 0x5d, 0x2, {0x6}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x0, 0x3, 0x0, 0x4, 0x4], 0x1, 0x3}, {0x4, [0x6, 0x5, 0x6, 0x0, 0x5], 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000280)="42f2d226dfbf55c6ebc9d4ba14698c2ec0416b3cb15f0b947b9e046bd3c42dcc8b201664bd37d5e1dcb2f64ec074a225ac13a89be79e2bd5bdcd8cffc5ee0512dfe666423022c73264aee90673292872b9ed8e53787dcf53322f00", 0xfffff, r4) r5 = fanotify_init(0x1a, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r5, 0x441, 0x4800001a, r6, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r7, &(0x7f0000000540)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)='$\x00\x00\x00\x00\x00', 0x6}, {&(0x7f0000000240)="0000000000000000000000008100", 0xe}, {&(0x7f0000000140)="ffa20900", 0x4}], 0x4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) close(0x3) r10 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000ff6b1d010140000102030109025f0003010400020904000000010100000a2401000000000201020904010000010200000904010101010200000905010900000000000025010000000009040200ef0002000009040201010102000009058209000000000000250100000000"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x400, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000000c07010227bd7000fedbdf25050004010c00"/32], 0x20}, 0x1, 0x0, 0x0, 0x24008004}, 0x4008844) syz_usb_control_io$uac1(r10, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 10.531169915s ago: executing program 9 (id=2240): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 10.363164205s ago: executing program 9 (id=2242): syz_open_dev$dvb_frontend(&(0x7f0000000040), 0xfffffffffffffffb, 0x109042) 10.36248151s ago: executing program 9 (id=2243): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000002280)=@newqdisc={0x10c, 0x24, 0x800, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xffe0}, {0xa, 0x4}, {0x1, 0xffe0}}, [@q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7fff}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3e}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x4c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x600}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x23}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xe}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}]}}, @q_dsmark={{0xb}, {0x4}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) (async) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000002280)=@newqdisc={0x10c, 0x24, 0x800, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xffe0}, {0xa, 0x4}, {0x1, 0xffe0}}, [@q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7fff}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3e}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x4c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x600}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x23}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xe}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}]}}, @q_dsmark={{0xb}, {0x4}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000a0000001400078008001140000000690800124000007fff10000300686173683a69702c6d6163"], 0x5c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000a0000001400078008001140000000690800124000007fff10000300686173683a69702c6d6163"], 0x5c}}, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) (async) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x38ad211, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84000, 0x0) (async) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84000, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x220000}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xa, 0x730cea8efc6d50bf}, {0x8, 0x5}}, [{0x8}, {0x8, 0xb, 0x5}, {0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x9dd5680993a8b39) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5, 0x8}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r2) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x24, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x1, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x44) 10.256516048s ago: executing program 9 (id=2244): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r1, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4008054) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x87, 0xfe, 0x4, 0xff}, {0x6}]}) 9.982134621s ago: executing program 9 (id=2248): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x1002) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000140)={0x53, 0x0, 0x109, 0x0, @buffer={0x0, 0x41, &(0x7f0000000440)=""/149}, &(0x7f00000001c0)="5538b9edff000000a3ffffff01a26ccc143bc638b65f69d33b5ab57cf52671dc2d7b21178e751ed07500d83b77ea4beb9c4d4c362f69d05192fac58367ffe9779c6752fbdfc72b65c241364dee74e143fd791b70a2bbdbf4d0eb9b5ea7d2a2487b11a25a69d07e232a840bb5bacb14fd42890807191c52c541e28eba71ee2994d17e53d06732a861fbe148757981fdb1a412d834198e1aa1f5241010e87578fb4069800e64d8d46304771ab67e0325aa78c0b404aaa733e2eb7ec56870b6932912eb693d2a48fce52a88fa8f1250bda6fb2825d72773800f3ea37fbf9fd2038bd92db025776dbd835b638d3a3972f76886a46f1bbcbefeebbbbb1ccfa26db44577cdee28d0f61a4d4c", 0x0, 0x0, 0x0, 0x0, 0x0}) 9.950171038s ago: executing program 41 (id=2248): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x1002) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000140)={0x53, 0x0, 0x109, 0x0, @buffer={0x0, 0x41, &(0x7f0000000440)=""/149}, &(0x7f00000001c0)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) 4.27602191s ago: executing program 0 (id=2285): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x103400, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}, {0x0, 0x3f00}], 0x2) syz_emit_ethernet(0x16, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@llc={0x4, {@snap={0x0, 0x0, "af", "c56e86", 0x86dd}}}}}, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x507843, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x103400, 0x0) (async) readv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}, {0x0, 0x3f00}], 0x2) (async) syz_emit_ethernet(0x16, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@llc={0x4, {@snap={0x0, 0x0, "af", "c56e86", 0x86dd}}}}}, 0x0) (async) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x507843, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31) (async) 4.20122265s ago: executing program 0 (id=2286): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r1 = syz_open_dev$sg(&(0x7f0000005980), 0x0, 0x80201) write(r1, &(0x7f0000000540)="19888f3d240000005043b5c7ed4a46be89d283b02d1fee60faffffffffffffffffc0fac97ffcedaa797e1bff1ff0a69d", 0x30) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f725616b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329dffafc3612e325c1eb4a3ab2e156a97444800", "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"}) r3 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00000002c0)=""/183) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x26}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x12) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x28000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r7, 0x3b89, &(0x7f00000004c0)={0x28, 0x0, r9, r8, 0x0, 0x0, 0xdead, 0xffffff8b, &(0x7f0000000040)}) sendmsg$can_raw(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x1d, r6}, 0x10, &(0x7f00000002c0)={&(0x7f0000000280)=@can={{0x0, 0x1, 0x1, 0x1}, 0x0, 0x1, 0x0, 0x0, "64ea8fb0a97bc262"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x10) 4.126777087s ago: executing program 0 (id=2287): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000040)) 4.126482894s ago: executing program 0 (id=2289): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x3ff, 0x10d200) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x121a00) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000240)="440f20c0f080325b440f22c066b8008000000f23d80f21f86635c00000700f23f80f01cff2f40f017dc9baf80c66b804320b8d66ef66b81800000066ef2ef4652ecb0fc77a1abaf80c66b8a6f73c8466efbafc0cb8e542ef", 0x58}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x2, 0x3, 0x7f, 0xa}, {0x4, 0xb9, 0x4, 0x2}, {0xfd8d, 0x80, 0xff, 0x6}]}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000003c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) setsockopt$MRT_DEL_MFC_PROXY(r5, 0x0, 0xd3, &(0x7f0000000200)={@multicast2, @empty, 0xffffffffffffffff, "561f63e679e3a864654d5a17a15185cb18564545138935f1be5aaa2ba7c5aadf", 0x24, 0x8, 0x5, 0x400}, 0x3c) (async, rerun: 64) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x6}) (rerun: 64) 3.941239149s ago: executing program 0 (id=2293): r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000040)=0xfe9, 0x4) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x0) syz_usb_connect$cdc_ecm(0x3, 0x74, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x1, 0x0, 0xe0, 0x3, "", [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0xc3, {{0xb, 0x24, 0x6, 0x0, 0x0, "1de73bff4a1c"}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0x5, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x6, 0xd, 0x0, 0x3}, @mdlm={0x15, 0x24, 0x12, 0x7ae}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x2, 0x9, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x2, 0x1, 0xc0}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x40, 0x6, 0x9, 0x40, 0x2}, 0x33, &(0x7f0000000180)={0x5, 0xf, 0x33, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x6, 0x80, 0xe, 0xf9}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x7, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0xf, 0x77bf}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x1, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x95, 0x7, 0x2, 0x5}, @ptm_cap={0x3}]}, 0x8, [{0x3f, &(0x7f00000001c0)=@string={0x3f, 0x3, "d40a935a8493591a19842e99984cf224585e72e5672fec0063ec9dfb863eaade2d7252737d464f56451899ae295087c22aa749e997db0c6d3cf2586a31"}}, {0x27, &(0x7f0000000200)=@string={0x27, 0x3, "921ff538e67931e3d71c9055f3c828a4f8bad97959722692d3cb2e4912212c2ca28c5669aa"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3401}}, {0xae, &(0x7f0000000280)=@string={0xae, 0x3, "a3e7899d81c6eb388db7dd90252de37d845adb0c3d4f28e668aa5cf4b2d055a5ed2ededeaea77364bee280b0c56c045e9550eb43de219129522fa2033beb64d1e207470af15cb0fd6026f836e7d38c8f813b61588ffbee1c0642ad817806b408f17a3a95647fd222b1fff337b85e1d7d9c2d0f4fabe1197ab315152b0ebb913a7b59bfb434e970be6012bb57840aa11203784453ca81695217c0f5f63cc984e074277fc9b4272f6e0c56a08d"}}, {0x79, &(0x7f0000000340)=@string={0x79, 0x3, "3804ac9b46339916c1b4906661c71ba3b46c344b62eac9f5756d208fa344208da1900a111a37baa7e103df7245996093af6da1c7c91366f004e70ff0b3ee7b102ac25415eb17d873cfd76ae609006ba9c13589d68f480b22bf9ac9fbab1bc157f3e7101ce5b3fd4a4c323c3bb617e9256333383f32cebb"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x426}}, {0xd5, &(0x7f0000000400)=@string={0xd5, 0x3, "5bd5411f6799386feb1a990d142f500c66f2c23ddfe087bee713f947648ba9e1ac46a0136e088777ec1e6542d0eac33703758fa2c172702ebe258d03f51e968ff6e6f5b1208abddbc8912b5facf5b4366c01e21660556dc4e97a328ecb1a961cf52b6078fcfb5195f6b2bfb8c04c6da5fd981c2cdfed4e710abfaeefddd84531b05e16c90f1c754cf6a06ad574a1f1d467e38de9d4fd308995a5bde0ab0c38ccd3653bb96e1aa2a8a33a9aaaa8bd31798b35977036f5901a453c46502dba1842c7bbe04d42ff8950da33481261617759ae5579"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x412}}]}) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) syz_open_dev$usbfs(0x0, 0x205, 0x8401) close(0x3) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000005c0), 0x1, 0x10000) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x12, 0xc9}}}, 0x6) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/24) 2.218233544s ago: executing program 2 (id=2312): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)=ANY=[@ANYBLOB='@ \x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x2040}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r4 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@redirect_dir_nofollow}, {@nfs_export_on}]}) 2.216618337s ago: executing program 2 (id=2313): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xf4e) recvmsg(r1, &(0x7f0000002880)={0x0, 0x0, 0x0}, 0x2020) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048805}, 0x0) 2.127884798s ago: executing program 5 (id=2317): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x20000000, 0x8000002, 0x4}}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x0, 0x2, 0x0, 0x8}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000100)) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xd, 0x80, 0x100000}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) setrlimit(0x7, &(0x7f0000000400)) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r8 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) quotactl_fd$Q_QUOTAON(r8, 0xffffffff80000201, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000050000000400000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r10}, &(0x7f0000002480), &(0x7f00000024c0)=r9}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f0000000180), &(0x7f0000000040)=@udp6=r6}, 0x20) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="33052cbd7000ffdbdf252800000005002b00000000000a00148801ec760000000c00050002025a568c542577699306000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc081}, 0x4000) 2.065745214s ago: executing program 5 (id=2319): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x149a00) socket$qrtr(0x2a, 0x2, 0x0) (async) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000300)="ca889fa1518c31938126b44e709c320f350eb64d5ca8", 0x16}], 0x1) (async) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000300)="ca889fa1518c31938126b44e709c320f350eb64d5ca8", 0x16}], 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 1.898022826s ago: executing program 4 (id=2324): mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_ext={0x1c, 0x2, &(0x7f0000000780)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffd}], &(0x7f0000000900)='GPL\x00', 0x80, 0xac, &(0x7f0000000940)=""/172, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000c00)={0x5, 0x9, 0x2, 0x8}, 0x10, 0x13f97, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000c40)=[{0x5, 0x1, 0x5, 0xa}, {0x4, 0x4, 0x801, 0xb}, {0x0, 0x4, 0x1, 0x6}, {0x4, 0x3, 0xd, 0xc}], 0x10, 0xfffffffa}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@bridge_getlink={0x3c, 0x12, 0x200, 0x70bd2c, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x1000, 0x340e}, [@IFLA_GROUP={0x8, 0x1b, 0x5}, @IFLA_GROUP={0x8, 0x1b, 0x9}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x3c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}}, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0xf) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz1\x00', {0xe, 0x7, 0x7, 0x81}, 0x15, [0x10001, 0x40000, 0x4, 0xf, 0x639, 0x4, 0x4, 0x6, 0x10, 0x9, 0x80000100, 0xb, 0xb0f, 0x4, 0x6, 0x2, 0x4, 0x4cb6, 0x0, 0x1, 0xe, 0x7, 0x8, 0x3, 0x10, 0x4, 0xb2f2, 0xb, 0x0, 0x9, 0x2, 0x2d, 0x0, 0x7, 0x1, 0xeb, 0x5743393a, 0x1, 0x2e, 0x4, 0x2, 0x2, 0x8, 0xf, 0x10000, 0xfffffffe, 0x3, 0x20101, 0xc, 0x6, 0xc601, 0xa, 0x1, 0x5, 0x5, 0x6, 0x5, 0x6, 0xfffff2e0, 0x4, 0x9, 0x8, 0x3, 0x100], [0x6, 0xc37, 0xbf, 0x4, 0x5, 0x214, 0xd25, 0xf, 0x7, 0x7, 0x7, 0x8001, 0xfffffffb, 0x1, 0x8, 0x2, 0x9, 0x6, 0xcbdb, 0x6, 0x4, 0xfc, 0xe3, 0x11, 0xa39a, 0x8, 0x76, 0x2, 0x8, 0x3, 0xa, 0x40, 0x4, 0x4, 0x0, 0x0, 0x6, 0x8001, 0x7, 0x5a6, 0x3, 0x6, 0x3, 0x7d1b, 0x5, 0x5, 0x6, 0x6, 0x2, 0x2, 0x8, 0x69e, 0x6, 0x8244, 0x9, 0xacf, 0xedb, 0xe771, 0x0, 0x10000, 0xe0f9, 0x4, 0xd314], [0x5, 0x6, 0x9, 0x6, 0x10006, 0x0, 0x2, 0x0, 0x1, 0x8, 0xffff, 0x401, 0x3, 0x7f, 0xfffffff2, 0x672, 0x5, 0x0, 0x3, 0x6, 0x80000000, 0x80000002, 0x6, 0x0, 0x2, 0x4, 0xf46, 0x1, 0x8, 0x3ff, 0x6, 0x0, 0x8001, 0x33, 0x5, 0x4, 0x6, 0x4, 0x1, 0x3ff, 0x80000001, 0x0, 0x2, 0x6, 0x20000000, 0x10001, 0x10001, 0x628e, 0x7, 0x2, 0x2, 0x7fffffff, 0xe, 0x1, 0xffffffff, 0xb, 0x46, 0xa5f, 0xfff, 0x2, 0x7, 0xf, 0x1, 0x3db1], [0x0, 0x3, 0x1, 0xfffffff8, 0x3, 0x7fff, 0x4, 0x12, 0x2, 0x4, 0x9, 0x2, 0x9, 0x2, 0x3fe, 0xd, 0x1, 0x401, 0x3, 0x7ff, 0x5, 0x4, 0x1, 0xd, 0x1, 0x8, 0x80000001, 0x7f97, 0x401, 0x80000000, 0xd191, 0xe, 0x3141, 0x200, 0x5, 0x80, 0xd4, 0x9, 0x0, 0x8000, 0x1, 0x0, 0x101, 0x6, 0x8, 0x24, 0x5, 0x9, 0xffffffff, 0x80000000, 0x5c6, 0x5, 0x1, 0x9, 0xd, 0x81, 0x9, 0x4, 0x3, 0x4, 0x1f8c, 0xffffffff, 0x5, 0xb]}, 0x45c) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x4) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x45) (async, rerun: 32) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000580)=0xfc) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x9, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe}, 0x50) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000680)={'dvmrp0\x00', 0x7c3}) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x96762a57826036f5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880)="c1c03939be00006bd353d299b9dd90737d047186cf81cc15f23e6bee109a63e53134201f03a34e5ae0b809abfd56ce6d555e32002ed713cf561d58f8db2e718739258d74e85090f3015e5d8065240227f391c3dc42102fc5d4b355a80e0992f2980e3b15c2b8080508ca87add363c6074d939a7366b547f05161acd418b6588e", &(0x7f0000001a40), 0x1000009, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, &(0x7f00000006c0)=""/145, &(0x7f0000000480), &(0x7f0000000780), 0x4, r3}, 0x38) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000540), 0x40000, 0x0) (async) r6 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r7 = dup(r6) write$binfmt_elf32(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c464a030703010800000000000003000300040000003e03000038000000d600000097700000fe032000010307"], 0x58) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x9, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xffffffffffffff48, 0xf989, "bb653c93cf1b5dd85ce7fcfa766bb601"}]}}}}}}}}, 0x0) 1.833639524s ago: executing program 4 (id=2325): r0 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x2000, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000bc0)) fcntl$getownex(r0, 0x10, &(0x7f0000000380)) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) recvfrom$inet6(r1, 0x0, 0x0, 0x2000, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e1, &(0x7f00000023c0)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x237, 0x0, 0x2, 0x0, 0x6}) 1.097189164s ago: executing program 5 (id=2326): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="944cf7", 0x3}], 0x1}, 0x20000010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f0000000040)=0x5, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r6, 0x0, 0x0, 