last executing test programs: 7m13.500089479s ago: executing program 32 (id=148): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="40010000100013040000000000000000e0000001000000000000000000000000ac1414bb000000000000000000000000000000004e2400000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc0000000000000000000000000000000000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004ac600000000000000000000ffff00000800000000020000000000000000000000000000000000000800000000000000cc00000000000000000000000000000005000000000000000000000000000000000000000a00010100000000000000004f001200726663343330392863636d28616573292900000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001800000080"], 0x140}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 7m7.524677081s ago: executing program 33 (id=55): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) clock_getres(0x5, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbd725250000000e0001006e657464657673696d0000000f0002006e657464657673696d3076e008008b00", @ANYRES32=r0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 6m25.974266816s ago: executing program 34 (id=761): syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[], 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177304c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b104185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x1f, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000006f00fec0ffff00000000000000ff0bc0fe000000000000000002000002d9a0274500040000000013eaf40000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 4m49.292080942s ago: executing program 35 (id=2274): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0xf8, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 4m34.727287236s ago: executing program 36 (id=2479): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x7f9f, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x2) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @rose}, [@remote, @bcast, @rose, @default, @bcast, @default, @bcast, @netrom]}, &(0x7f0000000080)=0x48, 0x400) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000200)={{}, 'port1\x00'}) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000180)=0x6, 0x4) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x0, 0x6, 0x8, &(0x7f0000000000)={0x10, "e922604a455494c905fd8208ff08000000000000000000000000080800"}}) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)=0x100) close(r3) 4m8.820135201s ago: executing program 37 (id=2895): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000001080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103004d07000640975ecc0014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x404c8c1) close(0x3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 4m0.361859274s ago: executing program 9 (id=3095): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="40010000100013040000000000000000e0000001000000000000000000000000ac1414bb000000000000000000000000000000004e2400000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc0000000000000000000000000000000000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004ac600000000000000000000000000000800000000020020000000000000000000000000000000000800000000000000cc00000000000000000000000000000005000000000000000000000000000000000000000a00010100000000000000004f001200726663343330392863636d28616573292900000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001800000080"], 0x140}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 4m0.288877605s ago: executing program 9 (id=3098): write(0xffffffffffffffff, &(0x7f0000000000)="2e0000000100", 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) syz_open_dev$radio(0x0, 0x2, 0x2) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = dup(r2) ioctl$KVM_HAS_DEVICE_ATTR_vm(r3, 0x4018aee3, &(0x7f0000000680)=@attr_other={0x0, 0x9, 0x3, 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x78bd27, 0xf0, {0x0, 0x0, 0x0, r1, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x841}, 0x0) 4m0.286790983s ago: executing program 9 (id=3101): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x10a80, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c36"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r2, 0x4802, 0xd83) r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f00000000c0)={'security\x00', 0x0, [0xfffffffb, 0x3, 0x7, 0x2, 0x4]}, &(0x7f0000000000)=0x54) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000080)={0x20, 0x1, &(0x7f0000000040)="ec", 0x8, 0xeb3}) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f0000000ac0)={0x1, 0x0, @raw_data=[0xdc, 0x8000, 0x7f, 0x3c000, 0x80, 0x2, 0x8, 0x2, 0x6d, 0x7, 0x97, 0x7fffffff, 0x1000, 0x0, 0x2]}) 3m58.291912828s ago: executing program 9 (id=3118): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x4fe}, 0x8) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000080)=0x437, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r1, &(0x7f00000000c0)='@-.(#]\')\x00', 0x200000, &(0x7f0000000100)={@_ha_fsid={[0xa, 0x9]}, {0x7, 0x5, 0xd, 0x2}}, 0x80000001, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0xd}) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_getrule={0x1c, 0x22, 0x1, 0x70bd29, 0x25dfdbff, {0x2, 0xc4, 0x0, 0x3, 0x6, 0x0, 0x0, 0x6, 0x10000}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x4) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x10b200, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0\x00'}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)={'U+'}, 0x16, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000000440)={0x1, 0x6, 0x1, 'queue0\x00', 0x1}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r5) getpeername$packet(r3, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000005c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xbd, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x6a, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000900)={0x0, @loopback}, &(0x7f0000000940)=0xc) getsockname$packet(r3, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000009c0)=0x14) getsockname$packet(r5, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a40)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000b80)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0x94, r6, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffff03}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40844}, 0x48000) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000c00)=0x0, &(0x7f0000000c40)=0x4) sendmsg$nl_route(r3, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NHA_OIF={0x8, 0x5, r8}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r12}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004010) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000d80)={0x2, [0x0, 0x0]}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)=@setlink={0x28, 0x13, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r8, 0x40280, 0x20008}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000ec0)={'batadv_slave_0\x00', 0x0}) setsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000f00)={@loopback, @remote, r14}, 0xc) r15 = socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x10, r15, 0x4a4e000) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r5) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x20, r16, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x5b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x84) accept4$unix(r3, 0x0, &(0x7f0000001080), 0x80000) 3m58.134489167s ago: executing program 9 (id=3119): mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176653d7374617469633a392c0095f63b71e322fd29c54054c89d3fc94b833f4d85306c683dc4ca2de0ea0a5e5ba852d33ae4e20ec1c6ac8fa2017b1d4bf658eb803fb124060d19023a5c770dd9b1e7ddf286178fd23289db7ec7a526783c2632e41004d2942dc4d21d8cf260cea259043d1ec6937a7584a590b43544861ff8edc916a1407fd5454c04683fe8a369841bad2ccfc7a78e525455a80e9002be6ff2f5b155f00d054d23f7221470ea7690ab6cbc6ff79238f1ea21cca0139db72a44358f1405609c7f08ba30732b10f88914824016a67cf5eb36830c91867ae32ac8653d1af5cdb8e2b22a1c549e8860d4c2b62aee7d91c9559694138802d0a20db878858b2f2c34f751a119c2eb408fa6caa9bcf3688c7e440a5ae622120481bd7fba31742d2b"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) landlock_restrict_self(r0, 0xe) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"]) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) (async) landlock_restrict_self(r0, 0xe) (async) 3m58.057736739s ago: executing program 9 (id=3120): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 3m42.7632871s ago: executing program 38 (id=3120): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 2m51.911259727s ago: executing program 6 (id=4243): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0x7, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101042, 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x20010, r2, 0xca29e000) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000002000006000000000000", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r1, 0x0, 0x0) fchdir(r6) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000000080)={0x2001080, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000ad00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) mprotect(&(0x7f0000224000/0x3000)=nil, 0x3000, 0x200000d) getsockopt$MRT6(r6, 0x29, 0xcf, &(0x7f0000000180), &(0x7f00000002c0)=0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendfile(r7, r0, &(0x7f0000000100)=0x8000000000000001, 0x3) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000080)=0x1b85, 0x4) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 2m51.713534433s ago: executing program 6 (id=4248): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x9, 0x103) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000000)={0x0, 0x7b00a80b, 0x1, [0x2, 0x8, 0x0, 0x6, 0xf], [0x109, 0x81, 0x0, 0x0, 0x6, 0x3, 0x6, 0xe4, 0x5f1, 0xff, 0x3, 0x1, 0xffffffff, 0x6, 0x4, 0xffffffff, 0x9, 0x4, 0x7, 0x7, 0x6, 0x6, 0x2, 0xe15, 0xad, 0xfffffffffffffffe, 0x6, 0xcdd7, 0x2, 0x7, 0x0, 0x3ff, 0x1, 0x8, 0x7, 0x80000000, 0x8, 0x6, 0x4d1f, 0xa, 0xfffffffffffffff0, 0x5, 0x1000000000000000, 0x5c, 0x6, 0x3ff, 0xa, 0x0, 0x4, 0xffffffffffffffff, 0x8, 0x2, 0x6, 0x1, 0x5, 0x80, 0x0, 0x9, 0x3ff, 0x8, 0x7fffffff, 0x8, 0x0, 0x9, 0x2, 0x1, 0x3147, 0x79c, 0x9, 0x4, 0xa18, 0x1, 0x6, 0x8, 0x1, 0x9, 0x4, 0x0, 0xfffffffffffffffa, 0xbf0b72b, 0x18, 0x4, 0x93f8, 0xffff, 0x800, 0xa06a, 0x2, 0x0, 0x461e, 0xb05, 0x3, 0x1, 0x4, 0xa, 0xfffffffffffffff8, 0x8, 0x2, 0xfffffffffffffff7, 0x6, 0x4, 0x0, 0x1, 0x22f, 0x6, 0x3, 0x0, 0x800, 0xfffffffffffffff6, 0x800000000, 0xf42b, 0x75, 0x3, 0x9, 0x1, 0xf0, 0x6, 0x8001, 0x7, 0x6, 0x8, 0xaf]}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r2, r3, 0x3, 0x1800, 0xffffffff, 0x7f, {0x7, 0x1, 0x3, 0x64, 0xf4b, 0x1, 0x1002, 0x5, 0x1, 0xc154, 0x1000, 0x9e8686b, 0x6, 0xffffffff, "fe3d00003413000000000020b42717e47f00"}}) listen(r0, 0x90004) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000001580)={&(0x7f0000001500)=[0x0], &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, r2, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000001840)={&(0x7f00000017c0)=[0x0, 0x0, 0x0], &(0x7f0000001800)=[0x0], 0x3, r2, 0xfbfbfbfb}) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) accept(r0, &(0x7f0000000280)=@can, 0x0) 2m51.63417319s ago: executing program 6 (id=4249): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x3ff}, 0xc) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xf, &(0x7f0000000300)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x710}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func, @call={0x85, 0x0, 0x0, 0x35}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010029bd8c00fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="331900000300000014001680100001800c0009000180000000000000050021"], 0x3c}}, 0x4000000) 2m51.633774417s ago: executing program 6 (id=4250): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) (async) r2 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x101220, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000200)={0x100, r3}, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x100, r4}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x42, 0x5}, 0x4) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x14, 0x30, 0x871a15abc695f91d, 0x0, 0x80000}, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) (async) unshare(0x2c020400) (async) mount$bind(&(0x7f0000002380)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x29101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x200, 0xf, 0x5, 0xfffffffe}]}, 0x10) read$FUSE(r7, &(0x7f0000002740)={0x2020}, 0x2020) (async) r8 = socket$kcm(0x10, 0x2, 0x0) (async) r9 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x1e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r8, 0x8983, &(0x7f0000000640)={0x6, 'ip6erspan0\x00', {0x2}, 0x8}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 2m51.562657299s ago: executing program 6 (id=4253): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000001000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001000200"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 2m51.373924134s ago: executing program 6 (id=4259): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x1, 0x1, 0x1, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x6, 0xffffffffffffffff], 0x8000000, 0x80a05}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x6a040000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x2031, 0x80000}, [@IFLA_GROUP={0x8}]}, 0x10}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 2m51.281102951s ago: executing program 39 (id=4259): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x1, 0x1, 0x1, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x6, 0xffffffffffffffff], 0x8000000, 0x80a05}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x6a040000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x2031, 0x80000}, [@IFLA_GROUP={0x8}]}, 0x10}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 2m17.481570814s ago: executing program 3 (id=4531): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50, 0x0, r3, {0x7, 0x2d, 0x7, 0x4001, 0x3, 0x3be, 0xfff00000, 0x1, 0x0, 0x0, 0x80}}, 0x50) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0xaaaaaaaaaaaa8ef, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000040)={[0x8000100004000000, 0x200000000027c, 0x91, 0x1, 0x7, 0x9, 0x7fffffff, 0x3f9, 0x461baae3, 0xffffffffffffffff, 0x400005b, 0x6, 0x0, 0x101, 0x7], 0xeeee0000, 0x1412}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000340)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m16.961643211s ago: executing program 3 (id=4533): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES16=r0], 0x8c}}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="66b820018ec06726650f01f60f3266b8fa008ec8420fb96e010f20c035020000000f22c0c4417dd7cc67440fc731c42149e9b500000000b805000000b9000000000f01c1", 0x44}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m16.741543869s ago: executing program 3 (id=4543): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0xaaaaaaaaaaaa8ef, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x8000100004000000, 0x200000000027c, 0x91, 0x1, 0x7, 0x4, 0x7fffffff, 0x3f9, 0x461baae3, 0xffffffffffffffff, 0x400005b, 0x6, 0x0, 0x101, 0x7], 0xeeee0000, 0x1412}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000040)=0x8bc7) 2m13.919766386s ago: executing program 3 (id=4546): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006000806"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0xf27, 0x80000000, 0x2, 0xa, 0xe, 0x5, 0x8, 0x3, 0x8, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x100007, 0x101, 0xfffffffe, 0x7f, 0x3, 0x40000003, 0x89, 0xca9f, 0x0, 0x20001e58, 0xffffffff, 0xe66, 0x3, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@loopback}, 0x14) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) write$qrtrtun(r3, &(0x7f0000000400)="b30e9e3901a0dabbc53337a53ad1cc4fc388055c0500f3b026f8900271c4b3b7b49af0fef5cc1f78a7738fea3d915c095bc57177595fe6d55044dcd23ed3612f7fb3e8bcaf53064a5f14ad4bb5d2b7bcce4157151aa5f8db253d25eb6aeb8add7c8e8a854cf391da7c6e440122656a73e32fc958a2b7037e74e82ec3c02cf345b4e7a8ddbef056e13b6c19dac6f824aa35b72f41135a630ca7cc1f2bbe9e3d7afb7a116dfb0000", 0xa7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000003c0)={@remote}, 0x14) 2m13.862247991s ago: executing program 3 (id=4550): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r1 = socket$can_bcm(0x1d, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='gfs2\x00', 0x0, &(0x7f0000000380)='acl') (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@nr_inodes={'nr_inodes', 0x3d, [0x30]}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) (async) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) (async) sendmsg(r1, &(0x7f0000000480)={&(0x7f00000002c0)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)="5e13c067fda532806dedbb1444939e1bfa3010f2747e9fc4cdb2860a0e23143e9c597be51839ec623182b08e2df6573efb0a7528a851570affe61b9ab6", 0x3d}, {&(0x7f0000000200)}], 0x2, &(0x7f00000003c0)=[{0xc0, 0x1b, 0x1, "c5ce64b2b39bcf771198a77c3bdec0763b6230178a45bc9bde4a81531efc98fd2d144356ac2450b79766a63c35492835b2304aee6fc256fe7af3fd58d5e0d4b418b42e4e29a3fb802b4083fb0cbb043845ba7ebb8bbf82ee328d11d898b1ccfb8d040abfbb5ce3f089a53411e509f1a2fc83182e1a9ad4d800d1adc3fb28fcaf3ddc6cf1c543788a5cdd348efc813d45bab021ec468de670da3dccad0efce4ae72b1f098889771f3f9c283818462c8"}], 0xc0}, 0x800) (async) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000040000c00101000097f09e07b3f670a1"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 2m13.503439588s ago: executing program 3 (id=4556): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x2) r4 = dup(r1) write$UHID_INPUT(r4, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x8, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xabb7}, 0x1c) 2m13.407830406s ago: executing program 40 (id=4556): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x2) r4 = dup(r1) write$UHID_INPUT(r4, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5de00987f70e06d038e7ff7fc6e5539b0d650e8b089b3f353b68090890e0878f0e1ac6e7049b3b43959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8041800005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x8, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xabb7}, 0x1c) 1m34.583163323s ago: executing program 1 (id=4948): mkdirat(0xffffffffffffff9c, 0x0, 0x2d) (async) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x18) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000140)={0x3, 0x30, '\x00', 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0x1, 0x1) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f00000005c0)={0x7, &(0x7f00000004c0)=[{0x6, 0x1000, &(0x7f0000000d00)="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", 0x1, 0x1}, {0x3, 0x1000, &(0x7f0000001d00)="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"}, {0x10001, 0x4a, &(0x7f0000000180)="2c53b0c6df229ffd17243903376891257c0834991b3fe78b7076ce847b4b1e4ed5d6ab5c0c0d1322301babababeb9960aff7199c834c65eeea396d3c347d11593c1a083d397e1826d98a", 0x1}, {0x7ff, 0x3e, &(0x7f0000000280)="b76089051b632aecaef86ac5d127090a821220f8506a189a339b8d8ddf8142e92d307b6eb3aa5bf5c3b44133c5c638dcd580a4a2417c7c8b7bba9524ccfe", 0x0, 0x1}, {0xffff, 0x48, &(0x7f0000000300)="c1cfa203e8e9316d280b7efb5383ca6a0f3744107d9c6b3fd5c46b3809bf4dc9cb28aa51eda1b286da0a57809c9882d114145d5c95c02e37143a9a6944429be3de849b21031a3c85", 0x1, 0x1}, {0xffffffd2, 0xd7, &(0x7f0000000380)="e6e0d8acb0122f7be21c8c580f20bce945a8b33d0f21ad75b4cb095acecb0f9e50404297d6b910e3412ec18783a12b4b84e447137db43b40e8edda1eeb1fa23299266b7bbc65e9a5e4409bff548361995c0eb512f5322210832382dddbee4b2346682c3bad0144fa0111f9f7a04c2ff06d7414f6e09737549eeddcb4719a2fd9cae9933a404f5c2a3d00f6b062dcf90b31d675372c3cb72423fc8265b8e9582d8ec45ee5e4f0d294bf4aa87865788a9303dbf45c2f2ba63f3ef1f0a47f076325657eb93b75c4103b7840fb2a0e6bc30db639ac1d5e4816", 0x0, 0x1}, {0x1, 0x0, &(0x7f0000000480), 0x1, 0xec78417cc921609}]}) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) (async) unshare(0x62040200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1m34.44336117s ago: executing program 1 (id=4949): execve(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)={[&(0x7f0000000080)='/dev/nullb0\x00', &(0x7f0000000100)='$&$\'\\%\x00']}, &(0x7f0000000280)={[&(0x7f00000001c0)='{^^$(\x00', &(0x7f0000000200)='ufs\x00', &(0x7f0000000240)='=\x00']}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ufs\x00', 0x200000, 0x0) 1m34.442188953s ago: executing program 1 (id=4950): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @remote, 0x4e24, 0x1, 'none\x00', 0xd, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x7, 0x12d5c}}, 0x44) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m34.283160005s ago: executing program 1 (id=4951): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000500)={0x3ff, 0x0, 0x4, {0x9, @raw_data="e63e09b33e64369d8dae60e1e6e735d73f64ea1b51edd82d923da428ca836d3295d0c9b12d3bb819c276dfe5003698b901165421f38b48f2e58e6d50f68960de10a1d05064227456803708d41adaff2023ccc507000000b81433647f5d5aee7df2e720448f2fbfc7684178ad817581d3180327796bbec48401556e4429464b7514dcc765288d05c22b02aec6e7cf0e0991b0d8c7bae62d5c2c67542265f7197d9d534aa3f543e7563ccc4bd3e3e7f137e4fd5538e16f7aa9f3b545ae927ed6afc98f34332d0d43d7"}, 0x9}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0) 1m34.283037967s ago: executing program 1 (id=4952): syz_open_procfs(0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_emit_vhci(&(0x7f0000003940)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "137ca0", 