0x720, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64=r6, @ANYRESHEX=r6, @ANYBLOB="d15679d91e16362653507c47225ad5175d804c85d1f9a37a056ff9e343cfd6617fe0ccf8157d08c021ccc856e1d580a5ccefc99a1212b7579b75a47e356eb6f77b56b0dee1b7b0964352d8a5983cb55559b830349e061f2a26c705fd3e532503689afe86f12ebfbb42c124f9e53c7d2a0e996afbade9a4ec2853a30522754a954d3afe4e0a76925f8da5391f286c9671e5532d60fd7e06898db80684d2aaf94ebdfb378bf97e7c026c27fbe5ff15c7f4292c2b60afb1f1e77f9c590fb715b1ae6f1ac09f240be981515c7894a01f57a14aa7daf109b399acc06e6494bc4c", @ANYRESDEC=r6], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="0200000005000500000000000a004e21fffffffdfe8000000000000000000000000000bb00000000000000000200010000000000000000020000000005000600000000000a00800000000000fe88000000000000000000000000000100"/112], 0x70}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) 928.390815ms ago: executing program 5 (id=2327): ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, &(0x7f0000000180)={0x1, 0x1, 0x80, 0x11, 0x20, 0x1, 0x2, 0x3, 0x40, 0x1, 0x10, 0xa, 0x0, 0x0, 0x0}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0}) r3 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$panthor(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000003, 0x10, r3, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x12, r2, 0x0, r1}) 832.517572ms ago: executing program 2 (id=2328): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000000)={0x81, 0x4}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000080)) 831.840116ms ago: executing program 2 (id=2329): r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd010203010902"], 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r1, &(0x7f0000000000)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @loopback, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000029000000370002008600000000000000"], 0x18}}], 0x1, 0x4000800) 681.528438ms ago: executing program 0 (id=2330): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x101642, 0x0) keyctl$clear(0x7, 0xfffffffffffffffb) r1 = socket(0x1e, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x55af) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000002, 0x110, r2, 0x5d992000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000080)=""/229, 0xe5}], 0x1, 0x100, 0x9) syz_usb_disconnect(r3) syz_usb_connect(0x0, 0x36, &(0x7f0000002000)={{0x12, 0x1, 0x250, 0x5c, 0x80, 0xca, 0x10, 0x5e3, 0x1bf0, 0xca00, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8d, 0x4f, 0x30, 0x7}}]}}, &(0x7f0000003280)={0xa, &(0x7f0000002e40)={0xa, 0x6, 0x310, 0x2, 0x1, 0x0, 0x20}, 0x20, &(0x7f0000002e80)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xf, 0x2, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "7685a5fa2e293ea740465425c6c3cf2e"}]}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) ioctl$EVIOCRMFF(r3, 0x41015500, &(0x7f0000000500)=0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@delqdisc={0x2c, 0x25, 0x800, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0xd, 0x5}, {0xffe0, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x10}}]}, 0x2c}}, 0x20000000) ioctl$COMEDI_CHANINFO(r0, 0x80306403, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}) 523.49632ms ago: executing program 5 (id=2331): r0 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) 522.246335ms ago: executing program 5 (id=2332): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x1062}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x3) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) 341.829372ms ago: executing program 4 (id=2333): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ptrace$ARCH_GET_CPUID(0x1e, 0xffffffffffffffff, 0x0, 0x1011) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="300000002c0007012bbd7000ffdbdf25067c0000080001800900000014000380100001"], 0x30}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000000580)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) 265.422052ms ago: executing program 4 (id=2334): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13500}, &(0x7f0000000240), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x21, &(0x7f0000000440), 0x1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf25060000ec07000400640101000800050064010102240007"], 0x48}, 0x1, 0x0, 0x0, 0x60008000}, 0x44) 263.86929ms ago: executing program 4 (id=2335): sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) (async) r0 = socket(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0) (async) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) ioctl$FE_READ_UNCORRECTED_BLOCKS(0xffffffffffffffff, 0x80046f49, &(0x7f0000000040)) 214.200527ms ago: executing program 4 (id=2336): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r1, 0x90000915, 0x9e) (async) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000040)) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x38) (async) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) (async, rerun: 32) ioctl$NBD_DO_IT(r2, 0xab03) (async, rerun: 32) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x201) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x74, 0x0, 0x0, 0x5b2f3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x2000c014) 568.679µs ago: executing program 2 (id=2337): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x96, 0x10802) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x6c4ba42, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x800, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0x3000000000000, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) 0s ago: executing program 2 (id=2338): unshare(0x6a040000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount(&(0x7f0000000040)=@filename='./bus\x00', &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='f2fs\x00', 0x2800080, &(0x7f00000001c0)='discard') (async) rt_tgsigqueueinfo(r2, r2, 0x400000a, &(0x7f0000000600)={0x81, 0x40000003, 0xfffff2bb}) (async) socketpair(0x9, 0x6, 0x520, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)={'nat\x00', 0x0, [0xc35, 0x2, 0x10001, 0x10000000, 0x7]}, &(0x7f0000000280)=0x54) (async) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x2, r2}) (async) r4 = getpid() syz_pidfd_open(r4, 0x0) (async) ptrace$getsig(0x4202, r2, 0x7b, &(0x7f00000002c0)) (async) r5 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f00000000c0)={'security\x00', 0x0, [0xfffffffb, 0x3, 0x7, 0x2, 0x4]}, &(0x7f0000000000)=0x54) kernel console output (not intermixed with test programs): 51868][ T40] audit: type=1400 audit(1772337343.830:2569): avc: denied { create } for pid=12705 comm="syz.8.1777" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 201.177001][ T40] audit: type=1400 audit(1772337343.859:2570): avc: denied { attach_queue } for pid=12705 comm="syz.8.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 201.702226][T12730] overlayfs: conflicting options: nfs_export=on,index=off [ 201.754744][T12735] IPVS: length: 18 != 8 [ 201.780520][T12738] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1787'. [ 201.787984][T12738] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12738 comm=syz.9.1787 [ 201.791659][ T5972] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 201.900397][T12743] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1789'. [ 201.903356][T12743] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1789'. [ 201.976708][ T5972] usb 5-1: Using ep0 maxpacket: 32 [ 201.981079][ T5972] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 201.987243][ T5972] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 201.990255][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 201.992963][ T5972] usb 5-1: Product: syz [ 201.994863][ T5972] usb 5-1: Manufacturer: syz [ 201.996479][ T5972] usb 5-1: SerialNumber: syz [ 202.000290][ T5972] usb 5-1: config 0 descriptor?? [ 202.002414][T12719] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 202.006030][ T5972] hub 5-1:0.0: bad descriptor, ignoring hub [ 202.008028][ T5972] hub 5-1:0.0: probe with driver hub failed with error -5 [ 202.025818][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 202.059767][T12751] netlink: 'syz.8.1790': attribute type 8 has an invalid length. [ 202.068049][T12752] netlink: 'syz.8.1790': attribute type 8 has an invalid length. [ 202.126367][ T40] audit: type=1400 audit(1772337344.750:2571): avc: denied { setopt } for pid=12757 comm="syz.9.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 202.133959][T12759] netlink: 'syz.9.1793': attribute type 13 has an invalid length. [ 202.146863][T12759] gretap0: refused to change device tx_queue_len [ 202.149077][T12759] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 202.237340][ T40] audit: type=1326 audit(1772337344.844:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12760 comm="syz.9.1794" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f948a79c799 code=0x0 [ 202.291811][ T61] nci: nci_rx_work: unknown MT 0x1 [ 202.292594][T12770] syz.8.1795(12770): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 202.298417][ T63] Bluetooth: hci2: unexpected event for opcode 0x041b [ 202.298694][T12770] tmpfs: Bad value for 'mpol' [ 202.517230][ T39] usb 5-1: reset high-speed USB device number 31 using dummy_hcd [ 202.524299][ T39] usb 5-1: device reset changed ep0 maxpacket size! [ 202.532972][ T39] usb 5-1: USB disconnect, device number 31 [ 202.699324][ T39] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 202.857055][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 202.864247][ T40] audit: type=1400 audit(1772337345.435:2573): avc: denied { write } for pid=12718 comm="syz.0.1781" path="socket:[51018]" dev="sockfs" ino=51018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 203.113280][T12774] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 203.115473][T12774] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 203.118041][T12774] vhci_hcd vhci_hcd.0: Device attached [ 203.127862][T12774] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(7) [ 203.130046][T12774] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 203.132721][T12774] vhci_hcd vhci_hcd.0: Device attached [ 203.137487][T12774] program syz.9.1796 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.141527][T12777] vhci_hcd: connection closed [ 203.141675][ T61] vhci_hcd vhci_hcd.9: stop threads [ 203.142825][T12775] vhci_hcd: connection closed [ 203.143284][ T61] vhci_hcd vhci_hcd.9: release socket [ 203.143298][ T61] vhci_hcd vhci_hcd.9: disconnect device [ 203.145249][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 203.153463][ T167] vhci_hcd vhci_hcd.9: stop threads [ 203.155254][ T167] vhci_hcd vhci_hcd.9: release socket [ 203.157781][ T167] vhci_hcd vhci_hcd.9: disconnect device [ 203.769502][ T40] audit: type=1400 audit(1772337346.289:2574): avc: denied { ioctl } for pid=12779 comm="syz.9.1797" path="socket:[49947]" dev="sockfs" ino=49947 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 204.242557][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 205.350953][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 205.421331][T12764] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 205.464918][ T39] usb 5-1: unable to get BOS descriptor or descriptor too short [ 205.467449][ T39] usb 5-1: no configurations [ 205.469752][ T39] usb 5-1: can't read configurations, error -22 [ 205.627633][ T63] Bluetooth: hci4: unexpected event for opcode 0x2005 [ 205.630702][T12786] random: crng reseeded on system resumption [ 205.683814][T12800] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1804'. [ 205.785926][T12816] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 205.902102][T12831] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1814'. [ 205.905139][T12831] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1814'. [ 205.908055][T12831] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1814'. [ 205.910978][T12831] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1814'. [ 205.913837][T12831] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1814'. [ 206.018469][T12834] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 206.150318][ T39] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 206.310036][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 206.313535][ T39] usb 5-1: config 157 has an invalid interface number: 48 but max is 0 [ 206.316133][ T39] usb 5-1: config 157 has no interface number 0 [ 206.319250][ T39] usb 5-1: too many endpoints for config 157 interface 48 altsetting 54: 45, using maximum allowed: 30 [ 206.319299][T12849] __nla_validate_parse: 2 callbacks suppressed [ 206.319311][T12849] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1819'. [ 206.323835][ T39] usb 5-1: config 157 interface 48 altsetting 54 has 0 endpoint descriptors, different from the interface descriptor's value: 45 [ 206.334945][ T39] usb 5-1: config 157 interface 48 has no altsetting 0 [ 206.339919][ T39] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 206.345069][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.351399][ T39] usb 5-1: Product: syz [ 206.353424][ T39] usb 5-1: Manufacturer: syz [ 206.355605][ T39] usb 5-1: SerialNumber: syz [ 206.355618][T12849] hsr_slave_1 (unregistering): left promiscuous mode [ 206.469999][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 206.800597][ T39] usb 5-1: USB disconnect, device number 33 [ 206.898475][T12862] openvswitch: netlink: Key type 31 is not supported [ 207.207283][T12877] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 207.287297][ T40] audit: type=1400 audit(1772337349.582:2575): avc: denied { ioctl } for pid=12876 comm="syz.8.1829" path="/323/file0/bus" dev="9p" ino=72614221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 207.297452][ T40] audit: type=1800 audit(1772337349.592:2576): pid=12879 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.1829" name="bus" dev="9p" ino=72614221 res=0 errno=0 [ 207.375623][ T40] audit: type=1400 audit(1772337349.667:2577): avc: denied { append } for pid=12880 comm="syz.0.1831" path="/485/file0/cpuset.memory_pressure_enabled" dev="9p" ino=72614223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 207.387860][ T40] audit: type=1400 audit(1772337349.686:2578): avc: denied { mounton } for pid=12880 comm="syz.0.1831" path="/485/file0/file0" dev="9p" ino=72614063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 207.395501][T12881] fuse: Unknown parameter 'd' [ 207.467245][T12884] netlink: 'syz.8.1830': attribute type 1 has an invalid length. [ 207.495784][T12884] 8021q: adding VLAN 0 to HW filter on device bond2 [ 207.500337][T12884] bond1: (slave bond2): making interface the new active one [ 207.503848][T12884] bond1: (slave bond2): Enslaving as an active interface with an up link [ 207.578295][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 207.634501][T12897] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 207.639190][T12897] bond3 (unregistering): Released all slaves [ 207.671693][T12909] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1834'. [ 207.676861][T12909] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1834'. [ 207.695810][T12911] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 207.698670][T12911] netlink: 'syz.9.1837': attribute type 21 has an invalid length. [ 207.701286][T12911] netlink: 128 bytes leftover after parsing attributes in process `syz.9.1837'. [ 207.704362][T12911] netlink: 'syz.9.1837': attribute type 4 has an invalid length. [ 207.708116][T12911] netlink: 'syz.9.1837': attribute type 5 has an invalid length. [ 207.711000][T12911] netlink: 3 bytes leftover after parsing attributes in process `syz.9.1837'. [ 207.795124][T12920] netlink: 248 bytes leftover after parsing attributes in process `syz.9.1840'. [ 207.798817][T12920] openvswitch: netlink: Flow key attr not present in new flow. [ 208.333429][T12930] binder: 12929:12930 ioctl c0306201 200000000240 returned -14 [ 208.336919][T12930] binder: 12929:12930 ioctl c0306201 2000000001c0 returned -14 [ 208.675990][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 208.925379][T12953] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 209.180769][ T40] audit: type=1400 audit(1772337351.365:2579): avc: denied { append } for pid=12968 comm="syz.9.1853" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 209.376256][T12989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1860'. [ 209.381654][T12989] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1860'. [ 209.385145][T12989] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1860'. [ 209.461908][T13003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1865'. [ 209.562130][T13012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13012 comm=syz.8.1868 [ 209.589765][T13012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=13012 comm=syz.8.1868 [ 209.594534][T13012] netlink: 'syz.8.1868': attribute type 1 has an invalid length. [ 209.612931][T13012] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65535 sclass=netlink_xfrm_socket pid=13012 comm=syz.8.1868 [ 209.659319][T13025] netlink: 'syz.9.1873': attribute type 1 has an invalid length. [ 209.662127][T13025] nbd: error processing sock list [ 209.699880][T13022] block device autoloading is deprecated and will be removed. [ 209.710269][T13025] netlink: 'syz.9.1873': attribute type 1 has an invalid length. [ 209.715224][T13025] nbd: error processing sock list [ 209.795023][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 209.880083][ T40] audit: type=1400 audit(1772337352.013:2580): avc: denied { getopt } for pid=13036 comm="syz.9.