0x3}}}, 0xd) 1m33.973551868s ago: executing program 1 (id=4953): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="40010000100013040000000000000000e0000001000000000000000000000000ac1414bb000000000000000000000000000000004e2400000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc0000000000000000000000000000000000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004ac600000000000000000000000000000800000000020000000000000000000000000000000000000800000000000000cc00000000000000000000000000000005000000000000000000000000000000000000000a00010100000000000000004f001200726663343330392863636d28616573292900000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001800000080"], 0x140}, 0x1, 0xe00, 0x0, 0x20000004}, 0x0) 1m33.908038983s ago: executing program 41 (id=4953): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="40010000100013040000000000000000e0000001000000000000000000000000ac1414bb000000000000000000000000000000004e2400000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc0000000000000000000000000000000000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004ac600000000000000000000000000000800000000020000000000000000000000000000000000000800000000000000cc00000000000000000000000000000005000000000000000000000000000000000000000a00010100000000000000004f001200726663343330392863636d28616573292900000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001800000080"], 0x140}, 0x1, 0xe00, 0x0, 0x20000004}, 0x0) 1m29.399769741s ago: executing program 5 (id=5007): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'das16m1\x00', [0xa3fb, 0x5, 0x29, 0x4, 0xb4, 0xcc5, 0x8, 0x68d, 0x8, 0xe, 0x7ff, 0xffffffff, 0x1, 0x1, 0x8029, 0x80, 0x7, 0x1a449, 0x9, 0x40800003, 0x8b, 0xcaa9, 0x0, 0x20001e58, 0x4bd, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) r4 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000500), 0x12) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @multicast1}, 0x10) 1m29.312988855s ago: executing program 5 (id=5010): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) (async) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r6 = dup(r5) (async) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) (async) r7 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r8, r8, 0x0) (async) fcntl$setlease(r7, 0x400, 0x0) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r6}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r1, 0x0, 0x6) fchdir(r9) (async) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r10, 0xffffffffffffffff, 0x0) (async) r11 = msgget$private(0x0, 0x193) msgsnd(r11, &(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x8, 0x0) (async) msgrcv(r11, &(0x7f0000001240)={0x0, ""/147}, 0x9b, 0x3, 0x2000) msgctl$IPC_RMID(r11, 0x0) r12 = socket$unix(0x1, 0x2, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r13, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3c}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10058084}, 0x20004000) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r13, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x31, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2008008}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x94, r13, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f40000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]]}, 0x94}}, 0x40005) 1m29.233060946s ago: executing program 5 (id=5013): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0xf, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="480000001000010027bd7000fbd9dfa500000000", @ANYRES32, @ANYBLOB="104e0600d5ba2259280012800900010076657468000000001800028014000100000000000206e9b43d"], 0x7c}, 0x1, 0x0, 0x0, 0x404c000}, 0x2) 1m29.183322279s ago: executing program 5 (id=5014): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f0000000200)='./file0/file0\x00', 0x190) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)={0x18, 0x76, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}]}, 0x18}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x3, 0x3, 0x3, 0x0, 0xa, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x4}, 0x94) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=""/141) 1m27.317633367s ago: executing program 5 (id=5017): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYRESOCT], 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = semget$private(0x0, 0x4, 0x29b) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x108}, 0x476d, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb}) r3 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x2b2b, 0x400, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000640)=""/4096, 0x1000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4000}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xb3, 0xb8, 0xd4, 0x40, 0x11ba, 0x1001, 0xec57, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x19, 0xb0, 0x13, [{{0x9, 0x4, 0x4e, 0x3, 0x0, 0x4d, 0x6b, 0xe7, 0xca}}]}}]}}, 0x0) getsockopt(r7, 0x200000000114, 0x271e, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x4}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz0\x00'}}, @CTA_NAT_DST={0x4}]}, 0x4c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6}}, [@NFT_MSG_NEWFLOWTABLE={0x64, 0x16, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x70, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xfc}, 0x1, 0x0, 0x0, 0x1050}, 0x4001) 1m27.201841917s ago: executing program 5 (id=5020): r0 = socket(0x9, 0x6, 0x100000d) setsockopt$sock_timeval(r0, 0x1, 0x4b, &(0x7f0000000040)={0x0, 0x2710}, 0x10) 1m27.10902456s ago: executing program 42 (id=5020): r0 = socket(0x9, 0x6, 0x100000d) setsockopt$sock_timeval(r0, 0x1, 0x4b, &(0x7f0000000040)={0x0, 0x2710}, 0x10) 54.730286248s ago: executing program 0 (id=5405): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) 54.730098093s ago: executing program 0 (id=5406): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0xffff, 0x8, 0x7, 0x8000000000000001, 0x40, 0x0}) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x3) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) (async) preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0xd, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYBLOB="9bb2b8e5a1dfe7683138cf831d5f89738d56faee9713eac492bbcff224333c240248afa57320f7a657272a6b9e5e9d0eec03045f95e848d3c64dbdc22835b24f4d5cd1f3ac50c6c4a7b5a90e2ed963bc6b23544d516ec87f2b0833c2bb819ef770d4aa2780f7a2b1a73eb8c445d9e839196db184f6d40e5b482f482d6f52ba3a6ff53312de8361f7eba8ec73244d916680d0dc69995dd77e00547840422ef20b1845c00428eaf043cfc1f8967e5a8558", @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x9}, 0x94) 54.661685653s ago: executing program 0 (id=5407): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000001400078008000840000000000800174000000004050005000a000000050001000700000005000400000000000900020073513d31000000000d0003006c6973743a736574"], 0x5c}}, 0x20008184) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f00000001c0)={0x5, @raw_data="7be854c3419e9ee1a2f632adac63f1254845aa6ab2202650aae48c794214d91bf0483c168d64ca79c34743392d972a8770009a6b6bf7b793d2de7dd21eb326308e9293bb8f35679722e9eaf987c4790984d814851563b2f206a0a225fbd06d156e8b2c9b0a1dbf6120aa5108af4e03ede05286d963420f7cb9186a96405b6b01964439c3da4b81d67383b74390e716af1616d7d94692cc29f1c31089658971dee3a0e796e9debcea5498ddfa10d88e8de36d308035786b440111343f8f1de2a2dc60588927914531"}) (async) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f00000001c0)={0x5, @raw_data="7be854c3419e9ee1a2f632adac63f1254845aa6ab2202650aae48c794214d91bf0483c168d64ca79c34743392d972a8770009a6b6bf7b793d2de7dd21eb326308e9293bb8f35679722e9eaf987c4790984d814851563b2f206a0a225fbd06d156e8b2c9b0a1dbf6120aa5108af4e03ede05286d963420f7cb9186a96405b6b01964439c3da4b81d67383b74390e716af1616d7d94692cc29f1c31089658971dee3a0e796e9debcea5498ddfa10d88e8de36d308035786b440111343f8f1de2a2dc60588927914531"}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[], 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400da88b557010000000000000000000000000a38001000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a3000000000140000001100010000000000000000000000000a"], 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x80, 0x0) (async) splice(r4, 0x0, r5, 0x0, 0x80, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x8000, 0x20, 0xde8, 0xfff, {{0x28, 0x4, 0x2, 0x37, 0xa0, 0x67, 0x0, 0x5, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x7, 0x98, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x3c, 0xe0, 0x3, 0xf, [{@loopback, 0x1}, {@rand_addr=0x64010101, 0xa9e2}, {@loopback, 0xfffffffc}, {@empty, 0x8}, {@multicast1, 0x7f}, {@loopback, 0x7}, {@multicast1, 0x6}]}, @lsrr={0x83, 0x13, 0x4, [@loopback, @rand_addr=0x64010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x1f, 0xb4, [@local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @rand_addr=0x64010102, @empty, @dev={0xac, 0x14, 0x14, 0x4}]}, @timestamp={0x44, 0x8, 0x57, 0x0, 0x1, [0xffff9bf5]}, @timestamp_addr={0x44, 0xc, 0x3c, 0x1, 0x8, [{@remote, 0x4}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x8000, 0x20, 0xde8, 0xfff, {{0x28, 0x4, 0x2, 0x37, 0xa0, 0x67, 0x0, 0x5, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x7, 0x98, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x3c, 0xe0, 0x3, 0xf, [{@loopback, 0x1}, {@rand_addr=0x64010101, 0xa9e2}, {@loopback, 0xfffffffc}, {@empty, 0x8}, {@multicast1, 0x7f}, {@loopback, 0x7}, {@multicast1, 0x6}]}, @lsrr={0x83, 0x13, 0x4, [@loopback, @rand_addr=0x64010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x1f, 0xb4, [@local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @rand_addr=0x64010102, @empty, @dev={0xac, 0x14, 0x14, 0x4}]}, @timestamp={0x44, 0x8, 0x57, 0x0, 0x1, [0xffff9bf5]}, @timestamp_addr={0x44, 0xc, 0x3c, 0x1, 0x8, [{@remote, 0x4}]}]}}}}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (async) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) (async) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r9, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) ioctl$HIDIOCGNAME(r9, 0x80404806, &(0x7f0000000080)) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006b", 0xc, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@bridge_delvlan={0x18, 0x71, 0x200, 0x70bd2a, 0x25dfdbff, {0x7, 0x0, 0x0, r6}}, 0x18}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@bridge_delvlan={0x18, 0x71, 0x200, 0x70bd2a, 0x25dfdbff, {0x7, 0x0, 0x0, r6}}, 0x18}}, 0x0) 54.562580126s ago: executing program 0 (id=5408): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88b02, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1a) (async) creat(&(0x7f0000000040)='./file0\x00', 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x100, r1, &(0x7f0000000100)="0000fd6000000000", 0x8, 0x3}]) io_destroy(r0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/548, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x230) (async) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/548, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x230) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) syz_open_dev$evdev(&(0x7f00000005c0), 0x7fffffffffffffff, 0x10000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280), 0x106, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000240)=0x7f, r3, 0x0, 0x0, 0x1}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000240)=0x7f, r3, 0x0, 0x0, 0x1}}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x54, r5, 0x1, 0x0, 0x0, {0x1d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x54, r5, 0x1, 0x0, 0x0, {0x1d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000580)={0x7, 0x8, 0xfa00, {r7, 0x2}}, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r6, @ANYBLOB="020025bd7000fbdbdf25050000005c000280080004000500000008000400d60100000800070000020000080006000700000008000400dcffffff1400010000000000000000000000000000000000080004000700000014000100fe8000000000000000000000000000bb0c00028008000300020000002800018014000300640101010000000000000000000000000600020087000000060004004e230028ed9df3713dfe996e6a181c3c00"], 0xa4}, 0x1, 0x0, 0x0, 0x4000040}, 0x4001) (async) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r6, @ANYBLOB="020025bd7000fbdbdf25050000005c000280080004000500000008000400d60100000800070000020000080006000700000008000400dcffffff1400010000000000000000000000000000000000080004000700000014000100fe8000000000000000000000000000bb0c00028008000300020000002800018014000300640101010000000000000000000000000600020087000000060004004e230028ed9df3713dfe996e6a181c3c00"], 0xa4}, 0x1, 0x0, 0x0, 0x4000040}, 0x4001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="460a0000000000007910b8000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 54.351199103s ago: executing program 0 (id=5412): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000100)={r2, 0x3, 0xffffffff, 0x6, &(0x7f00000000c0)=[{0x5, 0x2c, 0x7, 0x2}, {0x4, 0x9, 0x7ff, 0x3}, {0x9, 0x0, 0x3, 0x4}, {0x1, 0x6, 0x400, 0x3}, {0x5, 0xf, 0xa}, {0x101, 0xd18, 0xaae, 0x8d}]}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000001c0)={0x0, 0x0, 0x7, 0x2, &(0x7f0000000180)=[{0x40, 0x5, 0x0, 0x81}, {0x4, 0xb2e3, 0xff, 0x9}]}) r4 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x40800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) connect$nfc_llcp(r4, &(0x7f0000000280)={0x27, r5, 0x1, 0x5, 0x6c, 0x21, "4e0bc7c810f908ed59c80983c511b4c8daf18cd825c43467d46ce7a535f2daa4a01eaf4db5e152c1916c5f235f343fa359f9b98bb69d4dd17d02d9aa39e7f1", 0x5}, 0x60) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000300)={0x1, r1, 0xfffffffe, 0x4, 0x9, 0xf65e, 0x100, 0x0, 0x8001}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_NAPI(r6, 0x1b, &(0x7f0000000380)={0x100, 0x2}, 0x1) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1dc, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), r7) sendmsg$IPVS_CMD_SET_DEST(r8, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x7a07c3601877defa}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa0, r9, 0x2, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x78, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x1a}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x810}, 0x20040840) close(r0) ioctl$IOC_PR_PREEMPT(r7, 0x401870cb, &(0x7f0000000840)={0xfffffffffffffffa, 0x1, 0x4, 0x240000}) getsockopt$rose(r6, 0x104, 0x6, &(0x7f0000000880), &(0x7f00000008c0)=0x4) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r10, &(0x7f0000000a40)={&(0x7f0000000900), 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x50, r11, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x890}, 0x10004) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000b00)={0x0, 0x74, &(0x7f0000000a80)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e20, 0x3, @remote, 0x9}, @in6={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00', 0x80}, @in6={0xa, 0x4e24, 0xfffffffd, @private0, 0x8}, @in={0x2, 0x4e20, @empty}]}, &(0x7f0000000b40)=0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000b80)={r12, @in6={{0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}}}, 0x84) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000cc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r6, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r13, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x20004000) r15 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r15, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x34, 0x3ed, 0x20, 0x70bd28, 0x25dfdbfe, "2f0de636dd1b32d903b7d155fdcb4e9aafd252beaef1a981e10db9524800b6e736f137", ["", "", ""]}, 0x34}}, 0x4008001) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r0, 0xc0106450, &(0x7f0000000ec0)={r3}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000f00)={r16}) 53.071418086s ago: executing program 0 (id=5429): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000019400)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001240), 0x4000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) write(r2, 0x0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x34}}}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xfd}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x8}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xe}]}, 0x40}, 0x1, 0x0, 0x0, 0x881}, 0x880) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000001c0)={0x6, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000240)={r5, 0xa1}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f00000003c0)=0x7, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000440)={"0e20da00", 0x0, 0x6, 0x2, 0x0, 0x1, "f70000000000000000deffffff00", '\x00\x00\a\x00', "0300", "0001ffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0cdd42000000000000c20d00"]}) ioctl$CEC_TRANSMIT(r8, 0xc0386105, &(0x7f0000000040)={0x7, 0x1, 0x2, 0x3ae9, 0xc7, 0x4, "02f8ffff070000fbb4883d45f400", 0x8, 0xae, 0x6, 0x8, 0x2, 0x0, 0x40}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = ioctl$USERFAULTFD_IOC_NEW(r1, 0xaa00) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000001280)={0xaa, 0x1bd}) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000001380)={0xe, 0x3, 0xfffffffe, 0xffffffff, &(0x7f00000012c0)=[{}, {}, {}]}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r9) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="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", @ANYRES16=r11, @ANYBLOB="010029bd7000fedbdf254400000008000300", @ANYRES32=r12, @ANYBLOB="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"], 0x6a8}, 0x1, 0x0, 0x0, 0x2000c050}, 0x40) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000001200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000140)={0x50, r6, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x22, 0x24, [{0x6}, {0x6}, {0x6, 0x1}, {0x12, 0x1}, {0x30}, {0xb}, {0x2}, {0x24, 0x1}, {0x2}, {0x24, 0x1}, {0x24}, {0x6c}, {0x48, 0x1}, {0x1b, 0x1}, {0x60, 0x1}, {0x1, 0x1}, {0x9}, {0x24, 0x1}, {0x30, 0x1}, {0x48, 0x1}, {0x18}, {0xc, 0x1}, {0x48, 0x1}, {0x12}, {0x12}, {0x6, 0x1}, {0x26, 0x1}, {0x36, 0x1}, {0x5, 0x1}, {0x18, 0x1}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x44011}, 0x800) 52.998388048s ago: executing program 43 (id=5429): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000019400)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001240), 0x4000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) write(r2, 0x0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x34}}}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xfd}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x8}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xe}]}, 0x40}, 0x1, 0x0, 0x0, 0x881}, 0x880) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000001c0)={0x6, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000240)={r5, 0xa1}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f00000003c0)=0x7, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000440)={"0e20da00", 0x0, 0x6, 0x2, 0x0, 0x1, "f70000000000000000deffffff00", '\x00\x00\a\x00', "0300", "0001ffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0cdd42000000000000c20d00"]}) ioctl$CEC_TRANSMIT(r8, 0xc0386105, &(0x7f0000000040)={0x7, 0x1, 0x2, 0x3ae9, 0xc7, 0x4, "02f8ffff070000fbb4883d45f400", 0x8, 0xae, 0x6, 0x8, 0x2, 0x0, 0x40}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = ioctl$USERFAULTFD_IOC_NEW(r1, 0xaa00) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000001280)={0xaa, 0x1bd}) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000001380)={0xe, 0x3, 0xfffffffe, 0xffffffff, &(0x7f00000012c0)=[{}, {}, {}]}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r9) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="a80600009e94890da3e87024252478daff6c3190db78d87a039649b55a7c82a9b375c1f18ea5d656c3a25f6aea172fdca503ff010830573d13c7141dccac0b6f03cdc2649489184367365d5c063cc07c66792f35174be49ce51c111f9bb1cc993380df2c94959120d1484896b7b32150b5adb1c9633369dedc1176e9df49454554549223088d213a584d7adb5fc0501284ab735baae3b047937ae572a3fe84bb10851ed5b112e799c3f2396b8dc42555c62048b177d0077c1b58e2b514421b4e14b4aaed0d560e40481152ca07647c7821b1852d64b53a74af33f025e70eed581550322a16f9230962c75d63dfa6da2035aa6eeb5bfaf9953eb6634b8feadedc76478053e5cec762cb5d17db5116eba262239f5436141275c224c85cce511ef45d262b4753b6131b594aa13edb58e2c00eed6e175a08774627dcc180c198858ce6da5be723ade35673f759c200ace45127c6c0fac6378503ffb7f3880c4715daa48441769c7fe631b53f544f8927b92074280da89b6d577b9fe256e34678734b48339827bbe7cc991355b3f1e2a0e6b083aae5dd28fcb5ab561d27eed01ee45d7c", @ANYRES16=r11, @ANYBLOB="010029bd7000fedbdf254400000008000300", @ANYRES32=r12, @ANYBLOB="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"], 0x6a8}, 0x1, 0x0, 0x0, 0x2000c050}, 0x40) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000001200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000140)={0x50, r6, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x22, 0x24, [{0x6}, {0x6}, {0x6, 0x1}, {0x12, 0x1}, {0x30}, {0xb}, {0x2}, {0x24, 0x1}, {0x2}, {0x24, 0x1}, {0x24}, {0x6c}, {0x48, 0x1}, {0x1b, 0x1}, {0x60, 0x1}, {0x1, 0x1}, {0x9}, {0x24, 0x1}, {0x30, 0x1}, {0x48, 0x1}, {0x18}, {0xc, 0x1}, {0x48, 0x1}, {0x12}, {0x12}, {0x6, 0x1}, {0x26, 0x1}, {0x36, 0x1}, {0x5, 0x1}, {0x18, 0x1}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x44011}, 0x800) 16.191136617s ago: executing program 4 (id=5956): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000200)=[@in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e23, @private=0xa010102}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}], 0xa0) (async) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x10803, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2}}, './file0\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000340)={0x3, 