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 209.979436][T13069] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 210.114896][ T8645] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 210.185316][T13088] cgroup2: Unknown parameter 'euid' [ 210.275649][ T8645] usb 13-1: too many configurations: 9, using maximum allowed: 8 [ 210.279187][ T8645] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.282354][ T8645] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.286434][ T8645] usb 13-1: config 0 interface 0 has no altsetting 0 [ 210.289573][ T8645] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.292605][ T8645] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.296533][ T8645] usb 13-1: config 0 interface 0 has no altsetting 0 [ 210.299656][ T8645] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.302724][ T8645] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.306201][ T8645] usb 13-1: config 0 interface 0 has no altsetting 0 [ 210.310626][ T8645] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.313791][ T8645] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.317600][ T8645] usb 13-1: config 0 interface 0 has no altsetting 0 [ 210.320815][ T8645] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.323827][ T8645] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.327396][ T8645] usb 13-1: config 0 interface 0 has no altsetting 0 [ 210.332414][ T8645] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.335423][ T8645] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.339234][ T8645] usb 13-1: config 0 interface 0 has no altsetting 0 [ 210.342786][ T8645] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.345924][ T8645] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.349982][ T8645] usb 13-1: config 0 interface 0 has no altsetting 0 [ 210.353071][ T8645] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.356078][ T8645] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.359444][ T8645] usb 13-1: config 0 interface 0 has no altsetting 0 [ 210.363802][ T8645] usb 13-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 210.367099][ T8645] usb 13-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 210.369828][ T8645] usb 13-1: Product: syz [ 210.371529][ T8645] usb 13-1: Manufacturer: syz [ 210.373116][ T8645] usb 13-1: SerialNumber: syz [ 210.379194][ T8645] usb 13-1: config 0 descriptor?? [ 210.392418][ T8645] yurex 13-1:0.0: USB YUREX device now attached to Yurex #0 [ 210.450141][T13111] netlink: 'syz.0.1895': attribute type 39 has an invalid length. [ 210.451593][T13108] XFS (nbd9): SB validate failed with error -5. [ 210.510230][T13118] ubi0: attaching mtd0 [ 210.511766][T13118] ubi0 error: ubi_attach_mtd_dev: bad VID header (2147483647) or data offsets (-2147483585) [ 210.769166][ T40] audit: type=1400 audit(1772337352.857:2581): avc: denied { watch_sb } for pid=13129 comm="syz.0.1900" path="/514/file0" dev="tmpfs" ino=2768 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 210.820873][ T8645] usb 13-1: USB disconnect, device number 10 [ 210.827141][ T8645] yurex 13-1:0.0: USB YUREX #0 now disconnected [ 210.892740][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 210.906048][ T40] audit: type=1400 audit(1772337352.988:2582): avc: denied { map } for pid=13140 comm="syz.0.1902" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 211.264833][ T40] audit: type=1400 audit(1772337353.317:2583): avc: denied { bind } for pid=13163 comm="syz.0.1906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 211.573740][T13169] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 211.575897][T13188] veth1_to_team: mtu less than device minimum [ 211.619951][ T40] audit: type=1400 audit(1772337353.655:2584): avc: denied { read } for pid=13187 comm="syz.8.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 212.001191][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 212.256613][ T40] audit: type=1400 audit(1772337354.246:2585): avc: denied { relabelfrom } for pid=13201 comm="syz.0.1919" name="AX25" dev="sockfs" ino=55493 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 212.261758][T13202] SELinux: Context system_u:object_r:restorecond_var_run_t:s0 is not valid (left unmapped). [ 212.271337][ T40] audit: type=1400 audit(1772337354.265:2586): avc: denied { relabelto } for pid=13201 comm="syz.0.1919" name="AX25" dev="sockfs" ino=55493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=ax25_socket permissive=1 trawcon="system_u:object_r:restorecond_var_run_t:s0" [ 212.273870][T13202] 8021q: VLANs not supported on gre0 [ 212.510544][T13212] netdevsim0: renamed from lo [ 212.513488][T13212] netdevsim0: entered promiscuous mode [ 212.515464][T13212] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 212.618933][T13222] sctp: [Deprecated]: syz.0.1925 (pid 13222) Use of int in maxseg socket option. [ 212.618933][T13222] Use struct sctp_assoc_value instead [ 212.813891][ T40] audit: type=1400 audit(1772337354.781:2587): avc: denied { execute } for pid=13227 comm="syz.0.1927" path="/proc/meminfo" dev="proc" ino=4026532042 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 212.850474][T13238] trusted_key: encrypted_key: insufficient parameters specified [ 213.109484][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 213.350137][T13248] __nla_validate_parse: 6 callbacks suppressed [ 213.350149][T13248] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1930'. [ 214.217868][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 214.453267][ T5934] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.457964][ T5934] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.461139][ T5934] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.465058][ T5934] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.467817][ T5934] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.514309][T13253] lo speed is unknown, defaulting to 1000 [ 214.842804][T13253] chnl_net:caif_netlink_parms(): no params data found [ 214.880251][T13193] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 214.895003][T13253] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.900185][T13253] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.903426][T13253] bridge_slave_0: entered allmulticast mode [ 214.906356][T13253] bridge_slave_0: entered promiscuous mode [ 214.912261][T13253] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.915438][T13253] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.918621][T13253] bridge_slave_1: entered allmulticast mode [ 214.922699][T13253] bridge_slave_1: entered promiscuous mode [ 214.989287][T13253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.994564][T13253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.000066][T13266] lo speed is unknown, defaulting to 1000 [ 215.021331][T13253] team0: Port device team_slave_0 added [ 215.024698][T13253] team0: Port device team_slave_1 added [ 215.044010][T13253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.046590][T13253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.053642][T13275] xt_hashlimit: size too large, truncated to 1048576 [ 215.055066][T13253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.062128][T13253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.064537][T13253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.072935][T13253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.103869][T13253] hsr_slave_0: entered promiscuous mode [ 215.106376][T13253] hsr_slave_1: entered promiscuous mode [ 215.109072][T13253] debugfs: 'hsr0' already exists in 'hsr' [ 215.110974][T13253] Cannot create hsr debugfs directory [ 215.183070][T13282] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1933'. [ 215.244722][ T40] audit: type=1400 audit(1772337357.042:2588): avc: denied { watch watch_reads } for pid=13284 comm="syz.9.1939" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 215.302137][T13291] netlink: 92 bytes leftover after parsing attributes in process `syz.9.1940'. [ 215.326240][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 215.597539][T13327] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1946'. [ 215.647210][T13326] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1944'. [ 215.829597][ T40] audit: type=1404 audit(1772337357.605:2589): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 215.849308][ T40] audit: type=1400 audit(1772337357.614:2590): avc: denied { write } for pid=13343 comm="syz.8.1950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 215.869705][ T40] audit: type=1404 audit(1772337357.614:2591): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 215.875245][ T40] audit: type=1400 audit(1772337357.633:2592): avc: denied { search } for pid=13342 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.882951][ T40] audit: type=1400 audit(1772337357.633:2593): avc: denied { read } for pid=13342 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 215.889934][ T40] audit: type=1400 audit(1772337357.633:2594): avc: denied { open } for pid=13342 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 215.897559][ T40] audit: type=1400 audit(1772337357.633:2595): avc: denied { getattr } for pid=13342 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 215.906965][ T40] audit: type=1400 audit(1772337357.671:2596): avc: denied { remove_name } for pid=13348 comm="rm" name="resolv.conf.eth4.ipv4ll" dev="tmpfs" ino=9009 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.914983][ T40] audit: type=1400 audit(1772337357.671:2597): avc: denied { unlink } for pid=13348 comm="rm" name="resolv.conf.eth4.ipv4ll" dev="tmpfs" ino=9009 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 215.928209][T13253] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 215.943029][T13253] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 215.960980][T13253] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 215.966682][T13253] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 216.043365][T13372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13372 comm=syz.0.1953 [ 216.089430][T13253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.121138][T13253] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.132875][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.135274][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.146539][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.150034][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.187576][T13387] tmpfs: Bad value for 'mpol' [ 216.195882][T13387] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1956'. [ 216.199768][T13387] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1956'. [ 216.310297][T13253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.334681][T13253] veth0_vlan: entered promiscuous mode [ 216.340629][T13253] veth1_vlan: entered promiscuous mode [ 216.358150][T13253] veth0_macvtap: entered promiscuous mode [ 216.367925][T13253] veth1_macvtap: entered promiscuous mode [ 216.378836][T13253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.388393][T13253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.398534][ T46] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.401812][ T46] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.406896][ T46] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.409746][ T46] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.435185][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 216.484757][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.487484][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.508198][T11076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.514965][T11076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.591402][T13419] lo speed is unknown, defaulting to 1000 [ 216.690560][ T5931] Bluetooth: hci5: command tx timeout [ 216.959481][T13439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1961'. [ 216.976180][ T61] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.978391][T13439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1961'. [ 216.984717][ T61] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.990310][ T61] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.994147][ T61] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.234570][T13447] binder_alloc: 13446: binder_alloc_buf, no vma [ 217.542909][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 217.647294][T13471] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1969'. [ 218.054553][ T63] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 218.651298][ T63] Bluetooth: hci6: command 0x1003 tx timeout [ 218.651379][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 218.654384][ T5934] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 218.718170][T13492] xt_hashlimit: size too large, truncated to 1048576 [ 218.780053][T13497] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 218.859291][T13502] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1978'. [ 218.907244][ T5934] Bluetooth: hci5: command tx timeout [ 218.997542][T13516] SELinux: Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped). [ 219.156901][T13539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1987'. [ 219.161219][T13539] syz_tun: entered allmulticast mode [ 219.181150][T13541] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1989'. [ 219.259911][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1990'. [ 219.263431][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1990'. [ 219.270908][T13549] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1990'. [ 219.277579][T13543] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1990'. [ 219.328539][T13552] batman_adv: batadv0: Adding interface: ipvlan2 [ 219.330986][T13552] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.339512][T13552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.342887][T13552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.346264][T13552] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 219.410487][T13565] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1996'. [ 219.454338][T13563] kAFS: unable to lookup cell 'syz0' [ 219.454394][T13566] kAFS: unable to lookup cell 'syz0' [ 219.458796][T13566] netlink: 830 bytes leftover after parsing attributes in process `syz.9.1995'. [ 219.603388][T13578] netlink: 'syz.8.2000': attribute type 39 has an invalid length. [ 219.608046][T13578] veth0_macvtap: left allmulticast mode [ 219.610780][T13578] veth0_macvtap: left promiscuous mode [ 219.770383][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 219.962514][ T8645] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 220.121966][ T8645] usb 13-1: Using ep0 maxpacket: 32 [ 220.125592][ T8645] usb 13-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 220.130034][ T8645] usb 13-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 220.135577][ T8645] usb 13-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 220.140253][ T8645] usb 13-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 220.149215][ T8645] usb 13-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 220.152588][ T8645] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.156089][ T8645] usb 13-1: Product: syz [ 220.157882][ T8645] usb 13-1: Manufacturer: syz [ 220.159897][ T8645] usb 13-1: SerialNumber: syz [ 220.167977][ C0] imon 13-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 220.173191][ T8645] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/input/input33 [ 220.353416][ T5934] Bluetooth: hci4: unexpected event for opcode 0x0c7c [ 220.357323][T13584] xt_SECMARK: invalid mode: 2 [ 220.399356][ T8645] imon 13-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 220.402216][ T8645] (id 0x00) [ 220.452366][ T8645] rc_core: IR keymap rc-imon-pad not found [ 220.454676][ T8645] Registered IR keymap rc-empty [ 220.456330][ T8645] imon 13-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 220.460331][ T8645] imon 13-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 220.478046][T13589] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2003'. [ 220.613818][ T8645] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0 [ 220.618745][ T8645] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0/input34 [ 220.625746][ T8645] imon 13-1:155.0: iMON device (15c2:ffdc, intf0) on usb<13:11> initialized [ 220.868241][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 220.922813][ T5950] usb 13-1: USB disconnect, device number 11 [ 220.928727][T13582] imon:send_packet: packet tx failed (-71) [ 220.955668][T13582] imon:vfd_write: send packet #0 failed [ 221.028455][ T39] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 221.123822][ T5934] Bluetooth: hci5: command tx timeout [ 221.146575][ T40] kauditd_printk_skb: 178 callbacks suppressed [ 221.146586][ T40] audit: type=1400 audit(1772337362.597:2776): avc: denied { execute } for pid=13581 comm="syz.8.2001" dev="tmpfs" ino=1063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 221.155806][ T40] audit: type=1400 audit(1772337362.597:2777): avc: denied { execute_no_trans } for pid=13581 comm="syz.8.2001" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 221.200380][ T39] usb 14-1: Using ep0 maxpacket: 32 [ 221.205640][ T39] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.209304][ T39] usb 14-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 221.212381][ T39] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.216796][ T39] usb 14-1: config 0 descriptor?? [ 221.223367][ T39] usbhid 14-1:0.0: couldn't find an input interrupt endpoint [ 221.270152][ T40] audit: type=1400 audit(1772337362.709:2778): avc: denied { write } for pid=13604 comm="syz.0.2008" name="wireless" dev="proc" ino=4026532925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 221.332641][T13611] overlayfs: overlapping lowerdir path [ 221.337604][ T40] audit: type=1400 audit(1772337362.775:2779): avc: denied { getopt } for pid=13610 comm="syz.0.2010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 221.344529][ T40] audit: type=1400 audit(1772337362.775:2780): avc: denied { bind } for pid=13610 comm="syz.0.2010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 221.350983][ T40] audit: type=1400 audit(1772337362.775:2781): avc: denied { node_bind } for pid=13610 comm="syz.0.2010" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 221.365015][T13611] overlay: Unknown parameter 'smackfshat' [ 221.369563][T13611] dvmrp0: left allmulticast mode [ 221.371817][T13611] syz_tun: left allmulticast mode [ 221.436523][ T40] audit: type=1400 audit(1772337362.869:2782): avc: denied { bind } for pid=13595 comm="syz.9.2005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 221.443224][ T40] audit: type=1400 audit(1772337362.869:2783): avc: denied { write } for pid=13595 comm="syz.9.2005" path="socket:[55017]" dev="sockfs" ino=55017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 221.443517][T13596] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 221.515687][ T40] audit: type=1400 audit(1772337362.935:2784): avc: denied { create } for pid=13595 comm="syz.9.2005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 221.550195][T13622] loop5: detected capacity change from 0 to 7 [ 221.556183][T11635] Dev loop5: unable to read RDB block 7 [ 221.558216][T11635] loop5: AHDI p1 [ 221.559467][T11635] loop5: partition table partially beyond EOD, truncated [ 221.564821][T13622] Dev loop5: unable to read RDB block 7 [ 221.566744][T13622] loop5: AHDI p1 [ 221.567982][T13622] loop5: partition table partially beyond EOD, truncated [ 221.624175][T13624] bond5: Invalid ad_actor_system MAC address. [ 221.627788][T13624] bond5: option ad_actor_system: invalid value (255) [ 221.631144][T13624] bond5 (unregistering): Released all slaves [ 221.728226][ T40] audit: type=1400 audit(1772337363.132:2785): avc: denied { read } for pid=13623 comm="syz.0.2014" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 221.857775][T13636] netlink: 'syz.8.2017': attribute type 30 has an invalid length. [ 221.873456][T13636] bond4: option arp_missed_max: invalid value (0) [ 221.876124][T13636] bond4: option arp_missed_max: allowed values 1 - 255 [ 221.880208][T13636] bond4 (unregistering): Released all slaves [ 