'vcan0\x00', {0x6}}) (async) connect$bt_sco(r7, &(0x7f0000000380)={0x1f, @none}, 0x8) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000003c0)={0xf, 0xfffffff8, 0x48f, 0x80000000, 0x3}) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x84, r8, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x885}, 0x2) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r1, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5, 0x23}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004880) (async) nanosleep(&(0x7f0000000700)={0x0, 0x3938700}, &(0x7f0000000740)) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000013c0)={&(0x7f00000007c0)=@newtfilter={0xbe4, 0x2c, 0x304, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xb, 0xffff}, {0x9}, {0xd, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xb00, 0x2, [@TCA_MATCHALL_ACT={0x1c8, 0x2, [@m_ife={0x1c4, 0x2, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x8, 0x10000006, 0x1, 0xfffffff1}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x9, 0x6, 0x2, 0x80000000}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x2}, @TCA_IFE_METALST={0x3c, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xa8}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_PRIO={0x8, 0x3, @val=0x80}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x8}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x1000000a, 0x1000, 0x3}}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x3}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0xd1, 0x6, "7da78cb23b480f418c3f29ae74214705ab7849c403cacc7f409c170ae4f1f520afab262f0cc66eb88cc448169aa5476a14120b9229df40c3653aca9e213d43b84632308b0d45ef7a617a0408e47d1f7d4ed71055e222cac2e10b04efddf24073fd7d928faaa9e33d6c6260fd5512aa104411b176e3977ec3fdf37486d4812531a6ede16ab907170e6dce82c02a4796ba13a6e4940df52c3c1d76369d2973f25e843316d63fc6effe8a910540e9a424371267d590c0e85acae586f892b5ff45a0ea2a5f8f47f7c467baaaf50cdb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0xe}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xfff3}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xf}}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_ACT={0x520, 0x2, [@m_connmark={0x14c, 0x1f, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7c6, 0x9, 0xffffffffffffffff, 0x1, 0x7b8}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9a, 0xfffffff1, 0x5, 0xfffffffd, 0x8}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x800, 0xfffffffffffffff9, 0x38, 0x2}, 0x1}}]}, {0xc6, 0x6, "a8ade6f416c1e3fe6a112d0eba1be5a587f4b51b57e814a84ed425b70027999ddf84b7d45aa7c4ed64a03a014f5c91221c0ab3ff8498870b3b07c8e1854a413801280c3cb11256f9bd37bd3422ec75baeeb09900061706fbeeb958e132cb1e2d37e4b1df89b04105898e96aeffbef51493bdfe8b52db1e8fea21445f2ac8c527bd050277f48b41514e6ed4bfe3b5ce119c06b6293ffa97cc3f918b8e6faa132eb370d6a52e3879d5d3aed7b94c65176bbd62436bf5920bdd3ca214c72d5130f35b53"}, {0xc}, {0xc}}}, @m_skbmod={0xac, 0xf, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffff, 0x3, 0x8, 0x2, 0x7}, 0x10}}]}, {0x59, 0x6, "e22b0ffe6d4eba3b40827391ac0096c53a2401caaef4ade1c439f34a7aee822218107bf06c05bc5ca90e92e9f4967bf8dcf150edbc79c3d6a01a7ef790c46ed1b1f0fa952407bda8c204cf3928d6a745e50e8b7cb1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x94, 0x10, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x8001, 0xffffffffffffffff, 0x10000, 0x6}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}}]}, {0x17, 0x6, "881f5d77b8b261a53d369a55cc389f022feb6d"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0xf0, 0xd, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xd, 0x6, 0x5, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x30a, 0x1, 0x6, 0x8, 0x208}}, @TCA_DEF_DATA={0x7, 0x3, '{\xbb\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x11, 0x3, '/dev/net/tun\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffffb, 0xc870, 0x3, 0x7, 0x4}}, @TCA_DEF_DATA={0xb, 0x3, '\xed+/-.#\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x3a, 0x6, "5c4be60b89df5a1d252c3ec556a1fdc9287a4e7a8a0d7e577e0cc6e308b3eb79cde38c2d7737a63bb6214c603dea416bc38f246fc4e8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_csum={0x1a0, 0xb, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x356, 0x7, 0x7, 0x2, 0x10000}, 0x38}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x6, 0x1, 0x3}, 0x17}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x111bfbe5, 0x400, 0x7, 0x7, 0x3}, 0x1e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x416cc5c2, 0xb, 0x20000000, 0x4, 0x9}, 0x2a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x9, 0x10000000, 0x3}, 0x36}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x0, 0x1f3, 0xa0}, 0x9}}]}, {0xcb, 0x6, "f43f30a1736ceebd86a4311c877b4bc72b1496628f0b714eaa7dd80c0aa94d25ee39120df579b6ccea7ef664f93bdae610c70cd2a3d971416478b85001ee051e515f3f860b2dcaa1553d34ae06e61e3605cb8b2d799d742a4234bc1e61a1052634270f591a112df1ba05515a8fc0679c67936d6ba24c5bd6577e59f5be7dec365878370636b6fce54263db967ac4c82fba3a6b15206ec1fd832cfb0b3f40442cd873e711ab4db4603b4415eb36ea28a0f1daae987625eab5b519918bc9a74dba00ac2c5b620110"}, {0xc}, {0xc, 0x8, {0x3, 0x4}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_ACT={0x3dc, 0x2, [@m_xt={0x58, 0x1b, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x8bfd}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0x74, 0x7, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x6}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010102}]}, {0x32, 0x6, "79e6f9d050a4fe51f35248b8aec2613f081d787a2f3dedaf14055a5e439fe091e476128be34d78dc6c1ff8ac64f7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ct={0x118, 0x5, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @dev={0xac, 0x14, 0x14, 0x3d}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}]}, {0xd1, 0x6, "40ca3516467d519eef2bec70178a6bc8e542135bab06eba9a2bbb22412da3315b18cf257a94da88e7884dae839a6ee055cdfcea8ebf3c9850d700542837b561ddf64ac06ef7d9be9dbae9ba488cf26666e7da73a89d45c51401aeb89a8f4f9d6069eb03d3554d36a92fbdcf994bb4013095fe91b0ec633d883e58d5dd92b3687cd737fa1a57370bb445c82bb6963f8f11cf27de97f7ad5ffeea1033ed8fe7f135a040095ee0f0397b1340978dd8da3ce8986d39db0461718b1187588358730269e1ffc963f047946f73b2d0637"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x1f4, 0x19, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x39e3, 0x401, 0x0, 0x400, 0x9}, @remote, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x0, 0x8, 0x400, 0x8}, @multicast2, @dev={0xac, 0x14, 0x14, 0x41}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x87, 0x4, 0x4b5, 0x5b}, @remote, @local, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfa9, 0x1, 0x2}, @multicast2, @dev={0xac, 0x14, 0x14, 0x41}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x1, 0x0, 0x4, 0x10000}, @empty, @dev={0xac, 0x14, 0x14, 0x2d}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xbd5, 0xe9, 0x1, 0x101, 0x10000}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x23}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80, 0x7, 0x7, 0x9, 0x2}, @private=0xa010100, @rand_addr=0x64010100, 0x7f7fff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x81, 0xd47, 0x1, 0x3, 0xd}, @remote, @broadcast, 0xff}}]}, {0x8a, 0x6, "097c6f04ca57b6e76976f6816ed268b0287426b5877d03f611adad894f331596d25278c3964e37d0a45321c1766cce3b0dfcf0ef9451b623e895555a1328f3fa59bed67a8d542da5eb05eb3cdba82383623c511ea8e9cb63b900295d3831320f8d6c459116c4525e6ef60e13cc845ff2cca639ecafd50305825ca198dbe405d7ff9069d905b8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0xd}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x9d20}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8884}, @TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0x0, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e21}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e22}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @TCA_RATE={0x6, 0x5, {0x56, 0x6}}]}, 0xbe4}, 0x1, 0x0, 0x0, 0x20000800}, 0x4008001) (async) write(r4, &(0x7f0000001440)="21c6e22df5b94b5a92cbe613b3626eed645ce4", 0x13) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000001480)={0x10201, 0x6, 0x2, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) (async) ioctl$EXT4_IOC_SETFSUUID(r7, 0x4008662c, &(0x7f00000014c0)={0x0, 0x0, "edf5dfa91e794f71b83b2955176acaf7"}) (async) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000001500)={0x2, 0x0, [{0x2, 0x4, 0x0, 0x0, @irqchip={0x3, 0x2}}, {0x2, 0x5, 0x1, 0x0, @msi={0x4, 0x3, 0xfffffffd, 0x4}}]}) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000001580), 0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f00000015c0)={0x50000000}) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001640), r7) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000001a40)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001680)={0x350, r10, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x23d5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x189}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffbb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x198, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "9a39725a6fba6b8b72887d170884d3894f71ec8e32"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0xfd, 0x3, "ed29124a77607bcbc20a032699035c171b00941767651f42ee7ebe451a4cc252c14b082323786ca7570cdcb319381944d4a7a26cab419c20084aacc877bfaf7cdc9d1a420548d81a819a3c55704bbf27ca34039c4717cecc88a4d226d4b08c341686e44cc0bffefcf59fe42b2666a6bc8bdfa3342fda9e5a19b09f104c091d897d62e5f744d5ff253b48e5d38a51fc946e5393c22eac8736539d841e9340238784e497f8f99eb6ba129a205cf44b072cfd54ca885fb546af5f5956f08e4e4a500d9d1fa00311888417ed6ad5075fc6eb575bc46babd72fc41a51439543cd42c1d1b72e723a455850a53062b00d87560d6d67f9db558f1df618"}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "601f5eb6b9e0f09d7f3623ce7c9915d872a9f5a2ca52f8586564567fde7d8f56"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9a9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3214319}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xdd}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}]}, 0x350}, 0x1, 0x0, 0x0, 0x8000}, 0x20048800) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r11, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x30, r12, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x79331ec4a971445}, 0x4000000) 16.125131193s ago: executing program 4 (id=5957): syz_emit_ethernet(0xbe, &(0x7f0000000400)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523e02c2a4a00f81073727f3ac9f91e284b975a32", {"8f865412904b133eebafc6eb170fb006", "21144ab13a642475fc21552dce5cda9c"}}}}}}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xdd8}]}}}]}, 0x3c}}, 0x0) 16.12232319s ago: executing program 4 (id=5959): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x118}}, 0x4000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x8201) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000140)=[{}], 0x1, 0x1ff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 16.06050177s ago: executing program 4 (id=5961): syz_open_dev$dri(0x0, 0x1ff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x2) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e000f3c002400000000000600"/35, 0x23}], 0x1}, 0x4005) 16.060147412s ago: executing program 4 (id=5962): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00', 0x9b}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, @in6={0xa, 0x4e24, 0x2d6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf4fb}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3c}}], 0x58) listen(r0, 0xb) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000000)={0x0, 0xfffffff3, 0x1, {0xa, @meta={0x54505356, 0x66cd661b, 0xa7ef, 0x59be, 0x4d985be2}}, 0x8000}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r6 = accept4(r5, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r6) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x1410, 0x20, 0x70bd26, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4c0000001a001100000000000000000002000000000000000000000005001b0006000000080001007f000001"], 0x4c}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (async) openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) (async) close(r2) (async) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00', 0x9b}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, @in6={0xa, 0x4e24, 0x2d6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf4fb}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3c}}], 0x58) (async) listen(r0, 0xb) (async) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) (async) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000000)={0x0, 0xfffffff3, 0x1, {0xa, @meta={0x54505356, 0x66cd661b, 0xa7ef, 0x59be, 0x4d985be2}}, 0x8000}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r5, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) (async) accept4(r5, 0x0, 0x0, 0x80000) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r6) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x1410, 0x20, 0x70bd26, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4c0000001a001100000000000000000002000000000000000000000005001b0006000000080001007f000001"], 0x4c}}, 0x0) (async) 15.952481116s ago: executing program 4 (id=5964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000004000034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) 1.522451186s ago: executing program 7 (id=6166): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001400), 0x20000, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000001b40)) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4188aec6, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x125, 0x9}) close_range(r2, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01b07722de26963e7300010000000000000501"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.438564233s ago: executing program 7 (id=6171): syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) read$char_usb(0xffffffffffffffff, &(0x7f00000000c0)=""/153, 0x99) 1.31890851s ago: executing program 2 (id=6176): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x7ff, [0x0, 0x3, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xedc0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x0, 0x0, 0x0, 0x10000, 0x40003, 0x0, 0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffff], [0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x8ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x1], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x84, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) pipe2$watch_queue(0x0, 0x80) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x18}}}}}, 0x36) 1.19243563s ago: executing program 2 (id=6178): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x118}}, 0x4000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x8201) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x6, 0x22, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x9, 0x8166, 0xa}) r5 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x18, 0x403, 0xe}) close_range(r2, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x1ff, 0x0, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x108) close(r7) close_range(r0, 0xffffffffffffffff, 0x0) 1.132528586s ago: executing program 2 (id=6179): syz_open_dev$dri(0x0, 0x1ff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x280482, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='tmpfs\x00', 0x8, &(0x7f0000000100)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1d0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000200, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x8) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$x86(r9, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[@wrmsr={0x65, 0x20, {0x40000020}}], 0x20}) r11 = syz_open_dev$swradio(&(0x7f00000048c0), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r11, 0xc02c5638, &(0x7f0000000140)={0x5, 0x4, 0x9}) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r10, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x7aeb32efe7b1d3a2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xcb5f}, @TCA_RATE={0x6, 0x5, {0x9}}, @qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x4}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x7}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x65}]}}]}, 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x2) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) 972.025337ms ago: executing program 2 (id=6180): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) getsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000000)=0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20004004) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000580)={&(0x7f0000000400), 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x28, r3, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x12}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x24050850}, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xc0}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xcea6591d6139f610}}, [@NFT_MSG_NEWSET={0xf8, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_USERDATA={0xcf, 0xd, 0x1, 0x0, "198f9ba14ecc15de0e3756b9dcf4a7b9a335a3f54c28e355d2d811789a89f77aaa86152a3ef9507fab1c00739d9317f468f36eb4044c5f35b0e81894bca4e3cc66d40d04515cc068fc13d0316f8e435d73cddf490c733fb93d07629ce43489de8fa89dbb7126b7c3aa532770ee4dbf9bc0c1a7909ae1a87a5373aa9210befe3243f2df8bcb3769b030a2cab1cd24e21e23c45f429ce55822fd0af413b00dba24f584d13bcfb928fc5df66475a89a87a4ef6dc04bf15f4ea077bb0bb9919fb1b6bfe1d6d65de4cecb1d600b"}]}, @NFT_MSG_DELSETELEM={0x9a4, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x974, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}]}, {0x4d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x75, 0x6, 0x1, 0x0, "f015e99c298c0131cbe9e897ecbd69301087b7ac721dead5c23bc795d2c8b612292c8eec8ebd6ab78d4676fc6cca2290942c0bbd3ebce885abe33ae329c4638f8b1a07d3291bb77295e1fd16fe860bc83bf446586dcb66163326f725f44d25a92f6179c2ba4c5d0863c945b75228108557"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_KEY_END={0x140, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe8, 0x1, "ca32334c1a9c129474bb7a960135a88b5e67c6d9eefea4c4267d2af12456bfa5d6cc8c2365eb24d2cf53f223a7c81979643ca9a77cb0ada554a393d7d794ca9e61e207d013494372b8b06bb5a4805c094f2e9b9ff61c7f64bdad95305e13f8698bfc7033c59182b1a31aa667d664bfa959f5727e44d39e1d82ce2656a4be97b4bed67abd0c4d620a03280a02d5ce8405141834974952d300cf28aa35b65a2619c1bc3a5fa8fdbf3c996adc3e89edc67e47942fe22884eb6c93575ce8ae9640455258aa9f9776b8d5ca563cf1cadcd35c172fbe6042ab5213e3ad13f50dbd628118e8ee12"}, @NFTA_DATA_VALUE={0x52, 0x1, "db7bc6263621c9eb713d65d37333a2c39637fd4510f9f574cd4497a309f3b416209455e4ba1aa16e16ffb3efaa17e5d17be2921505d9fbedaa234cbcddeed099bde42f2bb95b890b566ab20e88df"}]}, @NFTA_SET_ELEM_USERDATA={0xda, 0x6, 0x1, 0x0, "fc44683e573d40364b0d2b4b3e5daf20e039140628ce3def191be6474a0dd77411b9c2bb7bc200a206b82e69070c1a99b795294963be805c43a2c5ccc93552f47d176eb293ea0ee21dc7ce60c951465e88317cee233967e7f6d52036dafdef7c421da57aac9440aca9d9ffa265c651b46677bf0eb8deff6412f98d1e8280a657ee7bfe85e3c9b952c1ac07045a1436e2b66e5887ceeb756a8b30938ecde846b3584a6274763bfb7a9ad15f3dcde938c45b0cfce6c346d31620a431d84f62afb67a2ea71c61b9a99f2f605a8eda3d04b2b38a2c1c4fed"}, @NFTA_SET_ELEM_KEY_END={0x204, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x84, 0x1, "4d1c33117280ea6ade462d72fc9cf9c71c58e88da1b9f55b99ff2b334d2f9b7ac060dce9d29d9b567c402a2c8a1c393a25df6942d6dd08edf80cf1c2c1e82c0841bf5cf9a5cce95d4dc7dc7518d5324f9da36697dfa9656b9fb919ebb19fc2bbba91d2137f6d61fe1894e1007a4ba19d36754664a5b0502c85578fa673240409"}, @NFTA_DATA_VALUE={0x58, 0x1, "a991f75796f7df98a2b39388f4100587def79ad32c96af524b01e4f119436a8a0ac1ca418704e0d5d9dc0a38683928f2ddbf50dc68e20f656c77956f7152c271543140fa240646892a763bee1315bb344678d74c"}, @NFTA_DATA_VALUE={0x54, 0x1, "e99ba2381f33302c6accd177a6e220eb803d806e069a18305568ce961fc199bd9656503bfd10c356c84998ea2e106f2c082c61291c284ee55a68aedf6f4104371e5a981ed9afe4409af6ae4b148743a2"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}, {0x47c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x358c}, @NFTA_SET_ELEM_USERDATA={0xab, 0x6, 0x1, 0x0, "998eb3883b5d2b384e534534e3d3fa511b8c3a152d3e1c61523bdb43877266a32d81a3aada80753147d8f598b2451b8ed4521451faf99728949fd7c93a78042a159c3fee450ed89946700b527d3d088874804f8821f1964bfdad9a3c46c908199cb0e31ee4afd1d92b9d5b515e724feea1382ba866bf1c21ac25405936f9215e9670a38691b8105d693d3f1955511e3e12b649feb5eb3dfc477459270ca0749ef981d3ddcc4797"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4e9c}, @NFTA_SET_ELEM_KEY_END={0x244, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcf, 0x1, "155302aa0210c55f244da60f5cdc10bcddcc57a6ab09d803420e7a7cd316fcb20e8ccf156ca9ff830e6a2c39f325d11e93c98eac062f8ff0ed15c418aa34cbfdf421f0371d2e9c6b9bbbae0eda6464a1e3e6f03099362d6fb30386fec86ec399a9da942426d6721be1895242251d75988bf3dc1cf79a84189a89722328c4cfcc059d3a231329a77eaa014d44990d85b91a34c483c5f5572444cf1ae8b5a37fd9457b6f1bc7d951e93297865d0ee16d1fecfeb81d395a96d4e9656eda48141ab1710c92b8c7c5ee8071b662"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x12, 0x1, "89c13daf602411d7d01120632db2"}, @NFTA_DATA_VALUE={0x101, 0x1, "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"}]}, @NFTA_SET_ELEM_DATA={0x13c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x96, 0x1, "6081a8c02dcc3b693959d1d04953ca78c4b244e9891ff9a8cf76352ab394e687a0768dbf48746f8e17c547065bcdc6ee173c31868b27685a26074c62e9fba3ed74fc0096ca988f3e17bc1532030f6ef9a3d0756d3c05f95c7c0ac0d22d1b69184ac35ce2e7a0c3c1faa3938e513d9b97a970f5f069b2d90525e248a5837b5df6cfd399cb218d0264f1ec0f4f9fda3c4b3498"}, @NFTA_DATA_VALUE={0x9d, 0x1, "51c5fd45c875418a95104d20a112bcb19e452f75aa07f1512fb9169a2c2ec3a3f0c819d9c37c6790965035c66c4826cbfd13adebe4f3448e16c5ab38742bef846612ce8c750c5f2be09c5abb793c460ffbadeca6f4444c8e68c475af1a13b8e23fa9784b05c296221722f398d00ee5792936c7639e9706d26b0bb50e189ff050240e42c1d3303d667f385d7dbd72d1f9147dfe15e58f1d3219"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0xe8, 0x18, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x92b}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xbac}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={r6}, &(0x7f00000000c0)=0x8) pipe2$watch_queue(0x0, 0x80) 954.06309ms ago: executing program 44 (id=5964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000004000034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) 362.41406ms ago: executing program 8 (id=6184): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0xc) r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r2 = accept(r1, 0x0, &(0x7f0000000140)) sendto$inet6(r2, &(0x7f0000000180)="d4ccf885a7191b37c0329d06f2c10c885deb272e5c2c812a3c5bffd16aa90659bfd7625760d0bbe94bb55293e76516f548", 0x31, 0x4010, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1, 0xd}, 0x1c) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001440)={r3, 0x0, 0x1000, 0xa3, &(0x7f00000002c0)="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", &(0x7f00000012c0)=""/163, 0x800, 0x0, 0x41, 0x2a, &(0x7f0000001380)="97d8ff23731374abe2feefebb06b8fb4def7aa309ecddbb7467fda8899e5836e15c115d5e894e921892be124323131c17d70d4a3fcf45e4d18c490af7438daefbd", &(0x7f0000001400)="e448ecf1eda7dccfe42fcbb3f990cfd1905696c7f1461a68f3e95edeed6f9ad1c60063a1be61b9870cd0", 0x2, 0x0, 0x1}, 0x50) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) fcntl$getown(r3, 0x9) bind$can_raw(r2, &(0x7f00000014c0), 0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000001500)={0x0}, &(0x7f0000001540)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001580)={r4, 0x2, 0x4}, &(0x7f00000015c0)=0x8) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000001600)={0x5, 0x1, 0x3, 0x0, 0x6}) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x3f7, 0x2, 0x70bd2d, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}}, 0x10) accept4$ax25(r2, &(0x7f0000001780)={{0x3, @null}, [@rose, @default, @null, @rose, @null, @netrom, @bcast, @default]}, &(0x7f0000001800)=0x48, 0x80000) r5 = add_key$fscrypt_provisioning(&(0x7f0000001840), &(0x7f0000001880)={'syz', 0x3}, &(0x7f00000018c0)={0x1, 0x0, @auto=[0x12, 0x3d, 0x16, 0x1e]}, 0xc, 0xfffffffffffffffa) r6 = add_key$keyring(&(0x7f0000001900), &(0x7f0000001940)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$negate(0xd, r5, 0x3, r6) r7 = socket$pptp(0x18, 0x1, 0x2) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f0000001980)=0x4, 0x4) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000019c0)=0x7, 0x4) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r8, 0x7a6, &(0x7f0000001a40)={0x8, 0xbe, 0x2, 0x1, 0x6}) openat(0xffffffffffffff9c, &(0x7f0000001a80)='./file0\x00', 0xa40, 0x62) r9 = add_key(&(0x7f0000001ac0)='.dead\x00', &(0x7f0000001b00)={'syz', 0x1}, &(0x7f0000001b40)="b011e8a7731f95b9ec1aff1e0db2a0ca9ef8ce8e2afb88e44dff4e6a7e9840844826fa2ab9bf", 0x26, r6) keyctl$search(0xa, r9, &(0x7f0000001b80)='dns_resolver\x00', &(0x7f0000001bc0)={'syz', 0x2}, r6) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000001c00)={0x4, @empty, 0x4e24, 0x1, 'wlc\x00', 0x13, 0x1, 0xe}, 0x2c) 292.061427ms ago: executing program 8 (id=6185): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, 0x0, 0x2) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000040)={0x21, &(0x7f00000000c0)=[{0x2, '\x00', @st={0x4, [{0x0, @uvalue=0x27}, {0x2, @uvalue=0x4}, {0x3, @svalue=0x6}, {0x2, @uvalue=0x8}]}, 0x14}]}) 291.218227ms ago: executing program 8 (id=6186): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x7ff, [0x0, 0x3, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xedc0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x0, 0x0, 0x0, 0x10000, 0x40003, 0x0, 0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffff], [0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x8ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x1], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x84, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) pipe2$watch_queue(0x0, 0x80) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}]}}}}}}, 0x46) 239.925665ms ago: executing program 7 (id=6187): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, 0x0, 0x2) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000040)={0x21, &(0x7f00000001c0)=[{0x2, '\x00', @st={0x4, [{0x0, @uvalue=0x2}, {0x2, @svalue=0x6}, {0x3, @svalue=0x6}, {0x2, @uvalue=0x8}]}, 0x14}, {0x10, '\x00', @buffer={"c237ca3f45232db6ef6c238b895047956aa8a2afd7c948423472e334ff5930c5", 0x20}, 0x8}, {0x7, '\x00', @data=0x5, 0x1ff}]}) 239.747033ms ago: executing program 7 (id=6188): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x81}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x100, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x8040}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0xb3dd}]}}}]}, 0x40}}, 0x0) 149.890986ms ago: executing program 7 (id=6189): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x118}}, 0x4000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x8201) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r7) sendmsg$DEVLINK_CMD_SB_POOL_SET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="541fa94595a74f308665f94d001177", @ANYRES16=r8, @ANYBLOB="01002bbd7000f8dbdf25100000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00f8ffffff060011000000000008001300050000000500140001000000"], 0x54}, 0x1, 0x0, 0x0, 0x8090}, 0x4040000) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff0f, r6, 0x0}) r10 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r10, 0xc01c64ad, &(0x7f0000000080)={r9}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) io_uring_setup(0x37cc, &(0x7f0000000040)={0x0, 0x2a11, 0x1c080, 0xa, 0x20002f7}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3020, 0x1000004, 0x13, r10, 0x100000000) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r12, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r11], 0x68}}, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x1ff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 148.230128ms ago: executing program 2 (id=6190): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) readv(r0, 0x0, 0x0) 61.589569ms ago: executing program 2 (id=6191): syz_open_dev$dri(0x0, 0x1ff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x40, 0x20, 0x2, 0x6, {{0x15, 0x4, 0x0, 0x39, 0x54, 0x66, 0x0, 0xc, 0x4, 0x0, @multicast2, @local, {[@noop, @ssrr={0x89, 0xb, 0x73, [@multicast1, @broadcast]}, @generic={0x82, 0x5, "65d666"}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_prespec={0x44, 0x14, 0xde, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x28}, 0x10001}, {@remote, 0x500000}]}, @rr={0x7, 0x13, 0x47, [@private=0xa010102, @remote, @dev={0xac, 0x14, 0x14, 0x40}, @rand_addr=0x64010101]}, @end]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="2b0c5b8ab67674e0546a2c43de32be6153db6361237b82d5dc5cec903ba8ed71ff9c4052413080448878504e5f4632a94f66bad0341d653c573a84d18a0d008a13ca3b0461acbedbfdc7c1fe9046daa24c079a4885a6410e186462c10d4319d068d11eb44d17a21fd92b3458d986b01b51260682ba9970c1abacea3160fcbd425f39c34a24add9110959d360a42694a976105fd65b306eb727866d39e64bd81f8005fa22a36b98056ba20e8bc8318545516c2e5a7f313e3cc5d079a381d3cfd1cb2b391f1f0ec99f1e0b7efdb8c17426a49f9355e86718", @ANYRES16=r6, @ANYBLOB="01002dbd7000fbdbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@gettfilter={0x44, 0x2e, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xf, 0x3}, {0xfff2, 0xfff3}, {0xe, 0x5}}, [{0x8, 0xb, 0x6cf1}, {0x8}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8008000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x252801, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) getsockname$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) getsockopt$packet_buf(r8, 0x107, 0x5, &(0x7f0000000640)=""/87, &(0x7f00000006c0)=0x57) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xe, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x2) close(r7) socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$TIOCVHANGUP(r10, 0x5437, 0x2) ioctl$TIOCGWINSZ(r10, 0x5413, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r11, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x4, [@bcast, @default, @bcast, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r12, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e000f3c002400000000000600000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 61.017419ms ago: executing program 8 (id=6192): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x60000000}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0xb, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffff0000}, [@alu={0x0, 0x1, 0x6, 0x7, 0x1, 0x4, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0xde}, @map_fd={0x18, 0x7, 0x1, 0x0, r1}, @ldst={0x3, 0x1, 0x3, 0x1, 0x4, 0xfffffffffffffff0, 0x4}, @btf_id={0x18, 0xf, 0x3, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 60.724442ms ago: executing program 8 (id=6193): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x121800, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0xddffffff, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) 329.686µs ago: executing program 8 (id=6194): syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) read$char_usb(0xffffffffffffffff, &(0x7f00000000c0)=""/153, 0x99) 0s ago: executing program 7 (id=6195): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, 0x0, 0x2) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000040)={0x21, &(0x7f00000000c0)=[{0x2, '\x00', @st={0x4, [{0x0, @uvalue=0x2}, {0x2, @uvalue=0x4}, {0x3, @svalue=0x11}, {0x2, @uvalue=0x8}]}, 0x14}]}) kernel console output (not intermixed with test programs): nterface with an up link [ 448.605659][T13652] bridge_slave_1: left promiscuous mode [ 448.607721][T13652] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.611149][T13652] bridge_slave_0: left allmulticast mode [ 448.613029][T13652] bridge_slave_0: left promiscuous mode [ 448.615169][T13652] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.792667][T13652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.797638][T13652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.802260][T13652] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 448.808069][T13652] bond0 (unregistering): Released all slaves [ 448.826865][T25048] veth3: entered promiscuous mode [ 448.830124][T25048] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 448.898578][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.050264][T25031] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 449.053370][T25031] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 449.083145][ T5945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 449.089350][ T5945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 449.091616][T13652] hsr_slave_0: left promiscuous mode [ 449.094011][T13652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.094778][ T5945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 449.096611][T13652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.100400][ T5945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 449.103511][T25063] Invalid logical block size (536872960) [ 449.108301][ T5945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 449.108411][T13652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.113405][T13652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.130786][T25066] netlink: 'syz.7.5433': attribute type 28 has an invalid length. [ 449.133348][T25066] netlink: 'syz.7.5433': attribute type 3 has an invalid length. [ 449.138369][T13652] veth1_macvtap: left promiscuous mode [ 449.140248][T13652] veth0_macvtap: left allmulticast mode [ 449.142107][T13652] veth0_macvtap: left promiscuous mode [ 449.142182][T13652] veth1_vlan: left promiscuous mode [ 449.145743][T13652] veth0_vlan: left promiscuous mode [ 449.151511][T25066] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 449.352706][T13652] team0 (unregistering): Port device team_slave_1 removed [ 449.363656][T13652] team0 (unregistering): Port device team_slave_0 removed [ 449.502885][T25079] tmpfs: Bad value for 'mpol' [ 449.504824][T25079] tmpfs: Bad value for 'mpol' [ 449.507879][T25079] tmpfs: Bad value for 'mpol' [ 449.509598][T25079] tmpfs: Bad value for 'mpol' [ 449.511341][T25079] tmpfs: Bad value for 'mpol' [ 449.513053][T25079] tmpfs: Bad value for 'mpol' [ 449.514745][T25079] tmpfs: Bad value for 'mpol' [ 449.524690][T25079] tmpfs: Bad value for 'mpol' [ 449.527171][T25079] tmpfs: Bad value for 'mpol' [ 449.528858][T25079] tmpfs: Bad value for 'mpol' [ 449.530600][T25079] tmpfs: Bad value for 'mpol' [ 449.532410][T25079] tmpfs: Bad value for 'mpol' [ 449.534251][T25079] tmpfs: Bad value for 'mpol' [ 449.536048][T25079] tmpfs: Bad value for 'mpol' [ 449.547937][T25079] tmpfs: Bad value for 'mpol' [ 449.549637][T25079] tmpfs: Bad value for 'mpol' [ 449.551362][T25079] tmpfs: Bad value for 'mpol' [ 449.553424][T25079] tmpfs: Bad value for 'mpol' [ 449.555242][T25079] tmpfs: Bad value for 'mpol' [ 449.557163][T25079] tmpfs: Bad value for 'mpol' [ 449.558901][T25079] tmpfs: Bad value for 'mpol' [ 449.560955][T25079] tmpfs: Bad value for 'mpol' [ 449.564771][T25079] tmpfs: Bad value for 'mpol' [ 449.571636][T25079] tmpfs: Bad value for 'mpol' [ 449.578891][T25079] tmpfs: Bad value for 'mpol' [ 449.582709][T25079] tmpfs: Bad value for 'mpol' [ 449.586656][T25079] tmpfs: Bad value for 'mpol' [ 449.588946][T25079] tmpfs: Bad value for 'mpol' [ 449.591274][T25079] tmpfs: Bad value for 'mpol' [ 449.593615][T25079] tmpfs: Bad value for 'mpol' [ 449.596057][T25079] tmpfs: Bad value for 'mpol' [ 449.601994][T25079] tmpfs: Bad value for 'mpol' [ 449.604325][T25079] tmpfs: Bad value for 'mpol' [ 449.666609][T25047] chnl_net:caif_netlink_parms(): no params data found [ 449.777584][T25047] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.779944][T25047] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.782257][T25047] bridge_slave_0: entered allmulticast mode [ 449.784912][T25047] bridge_slave_0: entered promiscuous mode [ 449.789981][T25047] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.792366][T25047] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.794722][T25047] bridge_slave_1: entered allmulticast mode [ 449.797559][T25047] bridge_slave_1: entered promiscuous mode [ 449.807040][T22392] Bluetooth: hci1: connection err: -111 [ 449.813172][T25047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.817640][T25047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.832801][T25047] team0: Port device team_slave_0 added [ 449.835940][T25047] team0: Port device team_slave_1 added [ 449.849798][T25047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.852105][T25047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.860311][T25047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.864613][T25047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.866935][T25047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.875176][T25047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.897176][T25047] hsr_slave_0: entered promiscuous mode [ 449.901313][T25047] hsr_slave_1: entered promiscuous mode [ 449.903597][T25047] debugfs: 'hsr0' already exists in 'hsr' [ 449.905429][T25047] Cannot create hsr debugfs directory [ 449.945726][T25110] bridge_slave_1: left promiscuous mode [ 449.947975][T25110] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.190212][T25114] netlink: 'syz.2.5441': attribute type 28 has an invalid length. [ 450.192849][T25114] netlink: 'syz.2.5441': attribute type 3 has an invalid length. [ 450.209265][T25114] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 450.564951][T25097] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 450.567235][T25097] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 450.569664][T25097] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 450.571739][T25097] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 450.580472][T25097] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 450.620890][ T40] kauditd_printk_skb: 272 callbacks suppressed [ 450.620903][ T40] audit: type=1400 audit(2000000305.241:9408): avc: denied { read } for pid=25139 comm="syz.2.5444" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 450.631370][ T40] audit: type=1400 audit(2000000305.241:9409): avc: denied { open } for pid=25139 comm="syz.2.5444" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 450.640764][ T40] audit: type=1400 audit(2000000305.241:9410): avc: denied { create } for pid=25141 comm="syz.7.5443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 450.644487][T25142] __nla_validate_parse: 12 callbacks suppressed [ 450.644502][T25142] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5443'. [ 450.647380][T25144] netlink: 248 bytes leftover after parsing attributes in process `syz.4.5445'. [ 450.653628][T25142] netlink: 'syz.7.5443': attribute type 1 has an invalid length. [ 450.655842][ T40] audit: type=1400 audit(2000000305.251:9411): avc: denied { ioctl } for pid=25139 comm="syz.2.5444" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 450.667538][ T40] audit: type=1400 audit(2000000305.251:9412): avc: denied { ioctl } for pid=25141 comm="syz.7.5443" path="socket:[117532]" dev="sockfs" ino=117532 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 450.675377][ T40] audit: type=1400 audit(2000000305.261:9413): avc: denied { prog_load } for pid=25141 comm="syz.7.5443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 450.681736][ T40] audit: type=1400 audit(2000000305.261:9414): avc: denied { bpf } for pid=25141 comm="syz.7.5443" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 450.689212][ T40] audit: type=1400 audit(2000000305.281:9415): avc: denied { create } for pid=25143 comm="syz.4.5445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 450.695454][ T40] audit: type=1400 audit(2000000305.301:9416): avc: denied { write } for pid=25145 comm="syz.2.5446" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 450.700750][T25142] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 450.703416][ T40] audit: type=1400 audit(2000000305.301:9417): avc: denied { ioctl } for pid=25145 comm="syz.2.5446" path="socket:[119150]" dev="sockfs" ino=119150 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 450.720510][T25148] loop6: detected capacity change from 0 to 7 [ 450.724186][T21664] Dev loop6: unable to read RDB block 7 [ 450.726025][T21664] loop6: unable to read partition table [ 450.728045][T21664] loop6: partition table beyond EOD, truncated [ 450.731094][T25148] Dev loop6: unable to read RDB block 7 [ 450.733417][T25148] loop6: unable to read partition table [ 450.735513][T25148] loop6: partition table beyond EOD, truncated [ 450.740401][T25148] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 450.756832][T25142] veth5: entered promiscuous mode [ 450.760191][T25142] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 450.778132][T25142] vcan0: tx address claim with dlc 0 [ 450.926374][ T6013] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 451.081885][ T6013] usb 7-1: device descriptor read/64, error -71 [ 451.095675][T25171] netlink: 144 bytes leftover after parsing attributes in process `syz.7.5451'. [ 451.099402][T25171] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5451'. [ 451.107462][T15330] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 451.123523][T25171] 8021q: VLANs not supported on ip6_vti0 [ 451.128553][T25171] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5451'. [ 451.131905][T25171] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5451'. [ 451.134913][T25171] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5451'. [ 451.155117][T25047] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 451.161311][T25047] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 451.165409][T25047] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 451.170283][T25047] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 451.217476][T25047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.230362][T25047] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.235329][T13653] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.237696][T13653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.249462][T13652] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.251883][T13652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.267748][T15330] usb 9-1: Using ep0 maxpacket: 32 [ 451.271734][T15330] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 451.283070][T15330] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 451.289744][T15330] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 451.294444][T15330] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 451.303143][T15330] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 451.307594][T15330] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.314334][T15330] usb 9-1: Product: syz [ 451.318413][ T6013] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 451.321883][T15330] usb 9-1: Manufacturer: syz [ 451.324089][T15330] usb 9-1: SerialNumber: syz [ 451.334747][ C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 