221.976492][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 222.353492][T13669] pim6reg99999999: entered allmulticast mode [ 222.425054][T13675] lo speed is unknown, defaulting to 1000 [ 222.675641][T13695] 8021q: VLANs not supported on gre0 [ 222.765357][T13702] ipvlan1: entered allmulticast mode [ 222.767172][T13702] veth0_vlan: entered allmulticast mode [ 223.084901][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 223.351371][ T5934] Bluetooth: hci5: command tx timeout [ 223.563862][T13730] random: crng reseeded on system resumption [ 223.614745][T13734] bridge5: port 1(veth0_to_bond) entered blocking state [ 223.617477][T13734] bridge5: port 1(veth0_to_bond) entered disabled state [ 223.620489][T13734] veth0_to_bond: entered allmulticast mode [ 223.624108][T13734] veth0_to_bond: entered promiscuous mode [ 223.667552][T13736] GUP no longer grows the stack in syz.8.2048 (13736): 200000004000-20000000a000 (200000002000) [ 223.673454][T13736] CPU: 3 UID: 0 PID: 13736 Comm: syz.8.2048 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.673485][T13736] Tainted: [L]=SOFTLOCKUP [ 223.673491][T13736] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.673503][T13736] Call Trace: [ 223.673509][T13736] [ 223.673516][T13736] dump_stack_lvl+0x100/0x190 [ 223.673564][T13736] gup_vma_lookup.cold+0x83/0x96 [ 223.673594][T13736] __get_user_pages+0x241/0x34d0 [ 223.673620][T13736] ? find_held_lock+0x2b/0x80 [ 223.673643][T13736] ? mtree_load+0x311/0xa40 [ 223.673670][T13736] ? __pfx___get_user_pages+0x10/0x10 [ 223.673696][T13736] get_user_pages_remote+0x3d2/0xb10 [ 223.673712][T13736] ? mas_new_root+0x690/0x6e0 [ 223.673734][T13736] ? __pfx_get_user_pages_remote+0x10/0x10 [ 223.673754][T13736] ? __access_remote_vm+0x84d/0xa70 [ 223.673807][T13736] __access_remote_vm+0x3ba/0xa70 [ 223.673839][T13736] ? do_raw_spin_lock+0x128/0x260 [ 223.673862][T13736] ? __pfx___access_remote_vm+0x10/0x10 [ 223.673894][T13736] ? alloc_pages_noprof+0x233/0x390 [ 223.673927][T13736] proc_pid_cmdline_read+0x4f2/0x8c0 [ 223.673955][T13736] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 223.673985][T13736] ? rw_verify_area+0xce/0x6d0 [ 223.674011][T13736] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 223.674036][T13736] vfs_readv+0x5d8/0x8d0 [ 223.674069][T13736] ? __pfx_vfs_readv+0x10/0x10 [ 223.674114][T13736] ? __fget_files+0x21f/0x3d0 [ 223.674138][T13736] ? do_preadv+0x1ac/0x270 [ 223.674160][T13736] do_preadv+0x1ac/0x270 [ 223.674186][T13736] ? __pfx_do_preadv+0x10/0x10 [ 223.674217][T13736] do_syscall_64+0x106/0xf80 [ 223.674233][T13736] ? clear_bhb_loop+0x40/0x90 [ 223.674253][T13736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.674270][T13736] RIP: 0033:0x7fe75e59c799 [ 223.674287][T13736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.674304][T13736] RSP: 002b:00007fe75f512028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 223.674324][T13736] RAX: ffffffffffffffda RBX: 00007fe75e815fa0 RCX: 00007fe75e59c799 [ 223.674336][T13736] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000007 [ 223.674348][T13736] RBP: 00007fe75e632bd9 R08: 00000000fffffff9 R09: 0000000000000000 [ 223.674361][T13736] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 223.674372][T13736] R13: 00007fe75e816038 R14: 00007fe75e815fa0 R15: 00007fff5d44b548 [ 223.674400][T13736] [ 223.676774][T13736] netlink: 'syz.8.2048': attribute type 8 has an invalid length. [ 223.732754][T13737] ipt_REJECT: ECHOREPLY no longer supported. [ 223.868797][T13745] ip6gretap0: entered promiscuous mode [ 223.987875][ T5950] usb 14-1: USB disconnect, device number 9 [ 224.029044][T13760] gretap1: entered promiscuous mode [ 224.193448][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 224.581417][ T5934] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 225.270153][T13790] __nla_validate_parse: 6 callbacks suppressed [ 225.270170][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2062'. [ 225.301904][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 225.303440][ T6009] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 225.329865][T13790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13790 comm=syz.8.2062 [ 225.461825][ T6009] usb 14-1: Using ep0 maxpacket: 8 [ 225.465384][ T6009] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.468594][ T6009] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.471773][ T6009] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 225.475847][ T6009] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.480121][ T6009] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 225.483226][ T6009] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.670989][T13802] netlink: 'syz.8.2064': attribute type 1 has an invalid length. [ 225.705271][ T6009] usb 14-1: GET_CAPABILITIES returned 0 [ 225.707293][ T6009] usbtmc 14-1:16.0: can't read capabilities [ 225.744121][T13808] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2066'. [ 225.750449][T13808] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.2066'. [ 225.877935][T13810] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 225.941025][ C2] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.944798][ C2] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.948449][ C2] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.951964][ C2] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.955585][ C2] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.959360][ C2] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.963691][ C2] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.967491][ C2] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.971216][ C2] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.974979][ C2] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.981526][ C2] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.985483][ C2] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.989284][ C2] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.992932][ C2] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.996634][ C2] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 226.002989][T13826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.006314][T13826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.008106][T13828] netlink: 'syz.8.2070': attribute type 1 has an invalid length. [ 226.015061][ C3] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 226.033598][T13828] 8021q: adding VLAN 0 to HW filter on device bond4 [ 226.039585][ T6010] usb 14-1: USB disconnect, device number 10 [ 226.040132][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2070'. [ 226.059590][T13828] bond4: (slave bridge6): making interface the new active one [ 226.063076][T13828] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 226.072334][T13828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.075606][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.193424][ T5934] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 226.198016][ T5934] CPU: 2 UID: 0 PID: 5934 Comm: kworker/u33:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.198044][ T5934] Tainted: [L]=SOFTLOCKUP [ 226.198050][ T5934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.198064][ T5934] Workqueue: hci4 hci_rx_work [ 226.198097][ T5934] Call Trace: [ 226.198104][ T5934] [ 226.198112][ T5934] dump_stack_lvl+0x100/0x190 [ 226.198144][ T5934] sysfs_warn_dup.cold+0x1c/0x28 [ 226.198172][ T5934] sysfs_create_dir_ns+0x24b/0x2b0 [ 226.198199][ T5934] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 226.198225][ T5934] ? find_held_lock+0x2b/0x80 [ 226.198251][ T5934] ? kobject_add_internal+0x25f/0x930 [ 226.198281][ T5934] ? kobject_add_internal+0x25f/0x930 [ 226.198307][ T5934] ? do_raw_spin_unlock+0x145/0x1e0 [ 226.198330][ T5934] kobject_add_internal+0x2c8/0x930 [ 226.198361][ T5934] kobject_add+0x16a/0x1e0 [ 226.198384][ T5934] ? __pfx_kobject_add+0x10/0x10 [ 226.198407][ T5934] ? class_to_subsys+0x10f/0x150 [ 226.198451][ T5934] ? kobject_put+0xb9/0x640 [ 226.198471][ T5934] ? _raw_spin_unlock+0x28/0x50 [ 226.198508][ T5934] device_add+0x294/0x1950 [ 226.198536][ T5934] ? __pfx_dev_set_name+0x10/0x10 [ 226.198564][ T5934] ? __pfx_device_add+0x10/0x10 [ 226.198588][ T5934] ? mgmt_send_event_skb+0x2fb/0x460 [ 226.198623][ T5934] hci_conn_add_sysfs+0x1a3/0x260 [ 226.198644][ T5934] le_conn_complete_evt+0x11cb/0x1f40 [ 226.198674][ T5934] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 226.198706][ T5934] hci_le_conn_complete_evt+0x23c/0x3a0 [ 226.198729][ T5934] ? skb_pull_data+0x15f/0x1e0 [ 226.198754][ T5934] hci_le_meta_evt+0x34a/0x5f0 [ 226.198783][ T5934] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 226.198814][ T5934] hci_event_packet+0x682/0x11c0 [ 226.198840][ T5934] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 226.198869][ T5934] ? __pfx_hci_event_packet+0x10/0x10 [ 226.198898][ T5934] ? kcov_remote_start+0x374/0x660 [ 226.198922][ T5934] ? lockdep_hardirqs_on+0x78/0x100 [ 226.198946][ T5934] hci_rx_work+0x451/0xfc0 [ 226.198989][ T5934] process_one_work+0x9d7/0x1920 [ 226.199022][ T5934] ? __pfx_process_one_work+0x10/0x10 [ 226.199069][ T5934] ? __pfx_hci_rx_work+0x10/0x10 [ 226.199097][ T5934] worker_thread+0x5da/0xe40 [ 226.199127][ T5934] ? kthread+0x13a/0x450 [ 226.199142][ T5934] ? __pfx_worker_thread+0x10/0x10 [ 226.199159][ T5934] kthread+0x370/0x450 [ 226.199175][ T5934] ? __pfx_kthread+0x10/0x10 [ 226.199193][ T5934] ret_from_fork+0x754/0xd80 [ 226.199212][ T5934] ? __pfx_ret_from_fork+0x10/0x10 [ 226.199230][ T5934] ? rcu_is_watching+0x12/0xc0 [ 226.199253][ T5934] ? __switch_to+0x7b4/0x1120 [ 226.199281][ T5934] ? __pfx_kthread+0x10/0x10 [ 226.199300][ T5934] ret_from_fork_asm+0x1a/0x30 [ 226.199334][ T5934] [ 226.199451][ T5934] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 226.208466][T13839] netlink: 212348 bytes leftover after parsing attributes in process `syz.8.2073'. [ 226.211081][ T5934] Bluetooth: hci4: failed to register connection device [ 226.212346][T13839] netlink: Unknown conntrack attr (0) [ 226.337808][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.342699][ T8645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.350136][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.396088][T13844] libceph: secret too big 289 [ 226.410459][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 226.610964][ T40] kauditd_printk_skb: 66 callbacks suppressed [ 226.610980][ T40] audit: type=1400 audit(1772337367.712:2852): avc: denied { ioctl } for pid=13850 comm="syz.8.2078" path="socket:[57457]" dev="sockfs" ino=57457 ioctlcmd=0x42d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 226.721625][T13856] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 226.773286][ T6010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.810479][T13861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.895201][T13871] netlink: 'syz.0.2083': attribute type 21 has an invalid length. [ 226.897852][T13871] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2083'. [ 226.901169][T13871] netlink: 'syz.0.2083': attribute type 21 has an invalid length. [ 226.903739][T13871] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2083'. [ 226.906804][T13871] netlink: 'syz.0.2083': attribute type 21 has an invalid length. [ 226.909383][T13871] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2083'. [ 226.912798][T13871] netlink: 'syz.0.2083': attribute type 21 has an invalid length. [ 226.915369][T13871] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2083'. [ 226.918395][T13871] netlink: 'syz.0.2083': attribute type 21 has an invalid length. [ 226.920992][T13871] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2083'. [ 226.925227][T13871] netlink: 'syz.0.2083': attribute type 21 has an invalid length. [ 226.927939][T13871] netlink: 'syz.0.2083': attribute type 21 has an invalid length. [ 226.933136][T13871] netlink: 'syz.0.2083': attribute type 21 has an invalid length. [ 227.107399][ T40] audit: type=1400 audit(1772337368.190:2853): avc: denied { listen } for pid=13878 comm="syz.0.2086" lport=43651 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 227.108264][T13880] sctp: [Deprecated]: syz.0.2086 (pid 13880) Use of int in maxseg socket option. [ 227.108264][T13880] Use struct sctp_assoc_value instead [ 227.116769][ T40] audit: type=1400 audit(1772337368.190:2854): avc: denied { accept } for pid=13878 comm="syz.0.2086" lport=43651 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 227.132101][ T40] audit: type=1400 audit(1772337368.190:2855): avc: denied { getopt } for pid=13878 comm="syz.0.2086" lport=43651 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 227.252515][ T5950] usb 13-1: new high-speed USB device number 12 using dummy_hcd [ 227.370912][ T40] audit: type=1400 audit(1772337368.434:2856): avc: denied { getopt } for pid=13883 comm="syz.9.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 227.377685][ T40] audit: type=1400 audit(1772337368.434:2857): avc: denied { create } for pid=13883 comm="syz.9.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 227.385358][ T40] audit: type=1400 audit(1772337368.444:2858): avc: denied { connect } for pid=13883 comm="syz.9.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 227.413978][ T5950] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.418638][ T5950] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.426873][ T5950] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 227.432417][ T5950] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 227.439300][ T5950] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.453530][ T5950] usb 13-1: config 0 descriptor?? [ 227.529681][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 227.534896][ T40] audit: type=1326 audit(1772337368.584:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13887 comm="syz.9.2089" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f948a79c799 code=0x0 [ 227.672216][T13890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.675330][T13890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.688017][ T5950] usbhid 13-1:0.0: can't add hid device: -71 [ 227.690977][ T5950] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 227.692337][ T1176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.694787][ T5950] usb 13-1: USB disconnect, device number 12 [ 227.704389][ T40] audit: type=1326 audit(1772337368.744:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13887 comm="syz.9.2089" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948a79c799 code=0x7ff00000 [ 227.713249][ T40] audit: type=1326 audit(1772337368.744:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13887 comm="syz.9.2089" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948a79c799 code=0x7ff00000 [ 227.773832][T13897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.781643][T13897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.860499][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.137121][ T5950] usb 13-1: new full-speed USB device number 13 using dummy_hcd [ 228.309481][ T5950] usb 13-1: not running at top speed; connect to a high speed hub [ 228.313468][ T5950] usb 13-1: config 6 has an invalid interface number: 4 but max is 3 [ 228.328970][ T5950] usb 13-1: config 6 has an invalid interface number: 218 but max is 3 [ 228.332748][ T5950] usb 13-1: config 6 has an invalid interface number: 39 but max is 3 [ 228.336333][ T5950] usb 13-1: config 6 has an invalid interface number: 222 but max is 3 [ 228.341071][ T5950] usb 13-1: config 6 has an invalid interface number: 38 but max is 3 [ 228.344535][ T5950] usb 13-1: config 6 has 5 interfaces, different from the descriptor's value: 4 [ 228.348489][ T5950] usb 13-1: config 6 has no interface number 0 [ 228.351670][ T5950] usb 13-1: config 6 has no interface number 1 [ 228.354381][ T5950] usb 13-1: config 6 has no interface number 2 [ 228.357101][ T5950] usb 13-1: config 6 has no interface number 3 [ 228.359610][ T5950] usb 13-1: config 6 interface 4 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 228.363707][ T5950] usb 13-1: config 6 interface 4 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 228.367410][ T5950] usb 13-1: config 6 interface 4 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 228.375227][ T5950] usb 13-1: config 6 interface 4 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 228.379084][ T5950] usb 13-1: config 6 interface 4 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 228.382956][ T5950] usb 13-1: config 6 interface 4 altsetting 5 has 9 endpoint descriptors, different from the interface descriptor's value: 15 [ 228.387657][ T5950] usb 13-1: too many endpoints for config 6 interface 218 altsetting 114: 53, using maximum allowed: 30 [ 228.391584][ T5950] usb 13-1: config 6 interface 218 altsetting 114 has a duplicate endpoint with address 0x4, skipping [ 228.395574][ T5950] usb 13-1: config 6 interface 218 altsetting 114 has a duplicate endpoint with address 0x8C, skipping [ 228.399378][ T5950] usb 13-1: config 6 interface 218 altsetting 114 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 228.403577][ T5950] usb 13-1: config 6 interface 218 altsetting 114 has a duplicate endpoint with address 0x1, skipping [ 228.407109][ T5950] usb 13-1: config 6 interface 218 altsetting 114 has a duplicate endpoint with address 0x8, skipping [ 228.410634][ T5950] usb 13-1: config 6 interface 218 altsetting 114 has 6 endpoint descriptors, different from the interface descriptor's value: 53 [ 228.415088][ T5950] usb 13-1: config 6 interface 39 altsetting 243 has an invalid descriptor for endpoint zero, skipping [ 228.418531][ T5950] usb 13-1: config 6 interface 39 altsetting 243 has a duplicate endpoint with address 0x8, skipping [ 228.422282][ T5950] usb 13-1: config 6 interface 39 altsetting 243 has a duplicate endpoint with address 0x7, skipping [ 228.426419][ T5950] usb 13-1: config 6 interface 39 altsetting 243 has a duplicate endpoint with address 0x1, skipping [ 228.430088][ T5950] usb 13-1: config 6 interface 39 altsetting 243 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 228.434007][ T5950] usb 13-1: config 6 interface 39 altsetting 243 has a duplicate endpoint with address 0x8, skipping [ 228.438009][ T5950] usb 13-1: config 6 interface 39 altsetting 243 has an invalid descriptor for endpoint zero, skipping [ 228.441548][ T5950] usb 13-1: config 6 interface 222 altsetting 14 has a duplicate endpoint with address 0x4, skipping [ 228.445100][ T5950] usb 13-1: config 6 interface 222 altsetting 14 has a duplicate endpoint with address 0x6, skipping [ 228.448787][ T5950] usb 13-1: config 6 interface 38 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 228.452374][ T5950] usb 