451.342051][T15330] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/input/input60 [ 451.394484][T25047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.467076][ T6013] usb 7-1: device descriptor read/64, error -71 [ 451.546823][T15330] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 451.549532][T15330] (id 0x00) [ 451.553999][T25047] veth0_vlan: entered promiscuous mode [ 451.559690][T25047] veth1_vlan: entered promiscuous mode [ 451.576707][ T6013] usb usb7-port1: attempt power cycle [ 451.577720][T25047] veth0_macvtap: entered promiscuous mode [ 451.582349][T25047] veth1_macvtap: entered promiscuous mode [ 451.594221][T25047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.601915][T25047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.608863][T15330] rc_core: IR keymap rc-imon-pad not found [ 451.611453][T15330] Registered IR keymap rc-empty [ 451.617748][T15330] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 451.622241][T13653] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.625972][T15330] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 451.635011][T13653] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.640024][T13653] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.644070][T13653] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.699995][T13653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.702803][T13653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.729009][T13662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.731656][T13662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.759023][T15330] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0 [ 451.763655][T15330] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0/input61 [ 451.774966][T15330] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:11> initialized [ 451.860339][T25226] syzkaller0: entered promiscuous mode [ 451.862317][T25226] syzkaller0: entered allmulticast mode [ 451.866364][T22392] Bluetooth: hci1: command 0x0419 tx timeout [ 451.926929][ T6013] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 451.936180][T25151] imon:display_open: display port is already open [ 451.957282][ T6013] usb 7-1: device descriptor read/8, error -71 [ 451.974809][T25151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.987100][T25151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.003037][T16474] usb 9-1: USB disconnect, device number 11 [ 452.045048][T25236] netlink: 248 bytes leftover after parsing attributes in process `syz.7.5454'. [ 452.104917][T25240] loop6: detected capacity change from 0 to 7 [ 452.109594][T25240] Dev loop6: unable to read RDB block 7 [ 452.112037][T25240] loop6: unable to read partition table [ 452.114605][T25240] loop6: partition table beyond EOD, truncated [ 452.119442][T25240] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 452.216341][ T6013] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 452.237003][ T6013] usb 7-1: device descriptor read/8, error -71 [ 452.346556][ T6013] usb usb7-port1: unable to enumerate USB device [ 452.576431][ T5945] Bluetooth: hci3: command 0x0c1a tx timeout [ 452.576434][T22392] Bluetooth: hci0: command 0x041b tx timeout [ 452.723211][T25249] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 452.820517][T25256] input input62: cannot allocate more than FF_MAX_EFFECTS effects [ 452.979073][T25259] netlink: 'syz.4.5461': attribute type 28 has an invalid length. [ 452.982580][T25259] netlink: 'syz.4.5461': attribute type 3 has an invalid length. [ 452.985474][T25259] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5461'. [ 453.031291][T25263] netlink: 248 bytes leftover after parsing attributes in process `syz.4.5463'. [ 453.090537][T25265] loop6: detected capacity change from 0 to 7 [ 453.094777][T21664] Dev loop6: unable to read RDB block 7 [ 453.097558][T21664] loop6: unable to read partition table [ 453.100228][T21664] loop6: partition table beyond EOD, truncated [ 453.104042][T25265] Dev loop6: unable to read RDB block 7 [ 453.106783][T25265] loop6: unable to read partition table [ 453.109365][T25265] loop6: partition table beyond EOD, truncated [ 453.112071][T25265] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 453.492961][T25283] input input64: cannot allocate more than FF_MAX_EFFECTS effects [ 453.498916][T25275] unsupported nlmsg_type 40 [ 454.313596][T25301] pimreg: entered allmulticast mode [ 454.373613][T25302] netlink: 'syz.4.5475': attribute type 6 has an invalid length. [ 454.377150][T25302] netlink: 'syz.4.5475': attribute type 6 has an invalid length. [ 454.381802][T25302] pimreg: left allmulticast mode [ 454.666368][T22392] Bluetooth: hci0: command 0x041b tx timeout [ 454.981342][T25344] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 455.069484][T25359] fuse: Bad value for 'user_id' [ 455.071235][T25359] fuse: Bad value for 'user_id' [ 455.098099][T25368] fuse: Bad value for 'fd' [ 455.114882][T25368] overlayfs: failed to resolve './file1': -2 [ 455.151645][T25372] input input65: cannot allocate more than FF_MAX_EFFECTS effects [ 455.626397][T16474] usb 12-1: new high-speed USB device number 25 using dummy_hcd [ 455.711637][T25401] __nla_validate_parse: 5 callbacks suppressed [ 455.711656][T25401] netlink: 248 bytes leftover after parsing attributes in process `syz.4.5510'. [ 455.756356][T16474] usb 12-1: device descriptor read/64, error -71 [ 455.868253][ T40] kauditd_printk_skb: 347 callbacks suppressed [ 455.868265][ T40] audit: type=1400 audit(2000000310.491:9765): avc: denied { read write } for pid=25404 comm="syz.4.5511" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 455.876779][T25405] input input66: cannot allocate more than FF_MAX_EFFECTS effects [ 455.878681][ T40] audit: type=1400 audit(2000000310.491:9766): avc: denied { open } for pid=25404 comm="syz.4.5511" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 455.888585][ T40] audit: type=1400 audit(2000000310.501:9767): avc: denied { ioctl } for pid=25404 comm="syz.4.5511" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 455.899156][ T40] audit: type=1400 audit(2000000310.501:9768): avc: denied { prog_load } for pid=25404 comm="syz.4.5511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 455.905501][ T40] audit: type=1400 audit(2000000310.501:9769): avc: denied { perfmon } for pid=25404 comm="syz.4.5511" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 455.912265][ T40] audit: type=1400 audit(2000000310.501:9770): avc: denied { prog_run } for pid=25404 comm="syz.4.5511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 455.984799][T25407] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5512'. [ 456.016515][T16474] usb 12-1: new high-speed USB device number 26 using dummy_hcd [ 456.031879][T25409] veth1_macvtap: left promiscuous mode [ 456.033881][T25409] macsec0: entered promiscuous mode [ 456.036017][T25409] macsec0: entered allmulticast mode [ 456.042797][T25409] veth1_macvtap: entered promiscuous mode [ 456.044946][T25409] veth1_macvtap: entered allmulticast mode [ 456.052637][T25409] macsec0: left promiscuous mode [ 456.054367][T25409] macsec0: left allmulticast mode [ 456.056029][T25409] veth1_macvtap: left allmulticast mode [ 456.108467][ T40] audit: type=1400 audit(2000000310.731:9771): avc: denied { getopt } for pid=25414 comm="syz.4.5515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 456.124744][ T40] audit: type=1400 audit(2000000310.741:9772): avc: denied { create } for pid=25414 comm="syz.4.5515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 456.125573][T25415] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5515'. [ 456.133261][ T40] audit: type=1400 audit(2000000310.741:9773): avc: denied { ioctl } for pid=25414 comm="syz.4.5515" path="socket:[121469]" dev="sockfs" ino=121469 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 456.147830][T16474] usb 12-1: device descriptor read/64, error -71 [ 456.257162][T16474] usb usb12-port1: attempt power cycle [ 456.301034][T25419] netlink: 'syz.4.5516': attribute type 1 has an invalid length. [ 456.304426][T25419] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5516'. [ 456.308648][T25419] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5516'. [ 456.312569][T25419] netlink: 658 bytes leftover after parsing attributes in process `syz.4.5516'. [ 456.338404][ T40] audit: type=1400 audit(2000000310.961:9774): avc: denied { read write } for pid=25420 comm="syz.8.5517" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 456.569084][T25436] input input67: cannot allocate more than FF_MAX_EFFECTS effects [ 456.608485][T16474] usb 12-1: new high-speed USB device number 27 using dummy_hcd [ 456.637925][T16474] usb 12-1: device descriptor read/8, error -71 [ 456.742145][T25451] netlink: 'syz.8.5528': attribute type 28 has an invalid length. [ 456.744717][T25451] netlink: 'syz.8.5528': attribute type 3 has an invalid length. [ 456.747212][T22392] Bluetooth: hci0: command 0x041b tx timeout [ 456.747525][T25451] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5528'. [ 456.766740][T25451] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 456.878700][T16474] usb 12-1: new high-speed USB device number 28 using dummy_hcd [ 456.880205][T25457] fuse: Bad value for 'group_id' [ 456.882959][T25457] fuse: Bad value for 'group_id' [ 456.906730][T16474] usb 12-1: device descriptor read/8, error -71 [ 457.016791][T16474] usb usb12-port1: unable to enumerate USB device [ 457.066356][T25463] netlink: 248 bytes leftover after parsing attributes in process `syz.8.5532'. [ 457.574589][T25469] input input68: cannot allocate more than FF_MAX_EFFECTS effects [ 457.854918][T25483] syzkaller0: entered promiscuous mode [ 457.857832][T25483] syzkaller0: entered allmulticast mode [ 458.321562][T25502] netlink: 'syz.2.5545': attribute type 28 has an invalid length. [ 458.324414][T25502] netlink: 'syz.2.5545': attribute type 3 has an invalid length. [ 458.327303][T25502] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5545'. [ 458.333557][T25502] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 458.379995][T25505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5546'. [ 458.826350][T22392] Bluetooth: hci0: command 0x041b tx timeout [ 458.897871][T25523] 9p: Could not find request transport: visêË [ 458.975708][T25528] CIFS: Unable to determine destination address [ 459.347533][T25547] random: crng reseeded on system resumption [ 459.676199][T25579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=25579 comm=syz.4.5567 [ 459.722160][T25586] tipc: Started in network mode [ 459.724428][T25586] tipc: Node identity , cluster identity 4711 [ 459.852025][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.854960][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.857398][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.860299][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.862749][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.865312][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.867898][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.870417][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.873099][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.875374][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.878165][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.880304][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.882980][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.885229][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.888315][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.890921][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.893465][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.895992][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.898536][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.901139][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.903474][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.906455][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.911992][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.914185][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.917076][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.919187][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.921918][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.924171][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.926918][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.929287][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.931826][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.934244][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.936858][T22392] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 459.939816][T22392] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 459.986854][T25607] netlink: 'syz.2.5573': attribute type 11 has an invalid length. [ 459.991859][T25607] netlink: 'syz.2.5573': attribute type 11 has an invalid length. [ 460.038647][T22392] Bluetooth: hci3: unexpected event for opcode 0x080f [ 460.115530][T25626] vlan2: entered promiscuous mode [ 460.119672][T25626] bridge0: entered promiscuous mode [ 460.200974][T25611] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25611 comm=syz.7.5575 [ 460.380530][T25644] bond3: option downdelay: invalid value (18446744073709551615) [ 460.384280][T25644] bond3: option downdelay: allowed values 0 - 2147483647 [ 460.385614][T25651] netlink: 'syz.8.5585': attribute type 1 has an invalid length. [ 460.399227][T25644] bond3 (unregistering): Released all slaves [ 460.443293][T25655] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 460.445373][T25651] bond1: entered promiscuous mode [ 460.448814][T25651] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.455929][T25657] bond1: entered allmulticast mode [ 460.473542][T25651] bond1: (slave bridge1): making interface the new active one [ 460.476038][T25651] bridge1: entered promiscuous mode [ 460.478239][T25651] bridge1: entered allmulticast mode [ 460.482853][T25651] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 460.600773][T25670] Cannot find del_set index 4 as target [ 460.709850][T25681] input input69: cannot allocate more than FF_MAX_EFFECTS effects [ 460.852991][T25690] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=55844 sclass=netlink_xfrm_socket pid=25690 comm=syz.2.5597 [ 460.865612][T25690] xt_hashlimit: size too large, truncated to 1048576 [ 460.906813][T22392] Bluetooth: hci0: command 0x041b tx timeout [ 460.913057][ T40] kauditd_printk_skb: 30417 callbacks suppressed [ 460.913074][ T40] audit: type=1400 audit(2000000315.531:40186): avc: denied { create } for pid=25684 comm="syz.8.5596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 460.926841][ T40] audit: type=1400 audit(2000000315.541:40187): avc: denied { connect } for pid=25684 comm="syz.8.5596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 460.935341][ T40] audit: type=1400 audit(2000000315.541:40188): avc: denied { create } for pid=25689 comm="syz.2.5597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 460.961457][ T40] audit: type=1400 audit(2000000315.581:40189): avc: denied { recv } for pid=5839 comm="syz-executor" saddr=127.0.0.1 src=53698 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 460.978769][ T40] audit: type=1400 audit(2000000315.601:40190): avc: denied { create } for pid=25694 comm="syz.2.5598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 460.985679][T25695] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 460.987142][ T40] audit: type=1400 audit(2000000315.601:40191): avc: denied { getopt } for pid=25694 comm="syz.2.5598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 460.993319][T25695] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 461.032003][ T40] audit: type=1400 audit(2000000315.651:40192): avc: denied { search } for pid=25698 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 461.042737][ T40] audit: type=1400 audit(2000000315.651:40193): avc: denied { search } for pid=25698 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 461.053733][ T40] audit: type=1400 audit(2000000315.651:40194): avc: denied { search } for pid=25698 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1905 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 461.070393][ T40] audit: type=1400 audit(2000000315.651:40195): avc: denied { search } for pid=25698 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1906 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 461.730048][T25739] __nla_validate_parse: 4 callbacks suppressed [ 461.730064][T25739] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5606'. [ 461.741735][T25739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.752386][T25732] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5605'. [ 461.798396][T25739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.897298][T25749] netlink: 248 bytes leftover after parsing attributes in process `syz.7.5609'. [ 461.954849][T25751] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5611'. [ 461.954851][T25752] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5611'. [ 461.972466][T25755] tmpfs: Bad value for 'mpol' [ 462.049568][T25768] sctp: [Deprecated]: syz.4.5615 (pid 25768) Use of int in max_burst socket option deprecated. [ 462.049568][T25768] Use struct sctp_assoc_value instead [ 462.159433][ T5945] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 462.159440][T25779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5620'. [ 462.162762][T25780] random: crng reseeded on system resumption [ 462.168052][T25775] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 462.199260][T25788] netlink: 248 bytes leftover after parsing attributes in process `syz.4.5622'. [ 462.341380][T25799] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 462.343084][T25779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5620'. [ 462.343525][T25799] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 462.346308][T25783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5620'. [ 462.370115][T25799] vhci_hcd vhci_hcd.0: Device attached [ 462.410100][T25802] vhci_hcd: connection closed [ 462.410313][T13103] vhci_hcd vhci_hcd.8: stop threads [ 462.413823][T13103] vhci_hcd vhci_hcd.8: release socket [ 462.415848][T13103] vhci_hcd vhci_hcd.8: disconnect device [ 462.495281][T25813] xt_hashlimit: size too large, truncated to 1048576 [ 462.629698][T25823] netlink: 'syz.4.5634': attribute type 1 has an invalid length. [ 462.633016][T25823] netlink: 'syz.4.5634': attribute type 2 has an invalid length. [ 462.642858][T25823] ip6gre1: entered promiscuous mode [ 462.645126][T25823] ip6gre1: entered allmulticast mode [ 462.726295][T25830] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5637'. [ 462.891850][T25837] new mount options do not match the existing superblock, will be ignored [ 462.948175][T25839] input input70: cannot allocate more than FF_MAX_EFFECTS effects [ 463.054391][T25848] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 463.056472][T25848] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 463.059363][T25848] vhci_hcd vhci_hcd.0: Device attached [ 463.065813][T25849] vhci_hcd: cannot find a urb of seqnum 5 max seqnum 0 [ 463.077254][T13103] vhci_hcd vhci_hcd.7: stop threads [ 463.078987][T13103] vhci_hcd vhci_hcd.7: release socket [ 463.080730][T13103] vhci_hcd vhci_hcd.7: disconnect device [ 463.123973][T25854] macsec0: entered promiscuous mode [ 463.130858][T25854] macsec0: entered allmulticast mode [ 463.132615][T25854] veth1_macvtap: entered allmulticast mode [ 463.226962][T25855] /dev/sr0: Can't open blockdev [ 463.327210][T25857] /dev/sr0: Can't open blockdev [ 463.771176][T25878] futex_wake_op: syz.8.5647 tries to shift op by -1; fix this program [ 464.500418][T25883] rtc_cmos 00:05: Alarms can be up to one day in the future [ 464.602008][T25886] input input71: cannot allocate more than FF_MAX_EFFECTS effects [ 465.917083][ T40] kauditd_printk_skb: 21293 callbacks suppressed [ 465.917101][ T40] audit: type=1326 audit(2000000320.531:61489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25880 comm="syz.8.5649" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7f19c629 code=0x50000 [ 465.927610][ T40] audit: type=1326 audit(2000000320.541:61490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25880 comm="syz.8.5649" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7f19c629 code=0x50000 [ 465.935134][ T40] audit: type=1326 audit(2000000320.541:61491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25880 comm="syz.8.5649" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7f19c629 code=0x50000 [ 465.943429][ T40] audit: type=1326 audit(2000000320.541:61492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25880 comm="syz.8.5649" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7f19c629 code=0x50000 [ 465.953224][ T40] audit: type=1326 audit(2000000320.541:61493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25880 comm="syz.8.5649" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7f19c629 code=0x50000 [ 465.963097][ T40] audit: type=1326 audit(2000000320.541:61494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25880 comm="syz.8.5649" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7f19c629 code=0x50000 [ 465.972938][ T40] audit: type=1326 audit(2000000320.541:61495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25880 comm="syz.8.5649" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7f19c629 code=0x50000 [ 465.982940][ T40] audit: type=1326 audit(2000000320.541:61496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25880 comm="syz.8.5649" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7f19c629 code=0x50000 [ 465.992847][ T40] audit: type=1326 audit(2000000320.541:61497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25880 comm="syz.8.5649" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7f19c629 code=0x50000 [ 466.002670][ T40] audit: type=1326 audit(2000000320.541:61498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25880 comm="syz.8.5649" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7f19c629 code=0x50000 [ 466.107659][T25854] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 466.110849][T25876] netlink: 'syz.7.5648': attribute type 1 has an invalid length. [ 466.113518][T25876] netlink: 'syz.7.5648': attribute type 1 has an invalid length. [ 466.116082][T25876] netlink: 'syz.7.5648': attribute type 8 has an invalid length. [ 466.209561][ T5945] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 466.214965][T25890] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 466.282325][T25899] SELinux: policydb string does not match my string SE Linux [ 466.285697][T25899] SELinux: failed to load policy [ 466.317011][T25906] syzkaller0: entered promiscuous mode [ 466.318842][T25906] syzkaller0: entered allmulticast mode [ 466.340934][T25910] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 466.807331][T25936] /dev/sr0: Can't open blockdev [ 466.890721][T25938] random: crng reseeded on system resumption [ 466.958894][T25938] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 466.989905][T25938] kvm: pic: level sensitive irq not supported [ 466.990250][T25938] picdev_read: 6 callbacks suppressed [ 466.990258][T25938] kvm: pic: non byte read [ 466.998311][T25938] kvm: pic: level sensitive irq not supported [ 466.998694][T25938] kvm: pic: non byte read [ 467.004074][T25938] kvm: pic: level sensitive irq not supported [ 467.004370][T25938] kvm: pic: non byte read [ 467.232963][T25946] wg1: entered promiscuous mode [ 467.234458][T25946] wg1: entered allmulticast mode [ 467.308353][T25952] __nla_validate_parse: 6 callbacks suppressed [ 467.308365][T25952] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5673'. [ 467.326302][T25952] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=25952 comm=syz.2.5673 [ 467.373666][T25960] 9p: Unknown uid 00000000004294967295 [ 467.442719][T25963] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 467.490847][T25968] netlink: 248 bytes leftover after parsing attributes in process `syz.7.5678'. [ 467.586412][ T9] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 467.634024][T25973] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.5680'. [ 467.640852][T25973] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5680'. [ 467.670400][T25966] netlink: 'syz.4.5672': attribute type 10 has an invalid length. [ 467.683069][T25966] team0: Port device dummy0 added [ 467.750902][ T9] usb 13-1: config 0 interface 0 has no altsetting 0 [ 467.755937][ T9] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 467.760035][ T9] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 467.762769][ T9] usb 13-1: Product: syz [ 467.764506][ T9] usb 13-1: Manufacturer: syz [ 467.766646][ T9] usb 13-1: SerialNumber: syz [ 467.771342][ T9] usb 13-1: config 0 descriptor?? [ 467.779467][ T9] usb 13-1: selecting invalid altsetting 0 [ 467.843356][T25984] overlayfs: upper fs does not support file handles, falling back to index=off. [ 467.980803][T16474] usb 13-1: USB disconnect, device number 3 [ 468.112420][T25989] PID 25989 killed due to inadequate hugepage pool [ 468.259123][T26002] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 468.448899][T26018] netlink: 'syz.2.5694': attribute type 4 has an invalid length. [ 468.454804][T26018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5694'. [ 468.597621][T26024] netlink: 'syz.2.5697': attribute type 28 has an invalid length. [ 468.601216][T26024] netlink: 'syz.2.5697': attribute type 3 has an invalid length. [ 468.604625][T26024] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5697'. [ 468.660475][T26033] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5700'. [ 468.726166][T26040] syzkaller0: entered promiscuous mode [ 468.728469][T26040] syzkaller0: entered allmulticast mode [ 468.931462][T26048] bond5: invalid ARP target 0.0.0.0 specified for addition [ 468.934667][T26048] bond5: option arp_ip_target: invalid value (0) [ 468.948072][T26048] bond5 (unregistering): Released all slaves [ 471.618137][T26026] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 471.676811][ T40] kauditd_printk_skb: 8846 callbacks suppressed [ 471.676824][ T40] audit: type=1400 audit(2000000326.291:70339): avc: denied { read write } for pid=26060 comm="syz.4.5707" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 471.689859][ T40] audit: type=1400 audit(2000000326.291:70340): avc: denied { open } for pid=26060 comm="syz.4.5707" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 471.698359][ T40] audit: type=1400 audit(2000000326.301:70341): avc: denied { create } for pid=26060 comm="syz.4.5707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 471.712465][ T40] audit: type=1400 audit(2000000326.301:70342): avc: denied { read } for pid=26062 comm="syz.2.5708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 471.719484][T26064] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 471.723065][ T40] audit: type=1400 audit(2000000326.321:70343): avc: denied { ioctl } for pid=26060 comm="syz.4.5707" path="socket:[124318]" dev="sockfs" ino=124318 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 471.731334][ T40] audit: type=1400 audit(2000000326.331:70344): avc: denied { read write } for pid=26062 comm="syz.2.5708" name="frontend0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 471.740204][ T40] audit: type=1400 audit(2000000326.331:70345): avc: denied { open } for pid=26062 comm="syz.2.5708" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 471.749292][ T40] audit: type=1400 audit(2000000326.341:70346): avc: denied { ioctl } for pid=26062 comm="syz.2.5708" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=951 ioctlcmd=0x6f52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 471.758250][ T40] audit: type=1400 audit(2000000326.371:70347): avc: denied { create } for pid=26068 comm="syz.8.5710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 471.764903][ T40] audit: type=1400 audit(2000000326.381:70348): avc: denied { prog_run } for pid=26072 comm="syz.4.5711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 471.774035][T26075] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 471.787128][T26081] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5713'. [ 471.841301][T26087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5717'. [ 471.851727][T26087] batadv_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 471.863856][T26085] syzkaller0: entered promiscuous mode [ 471.865667][T26085] syzkaller0: entered allmulticast mode [ 471.901157][T26102] netlink: 'syz.7.5721': attribute type 1 has an invalid length. [ 471.948922][T26104] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 471.953576][T26109] tmpfs: Bad value for 'mpol' [ 471.960031][T26102] 8021q: adding VLAN 0 to HW filter on device bond4 [ 471.984992][T26102] bond4: (slave geneve3): making interface the new active one [ 471.988605][T26102] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 471.990316][T26111] netlink: 248 bytes leftover after parsing attributes in process `syz.4.5724'. [ 472.117333][T26128] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26128 comm=syz.2.5731 [ 472.149992][T26132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56849 sclass=netlink_route_socket pid=26132 comm=syz.8.5732 [ 472.165044][T26128] batadv_slave_1: entered promiscuous mode [ 472.204475][T26127] batadv_slave_1: left promiscuous mode [ 472.257874][T26140] syzkaller0: entered promiscuous mode [ 472.259838][T26140] syzkaller0: entered allmulticast mode [ 472.323696][T26144] team0 (unregistering): Port device team_slave_0 removed [ 472.335722][T26144] team0 (unregistering): Port device team_slave_1 removed [ 472.343551][T26144] team0 (unregistering): Port device dummy0 removed [ 472.370675][T26150] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 472.400497][T26153] 8021q: VLANs not supported on ip_vti0 [ 472.463439][T26162] program syz.8.5744 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 472.476482][T26164] syzkaller0: left promiscuous mode [ 472.478255][T26164] syzkaller0: left allmulticast mode [ 472.490574][T26168] __nla_validate_parse: 2 callbacks suppressed [ 472.490585][T26168] netlink: 248 bytes leftover after parsing attributes in process `syz.8.5746'. [ 472.549904][T26172] syzkaller0: entered promiscuous mode [ 472.551866][T26172] syzkaller0: entered allmulticast mode [ 472.560766][T26159] nbd0: detected capacity change from 0 to 63 [ 472.564934][ T5945] block nbd0: Receive control failed (result -32) [ 472.565599][T21664] block nbd0: Send control failed (result -32) [ 472.571533][T21664] block nbd0: Request send failed, requeueing [ 472.589522][ T168] block nbd0: Dead connection, failed to find a fallback [ 472.592130][ T168] block nbd0: shutting down sockets [ 472.594182][ T168] blk_print_req_error: 136 callbacks suppressed [ 472.594194][ T168] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 472.603966][ T168] buffer_io_error: 162 callbacks suppressed [ 472.603977][ T168] Buffer I/O error on dev nbd0, logical block 0, async page read [ 472.609452][T21664] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 472.610333][T26181] fuse: Bad value for 'user_id' [ 472.612543][T21664] Buffer I/O error on dev nbd0, logical block 1, async page read [ 472.614366][T26181] fuse: Bad value for 'user_id' [ 472.616789][T21664] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 472.616806][T21664] Buffer I/O error on dev nbd0, logical block 2, async page read [ 472.616830][T21664] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 472.616843][T21664] Buffer I/O error on dev nbd0, logical block 3, async page read [ 472.616876][T21664] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 472.633981][T21664] Buffer I/O error on dev nbd0, logical block 0, async page read [ 472.636639][T21664] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 472.639825][T21664] Buffer I/O error on dev nbd0, logical block 1, async page read [ 472.642367][T21664] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 472.645412][T21664] Buffer I/O error on dev nbd0, logical block 2, async page read [ 472.648033][T21664] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 472.651100][T21664] Buffer I/O error on dev nbd0, logical block 3, async page read [ 472.656839][T21664] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 472.656856][T21664] Buffer I/O error on dev nbd0, logical block 0, async page read [ 472.656879][T21664] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 472.656892][T21664] Buffer I/O error on dev nbd0, logical block 1, async page read [ 472.657272][T21664] ldm_validate_partition_table(): Disk read failed. [ 472.657518][T21664] Dev nbd0: unable to read RDB block 0 [ 472.657829][T21664] nbd0: unable to read partition table [ 472.667188][T21664] ldm_validate_partition_table(): Disk read failed. [ 472.667441][T21664] Dev nbd0: unable to read RDB block 0 [ 472.667738][T21664] nbd0: unable to read partition table [ 472.778003][T26196] netlink: 248 bytes leftover after parsing attributes in process `syz.4.5757'. [ 472.858807][T26207] netlink: 'syz.4.5761': attribute type 29 has an invalid length. [ 472.861994][T26207] netlink: 'syz.4.5761': attribute type 29 has an invalid length. [ 472.899326][T26211] syzkaller0: entered promiscuous mode [ 472.901284][T26211] syzkaller0: entered allmulticast mode [ 473.133130][T26226] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5767'. [ 473.133130][T26227] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5767'. [ 473.159401][T14078] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 473.311535][T26239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5772'. [ 473.314719][T26239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5772'. [ 473.317606][T14078] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 473.321162][T14078] usb 9-1: config 0 interface 0 has no altsetting 0 [ 473.327666][T14078] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 473.331442][T14078] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 473.334947][T14078] usb 9-1: Product: syz [ 473.338414][T14078] usb 9-1: Manufacturer: syz [ 473.339979][T14078] usb 9-1: SerialNumber: syz [ 473.344925][T14078] usb 9-1: config 0 descriptor?? [ 473.352766][T14078] usb 9-1: selecting invalid altsetting 0 [ 473.361948][T26245] syzkaller0: entered promiscuous mode [ 473.363956][T26245] syzkaller0: entered allmulticast mode [ 473.549242][T26260] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 473.557955][T26213] netlink: 'syz.4.5764': attribute type 1 has an invalid length. [ 473.560446][T26213] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5764'. [ 473.563274][T26213] netlink: 'syz.4.5764': attribute type 1 has an invalid length. [ 473.565703][T26213] netlink: 'syz.4.5764': attribute type 8 has an invalid length. [ 473.568979][T26213] netlink: 606 bytes leftover after parsing attributes in process `syz.4.5764'. [ 473.571853][T26213] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5764'. [ 473.580064][ T53] usb 9-1: USB disconnect, device number 12 [ 473.585938][T26263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.590705][T26263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.598713][T26263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.600899][T26263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.614725][T26254] xt_CT: No such helper "snmp_trap" [ 473.808513][T26213] usb usb1: check_ctrlrecip: process 26213 (syz.4.5764) requesting ep 01 but needs 81 [ 473.811593][T26213] usb usb1: usbfs: process 26213 (syz.4.5764) did not claim interface 0 before use [ 474.008080][T26280] syzkaller0: entered promiscuous mode [ 474.010586][T26280] syzkaller0: entered allmulticast mode [ 474.180297][T26284] program syz.7.5790 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 474.256477][ T9] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 474.341733][T26290] : entered promiscuous mode [ 474.350620][T26290] Cannot find add_set index 65532 as target [ 474.419307][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 474.422838][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.427320][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 474.431063][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.499256][T26297] netlink: 'syz.7.5794': attribute type 1 has an invalid length. [ 474.637833][ T9] usb 7-1: GET_CAPABILITIES returned 0 [ 474.639736][ T9] usbtmc 7-1:16.0: can't read capabilities [ 474.841985][T26278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5786'. [ 474.915988][T26304] syzkaller0: entered promiscuous mode [ 474.919201][T26304] syzkaller0: entered allmulticast mode [ 474.923439][ T5988] usb 7-1: USB disconnect, device number 42 [ 474.976656][ T8911] usb 12-1: new full-speed USB device number 29 using dummy_hcd [ 475.014742][T26311] bridge: RTM_NEWNEIGH with unconfigured vlan 6 on bridge0 [ 475.137998][ T8911] usb 12-1: config 0 has an invalid interface number: 1 but max is 0 [ 475.141726][ T8911] usb 12-1: config 0 has no interface number 0 [ 475.144558][ T8911] usb 12-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 475.150540][ T8911] usb 12-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 64 [ 475.155317][ T8911] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 475.159109][ T8911] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.164073][ T8911] usb 12-1: config 0 descriptor?? [ 475.168082][T26302] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 475.173658][ T8911] iowarrior 12-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 475.274673][T26323] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 477.750234][ T40] kauditd_printk_skb: 321 callbacks suppressed [ 477.750250][ T40] audit: type=1400 audit(2000000332.381:70670): avc: denied { recv } for pid=5839 comm="syz-executor" saddr=127.0.0.1 src=53698 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 477.751186][T14841] usb 12-1: USB disconnect, device number 29 [ 477.780925][ T40] audit: type=1400 audit(2000000332.401:70671): avc: denied { create } for pid=26338 comm="syz.7.5807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 477.798569][T26339] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 477.801649][T26339] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 477.804736][T26339] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 477.806367][ T40] audit: type=1400 audit(2000000332.421:70672): avc: denied { mounton } for pid=26337 comm="syz.4.5808" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 477.818356][ T40] audit: type=1400 audit(2000000332.421:70673): avc: denied { setopt } for pid=26338 comm="syz.7.5807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 477.818590][T26339] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 477.824785][ T40] audit: type=1400 audit(2000000332.421:70674): avc: denied { connect } for pid=26338 comm="syz.7.5807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 477.835403][ T40] audit: type=1400 audit(2000000332.421:70675): avc: denied { name_connect } for pid=26338 comm="syz.7.5807" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 477.844067][ T40] audit: type=1400 audit(2000000332.421:70676): avc: denied { getopt } for pid=26338 comm="syz.7.5807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 477.850429][ T40] audit: type=1400 audit(2000000332.421:70677): avc: denied { create } for pid=26338 comm="syz.7.5807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 477.856980][ T40] audit: type=1400 audit(2000000332.421:70678): avc: denied { write } for pid=26338 comm="syz.7.5807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 477.863552][ T40] audit: type=1400 audit(2000000332.421:70679): avc: denied { read } for pid=26338 comm="syz.7.5807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 477.905056][T26350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26350 comm=syz.4.5810 [ 478.074314][T26369] __nla_validate_parse: 3 callbacks suppressed [ 478.074326][T26369] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5819'. [ 478.080567][T26369] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5819'. [ 478.281184][T26397] openvswitch: netlink: Message has 4 unknown bytes. [ 478.284235][T26397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.332618][T26395] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 478.339346][T26398] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 478.343587][T26395] block device autoloading is deprecated and will be removed. [ 478.348333][T26398] block device autoloading is deprecated and will be removed. [ 478.356003][T26391] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5827'. [ 478.362522][T26400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5829'. [ 478.457198][T26411] syzkaller0: entered promiscuous mode [ 478.459066][T26411] syzkaller0: entered allmulticast mode [ 478.575372][T26425] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5838'. [ 478.670504][T26438] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 478.675858][T26438] nbd: must specify a size in bytes for the device [ 478.819977][T26448] syzkaller0: entered promiscuous mode [ 478.821877][T26448] syzkaller0: entered allmulticast mode [ 478.946673][ T5945] Bluetooth: hci0: unexpected event for opcode 0x042f [ 479.201218][T26472] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.203752][T26472] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.235986][T26472] wg1: left promiscuous mode [ 479.237703][T26472] wg1: left allmulticast mode [ 479.275905][T26472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.288592][T26472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.378719][T26472] mac80211_hwsim hwsim60 wlan0: left promiscuous mode [ 479.388801][T26472] tipc: Resetting bearer [ 479.391241][T26472] syzkaller0: left promiscuous mode [ 479.393015][T26472] syzkaller0: left allmulticast mode [ 479.400602][T26472] veth3: left promiscuous mode [ 479.403611][T26472] ip6gre1: left promiscuous mode [ 479.405555][T26472] ip6gre1: left allmulticast mode [ 479.421305][T13656] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.424283][T13656] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.451458][T26495] syzkaller0: entered promiscuous mode [ 479.453311][T26495] syzkaller0: entered allmulticast mode [ 479.478957][T26486] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.499057][T13656] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.817887][T26521] netlink: 'syz.2.5867': attribute type 15 has an invalid length. [ 480.899838][T26533] pimreg: entered allmulticast mode [ 480.945244][T26540] CIFS mount error: No usable UNC path provided in device string! [ 480.945244][T26540] [ 480.954965][T26540] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 481.128960][T26560] syz.7.5877 (26560): drop_caches: 2 [ 481.279503][T26573] syzkaller0: entered promiscuous mode [ 481.281517][T26573] syzkaller0: entered allmulticast mode [ 481.328562][T26575] syzkaller0: entered promiscuous mode [ 481.330423][T26575] syzkaller0: entered