13-1: config 6 interface 38 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 228.456156][ T5950] usb 13-1: config 6 interface 38 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 228.461098][ T5950] usb 13-1: config 6 interface 38 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 228.465561][ T5950] usb 13-1: config 6 interface 38 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 228.470456][ T5950] usb 13-1: config 6 interface 38 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 228.475126][ T5950] usb 13-1: config 6 interface 38 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 228.479905][ T5950] usb 13-1: config 6 interface 38 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 228.484708][ T5950] usb 13-1: config 6 interface 4 has no altsetting 0 [ 228.487769][ T5950] usb 13-1: config 6 interface 218 has no altsetting 0 [ 228.490990][ T5950] usb 13-1: config 6 interface 39 has no altsetting 0 [ 228.493981][ T5950] usb 13-1: config 6 interface 222 has no altsetting 0 [ 228.497284][ T5950] usb 13-1: config 6 interface 38 has no altsetting 0 [ 228.504258][ T5950] usb 13-1: New USB device found, idVendor=0b95, idProduct=1780, bcdDevice=93.3f [ 228.508280][ T5950] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.511925][ T5950] usb 13-1: Product: 뢪輞0⌁ἢ࿺垫ꈙす蓋㷄縸鑩撍熩﷤꟱帀෇辟鍗㋹繽柘 [ 228.516510][ T5950] usb 13-1: Manufacturer: 㩉 [ 228.518630][ T5950] usb 13-1: SerialNumber: Ⰹ [ 228.525167][T13898] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 228.626651][T13931] xt_hashlimit: Unknown mode mask 84, kernel too old? [ 228.634446][T13931] batman_adv: batadv0: Adding interface: dummy0 [ 228.636707][T13931] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.645835][T13931] batman_adv: batadv0: Interface activated: dummy0 [ 228.756316][ T5950] asix 13-1:6.4: probe with driver asix failed with error -22 [ 228.762731][ T5950] asix 13-1:6.218: probe with driver asix failed with error -22 [ 228.770597][ T5950] asix 13-1:6.39: probe with driver asix failed with error -22 [ 228.771843][T13942] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.778312][ T5950] asix 13-1:6.222: probe with driver asix failed with error -22 [ 228.784520][ T5950] asix 13-1:6.38: probe with driver asix failed with error -22 [ 228.789658][ T5950] usb 13-1: USB disconnect, device number 13 [ 228.796116][T13942] macvlan2: entered promiscuous mode [ 228.800501][T13942] macvlan2: entered allmulticast mode [ 228.803828][T13942] bond1: entered promiscuous mode [ 228.805840][T13942] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 228.819951][T13942] bond1: left promiscuous mode [ 229.053247][T13948] [U]  [ 229.160428][ T34] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 229.299003][ T34] usb 5-1: device descriptor read/64, error -71 [ 229.335732][T13957] autofs4:pid:13957:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 229.336260][T13960] autofs4:pid:13960:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 229.387719][T13961] orangefs_devreq_open: device cannot be opened in blocking mode [ 229.393090][T13959] gfs2: error -5 reading superblock [ 229.451503][T13964] can0: slcan on ttyS3. [ 229.523352][T13964] can0 (unregistered): slcan off ttyS3. [ 229.558359][ T34] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 229.693499][ T34] usb 5-1: device descriptor read/64, error -71 [ 229.820798][ T34] usb usb5-port1: attempt power cycle [ 230.205969][ T34] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 230.248311][ T34] usb 5-1: device descriptor read/8, error -71 [ 230.515824][ T34] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 230.544577][ T167] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.562357][ T34] usb 5-1: device descriptor read/8, error -71 [ 230.660809][ T167] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.675107][ T34] usb usb5-port1: unable to enumerate USB device [ 230.746491][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 230.755751][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 230.760963][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 230.764515][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 230.769005][ T167] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.770899][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 230.803476][T13979] lo speed is unknown, defaulting to 1000 [ 230.846103][ T167] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.054417][ T167] veth0_to_bond: left allmulticast mode [ 231.056473][ T167] veth0_to_bond: left promiscuous mode [ 231.059911][ T167] bridge5: port 1(veth0_to_bond) entered disabled state [ 231.199874][ T167] dvmrp0 (unregistering): left allmulticast mode [ 231.768094][ T167] bond4 (unregistering): (slave bridge6): Releasing active interface [ 231.850433][ T167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.854934][ T167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.858853][ T167] bond0 (unregistering): Released all slaves [ 231.863776][ T167] bond1 (unregistering): (slave bond2): Releasing backup interface [ 231.866804][ T167] bond1 (unregistering): Released all slaves [ 231.873400][ T167] bond2 (unregistering): Released all slaves [ 231.880355][ T167] bond3 (unregistering): Released all slaves [ 231.889802][ T167] bond4 (unregistering): Released all slaves [ 231.964099][ C2] net_ratelimit: 141 callbacks suppressed [ 231.964118][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 232.085089][T13979] chnl_net:caif_netlink_parms(): no params data found [ 232.175514][T14011] openvswitch: netlink: IP tunnel dst address not specified [ 232.180552][T14012] openvswitch: netlink: IP tunnel dst address not specified [ 232.252390][T13979] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.254912][T13979] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.257379][T13979] bridge_slave_0: entered allmulticast mode [ 232.260283][T13979] bridge_slave_0: entered promiscuous mode [ 232.264198][T13979] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.266672][T13979] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.269091][T13979] bridge_slave_1: entered allmulticast mode [ 232.271922][T13979] bridge_slave_1: entered promiscuous mode [ 232.300354][T13979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.305639][T13979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.321402][T13979] team0: Port device team_slave_0 added [ 232.328256][T13979] team0: Port device team_slave_1 added [ 232.363397][T13979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.369136][T13979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.391103][T13979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.395699][T13979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.400242][T13979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.418578][T13979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.530628][T13979] hsr_slave_0: entered promiscuous mode [ 232.533689][T13979] hsr_slave_1: entered promiscuous mode [ 232.536064][T13979] debugfs: 'hsr0' already exists in 'hsr' [ 232.537974][T13979] Cannot create hsr debugfs directory [ 232.638513][T14054] __nla_validate_parse: 36 callbacks suppressed [ 232.638524][T14054] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2123'. [ 232.644000][T14054] validate_nla: 26 callbacks suppressed [ 232.644011][T14054] netlink: 'syz.9.2123': attribute type 7 has an invalid length. [ 232.651461][T14054] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2123'. [ 232.675834][T14054] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2123'. [ 232.678999][T14054] netlink: 'syz.9.2123': attribute type 7 has an invalid length. [ 232.681658][T14054] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2123'. [ 232.694482][ T46] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.698308][ T46] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.715383][ T167] hsr_slave_0: left promiscuous mode [ 232.726291][ T167] hsr_slave_1: left promiscuous mode [ 232.728613][ T167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.731384][ T167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.734508][ T167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.737000][ T167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.740095][ T167] batman_adv: batadv0: Removing interface: ipvlan2 [ 232.767925][ T167] veth1_macvtap: left promiscuous mode [ 232.769953][ T167] veth1_vlan: left promiscuous mode [ 232.810762][ T167] pim6reg99999999 (unregistering): left allmulticast mode [ 232.886812][ T167] team0 (unregistering): Port device team_slave_1 removed [ 232.894008][ T167] team0 (unregistering): Port device team_slave_0 removed [ 232.960804][ T46] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.964701][ T46] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.983559][ T5934] Bluetooth: hci0: command tx timeout [ 233.072717][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 233.371196][ T987] usb 14-1: new high-speed USB device number 11 using dummy_hcd [ 233.464896][ T167] IPVS: stop unused estimator thread 0... [ 233.532458][ T987] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 233.535623][ T987] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 233.538751][ T987] usb 14-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.545916][ T987] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 233.548903][ T987] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.551426][ T987] usb 14-1: Product: syz [ 233.553101][ T987] usb 14-1: Manufacturer: syz [ 233.554670][ T987] usb 14-1: SerialNumber: syz [ 233.559591][T13979] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 233.571731][ T987] hub 14-1:1.0: bad descriptor, ignoring hub [ 233.574271][ T987] hub 14-1:1.0: probe with driver hub failed with error -5 [ 233.581720][T13979] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 233.598732][T13979] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 233.604209][T13979] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 233.658542][T13979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.669168][T13979] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.675295][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.677703][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.687660][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.690072][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.779597][ T987] usblp 14-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 233.835630][T13979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.869751][T13979] veth0_vlan: entered promiscuous mode [ 233.876783][T13979] veth1_vlan: entered promiscuous mode [ 233.882677][T14127] "syz.0.2132" (14127) uses obsolete ecb(arc4) skcipher [ 233.894200][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 233.898767][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 233.902976][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 233.904819][T13979] veth0_macvtap: entered promiscuous mode [ 233.910544][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 233.911683][T13979] veth1_macvtap: entered promiscuous mode [ 233.913460][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 233.923479][T13979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.931337][T13979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.949569][ T61] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.956333][ T61] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.963444][ T61] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.966408][ T61] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.978634][T14133] lo speed is unknown, defaulting to 1000 [ 233.994533][ T40] kauditd_printk_skb: 6560 callbacks suppressed [ 233.994545][ T40] audit: type=1400 audit(1772861662.647:9422): avc: denied { read write } for pid=14066 comm="syz.9.2126" name="lp0" dev="devtmpfs" ino=3334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 234.014657][ T40] audit: type=1400 audit(1772861662.656:9423): avc: denied { open } for pid=14066 comm="syz.9.2126" path="/dev/usb/lp0" dev="devtmpfs" ino=3334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 234.070771][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.070789][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.097917][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.097931][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.158946][ T40] audit: type=1400 audit(1772861662.797:9424): avc: denied { watch_mount } for pid=14150 comm="syz.2.2116" path="/0" dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 234.181408][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 234.193891][ T34] usb 14-1: USB disconnect, device number 11 [ 234.199266][ T34] usblp0: removed [ 234.206182][T14154] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2134'. [ 234.334385][T14133] chnl_net:caif_netlink_parms(): no params data found [ 234.384126][T14133] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.386472][T14133] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.388936][T14133] bridge_slave_0: entered allmulticast mode [ 234.391759][T14133] bridge_slave_0: entered promiscuous mode [ 234.398161][T14133] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.400587][T14133] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.403015][T14133] bridge_slave_1: entered allmulticast mode [ 234.405890][T14133] bridge_slave_1: entered promiscuous mode [ 234.433678][T14133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.439055][T14133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.476503][T14133] team0: Port device team_slave_0 added [ 234.480570][T14133] team0: Port device team_slave_1 added [ 234.503083][T14133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.505392][T14133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.514864][T14133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.519538][T14133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.521807][T14133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.531208][T14133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.565311][T14133] hsr_slave_0: entered promiscuous mode [ 234.567660][T14133] hsr_slave_1: entered promiscuous mode [ 234.570019][T14133] debugfs: 'hsr0' already exists in 'hsr' [ 234.571898][T14133] Cannot create hsr debugfs directory [ 234.889403][ T40] audit: type=1400 audit(1772861663.482:9425): avc: denied { write } for pid=14213 comm="syz.2.2142" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 234.901656][T14214] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2142'. [ 234.921083][T14218] comedi comedi3: c6xdigio: I/O port conflict (0x83fb,3) [ 234.949482][ T40] audit: type=1400 audit(1772861663.548:9426): avc: denied { read } for pid=14223 comm="syz.9.2144" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 234.957510][ T40] audit: type=1400 audit(1772861663.548:9427): avc: denied { open } for pid=14223 comm="syz.9.2144" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 234.965691][ T40] audit: type=1400 audit(1772861663.548:9428): avc: denied { ioctl } for pid=14223 comm="syz.9.2144" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 235.020420][ T40] audit: type=1400 audit(1772861663.604:9429): avc: denied { bind } for pid=14231 comm="syz.2.2146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 235.061456][ T40] audit: type=1400 audit(1772861663.651:9430): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=43784 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 235.079288][ T40] audit: type=1400 audit(1772861663.651:9431): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=43784 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 235.133748][T14133] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 235.150466][T14133] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 235.157565][T14133] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 235.162889][T14133] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 235.186453][T14133] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.189403][T14133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.192797][T14133] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.194638][ T5934] Bluetooth: hci0: command tx timeout [ 235.196010][T14133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.255214][T14133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.273585][ T167] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.279418][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 235.284498][ T167] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.311663][T14133] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.324586][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.326996][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.347326][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.349726][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.519314][T14271] lo speed is unknown, defaulting to 1000 [ 235.527673][T14133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.560653][T14284] xt_SECMARK: invalid mode: 2 [ 235.646397][T14297] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 235.681921][T14133] veth0_vlan: entered promiscuous mode [ 235.688411][T14133] veth1_vlan: entered promiscuous mode [ 235.690775][T14303] vim2m vim2m.0: vidioc_s_fmt queue busy [ 235.716277][T14133] veth0_macvtap: entered promiscuous mode [ 235.733453][T14133] veth1_macvtap: entered promiscuous mode [ 235.767804][T14133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.775683][T14133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.793714][ T46] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.796737][ T46] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.803453][ T46] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.825049][ T46] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.832948][T14322] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2159'. [ 235.891448][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.894048][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.923913][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.928471][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.986241][T14337] netlink: 'syz.9.2162': attribute type 29 has an invalid length. [ 236.047227][T14344] netlink: 'syz.9.2163': attribute type 1 has an invalid length. [ 236.065940][T14344] 8021q: adding VLAN 0 to HW filter on device bond2 [ 236.083958][T14344] bond2: (slave bridge1): making interface the new active one [ 236.086829][T14344] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 236.139191][ T63] Bluetooth: hci2: command tx timeout [ 236.188436][T14344] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 236.379729][T14382] kAFS: unable to lookup cell 'syz1' [ 236.394735][T14382] mkiss: ax0: crc mode is auto. [ 236.398802][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 236.412148][ T5934] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 236.421668][ T5934] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 236.430018][ T5934] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 236.439955][ T5934] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 236.443088][ T5934] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 236.510406][T14386] lo speed is unknown, defaulting to 1000 [ 236.669381][T14388] uprobe: syz.5.2173:14388 failed to unregister, leaking uprobe [ 236.787277][T14403] futex_wake_op: syz.9.2175 tries to shift op by -1; fix this program [ 236.796398][T14403] futex_wake_op: syz.9.2175 tries to shift op by -1; fix this program [ 236.988880][ T61] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.992275][ T61] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.995449][ T61] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 237.011071][T14386] chnl_net:caif_netlink_parms(): no params data found [ 237.056248][T14386] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.058654][T14386] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.061337][T14386] bridge_slave_0: entered allmulticast mode [ 237.067500][T14386] bridge_slave_0: entered promiscuous mode [ 237.075752][T14386] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.078115][T14386] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.080534][T14386] bridge_slave_1: entered allmulticast mode [ 237.083967][T14386] bridge_slave_1: entered promiscuous mode [ 237.105943][T14386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.117278][ T61] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.121463][ T61] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.127584][ T61] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 237.141689][T14386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.164712][T14386] team0: Port device team_slave_0 added [ 237.168767][T14386] team0: Port device team_slave_1 added [ 237.202353][T14386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.204657][T14386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.215234][T14386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.221938][T14386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.224235][T14386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.233175][T14386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.257824][T14386] hsr_slave_0: entered promiscuous mode [ 237.260268][T14386] hsr_slave_1: entered promiscuous mode [ 237.262843][T14386] debugfs: 'hsr0' already exists in 'hsr' [ 237.264720][T14386] Cannot create hsr debugfs directory [ 237.270838][ T61] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.283475][ T61] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.286831][ T61] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 237.318167][T14438] sctp: [Deprecated]: syz.9.2180 (pid 14438) Use of struct sctp_assoc_value in delayed_ack socket option. [ 237.318167][T14438] Use struct sctp_sack_info instead [ 237.402901][ T61] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.406085][ T61] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.409219][ T61] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 237.411774][ T63] Bluetooth: hci0: command tx timeout [ 237.507401][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 237.534977][T14451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2189'. [ 237.751328][ T61] bond4 (unregistering): (slave geneve2): Releasing active interface [ 237.826450][ T61] bond1 (unregistering): (slave bridge1): Releasing active interface [ 237.829249][ T61] bridge1 (unregistering): left promiscuous mode [ 237.831709][ T61] bridge1 (unregistering): left allmulticast mode [ 237.848531][ T829] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 237.934008][ T50] usb 14-1: new high-speed USB device number 12 using dummy_hcd [ 238.019421][ T829] usb 7-1: Using ep0 maxpacket: 8 [ 238.022788][ T829] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 238.026109][ T829] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 238.028923][ T829] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 238.032722][ T829] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 238.036280][ T829] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 238.039230][ T829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.045625][ T829] hub 7-1:1.0: bad descriptor, ignoring hub [ 238.047565][ T829] hub 7-1:1.0: probe with driver hub failed with error -5 [ 238.050107][ T829] cdc_wdm 7-1:1.0: skipping garbage [ 238.051878][ T829] cdc_wdm 7-1:1.0: skipping garbage [ 238.056547][ T829] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 238.058422][ T829] cdc_wdm 7-1:1.0: Unknown control protocol [ 238.095359][ T50] usb 14-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 238.100594][ T50] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.103729][ T50] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 238.106541][ T50] usb 14-1: SerialNumber: syz [ 238.349746][ T63] Bluetooth: hci2: command tx timeout [ 238.489523][ T61] bond0 (unregistering): Released all slaves [ 238.496666][ T61] bond1 (unregistering): Released all slaves [ 238.503922][ T61] bond2 (unregistering): Released all slaves [ 238.511361][ T61] bond3 (unregistering): Released all slaves [ 238.519415][ T61] bond4 (unregistering): Released all slaves [ 238.537142][T14459] veth0_to_bond: entered allmulticast mode [ 238.583317][T14466] netlink: 'syz.5.2193': attribute type 1 has an invalid length. [ 238.595514][T14466] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2193'. [ 238.605515][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 238.606349][ T63] Bluetooth: hci5: command tx timeout [ 238.621953][T14466] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2193'. [ 238.625396][T14466] IPv6: NLM_F_CREATE should be specified when creating new route [ 238.631020][T14466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 238.633463][ T61] : left promiscuous mode [ 238.634161][T14466] IPv6: NLM_F_CREATE should be set when creating new route [ 238.708807][T14456] usb 7-1: reset high-speed USB device number 2 using dummy_hcd [ 238.783953][ T50] cdc_ether 14-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.9-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 238.887161][T14479] pim6reg1: entered promiscuous mode [ 238.888994][T14479] pim6reg1: entered allmulticast mode [ 239.145314][T14386] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 239.151097][T14386] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 239.155438][T14386] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 239.161050][T14386] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 239.186588][T14463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.189444][T14463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.228754][T14386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.232392][T14504] i2c i2c-1: Invalid block write size 34 [ 239.237003][ T829] usb 7-1: USB disconnect, device number 2 [ 239.247568][T14386] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.258399][T14463] cdc_wdm 7-1:1.0: Error autopm - -16 [ 239.264452][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.267086][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.271860][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.274288][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.310914][T14386] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.346344][T14513] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 239.361430][T14513] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 239.363597][T14513] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 239.368227][T14513] vhci_hcd vhci_hcd.0: Device attached [ 239.371026][T14513] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 239.373180][T14513] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 239.377890][T14513] vhci_hcd vhci_hcd.0: Device attached [ 239.380062][T14520] vhci_hcd: connection closed [ 239.380477][T14518] vhci_hcd: connection closed [ 239.380696][T11072] vhci_hcd vhci_hcd.2: stop threads [ 239.387231][T11072] vhci_hcd vhci_hcd.2: release socket [ 239.388988][T11072] vhci_hcd vhci_hcd.2: disconnect device [ 239.393191][T11072] vhci_hcd vhci_hcd.2: stop threads [ 239.396860][T11072] vhci_hcd vhci_hcd.2: release socket [ 239.398602][T11072] vhci_hcd vhci_hcd.2: disconnect device [ 239.432093][T14386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.456085][ T61] hsr_slave_0: left promiscuous mode [ 239.462716][ T61] hsr_slave_1: left promiscuous mode [ 239.465028][ T61] batman_adv: batadv0: Interface deactivated: dummy0 [ 239.467221][ T61] batman_adv: batadv0: Removing interface: dummy0 [ 239.474415][ T61] veth0_macvtap: left promiscuous mode [ 239.476482][ T61] veth1_vlan: left promiscuous mode [ 239.478306][ T61] veth0_vlan: left promiscuous mode [ 239.479389][ T24] usb 14-1: USB disconnect, device number 12 [ 239.483017][ T24] cdc_ether 14-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.9-1, CDC Ethernet Device [ 239.575033][T11076] smc: removing ib device syz2 [ 239.639508][ T63] Bluetooth: hci0: command tx timeout [ 239.641348][ T61] smc: removing net device wg2 with user defined pnetid SYZ2 [ 239.714271][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 239.749030][T14386] veth0_vlan: entered promiscuous mode [ 239.756042][T14386] veth1_vlan: entered promiscuous mode [ 239.779000][T14386] veth0_macvtap: entered promiscuous mode [ 239.784017][T14386] veth1_macvtap: entered promiscuous mode [ 239.798623][T14386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.811925][T14386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.819078][ T167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.832951][ T167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.836141][ T167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.845486][ T167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.942458][T11077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.945480][T11077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.007813][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.011249][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.082942][T14543] lo speed is unknown, defaulting to 1000 [ 240.092196][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2203'. [ 240.097261][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 240.097271][ T40] audit: type=1400 audit(1772861668.369:9447): avc: denied { ioctl } for pid=14544 comm="syz.9.2203" path="socket:[62286]" dev="sockfs" ino=62286 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 240.145485][T14552] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2204'. [ 240.179718][ T40] audit: type=1400 audit(1772861668.444:9448): avc: denied { mount } for pid=14556 comm="syz.0.2205" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 240.182350][T14557] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 240.229099][ T40] audit: type=1400 audit(1772861668.500:9449): avc: denied { unmount } for pid=14386 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 240.370613][T14567] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 240.391009][T14571] loop6: detected capacity change from 0 to 524288000 [ 240.459448][T14567] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 240.524225][ T34] usb 14-1: new high-speed USB device number 13 using dummy_hcd [ 240.561795][ T61] IPVS: stop unused estimator thread 0... [ 240.577738][ T63] Bluetooth: hci2: command tx timeout [ 240.586354][ T40] audit: type=1400 audit(1772861668.829:9450): avc: denied { getopt } for pid=14582 comm="syz.5.2215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 240.614369][T14585] lo speed is unknown, defaulting to 1000 [ 240.652194][ T40] audit: type=1400 audit(1772861668.885:9451): avc: denied { ioctl } for pid=14584 comm="syz.0.2216" path="socket:[63460]" dev="sockfs" ino=63460 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 240.684127][ T34] usb 14-1: Using ep0 maxpacket: 8 [ 240.687404][ T34] usb 14-1: config index 0 descriptor too short (expected 5924, got 36) [ 240.690278][ T34] usb 14-1: config 250 has an invalid interface number: 228 but max is -1 [ 240.693128][ T34] usb 14-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 240.696969][ T34] usb 14-1: config 250 has no interface number 0 [ 240.699366][ T34] usb 14-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 240.701477][T14593] JFS: discard option not supported on device [ 240.703189][ T34] usb 14-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 240.703206][ T34] usb 14-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 240.708594][T14593] Mount JFS Failure: -5 [ 240.714727][ T34] usb 14-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 240.719619][ T34] usb 14-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 240.724442][ T40] audit: type=1400 audit(1772861668.960:9452): avc: denied { ioctl } for pid=14592 comm="syz.2.2218" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 240.732471][ T34] usb 14-1: config 250 interface 228 has no altsetting 0 [ 240.736606][ T34] usb 14-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 240.740205][ T34] usb 14-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 240.742890][ T34] usb 14-1: Product: syz [ 240.744385][ T34] usb 14-1: SerialNumber: syz [ 240.752651][ T34] hub 14-1:250.228: bad descriptor, ignoring hub [ 240.759165][ T34] hub 14-1:250.228: probe with driver hub failed with error -5 [ 240.822747][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 240.822965][ T63] Bluetooth: hci5: command tx timeout [ 240.834107][ T40] audit: type=1400 audit(1772861669.063:9453): avc: denied { accept } for pid=14602 comm="syz.0.2221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 240.865478][ T40] audit: type=1400 audit(1772861669.082:9454): avc: denied { create } for pid=14606 comm="syz.5.2222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 240.868349][T14607] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.884506][T14607] bridge_slave_0 (unregistering): left allmulticast mode [ 240.891331][T14607] bridge_slave_0 (unregistering): left promiscuous mode [ 240.894112][T14607] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.912805][ T40] audit: type=1400 audit(1772861669.129:9455): avc: denied { create } for pid=14608 comm="syz.0.2223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 240.923475][ T40] audit: type=1400 audit(1772861669.138:9456): avc: denied { setopt } for pid=14608 comm="syz.0.2223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 240.968903][T14561] Option '_n'tr1ZQ3-ֵkXv~' to dns_resolver key: bad/missing value [ 240.980674][T14622] netlink: 15 bytes leftover after parsing attributes in process `syz.0.2225'. [ 241.037746][T14561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.040782][T14561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.145906][T14631] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.161588][ T34] usblp 14-1:250.228: usblp0: USB Bidirectional printer dev 13 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 241.168178][T14634] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2228'. [ 241.185532][ T34] usb 14-1: USB disconnect, device number 13 [ 241.190010][ T34] usblp0: removed [ 241.215376][T14633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2231'. [ 241.286695][T14631] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.372293][T14631] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.410654][T14642] netlink: 'syz.2.2233': attribute type 1 has an invalid length. [ 241.414097][T14642] netlink: 'syz.2.2233': attribute type 2 has an invalid length. [ 241.464291][T14631] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.628829][ T46] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.631483][ T46] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.647196][ T46] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.686228][ T46] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.814196][T14668] can: request_module (can-proto-0) failed. [ 241.816990][T14668] netlink: 'syz.9.2240': attribute type 1 has an invalid length. [ 241.835272][T14668] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2240'. [ 241.860072][T14674] syzkaller0: entered promiscuous mode [ 241.861905][T14674] syzkaller0: entered allmulticast mode [ 241.929625][T14680] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2243'. [ 241.942096][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 242.257703][ T46] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.261251][ T46] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.397863][ T5934] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 242.401957][ T5934] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 242.405192][ T5934] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 242.416229][ T46] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.420236][ T46] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.423317][ T5934] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 242.428166][ T5934] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 242.453349][T14696] lo speed is unknown, defaulting to 1000 [ 242.524966][ T46] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.529364][ T46] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.592350][ T24] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 242.602972][ T6009] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 242.629503][ T46] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.632827][ T46] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.662693][T14696] chnl_net:caif_netlink_parms(): no params data found [ 242.732468][T14696] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.734796][T14696] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.737240][T14696] bridge_slave_0: entered allmulticast mode [ 242.740974][T14696] bridge_slave_0: entered promiscuous mode [ 242.744811][T14696] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.747163][T14696] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.749713][T14696] bridge_slave_1: entered allmulticast mode [ 242.753029][T14696] bridge_slave_1: entered promiscuous mode [ 242.768771][T14696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.773681][ T6009] usb 7-1: Using ep0 maxpacket: 16 [ 242.776626][ T6009] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 242.779255][ T6009] usb 7-1: config 0 has no interface number 0 [ 242.781291][ T6009] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 242.783615][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 242.785023][ T6009] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 242.788326][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.794533][ T24] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 242.794993][ T5934] Bluetooth: hci2: command tx timeout [ 242.799242][ T24] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.799257][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.803851][T14696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.811168][ T6009] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 242.811653][ T24] usb 10-1: config 0 descriptor?? [ 242.814040][ T6009] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 242.819829][ T6009] usb 7-1: Product: syz [ 242.821618][ T6009] usb 7-1: SerialNumber: syz [ 242.824926][ T6009] usb 7-1: config 0 descriptor?? [ 242.828303][ T6009] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 242.836153][ T6009] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input36 [ 242.907660][ T6009] SELinux: failure in sel_netif_sid_slow(), invalid network interface (99) [ 243.050741][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 243.050753][ T5934] Bluetooth: hci5: command tx timeout [ 243.107348][ T46] bond2 (unregistering): (slave bridge1): Releasing active interface [ 243.161021][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.165686][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.170425][ T46] bond0 (unregistering): Released all slaves [ 243.175834][ T46] bond1 (unregistering): Released all slaves [ 243.183591][ T46] bond2 (unregistering): Released all slaves [ 243.203420][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 243.204773][ T839] usb 7-1: USB disconnect, device number 3 [ 243.205731][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 243.213935][ T839] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 243.218642][T14696] team0: Port device team_slave_0 added [ 243.225496][T14696] team0: Port device team_slave_1 added [ 243.254229][T14696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.256550][T14696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.265581][ T24] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 243.266053][T14696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.274398][T14696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.276895][T14696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.285379][T14696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.309306][T14696] hsr_slave_0: entered promiscuous mode [ 243.311741][T14696] hsr_slave_1: entered promiscuous mode [ 243.314690][T14696] debugfs: 'hsr0' already exists in 'hsr' [ 243.316704][T14696] Cannot create hsr debugfs directory [ 243.534624][ T46] hsr_slave_0: left promiscuous mode [ 243.536785][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.539176][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.544661][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.547036][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.556949][ T46] veth1_macvtap: left promiscuous mode [ 243.557369][ T5991] usb 10-1: USB disconnect, device number 3 [ 243.558904][ T46] veth0_macvtap: left promiscuous mode [ 243.563487][ T46] veth1_vlan: left promiscuous mode [ 243.565233][ T46] veth0_vlan: left promiscuous mode [ 243.696660][ T46] team0 (unregistering): Port device team_slave_1 removed [ 243.706578][ T46] team0 (unregistering): Port device team_slave_0 removed [ 243.880656][T14739] kAFS: Can only specify source 'none' with -o dyn [ 243.929946][T14756] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65296 sclass=netlink_xfrm_socket pid=14756 comm=syz.5.2261 [ 244.148755][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 244.151181][ T24] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 244.287352][ T24] usb 7-1: device descriptor read/64, error -71 [ 244.302595][ T46] IPVS: stop unused estimator thread 0... [ 244.388854][T14781] xt_policy: output policy not valid in PREROUTING and INPUT [ 244.543145][ T24] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 244.575183][ T5934] Bluetooth: hci1: command tx timeout [ 244.655932][T14788] lo speed is unknown, defaulting to 1000 [ 244.692433][ T24] usb 7-1: device descriptor read/64, error -71 [ 244.720802][T14789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.822452][ T24] usb usb7-port1: attempt power cycle [ 245.193473][ T24] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 245.226471][ T24] usb 7-1: device descriptor read/8, error -71 [ 245.257553][ T5934] Bluetooth: hci5: command tx timeout [ 245.268092][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 245.282803][T14800] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 245.286137][T14800] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 245.290359][T14800] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2271'. [ 245.440118][T14809] SELinux: failed to load policy [ 245.500399][ T24] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 245.534952][ T24] usb 7-1: device descriptor read/8, error -71 [ 245.662692][ T24] usb usb7-port1: unable to enumerate USB device [ 246.366101][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 246.793286][ T5934] Bluetooth: hci1: command tx timeout [ 247.205862][T14763] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 247.220535][T14696] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 247.235021][T14696] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 247.253210][T14696] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 247.263423][T14696] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 247.288995][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 247.289007][ T40] audit: type=1400 audit(1772861675.114:9468): avc: denied { read } for pid=14830 comm="syz.5.2281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 247.319471][T14696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.329489][T14696] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.345506][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.347953][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.354419][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.356806][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.485956][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 247.522510][T14696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.713318][T14696] veth0_vlan: entered promiscuous mode [ 247.726029][T14696] veth1_vlan: entered promiscuous mode [ 247.756826][T14696] veth0_macvtap: entered promiscuous mode [ 247.761209][T14696] veth1_macvtap: entered promiscuous mode [ 247.764270][ T40] audit: type=1400 audit(1772861675.564:9469): avc: denied { write } for pid=14874 comm="syz.0.2284" name="mouse1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 247.774044][T14696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.780209][T14696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.787061][ T1176] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.797907][ T1176] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.818014][ T1176] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.849319][ T1176] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.890679][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.894190][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.921594][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.924942][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.969393][ T40] audit: type=1326 audit(1772861675.752:9470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14886 comm="syz.4.2249" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9ba59c799 code=0x0 [ 248.031706][T14893] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 248.137378][ T40] audit: type=1400 audit(1772861675.902:9471): avc: denied { write } for pid=14904 comm="syz.0.2289" name="usbmon1" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 248.200646][ T40] audit: type=1400 audit(1772861675.977:9472): avc: denied { ioctl } for pid=14904 comm="syz.0.2289" path="/dev/usbmon1" dev="devtmpfs" ino=738 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 248.251654][T14909] < [ 248.332438][ T40] audit: type=1400 audit(1772861676.099:9473): avc: denied { bind } for pid=14920 comm="syz.2.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 248.367002][T14927] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2294'. [ 248.411204][T14932] FAULT_INJECTION: forcing a failure. [ 248.411204][T14932] name failslab, interval 1, probability 0, space 0, times 1 [ 248.416666][T14932] CPU: 2 UID: 0 PID: 14932 Comm: syz.5.2296 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.416686][T14932] Tainted: [L]=SOFTLOCKUP [ 248.416690][T14932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 248.416697][T14932] Call Trace: [ 248.416701][T14932] [ 248.416705][T14932] dump_stack_lvl+0x100/0x190 [ 248.416736][T14932] should_fail_ex.cold+0x5/0xa [ 248.416751][T14932] ? tomoyo_realpath_from_path+0xb6/0x690 [ 248.416771][T14932] should_failslab+0xc2/0x120 [ 248.416790][T14932] __kmalloc_noprof+0xe0/0x850 [ 248.416810][T14932] tomoyo_realpath_from_path+0xb6/0x690 [ 248.416827][T14932] tomoyo_path_number_perm+0x23c/0x580 [ 248.416846][T14932] ? tomoyo_path_number_perm+0x22e/0x580 [ 248.416866][T14932] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 248.416900][T14932] ? find_held_lock+0x2b/0x80 [ 248.416914][T14932] ? __fget_files+0x215/0x3d0 [ 248.416925][T14932] ? hook_file_ioctl_common+0x146/0x410 [ 248.416943][T14932] ? __fget_files+0x21f/0x3d0 [ 248.416957][T14932] security_file_ioctl+0xd3/0x230 [ 248.416970][T14932] __x64_sys_ioctl+0xb7/0x210 [ 248.416987][T14932] do_syscall_64+0x106/0xf80 [ 248.417004][T14932] ? clear_bhb_loop+0x40/0x90 [ 248.417018][T14932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.417035][T14932] RIP: 0033:0x7f9931d9c799 [ 248.417049][T14932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.417065][T14932] RSP: 002b:00007f9932cff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.417079][T14932] RAX: ffffffffffffffda RBX: 00007f9932015fa0 RCX: 00007f9931d9c799 [ 248.417089][T14932] RDX: 0000200000000540 RSI: 00000000c4c85513 RDI: 0000000000000003 [ 248.417098][T14932] RBP: 00007f9932cff090 R08: 0000000000000000 R09: 0000000000000000 [ 248.417107][T14932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.417117][T14932] R13: 00007f9932016038 R14: 00007f9932015fa0 R15: 00007fff6a073248 [ 248.417137][T14932] [ 248.417142][T14932] ERROR: Out of memory at tomoyo_realpath_from_path. [ 248.583455][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 248.594081][ T5991] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 248.733332][ T5991] usb 5-1: device descriptor read/64, error -71 [ 248.785943][ T34] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 248.922398][T14967] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2301'. [ 248.928308][T14967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14967 comm=syz.4.2301 [ 248.950984][ T34] usb 10-1: Using ep0 maxpacket: 8 [ 248.956532][ T6009] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 248.958240][ T34] usb 10-1: descriptor type invalid, skip [ 248.968454][ T34] usb 10-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 248.977806][ T34] usb 10-1: config 1 interface 0 has no altsetting 0 [ 248.981693][ T34] usb 10-1: New USB device found, idVendor=0486, idProduct=0185, bcdDevice= 0.40 [ 248.984756][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.987360][ T34] usb 10-1: Product: syz [ 248.989480][ T34] usb 10-1: Manufacturer: 㿧쩼ृ袚亓⥏洆뗫⚷㕠ꐊ콉贊黭蒸ퟝ豕窝㺏ޓ굂䧿趙좬ᖺ唘黕ઑꫨꞡᾥᐲ糟쾭㔧❇ᑧ᪰蹞睏酟ޒ䰖汸薻㋀遑 [ 248.994908][ T34] usb 10-1: SerialNumber: syz [ 249.006355][ T5991] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 249.020517][ T5934] Bluetooth: hci1: command tx timeout [ 249.036540][ T40] audit: type=1400 audit(1772861676.755:9474): avc: denied { ioctl } for pid=14976 comm="syz.4.2303" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 249.036897][T14977] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 249.052053][T14977] macvlan0: entered allmulticast mode [ 249.054657][T14977] veth1_vlan: entered allmulticast mode [ 249.057138][T14977] macvlan0: left allmulticast mode [ 249.059130][T14977] veth1_vlan: left allmulticast mode [ 249.137711][ T6009] usb 7-1: Using ep0 maxpacket: 8 [ 249.141515][ T6009] usb 7-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 249.146273][ T6009] usb 7-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 249.148413][ T5991] usb 5-1: device descriptor read/64, error -71 [ 249.153249][ T6009] usb 7-1: string descriptor 0 read error: -22 [ 249.155351][ T6009] usb 7-1: New USB device found, idVendor=2100, idProduct=9e55, bcdDevice=e1.a8 [ 249.159458][ T6009] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.266015][ T5991] usb usb5-port1: attempt power cycle [ 249.314762][T14995] netlink: 'syz.4.2305': attribute type 9 has an invalid length. [ 249.355755][ T34] usbhid 10-1:1.0: can't add hid device: -71 [ 249.357940][ T34] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 249.362623][ T34] usb 10-1: USB disconnect, device number 4 [ 249.383373][ T5934] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 249.386790][ T5934] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 249.551883][ T24] usb 7-1: USB disconnect, device number 8 [ 249.576328][T15007] FAULT_INJECTION: forcing a failure. [ 249.576328][T15007] name failslab, interval 1, probability 0, space 0, times 0 [ 249.580415][T15007] CPU: 3 UID: 0 PID: 15007 Comm: syz.2.2306 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.580434][T15007] Tainted: [L]=SOFTLOCKUP [ 249.580437][T15007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 249.580444][T15007] Call Trace: [ 249.580448][T15007] [ 249.580453][T15007] dump_stack_lvl+0x100/0x190 [ 249.580475][T15007] should_fail_ex.cold+0x5/0xa [ 249.580489][T15007] ? tomoyo_encode2+0xfb/0x3c0 [ 249.580502][T15007] should_failslab+0xc2/0x120 [ 249.580520][T15007] __kmalloc_noprof+0xe0/0x850 [ 249.580534][T15007] ? d_absolute_path+0x136/0x1b0 [ 249.580551][T15007] tomoyo_encode2+0xfb/0x3c0 [ 249.580566][T15007] tomoyo_encode+0x29/0x50 [ 249.580578][T15007] tomoyo_realpath_from_path+0x18c/0x690 [ 249.580594][T15007] tomoyo_path_number_perm+0x23c/0x580 [ 249.580611][T15007] ? tomoyo_path_number_perm+0x22e/0x580 [ 249.580634][T15007] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 249.580666][T15007] ? find_held_lock+0x2b/0x80 [ 249.580680][T15007] ? __fget_files+0x215/0x3d0 [ 249.580689][T15007] ? hook_file_ioctl_common+0x146/0x410 [ 249.580707][T15007] ? __fget_files+0x21f/0x3d0 [ 249.580719][T15007] security_file_ioctl+0xd3/0x230 [ 249.580732][T15007] __x64_sys_ioctl+0xb7/0x210 [ 249.580748][T15007] do_syscall_64+0x106/0xf80 [ 249.580760][T15007] ? clear_bhb_loop+0x40/0x90 [ 249.580773][T15007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.580784][T15007] RIP: 0033:0x7f7e3399c799 [ 249.580794][T15007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.580804][T15007] RSP: 002b:00007f7e347b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.580815][T15007] RAX: ffffffffffffffda RBX: 00007f7e33c15fa0 RCX: 00007f7e3399c799 [ 249.580821][T15007] RDX: 0000200000000540 RSI: 00000000c4c85513 RDI: 0000000000000003 [ 249.580828][T15007] RBP: 00007f7e347b7090 R08: 0000000000000000 R09: 0000000000000000 [ 249.580834][T15007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.580840][T15007] R13: 00007f7e33c16038 R14: 00007f7e33c15fa0 R15: 00007fff1d5a9bc8 [ 249.580857][T15007] [ 249.580869][T15007] ERROR: Out of memory at tomoyo_realpath_from_path. [ 249.655565][ T5991] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 249.671678][ T5991] usb 5-1: device descriptor read/8, error -71 [ 249.683723][T15013] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2307'. [ 249.702732][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 249.926593][ T5991] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 249.949020][ T5991] usb 5-1: device descriptor read/8, error -71 [ 249.997995][ T40] audit: type=1400 audit(1772861677.656:9475): avc: denied { create } for pid=15025 comm="syz.5.2311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 250.004889][ T40] audit: type=1400 audit(1772861677.656:9476): avc: denied { write } for pid=15025 comm="syz.5.2311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 250.065337][ T5991] usb usb5-port1: unable to enumerate USB device [ 250.111865][ T40] audit: type=1400 audit(1772861677.769:9477): avc: denied { ioctl } for pid=15033 comm="syz.5.2315" path="socket:[66909]" dev="sockfs" ino=66909 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 250.124668][T15037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2316'. [ 250.203276][ T5991] libceph: connect (1)[c::]:6789 error -101 [ 250.208433][ T5991] libceph: mon0 (1)[c::]:6789 connect error [ 250.215493][ T5991] libceph: connect (1)[c::]:6789 error -101 [ 250.219155][ T5991] libceph: mon0 (1)[c::]:6789 connect error [ 250.238821][T15053] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2321'. [ 250.241964][T15053] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2321'. [ 250.503500][ T5991] libceph: connect (1)[c::]:6789 error -101 [ 250.505718][ T5991] libceph: mon0 (1)[c::]:6789 connect error [ 250.800793][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 251.047375][ T34] libceph: connect (1)[c::]:6789 error -101 [ 251.049513][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 251.069349][T15047] ceph: No mds server is up or the cluster is laggy [ 251.228042][ T5934] Bluetooth: hci1: command tx timeout [ 251.665928][T15082] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 251.707855][ T5950] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 251.866851][ T5950] usb 7-1: Using ep0 maxpacket: 32 [ 251.871272][ T5950] usb 7-1: config 0 has no interfaces? [ 251.875439][ T5950] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 251.879514][ T5950] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.882229][ T5950] usb 7-1: Product: syz [ 251.883618][ T5950] usb 7-1: Manufacturer: syz [ 251.885174][ T5950] usb 7-1: SerialNumber: syz [ 251.898731][ T5950] usb 7-1: config 0 descriptor?? [ 251.909863][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 251.916072][T15089] netlink: 'syz.4.2333': attribute type 1 has an invalid length. [ 251.930540][T15089] PID 15089 killed due to inadequate hugepage pool [ 251.995266][ T6011] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 252.048091][ T6009] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 252.134591][T15101] block nbd4: shutting down sockets [ 252.156886][ T8647] usb 7-1: USB disconnect, device number 9 [ 252.186558][ T6011] usb 10-1: Using ep0 maxpacket: 8 [ 252.189733][ T6011] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 252.192455][ T6011] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 252.195649][ T6011] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 252.201121][ T6011] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 252.205384][ T6011] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.208906][ T6009] usb 5-1: Using ep0 maxpacket: 16 [ 252.211540][ T6011] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 252.215906][ T6009] usb 5-1: config 141 has an invalid descriptor of length 0, skipping remainder of the config [ 252.216915][ T6011] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.222508][ T6009] usb 5-1: config 141 has 0 interfaces, different from the descriptor's value: 1 [ 252.240402][ T6009] usb 5-1: string descriptor 0 read error: -22 [ 252.243208][ T6009] usb 5-1: New USB device found, idVendor=05e3, idProduct=1bf0, bcdDevice=ca.00 [ 252.247183][ T6009] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.272607][T15107] ./bus: Can't lookup blockdev [ 252.281771][T15106] lo speed is unknown, defaulting to 1000 [ 252.285558][T15100] [ 252.286417][T15100] ====================================================== [ 252.288707][T15100] WARNING: possible circular locking dependency detected SYZFAIL: failed to recv rpc [ 252.290980][T15100] syzkaller #0 Tainted: G L [ 252.293527][T15100] ------------------------------------------------------ [ 252.296607][T15100] syz.4.2336/15100 is trying to acquire lock: [ 252.299182][T15100] ffffffff8e972d48 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0xedc/0x1c50 [ 252.303223][T15100] fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 252.303223][T15100] but task is already holding lock: [ 252.306449][T15100] ffff88802989b008 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: blk_mq_update_nr_hw_queues+0x88e/0x1190 [ 252.311194][T15100] [ 252.311194][T15100] which lock already depends on the new lock. [ 252.311194][T15100] [ 252.315639][T15100] [ 252.315639][T15100] the existing dependency chain (in reverse order) is: [ 252.319534][T15100] [ 252.319534][T15100] -> #2 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 252.323295][T15100] blk_alloc_queue+0x610/0x790 [ 252.325634][T15100] blk_mq_alloc_queue+0x174/0x290 [ 252.328211][T15100] __blk_mq_alloc_disk+0x29/0x120 [ 252.330672][T15100] nbd_dev_add+0x492/0xb10 [ 252.332640][T15100] nbd_init+0x291/0x2b0 [ 252.334226][T15100] do_one_initcall+0x11d/0x760 [ 252.335984][T15100] kernel_init_freeable+0x6e5/0x7a0 [ 252.337858][T15100] kernel_init+0x1f/0x1e0 [ 252.339480][T15100] ret_from_fork+0x754/0xd80 [ 252.341401][T15100] ret_from_fork_asm+0x1a/0x30 [ 252.343124][T15100] [ 252.343124][T15100] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 252.345496][T15100] fs_reclaim_acquire+0xc4/0x100 [ 252.347305][T15100] prepare_alloc_pages+0x166/0x5f0 [ 252.349144][T15100] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 252.351294][T15100] __alloc_pages_noprof+0xb/0x1b0 [ 252.353100][T15100] pcpu_populate_chunk+0x118/0x990 [ 252.354930][T15100] pcpu_alloc_noprof+0x833/0x1c50 [ 252.356862][T15100] iommu_dma_init_fq+0x1da/0x7e0 [ 252.358626][T15100] iommu_setup_dma_ops+0x1250/0x1630 [ 252.360597][T15100] bus_iommu_probe+0x264/0x550 [ 252.362356][T15100] iommu_device_register+0x1af/0x280 [ 252.364266][T15100] intel_iommu_init+0x2020/0x2970 [ 252.366071][T15100] pci_iommu_init+0x3c/0x80 [ 252.367721][T15100] do_one_initcall+0x11d/0x760 [ 252.369453][T15100] kernel_init_freeable+0x6e5/0x7a0 [ 252.371338][T15100] kernel_init+0x1f/0x1e0 [ 252.372957][T15100] ret_from_fork+0x754/0xd80 [ 252.374634][T15100] ret_from_fork_asm+0x1a/0x30 [ 252.376359][T15100] [ 252.376359][T15100] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 252.378809][T15100] __lock_acquire+0x14b8/0x2630 [ 252.380566][T15100] lock_acquire+0x1cf/0x380 [ 252.382192][T15100] __mutex_lock+0x1a2/0x1b90 [ 252.383875][T15100] pcpu_alloc_noprof+0xedc/0x1c50 [ 252.385681][T15100] sbitmap_init_node+0x2ff/0x720 [ 252.387465][T15100] sbitmap_queue_init_node+0x40/0x4a0 [ 252.389407][T15100] blk_mq_init_tags+0x184/0x300 [ 252.391193][T15100] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 252.393180][T15100] __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 252.395211][T15100] blk_mq_update_nr_hw_queues+0xaba/0x1190 [ 252.397284][T15100] nbd_start_device+0x1a6/0xbd0 [ 252.399053][T15100] nbd_ioctl+0x4a6/0xd30 [ 252.400664][T15100] blkdev_ioctl+0x5ad/0x6f0 [ 252.402297][T15100] __x64_sys_ioctl+0x18e/0x210 [ 252.404039][T15100] do_syscall_64+0x106/0xf80 [ 252.405709][T15100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.407791][T15100] [ 252.407791][T15100] other info that might help us debug this: [ 252.407791][T15100] [ 252.411080][T15100] Chain exists of: [ 252.411080][T15100] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#53 [ 252.411080][T15100] [ 252.415478][T15100] Possible unsafe locking scenario: [ 252.415478][T15100] [ 252.417886][T15100] CPU0 CPU1 [ 252.419644][T15100] ---- ---- [ 252.421424][T15100] lock(&q->q_usage_counter(io)#53); [ 252.423183][T15100] lock(fs_reclaim); [ 252.425298][T15100] lock(&q->q_usage_counter(io)#53); [ 252.427850][T15100] lock(pcpu_alloc_mutex); [ 252.429350][T15100] [ 252.429350][T15100] *** DEADLOCK *** [ 252.429350][T15100] [ 252.431985][T15100] 4 locks held by syz.4.2336/15100: [ 252.433738][T15100] #0: ffff8880298d89d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x91/0x1190 [ 252.437405][T15100] #1: ffff8880298d88d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa4/0x1190 [ 252.440936][T15100] #2: ffff88802989b008 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: blk_mq_update_nr_hw_queues+0x88e/0x1190 [ 252.444690][T15100] #3: ffff88802989b040 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: blk_mq_update_nr_hw_queues+0x88e/0x1190 [ 252.448521][T15100] [ 252.448521][T15100] stack backtrace: [ 252.450451][T15100] CPU: 2 UID: 0 PID: 15100 Comm: syz.4.2336 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.450468][T15100] Tainted: [L]=SOFTLOCKUP [ 252.450471][T15100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 252.450478][T15100] Call Trace: [ 252.450483][T15100] [ 252.450487][T15100] dump_stack_lvl+0x100/0x190 [ 252.450505][T15100] print_circular_bug.cold+0x178/0x1c7 [ 252.450523][T15100] check_noncircular+0x146/0x160 [ 252.450542][T15100] __lock_acquire+0x14b8/0x2630 [ 252.450560][T15100] ? irqentry_exit+0x180/0x670 [ 252.450572][T15100] lock_acquire+0x1cf/0x380 [ 252.450588][T15100] ? pcpu_alloc_noprof+0xedc/0x1c50 [ 252.450602][T15100] ? __pfx___might_resched+0x10/0x10 [ 252.450615][T15100] __mutex_lock+0x1a2/0x1b90 [ 252.450626][T15100] ? pcpu_alloc_noprof+0xedc/0x1c50 [ 252.450640][T15100] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 252.450657][T15100] ? pcpu_alloc_noprof+0xedc/0x1c50 [ 252.450670][T15100] ? stack_depot_save_flags+0x479/0x9d0 [ 252.450687][T15100] ? __pfx___mutex_lock+0x10/0x10 [ 252.450697][T15100] ? kasan_save_stack+0x3f/0x50 [ 252.450711][T15100] ? kasan_save_stack+0x30/0x50 [ 252.450725][T15100] ? kasan_save_track+0x14/0x30 [ 252.450739][T15100] ? __kasan_kmalloc+0xaa/0xb0 [ 252.450753][T15100] ? blk_mq_init_tags+0x8c/0x300 [ 252.450764][T15100] ? blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 252.450775][T15100] ? __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 252.450787][T15100] ? nbd_ioctl+0x4a6/0xd30 [ 252.450798][T15100] ? blkdev_ioctl+0x5ad/0x6f0 [ 252.450809][T15100] ? pcpu_alloc_noprof+0xedc/0x1c50 [ 252.450823][T15100] pcpu_alloc_noprof+0xedc/0x1c50 [ 252.450839][T15100] sbitmap_init_node+0x2ff/0x720 [ 252.450851][T15100] sbitmap_queue_init_node+0x40/0x4a0 [ 252.450862][T15100] blk_mq_init_tags+0x184/0x300 [ 252.450878][T15100] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 252.450890][T15100] ? lockdep_hardirqs_on+0x78/0x100 [ 252.450901][T15100] __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 252.450913][T15100] blk_mq_update_nr_hw_queues+0xaba/0x1190 [ 252.450926][T15100] ? __mutex_unlock_slowpath+0x15c/0x790 [ 252.450937][T15100] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 252.450952][T15100] nbd_start_device+0x1a6/0xbd0 [ 252.450966][T15100] ? security_capable+0x80/0x260 [ 252.450983][T15100] nbd_ioctl+0x4a6/0xd30 [ 252.450996][T15100] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 252.451014][T15100] ? __pfx_nbd_ioctl+0x10/0x10 [ 252.451025][T15100] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 252.451040][T15100] ? __fget_files+0x215/0x3d0 [ 252.451050][T15100] ? __pfx_nbd_ioctl+0x10/0x10 [ 252.451062][T15100] blkdev_ioctl+0x5ad/0x6f0 [ 252.451071][T15100] ? __pfx_blkdev_ioctl+0x10/0x10 [ 252.451080][T15100] ? selinux_file_ioctl+0x139/0x290 [ 252.451091][T15100] ? selinux_file_ioctl+0xb4/0x290 [ 252.451102][T15100] ? __pfx_blkdev_ioctl+0x10/0x10 [ 252.451111][T15100] __x64_sys_ioctl+0x18e/0x210 [ 252.451126][T15100] do_syscall_64+0x106/0xf80 [ 252.451137][T15100] ? clear_bhb_loop+0x40/0x90 [ 252.451148][T15100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.451159][T15100] RIP: 0033:0x7fa9ba59c799 [ 252.451169][T15100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.451180][T15100] RSP: 002b:00007fa9bb412028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.451190][T15100] RAX: ffffffffffffffda RBX: 00007fa9ba816090 RCX: 00007fa9ba59c799 [ 252.451196][T15100] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 252.451202][T15100] RBP: 00007fa9ba632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 252.451208][T15100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.451214][T15100] R13: 00007fa9ba816128 R14: 00007fa9ba816090 R15: 00007ffc4ba2e8e8 [ 252.451224][T15100] [ 252.634864][T15100] nbd4: detected capacity change from 0 to 112 [ 252.647246][T11635] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.650235][T11635] Buffer I/O error on dev nbd4, logical block 0, async page read [ 252.652731][T11635] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.655678][T11635] Buffer I/O error on dev nbd4, logical block 0, async page read [ 252.658110][T11635] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.661071][T11635] Buffer I/O error on dev nbd4, logical block 0, async page read [ 252.663500][T11635] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.666444][T11635] Buffer I/O error on dev nbd4, logical block 0, async page read [ 252.668874][T11635] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.671870][T11635] Buffer I/O error on dev nbd4, logical block 0, async page read [ 252.674307][T11635] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.677534][T11635] Buffer I/O error on dev nbd4, logical block 0, async page read [ 252.680305][T11635] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.683302][T11635] Buffer I/O error on dev nbd4, logical block 0, async page read [ 252.685958][T11635] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.695871][T11635] Buffer I/O error on dev nbd4, logical block 0, async page read [ 252.703970][T11635] ldm_validate_partition_table(): Disk read failed. [ 252.706257][T11635] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.711629][T11635] Buffer I/O error on dev nbd4, logical block 0, async page read [ 252.714417][T11635] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.717521][T11635] Buffer I/O error on dev nbd4, logical block 0, async page read [ 252.720206][T11635] Dev nbd4: unable to read RDB block 0 [ 252.722130][T11635] nbd4: unable to read partition table [ 252.734441][T11635] ldm_validate_partition_table(): Disk read failed. [ 252.736804][T11635] Dev nbd4: unable to read RDB block 0 [ 252.738702][T11635] nbd4: unable to read partition table [ 252.922512][ T6011] usb 10-1: usb_control_msg returned -71 [ 252.924423][ T6011] usbtmc 10-1:16.0: can't read capabilities [ 252.930990][ T6011] usb 10-1: USB disconnect, device number 5 [ 252.933826][ T46] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.975950][ T59] usb 5-1: USB disconnect, device number 42 [ 253.018062][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 253.030893][ T46] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.116511][ T46] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.265164][ T46] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.357715][ T46] bridge_slave_1: left allmulticast mode [ 253.360178][ T46] bridge_slave_1: left promiscuous mode [ 253.362225][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.460079][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.464707][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.468217][ T46] bond0 (unregistering): Released all slaves [ 253.765913][ T46] hsr_slave_0: left promiscuous mode [ 253.768164][ T46] hsr_slave_1: left promiscuous mode [ 253.770157][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.772789][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.775807][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.778291][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.782407][ T46] veth1_macvtap: left promiscuous mode [ 253.784241][ T46] veth0_macvtap: left promiscuous mode [ 253.786246][ T46] veth1_vlan: left promiscuous mode [ 253.787992][ T46] veth0_vlan: left promiscuous mode [ 253.839226][ T46] team0 (unregistering): Port device team_slave_1 removed [ 253.843860][ T46] team0 (unregistering): Port device team_slave_0 removed [ 254.126778][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 254.399544][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.492276][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.545922][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.609278][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.708903][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.759126][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.833981][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.898843][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.002970][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.071273][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.134212][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.225793][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.235433][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 255.351880][ T46] bridge_slave_1: left allmulticast mode [ 255.354518][ T46] bridge_slave_1: left promiscuous mode [ 255.357023][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.361188][ T46] bridge_slave_0: left allmulticast mode [ 255.363808][ T46] bridge_slave_0: left promiscuous mode [ 255.366321][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.370567][ T46] bridge_slave_1: left allmulticast mode [ 255.372781][ T46] bridge_slave_1: left promiscuous mode [ 255.375472][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.379959][ T46] bridge_slave_0: left allmulticast mode [ 255.382417][ T46] bridge_slave_0: left promiscuous mode [ 255.385148][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.389911][ T46] bridge_slave_1: left allmulticast mode [ 255.392285][ T46] bridge_slave_1: left promiscuous mode [ 255.394381][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.398646][ T46] bridge_slave_0: left allmulticast mode [ 255.401253][ T46] bridge_slave_0: left promiscuous mode [ 255.403800][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.547320][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.552548][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.557396][ T46] bond0 (unregistering): Released all slaves [ 255.642182][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.646877][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.651805][ T46] bond0 (unregistering): Released all slaves [ 255.803352][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.808427][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.813275][ T46] bond0 (unregistering): Released all slaves [ 255.817584][ T46] bond1 (unregistering): Released all slaves [ 256.344159][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 256.506505][ T46] hsr_slave_0: left promiscuous mode [ 256.509345][ T46] hsr_slave_1: left promiscuous mode [ 256.512405][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.516065][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.519573][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.522732][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.552177][ T46] hsr_slave_0: left promiscuous mode [ 256.554941][ T46] hsr_slave_1: left promiscuous mode [ 256.557683][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.560743][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.566129][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.570189][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.575724][ T46] hsr_slave_0: left promiscuous mode [ 256.581489][ T46] hsr_slave_1: left promiscuous mode [ 256.583880][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.586298][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.588994][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.592406][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.603389][ T46] veth1_macvtap: left promiscuous mode [ 256.605852][ T46] veth0_macvtap: left promiscuous mode [ 256.608293][ T46] veth1_vlan: left promiscuous mode [ 256.610761][ T46] veth0_vlan: left promiscuous mode [ 256.613816][ T46] veth1_macvtap: left promiscuous mode [ 256.616256][ T46] veth0_macvtap: left promiscuous mode [ 256.618785][ T46] veth1_vlan: left promiscuous mode [ 256.621235][ T46] veth0_vlan: left promiscuous mode [ 256.624104][ T46] veth1_macvtap: left promiscuous mode [ 256.626520][ T46] veth0_macvtap: left promiscuous mode [ 256.628693][ T46] veth1_vlan: left promiscuous mode [ 256.630408][ T46] veth0_vlan: left promiscuous mode [ 256.735120][ T46] team0 (unregistering): Port device team_slave_1 removed [ 256.739556][ T46] team0 (unregistering): Port device team_slave_0 removed [ 256.796496][ T46] team0 (unregistering): Port device team_slave_1 removed [ 256.800845][ T46] team0 (unregistering): Port device team_slave_0 removed [ 256.856119][ T46] team0 (unregistering): Port device team_slave_1 removed [ 256.860830][ T46] team0 (unregistering): Port device team_slave_0 removed [ 257.463399][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 258.572049][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 259.670095][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 260.778874][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 261.887398][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available