allmulticast mode [ 481.350553][T26575] tipc: Started in network mode [ 481.352426][T26575] tipc: Node identity 72da07b31dec, cluster identity 4711 [ 481.355995][T26575] tipc: Enabled bearer , priority 0 [ 481.362446][T26575] tipc: Resetting bearer [ 481.364657][T26575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.367926][T26575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.381050][T26574] tipc: Resetting bearer [ 481.392936][T26574] tipc: Disabling bearer [ 481.420190][T16474] IPVS: starting estimator thread 0... [ 481.425247][T26577] binder_alloc: 26576: binder_alloc_buf, no vma [ 481.460151][T26580] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5884'. [ 481.463393][T26580] netlink: 'syz.8.5884': attribute type 6 has an invalid length. [ 481.466544][T26580] netlink: 'syz.8.5884': attribute type 5 has an invalid length. [ 481.469362][T26580] netlink: 'syz.8.5884': attribute type 4 has an invalid length. [ 481.485276][T26582] random: crng reseeded on system resumption [ 481.494167][T26582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26582 comm=syz.7.5885 [ 481.516393][T26578] IPVS: using max 42 ests per chain, 100800 per kthread [ 481.583097][T26586] Bluetooth: MGMT ver 1.23 [ 481.585483][T26586] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5886'. [ 481.596058][T26586] team0: Port device team_slave_1 removed [ 481.607677][T26580] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 481.611665][T26580] dlm: no local IP address has been set [ 481.614738][T26580] dlm: cannot start dlm midcomms -107 [ 482.102780][T26599] syzkaller0: entered promiscuous mode [ 482.105272][T26599] syzkaller0: entered allmulticast mode [ 482.257034][T26603] [U]  [ 482.318427][T26606] mac80211_hwsim hwsim47 wlan1: entered allmulticast mode [ 482.322495][T26608] netlink: 'syz.4.5894': attribute type 12 has an invalid length. [ 482.326013][T26608] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.5894'. [ 482.329661][T26601] tmpfs: Bad value for 'mpol' [ 482.370940][T26610] macsec1: entered promiscuous mode [ 482.476882][ T5945] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 482.480160][ T5945] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 482.480197][ T5945] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 482.488269][ T5945] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 482.563144][T26625] MINIX-fs: blocksize too small for device [ 482.577910][T26630] dvmrp0: entered allmulticast mode [ 482.584351][T26630] netlink: 'syz.8.5902': attribute type 29 has an invalid length. [ 482.609117][T26634] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5904'. [ 482.670060][T26642] syz_tun: entered allmulticast mode [ 482.711492][T26647] x_tables: duplicate underflow at hook 2 [ 482.728914][T26647] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 482.874001][ T40] kauditd_printk_skb: 367 callbacks suppressed [ 482.874019][ T40] audit: type=1400 audit(2000000337.491:71047): avc: denied { read append } for pid=26663 comm="syz.8.5913" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 482.885827][ T40] audit: type=1400 audit(2000000337.491:71048): avc: denied { open } for pid=26663 comm="syz.8.5913" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 482.895159][ T40] audit: type=1400 audit(2000000337.491:71049): avc: denied { map_create } for pid=26663 comm="syz.8.5913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 482.904014][ T40] audit: type=1400 audit(2000000337.491:71050): avc: denied { map_read map_write } for pid=26663 comm="syz.8.5913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 482.911640][ T40] audit: type=1400 audit(2000000337.531:71051): avc: denied { create } for pid=26665 comm="syz.4.5914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 482.920188][ T40] audit: type=1400 audit(2000000337.531:71052): avc: denied { bind } for pid=26665 comm="syz.4.5914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 482.930191][ T40] audit: type=1400 audit(2000000337.531:71053): avc: denied { execmem } for pid=26665 comm="syz.4.5914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 482.939171][ T40] audit: type=1400 audit(2000000337.541:71054): avc: denied { read write } for pid=26666 comm="syz.8.5915" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 482.948131][ T40] audit: type=1400 audit(2000000337.541:71055): avc: denied { open } for pid=26666 comm="syz.8.5915" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 482.955804][ T40] audit: type=1400 audit(2000000337.541:71056): avc: denied { read write } for pid=26666 comm="syz.8.5915" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 482.986116][T26670] tmpfs: Bad value for 'mpol' [ 483.205841][T26687] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5917'. [ 483.317473][T26691] netlink: 'syz.7.5920': attribute type 10 has an invalid length. [ 483.326537][T26691] bond0: (slave ): Enslaving as an active interface with an up link [ 483.333294][T26691] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5920'. [ 483.345785][T26691] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5920'. [ 484.376009][T26722] ptrace attach of "/syz-executor exec"[23486] was attempted by "/syz-executor exec"[26722] [ 484.455047][T26734] netlink: 'syz.4.5935': attribute type 1 has an invalid length. [ 484.459870][T26734] netlink: 'syz.4.5935': attribute type 1 has an invalid length. [ 484.462896][T26734] netlink: 9172 bytes leftover after parsing attributes in process `syz.4.5935'. [ 484.468465][T26737] overlay: Bad value for 'workdir' [ 484.476061][T26738] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5930'. [ 484.481742][T26738] xt_hashlimit: size too large, truncated to 1048576 [ 484.503985][T26743] sctp: [Deprecated]: syz.7.5939 (pid 26743) Use of struct sctp_assoc_value in delayed_ack socket option. [ 484.503985][T26743] Use struct sctp_sack_info instead [ 484.510384][ T5945] Bluetooth: hci1: unexpected event for opcode 0x080e [ 484.566439][T26752] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5942'. [ 484.743975][T26767] Invalid source name [ 484.745502][T26767] UBIFS error (pid: 26767): cannot open "/dev/sg0", error -22 [ 484.835349][T26773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5950'. [ 484.841039][T26773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5950'. [ 484.843856][T26773] netlink: 'syz.4.5950': attribute type 18 has an invalid length. [ 484.846467][T26773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5950'. [ 484.882115][T26775] syzkaller0: entered promiscuous mode [ 484.883914][T26775] syzkaller0: entered allmulticast mode [ 484.914476][T26777] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5952'. [ 485.151140][T26784] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 485.474879][T26819] use of bytesused == 0 is deprecated and will be removed in the future, [ 485.478671][T26819] use the actual size instead. [ 485.623381][T26839] syzkaller0: entered promiscuous mode [ 485.625726][T26839] syzkaller0: entered allmulticast mode [ 485.779807][T26845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=26845 comm=syz.7.5974 [ 485.809558][T26848] netlink: 'syz.8.5975': attribute type 1 has an invalid length. [ 485.813245][T26848] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 486.054962][T26868] syzkaller0: entered promiscuous mode [ 486.060610][T26868] syzkaller0: entered allmulticast mode [ 486.264060][T26874] overlayfs: failed lookup in lower (newroot/131, name='bus', err=-40): overlapping layers [ 486.371681][T26880] IPv4: Oversized IP packet from 172.20.20.24 [ 486.375432][ C2] IPv4: Oversized IP packet from 172.20.20.24 [ 486.378626][ C2] IPv4: Oversized IP packet from 172.20.20.24 [ 486.382498][T26879] program syz.8.5986 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 486.533787][T26886] CIFS: Unable to determine destination address [ 486.764917][T26897] syzkaller0: entered promiscuous mode [ 486.768397][T26897] syzkaller0: entered allmulticast mode [ 487.256557][T17664] IPVS: starting estimator thread 0... [ 487.347866][T26927] i2c i2c-1: dtv_property_process_set: SET cmd 0x00007465 undefined [ 487.366417][T26923] IPVS: using max 43 ests per chain, 103200 per kthread [ 487.407654][T26931] syzkaller0: entered promiscuous mode [ 487.409972][T26931] syzkaller0: entered allmulticast mode [ 487.662996][T26904] delete_channel: no stack [ 487.967665][ T40] kauditd_printk_skb: 305 callbacks suppressed [ 487.967678][ T40] audit: type=1400 audit(2000000342.591:71362): avc: denied { execmem } for pid=26956 comm="syz.7.6013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 487.969006][T26955] syzkaller0: entered promiscuous mode [ 487.979500][T26955] syzkaller0: entered allmulticast mode [ 488.107942][ T40] audit: type=1400 audit(2000000342.731:71363): avc: denied { read append } for pid=26959 comm="syz.8.6014" name="comedi0" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 488.115282][ T40] audit: type=1400 audit(2000000342.731:71364): avc: denied { open } for pid=26959 comm="syz.8.6014" path="/dev/comedi0" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 488.123251][T26960] SELinux: ebitmap: truncated map [ 488.128991][ T40] audit: type=1400 audit(2000000342.731:71365): avc: denied { load_policy } for pid=26959 comm="syz.8.6014" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 488.132716][T26960] SELinux: failed to load policy [ 488.144116][ T40] audit: type=1400 audit(2000000342.761:71366): avc: denied { ioctl } for pid=26959 comm="syz.8.6014" path="/dev/comedi0" dev="devtmpfs" ino=1302 ioctlcmd=0x640b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 488.185238][T26963] tmpfs: Group quota inode hardlimit too large. [ 488.185239][ T40] audit: type=1400 audit(2000000342.801:71367): avc: denied { mounton } for pid=26962 comm="syz.7.6016" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 488.192095][T26966] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 488.197734][ T40] audit: type=1400 audit(2000000342.821:71368): avc: denied { create } for pid=26962 comm="syz.7.6016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 488.212069][ T40] audit: type=1400 audit(2000000342.821:71369): avc: denied { bind } for pid=26962 comm="syz.7.6016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 488.220028][ T40] audit: type=1400 audit(2000000342.821:71370): avc: denied { setopt } for pid=26962 comm="syz.7.6016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 488.229329][ T40] audit: type=1400 audit(2000000342.831:71371): avc: denied { accept } for pid=26962 comm="syz.7.6016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 488.486363][ T5988] usb 13-1: new full-speed USB device number 4 using dummy_hcd [ 488.647804][ T5988] usb 13-1: config 0 has an invalid interface number: 1 but max is 0 [ 488.650484][ T5988] usb 13-1: config 0 has no interface number 0 [ 488.652490][ T5988] usb 13-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 488.656050][ T5988] usb 13-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 64 [ 488.659644][ T5988] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 488.662585][ T5988] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.666697][ T5988] usb 13-1: config 0 descriptor?? [ 488.668875][T26970] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 488.673965][ T5988] iowarrior 13-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 488.809992][T26983] syzkaller0: entered promiscuous mode [ 488.812150][T26983] syzkaller0: entered allmulticast mode [ 488.972461][T26989] PKCS7: Unknown OID: [4] 0.38.35.36.951720.33.17 [ 488.975191][T26989] PKCS7: Only support pkcs7_signedData type [ 489.023946][T26991] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 489.947172][T27006] syzkaller0: entered promiscuous mode [ 489.948974][T27006] syzkaller0: entered allmulticast mode [ 491.262405][T14841] usb 13-1: USB disconnect, device number 4 [ 491.289804][T27018] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 491.373871][T27030] __nla_validate_parse: 10 callbacks suppressed [ 491.373972][T27030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6037'. [ 491.381453][T27024] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6036'. [ 491.533967][T27049] syzkaller0: entered promiscuous mode [ 491.535765][T27049] syzkaller0: entered allmulticast mode [ 491.555828][T27051] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 491.602077][T27054] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6047'. [ 491.647214][T27056] syzkaller1: entered promiscuous mode [ 491.649435][T27056] syzkaller1: entered allmulticast mode [ 491.693742][T27062] geneve2: entered promiscuous mode [ 491.831531][T27078] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 491.883128][T27084] syzkaller0: entered promiscuous mode [ 491.884975][T27084] syzkaller0: entered allmulticast mode [ 491.892680][T27086] FAULT_INJECTION: forcing a failure. [ 491.892680][T27086] name failslab, interval 1, probability 0, space 0, times 0 [ 491.899576][T27086] CPU: 0 UID: 0 PID: 27086 Comm: syz.2.6057 Tainted: G L syzkaller #0 PREEMPT(full) [ 491.899618][T27086] Tainted: [L]=SOFTLOCKUP [ 491.899625][T27086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 491.899635][T27086] Call Trace: [ 491.899642][T27086] [ 491.899649][T27086] dump_stack_lvl+0x100/0x190 [ 491.899723][T27086] should_fail_ex.cold+0x5/0xa [ 491.899778][T27086] ? tomoyo_realpath_from_path+0xb6/0x690 [ 491.899799][T27086] should_failslab+0xc2/0x120 [ 491.899829][T27086] __kmalloc_noprof+0xe0/0x850 [ 491.899860][T27086] tomoyo_realpath_from_path+0xb6/0x690 [ 491.899886][T27086] tomoyo_path_number_perm+0x23c/0x580 [ 491.899915][T27086] ? tomoyo_path_number_perm+0x22e/0x580 [ 491.899945][T27086] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 491.899994][T27086] ? find_held_lock+0x2b/0x80 [ 491.900051][T27086] ? __fget_files+0x215/0x3d0 [ 491.900069][T27086] ? hook_file_ioctl_common+0x146/0x410 [ 491.900099][T27086] ? __fget_files+0x21f/0x3d0 [ 491.900118][T27086] security_file_ioctl+0xd3/0x230 [ 491.900140][T27086] __x64_sys_ioctl+0xb7/0x210 [ 491.900173][T27086] do_syscall_64+0x106/0xf80 [ 491.900190][T27086] ? clear_bhb_loop+0x40/0x90 [ 491.900214][T27086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.900234][T27086] RIP: 0033:0x7f4201d9c629 [ 491.900251][T27086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.900266][T27086] RSP: 002b:00007f4202b7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 491.900284][T27086] RAX: ffffffffffffffda RBX: 00007f4202015fa0 RCX: 00007f4201d9c629 [ 491.900297][T27086] RDX: 0000200000000040 RSI: 0000000040106f52 RDI: 0000000000000005 [ 491.900309][T27086] RBP: 00007f4202b7f090 R08: 0000000000000000 R09: 0000000000000000 [ 491.900319][T27086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.900330][T27086] R13: 00007f4202016038 R14: 00007f4202015fa0 R15: 00007ffe3085f148 [ 491.900353][T27086] [ 491.901196][T27086] ERROR: Out of memory at tomoyo_realpath_from_path. [ 491.950900][T27090] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6058'. [ 491.950914][T27090] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6058'. [ 492.000396][T27086] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 492.120010][T27096] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 492.189139][T27103] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6061'. [ 492.236832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 492.267544][T27112] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6061'. [ 492.267578][T27112] netlink: 'syz.7.6061': attribute type 11 has an invalid length. [ 492.276675][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 492.285340][T27109] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6066'. [ 492.296700][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 492.297093][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 492.316380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 492.337488][T27113] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6066'. [ 492.384690][T27112] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6061'. [ 492.387878][T27112] netlink: 'syz.7.6061': attribute type 11 has an invalid length. [ 492.476570][T27117] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 492.506879][T27122] FAULT_INJECTION: forcing a failure. [ 492.506879][T27122] name failslab, interval 1, probability 0, space 0, times 0 [ 492.510874][T27122] CPU: 0 UID: 0 PID: 27122 Comm: syz.2.6070 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.510891][T27122] Tainted: [L]=SOFTLOCKUP [ 492.510895][T27122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 492.510901][T27122] Call Trace: [ 492.510906][T27122] [ 492.510910][T27122] dump_stack_lvl+0x100/0x190 [ 492.510937][T27122] should_fail_ex.cold+0x5/0xa [ 492.510951][T27122] ? tomoyo_encode2+0xfb/0x3c0 [ 492.510963][T27122] should_failslab+0xc2/0x120 [ 492.510981][T27122] __kmalloc_noprof+0xe0/0x850 [ 492.510995][T27122] ? d_absolute_path+0x136/0x1b0 [ 492.511040][T27122] tomoyo_encode2+0xfb/0x3c0 [ 492.511055][T27122] tomoyo_encode+0x29/0x50 [ 492.511066][T27122] tomoyo_realpath_from_path+0x18c/0x690 [ 492.511083][T27122] tomoyo_path_number_perm+0x23c/0x580 [ 492.511100][T27122] ? tomoyo_path_number_perm+0x22e/0x580 [ 492.511118][T27122] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 492.511150][T27122] ? find_held_lock+0x2b/0x80 [ 492.511164][T27122] ? __fget_files+0x215/0x3d0 [ 492.511174][T27122] ? hook_file_ioctl_common+0x146/0x410 [ 492.511193][T27122] ? __fget_files+0x21f/0x3d0 [ 492.511205][T27122] security_file_ioctl+0xd3/0x230 [ 492.511218][T27122] __x64_sys_ioctl+0xb7/0x210 [ 492.511234][T27122] do_syscall_64+0x106/0xf80 [ 492.511245][T27122] ? clear_bhb_loop+0x40/0x90 [ 492.511259][T27122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.511270][T27122] RIP: 0033:0x7f4201d9c629 [ 492.511279][T27122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.511290][T27122] RSP: 002b:00007f4202b7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 492.511301][T27122] RAX: ffffffffffffffda RBX: 00007f4202015fa0 RCX: 00007f4201d9c629 [ 492.511308][T27122] RDX: 0000200000000040 RSI: 0000000040106f52 RDI: 0000000000000005 [ 492.511314][T27122] RBP: 00007f4202b7f090 R08: 0000000000000000 R09: 0000000000000000 [ 492.511320][T27122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.511327][T27122] R13: 00007f4202016038 R14: 00007f4202015fa0 R15: 00007ffe3085f148 [ 492.511341][T27122] [ 492.511352][T27122] ERROR: Out of memory at tomoyo_realpath_from_path. [ 492.573459][T27126] Bluetooth: MGMT ver 1.23 [ 492.575499][T27122] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 492.888835][ T9] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 492.929157][T27134] syzkaller0: entered promiscuous mode [ 492.931196][T27134] syzkaller0: entered allmulticast mode [ 493.037680][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 493.040881][ T9] usb 7-1: config 0 has no interface number 0 [ 493.042966][ T9] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 493.046869][ T9] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 64 [ 493.050414][ T9] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 493.054175][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.058945][ T9] usb 7-1: config 0 descriptor?? [ 493.062031][T27128] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 493.069519][ T9] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 493.083905][ T40] kauditd_printk_skb: 152 callbacks suppressed [ 493.083925][ T40] audit: type=1400 audit(2000000347.701:71524): avc: denied { create } for pid=27135 comm="syz.8.6075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 493.085630][T27136] syzkaller0: entered promiscuous mode [ 493.095093][T27136] syzkaller0: entered allmulticast mode [ 493.098402][ T40] audit: type=1400 audit(2000000347.731:71525): avc: denied { setopt } for pid=27135 comm="syz.8.6075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 493.099387][T27136] FAULT_INJECTION: forcing a failure. [ 493.099387][T27136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.110964][T27136] CPU: 2 UID: 0 PID: 27136 Comm: syz.8.6075 Tainted: G L syzkaller #0 PREEMPT(full) [ 493.110981][T27136] Tainted: [L]=SOFTLOCKUP [ 493.110985][T27136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 493.110992][T27136] Call Trace: [ 493.110996][T27136] [ 493.111001][T27136] dump_stack_lvl+0x100/0x190 [ 493.111023][T27136] should_fail_ex.cold+0x5/0xa [ 493.111038][T27136] _copy_from_user+0x2e/0xd0 [ 493.111054][T27136] copy_msghdr_from_user+0x9f/0x4f0 [ 493.111106][T27136] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 493.111127][T27136] ___sys_sendmsg+0x106/0x1e0 [ 493.111141][T27136] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.111171][T27136] __sys_sendmsg+0x170/0x220 [ 493.111182][T27136] ? __pfx___sys_sendmsg+0x10/0x10 [ 493.111204][T27136] do_syscall_64+0x106/0xf80 [ 493.111215][T27136] ? clear_bhb_loop+0x40/0x90 [ 493.111230][T27136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.111241][T27136] RIP: 0033:0x7f8b7f19c629 [ 493.111251][T27136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.111261][T27136] RSP: 002b:00007f8b8003f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.111272][T27136] RAX: ffffffffffffffda RBX: 00007f8b7f415fa0 RCX: 00007f8b7f19c629 [ 493.111279][T27136] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000006 [ 493.111285][T27136] RBP: 00007f8b8003f090 R08: 0000000000000000 R09: 0000000000000000 [ 493.111291][T27136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.111298][T27136] R13: 00007f8b7f416038 R14: 00007f8b7f415fa0 R15: 00007fff49de2938 [ 493.111311][T27136] [ 493.246384][ T40] audit: type=1400 audit(2000000347.861:71526): avc: denied { read write } for pid=25047 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 493.254322][ T40] audit: type=1400 audit(2000000347.881:71527): avc: denied { open } for pid=25047 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 493.262336][ T40] audit: type=1400 audit(2000000347.881:71528): avc: denied { ioctl } for pid=25047 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 493.278211][ T40] audit: type=1400 audit(2000000347.891:71529): avc: denied { open } for pid=27137 comm="syz.8.6076" path="/dev/ptyr5" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 493.285905][ T40] audit: type=1400 audit(2000000347.891:71530): avc: denied { ioctl } for pid=27137 comm="syz.8.6076" path="/dev/ptyr5" dev="devtmpfs" ino=148 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 493.294180][ T40] audit: type=1400 audit(2000000347.901:71531): avc: denied { write } for pid=27127 comm="syz.2.6072" name="iowarrior0" dev="devtmpfs" ino=3545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 493.294750][ T53] usb 7-1: USB disconnect, device number 43 [ 493.303516][ T40] audit: type=1400 audit(2000000347.901:71532): avc: denied { prog_load } for pid=27127 comm="syz.2.6072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 493.310884][ T40] audit: type=1400 audit(2000000347.901:71533): avc: denied { prog_run } for pid=27127 comm="syz.2.6072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 493.390215][T27142] syzkaller0: entered promiscuous mode [ 493.392426][T27142] syzkaller0: entered allmulticast mode [ 493.502145][T27153] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 493.537726][T27156] FAULT_INJECTION: forcing a failure. [ 493.537726][T27156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.543326][T27156] CPU: 0 UID: 0 PID: 27156 Comm: syz.7.6084 Tainted: G L syzkaller #0 PREEMPT(full) [ 493.543352][T27156] Tainted: [L]=SOFTLOCKUP [ 493.543358][T27156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 493.543368][T27156] Call Trace: [ 493.543374][T27156] [ 493.543380][T27156] dump_stack_lvl+0x100/0x190 [ 493.543412][T27156] should_fail_ex.cold+0x5/0xa [ 493.543435][T27156] _copy_from_user+0x2e/0xd0 [ 493.543459][T27156] dvb_usercopy+0x27e/0x340 [ 493.543477][T27156] ? __pfx_dvb_frontend_do_ioctl+0x10/0x10 [ 493.543496][T27156] ? __pfx_dvb_usercopy+0x10/0x10 [ 493.543523][T27156] ? selinux_file_ioctl+0x139/0x290 [ 493.543541][T27156] ? selinux_file_ioctl+0xb4/0x290 [ 493.543561][T27156] dvb_frontend_ioctl+0x50/0x80 [ 493.543585][T27156] ? __pfx_dvb_frontend_ioctl+0x10/0x10 [ 493.543610][T27156] __x64_sys_ioctl+0x18e/0x210 [ 493.543635][T27156] do_syscall_64+0x106/0xf80 [ 493.543651][T27156] ? clear_bhb_loop+0x40/0x90 [ 493.543671][T27156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.543687][T27156] RIP: 0033:0x7f74c8f9c629 [ 493.543701][T27156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.543717][T27156] RSP: 002b:00007f74c9d84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 493.543734][T27156] RAX: ffffffffffffffda RBX: 00007f74c9215fa0 RCX: 00007f74c8f9c629 [ 493.543745][T27156] RDX: 0000200000000040 RSI: 0000000040106f52 RDI: 0000000000000005 [ 493.543755][T27156] RBP: 00007f74c9d84090 R08: 0000000000000000 R09: 0000000000000000 [ 493.543765][T27156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.543775][T27156] R13: 00007f74c9216038 R14: 00007f74c9215fa0 R15: 00007ffc6754d878 [ 493.543796][T27156] [ 493.664164][T27162] syzkaller0: entered promiscuous mode [ 493.668996][T27162] syzkaller0: entered allmulticast mode [ 493.736182][T27166] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 493.779491][T27168] syzkaller0: entered promiscuous mode [ 493.786574][T27168] syzkaller0: entered allmulticast mode [ 493.821409][T27168] FAULT_INJECTION: forcing a failure. [ 493.821409][T27168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.827202][T27168] CPU: 0 UID: 0 PID: 27168 Comm: syz.8.6087 Tainted: G L syzkaller #0 PREEMPT(full) [ 493.827229][T27168] Tainted: [L]=SOFTLOCKUP [ 493.827236][T27168] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 493.827247][T27168] Call Trace: [ 493.827253][T27168] [ 493.827260][T27168] dump_stack_lvl+0x100/0x190 [ 493.827294][T27168] should_fail_ex.cold+0x5/0xa [ 493.827318][T27168] _copy_from_user+0x2e/0xd0 [ 493.827343][T27168] move_addr_to_kernel+0x65/0x170 [ 493.827368][T27168] copy_msghdr_from_user+0x417/0x4f0 [ 493.827392][T27168] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 493.827426][T27168] ___sys_sendmsg+0x106/0x1e0 [ 493.827451][T27168] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.827501][T27168] __sys_sendmsg+0x170/0x220 [ 493.827521][T27168] ? __pfx___sys_sendmsg+0x10/0x10 [ 493.827552][T27168] do_syscall_64+0x106/0xf80 [ 493.827570][T27168] ? clear_bhb_loop+0x40/0x90 [ 493.827593][T27168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.827611][T27168] RIP: 0033:0x7f8b7f19c629 [ 493.827627][T27168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.827644][T27168] RSP: 002b:00007f8b8003f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.827661][T27168] RAX: ffffffffffffffda RBX: 00007f8b7f415fa0 RCX: 00007f8b7f19c629 [ 493.827672][T27168] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000006 [ 493.827682][T27168] RBP: 00007f8b8003f090 R08: 0000000000000000 R09: 0000000000000000 [ 493.827691][T27168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.827702][T27168] R13: 00007f8b7f416038 R14: 00007f8b7f415fa0 R15: 00007fff49de2938 [ 493.827727][T27168] [ 493.955153][T27180] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 494.106709][T27192] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 494.190562][T27207] syzkaller0: entered promiscuous mode [ 494.192411][T27207] syzkaller0: entered allmulticast mode [ 494.272224][T27213] syzkaller0: entered promiscuous mode [ 494.274423][T27213] syzkaller0: entered allmulticast mode [ 494.386434][ T5988] usb 12-1: new full-speed USB device number 30 using dummy_hcd [ 494.398414][T27223] netlink: 'syz.2.6106': attribute type 11 has an invalid length. [ 494.405335][T27223] 9pnet: Found fid 0 not clunked [ 494.454080][T27230] i2c i2c-1: dtv_property_process_set: SET cmd 0x61746568 undefined [ 494.514793][T27234] syzkaller0: entered promiscuous mode [ 494.517438][T27234] syzkaller0: entered allmulticast mode [ 494.538427][ T5988] usb 12-1: config 0 has an invalid interface number: 1 but max is 0 [ 494.541882][ T5988] usb 12-1: config 0 has no interface number 0 [ 494.544543][ T5988] usb 12-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 494.551239][ T5988] usb 12-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 64 [ 494.555861][ T5988] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 494.559820][ T5988] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.566176][ T5988] usb 12-1: config 0 descriptor?? [ 494.570065][T27202] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 494.577273][ T5988] iowarrior 12-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 494.649652][T27239] FAULT_INJECTION: forcing a failure. [ 494.649652][T27239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.654795][T27239] CPU: 0 UID: 0 PID: 27239 Comm: syz.8.6112 Tainted: G L syzkaller #0 PREEMPT(full) [ 494.654814][T27239] Tainted: [L]=SOFTLOCKUP [ 494.654818][T27239] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 494.654824][T27239] Call Trace: [ 494.654829][T27239] [ 494.654833][T27239] dump_stack_lvl+0x100/0x190 [ 494.654855][T27239] should_fail_ex.cold+0x5/0xa [ 494.654869][T27239] _copy_from_user+0x2e/0xd0 [ 494.654884][T27239] memdup_user+0x6b/0xe0 [ 494.654900][T27239] dvb_frontend_handle_ioctl+0x1085/0x2f00 [ 494.654916][T27239] ? __pfx_dvb_frontend_handle_ioctl+0x10/0x10 [ 494.654929][T27239] ? do_raw_spin_lock+0x128/0x260 [ 494.654956][T27239] ? find_held_lock+0x2b/0x80 [ 494.654970][T27239] ? down_interruptible+0x66/0xa0 [ 494.654984][T27239] ? rcu_is_watching+0x12/0xc0 [ 494.654999][T27239] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 494.655015][T27239] ? lockdep_hardirqs_on+0x78/0x100 [ 494.655028][T27239] dvb_frontend_do_ioctl+0x1ce/0x320 [ 494.655041][T27239] dvb_usercopy+0x167/0x340 [ 494.655052][T27239] ? __pfx_dvb_frontend_do_ioctl+0x10/0x10 [ 494.655065][T27239] ? __pfx_dvb_usercopy+0x10/0x10 [ 494.655082][T27239] ? selinux_file_ioctl+0x139/0x290 [ 494.655094][T27239] ? selinux_file_ioctl+0xb4/0x290 [ 494.655106][T27239] dvb_frontend_ioctl+0x50/0x80 [ 494.655123][T27239] ? __pfx_dvb_frontend_ioctl+0x10/0x10 [ 494.655140][T27239] __x64_sys_ioctl+0x18e/0x210 [ 494.655157][T27239] do_syscall_64+0x106/0xf80 [ 494.655167][T27239] ? clear_bhb_loop+0x40/0x90 [ 494.655185][T27239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.655196][T27239] RIP: 0033:0x7f8b7f19c629 [ 494.655206][T27239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.655216][T27239] RSP: 002b:00007f8b8003f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 494.655227][T27239] RAX: ffffffffffffffda RBX: 00007f8b7f415fa0 RCX: 00007f8b7f19c629 [ 494.655234][T27239] RDX: 0000200000000040 RSI: 0000000040106f52 RDI: 0000000000000005 [ 494.655240][T27239] RBP: 00007f8b8003f090 R08: 0000000000000000 R09: 0000000000000000 [ 494.655247][T27239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.655253][T27239] R13: 00007f8b7f416038 R14: 00007f8b7f415fa0 R15: 00007fff49de2938 [ 494.655267][T27239] [ 494.778276][T16474] usb 12-1: USB disconnect, device number 30 [ 494.781584][T27246] syzkaller0: entered promiscuous mode [ 494.783989][T27246] syzkaller0: entered allmulticast mode [ 494.893478][T27248] syzkaller0: entered promiscuous mode [ 494.895434][T27248] syzkaller0: entered allmulticast mode [ 494.899709][T27248] FAULT_INJECTION: forcing a failure. [ 494.899709][T27248] name failslab, interval 1, probability 0, space 0, times 0 [ 494.904046][T27248] CPU: 2 UID: 0 PID: 27248 Comm: syz.2.6116 Tainted: G L syzkaller #0 PREEMPT(full) [ 494.904063][T27248] Tainted: [L]=SOFTLOCKUP [ 494.904067][T27248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 494.904074][T27248] Call Trace: [ 494.904078][T27248] [ 494.904082][T27248] dump_stack_lvl+0x100/0x190 [ 494.904104][T27248] should_fail_ex.cold+0x5/0xa [ 494.904118][T27248] should_failslab+0xc2/0x120 [ 494.904141][T27248] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 494.904156][T27248] ? __alloc_skb+0x140/0x710 [ 494.904176][T27248] __alloc_skb+0x140/0x710 [ 494.904191][T27248] ? __alloc_skb+0x5b7/0x710 [ 494.904207][T27248] ? __pfx___alloc_skb+0x10/0x10 [ 494.904227][T27248] alloc_skb_with_frags+0xe0/0x810 [ 494.904238][T27248] ? __might_fault+0xc5/0x140 [ 494.904252][T27248] ? __might_fault+0xc5/0x140 [ 494.904267][T27248] sock_alloc_send_pskb+0x801/0x980 [ 494.904283][T27248] ? _copy_from_iter+0x270/0x1690 [ 494.904301][T27248] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 494.904317][T27248] ? find_held_lock+0x2b/0x80 [ 494.904330][T27248] ? dev_get_by_index+0x180/0x380 [ 494.904470][T27248] ? dev_get_by_index+0x180/0x380 [ 494.904490][T27248] packet_sendmsg+0x20e0/0x53c0 [ 494.904506][T27248] ? avc_has_perm+0x4a/0x1e0 [ 494.904524][T27248] ? __lock_acquire+0x4a5/0x2630 [ 494.904543][T27248] ? sock_has_perm+0x258/0x2f0 [ 494.904559][T27248] ? __pfx_sock_has_perm+0x10/0x10 [ 494.904577][T27248] ? __pfx_packet_sendmsg+0x10/0x10 [ 494.904598][T27248] ____sys_sendmsg+0xa54/0xc30 [ 494.904613][T27248] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.904632][T27248] ___sys_sendmsg+0x190/0x1e0 [ 494.904647][T27248] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.904677][T27248] __sys_sendmsg+0x170/0x220 [ 494.904687][T27248] ? __pfx___sys_sendmsg+0x10/0x10 [ 494.904706][T27248] do_syscall_64+0x106/0xf80 [ 494.904717][T27248] ? clear_bhb_loop+0x40/0x90 [ 494.904734][T27248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.904746][T27248] RIP: 0033:0x7f4201d9c629 [ 494.904756][T27248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.904767][T27248] RSP: 002b:00007f4202b7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.904778][T27248] RAX: ffffffffffffffda RBX: 00007f4202015fa0 RCX: 00007f4201d9c629 [ 494.904785][T27248] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000006 [ 494.904791][T27248] RBP: 00007f4202b7f090 R08: 0000000000000000 R09: 0000000000000000 [ 494.904798][T27248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.904804][T27248] R13: 00007f4202016038 R14: 00007f4202015fa0 R15: 00007ffe3085f148 [ 494.904817][T27248] [ 494.955689][T27251] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 495.164063][T27257] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 495.262370][ T5988] hid-generic 0000:0000:0004.000D: unknown main item tag 0x0 [ 495.265578][ T5988] hid-generic 0000:0000:0004.000D: unknown main item tag 0x0 [ 495.279071][ T5988] hid-generic 0000:0000:0004.000D: unknown main item tag 0x0 [ 495.282319][ T5988] hid-generic 0000:0000:0004.000D: unknown main item tag 0x0 [ 495.285602][ T5988] hid-generic 0000:0000:0004.000D: unknown main item tag 0x0 [ 495.289103][ T5988] hid-generic 0000:0000:0004.000D: unknown main item tag 0x0 [ 495.289514][T27262] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 495.292378][ T5988] hid-generic 0000:0000:0004.000D: unknown main item tag 0x0 [ 495.299025][ T5988] hid-generic 0000:0000:0004.000D: unknown main item tag 0x0 [ 495.302179][ T5988] hid-generic 0000:0000:0004.000D: unknown main item tag 0x0 [ 495.305363][ T5988] hid-generic 0000:0000:0004.000D: unknown main item tag 0x0 [ 495.315631][ T5988] hid-generic 0000:0000:0004.000D: hidraw1: HID v0.03 Device [syz1] on syz0 [ 495.349559][T27271] syzkaller0: entered promiscuous mode [ 495.352131][T27271] syzkaller0: entered allmulticast mode [ 495.395060][T27277] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 495.399435][T27277] FAULT_INJECTION: forcing a failure. [ 495.399435][T27277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.404420][T27277] CPU: 0 UID: 0 PID: 27277 Comm: syz.2.6125 Tainted: G L syzkaller #0 PREEMPT(full) [ 495.404437][T27277] Tainted: [L]=SOFTLOCKUP [ 495.404441][T27277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 495.404448][T27277] Call Trace: [ 495.404452][T27277] [ 495.404457][T27277] dump_stack_lvl+0x100/0x190 [ 495.404479][T27277] should_fail_ex.cold+0x5/0xa [ 495.404493][T27277] _copy_to_user+0x32/0xd0 [ 495.404509][T27277] simple_read_from_buffer+0xcb/0x170 [ 495.404529][T27277] proc_fail_nth_read+0x1af/0x230 [ 495.404579][T27277] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 495.404594][T27277] ? rw_verify_area+0xce/0x6d0 [ 495.404609][T27277] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 495.404622][T27277] vfs_read+0x1e4/0xb30 [ 495.404639][T27277] ? __pfx_vfs_read+0x10/0x10 [ 495.404654][T27277] ? __fget_files+0x215/0x3d0 [ 495.404668][T27277] ? __fget_files+0x21f/0x3d0 [ 495.404681][T27277] ksys_read+0x12a/0x250 [ 495.404696][T27277] ? __pfx_ksys_read+0x10/0x10 [ 495.404715][T27277] do_syscall_64+0x106/0xf80 [ 495.404727][T27277] ? clear_bhb_loop+0x40/0x90 [ 495.404741][T27277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.404752][T27277] RIP: 0033:0x7f4201d5cece [ 495.404762][T27277] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 495.404772][T27277] RSP: 002b:00007f4202b7efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 495.404782][T27277] RAX: ffffffffffffffda RBX: 00007f4202b7f6c0 RCX: 00007f4201d5cece [ 495.404789][T27277] RDX: 000000000000000f RSI: 00007f4202b7f0a0 RDI: 0000000000000006 [ 495.404795][T27277] RBP: 00007f4202b7f090 R08: 0000000000000000 R09: 0000000000000000 [ 495.404802][T27277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.404808][T27277] R13: 00007f4202016038 R14: 00007f4202015fa0 R15: 00007ffe3085f148 [ 495.404822][T27277] [ 495.493304][T27280] syzkaller0: entered promiscuous mode [ 495.495786][T27280] syzkaller0: entered allmulticast mode [ 495.536508][T14078] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 495.562794][T27282] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 495.625089][T27290] syzkaller0: entered promiscuous mode [ 495.629374][T27290] syzkaller0: entered allmulticast mode [ 495.633477][T27290] FAULT_INJECTION: forcing a failure. [ 495.633477][T27290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.638664][T27290] CPU: 1 UID: 0 PID: 27290 Comm: syz.2.6129 Tainted: G L syzkaller #0 PREEMPT(full) [ 495.638690][T27290] Tainted: [L]=SOFTLOCKUP [ 495.638694][T27290] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 495.638703][T27290] Call Trace: [ 495.638709][T27290] [ 495.638716][T27290] dump_stack_lvl+0x100/0x190 [ 495.638746][T27290] should_fail_ex.cold+0x5/0xa [ 495.638767][T27290] _copy_from_iter+0x1f4/0x1690 [ 495.638795][T27290] ? __pfx__copy_from_iter+0x10/0x10 [ 495.638816][T27290] ? _copy_from_iter+0x270/0x1690 [ 495.638838][T27290] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 495.638865][T27290] skb_copy_datagram_from_iter+0x11f/0x720 [ 495.638896][T27290] packet_sendmsg+0x2476/0x53c0 [ 495.638920][T27290] ? avc_has_perm+0x4a/0x1e0 [ 495.638945][T27290] ? __lock_acquire+0x4a5/0x2630 [ 495.638975][T27290] ? sock_has_perm+0x258/0x2f0 [ 495.638999][T27290] ? __pfx_sock_has_perm+0x10/0x10 [ 495.639023][T27290] ? __pfx_packet_sendmsg+0x10/0x10 [ 495.639054][T27290] ____sys_sendmsg+0xa54/0xc30 [ 495.639077][T27290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.639106][T27290] ___sys_sendmsg+0x190/0x1e0 [ 495.639126][T27290] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.639170][T27290] __sys_sendmsg+0x170/0x220 [ 495.639192][T27290] ? __pfx___sys_sendmsg+0x10/0x10 [ 495.639221][T27290] do_syscall_64+0x106/0xf80 [ 495.639233][T27290] ? clear_bhb_loop+0x40/0x90 [ 495.639255][T27290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.639271][T27290] RIP: 0033:0x7f4201d9c629 [ 495.639285][T27290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.639300][T27290] RSP: 002b:00007f4202b7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.639316][T27290] RAX: ffffffffffffffda RBX: 00007f4202015fa0 RCX: 00007f4201d9c629 [ 495.639327][T27290] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000006 [ 495.639333][T27290] RBP: 00007f4202b7f090 R08: 0000000000000000 R09: 0000000000000000 [ 495.639341][T27290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.639351][T27290] R13: 00007f4202016038 R14: 00007f4202015fa0 R15: 00007ffe3085f148 [ 495.639373][T27290] [ 495.708347][T14078] usb 13-1: Using ep0 maxpacket: 16 [ 495.735034][T14078] usb 13-1: config 0 has no interfaces? [ 495.738173][T14078] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 495.741615][T14078] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 495.744591][T14078] usb 13-1: SerialNumber: syz [ 495.756699][T14078] usb 13-1: config 0 descriptor?? [ 495.841502][T27294] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 495.886426][T14841] usb 12-1: new full-speed USB device number 31 using dummy_hcd [ 495.910873][T27299] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 496.048274][T14841] usb 12-1: config 0 has an invalid interface number: 1 but max is 0 [ 496.051147][T14841] usb 12-1: config 0 has no interface number 0 [ 496.053225][T14841] usb 12-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 496.056991][T14841] usb 12-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 64 [ 496.058552][ T9] usb 13-1: USB disconnect, device number 5 [ 496.060512][T14841] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 496.066655][T14841] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.073766][T14841] usb 12-1: config 0 descriptor?? [ 496.076557][T27292] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 496.086680][T14841] iowarrior 12-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 496.283002][T14841] usb 12-1: USB disconnect, device number 31 [ 496.668345][T27313] syz.8.6138 (27313): drop_caches: 2 [ 496.838179][T27320] syzkaller0: entered promiscuous mode [ 496.840075][T27320] syzkaller0: entered allmulticast mode [ 496.843350][T27320] FAULT_INJECTION: forcing a failure. [ 496.843350][T27320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.847782][T27320] CPU: 0 UID: 0 PID: 27320 Comm: syz.8.6141 Tainted: G L syzkaller #0 PREEMPT(full) [ 496.847799][T27320] Tainted: [L]=SOFTLOCKUP [ 496.847803][T27320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 496.847810][T27320] Call Trace: [ 496.847814][T27320] [ 496.847819][T27320] dump_stack_lvl+0x100/0x190 [ 496.847841][T27320] should_fail_ex.cold+0x5/0xa [ 496.847855][T27320] _copy_from_iter+0x1f4/0x1690 [ 496.847874][T27320] ? __pfx__copy_from_iter+0x10/0x10 [ 496.847889][T27320] ? _copy_from_iter+0x270/0x1690 [ 496.847906][T27320] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 496.847924][T27320] skb_copy_datagram_from_iter+0x11f/0x720 [ 496.847944][T27320] packet_sendmsg+0x2476/0x53c0 [ 496.847961][T27320] ? avc_has_perm+0x4a/0x1e0 [ 496.847979][T27320] ? __lock_acquire+0x4a5/0x2630 [ 496.847999][T27320] ? sock_has_perm+0x258/0x2f0 [ 496.848015][T27320] ? __pfx_sock_has_perm+0x10/0x10 [ 496.848033][T27320] ? __pfx_packet_sendmsg+0x10/0x10 [ 496.848054][T27320] ____sys_sendmsg+0xa54/0xc30 [ 496.848069][T27320] ? __pfx_____sys_sendmsg+0x10/0x10 [ 496.848088][T27320] ___sys_sendmsg+0x190/0x1e0 [ 496.848103][T27320] ? __pfx____sys_sendmsg+0x10/0x10 [ 496.848133][T27320] __sys_sendmsg+0x170/0x220 [ 496.848143][T27320] ? __pfx___sys_sendmsg+0x10/0x10 [ 496.848167][T27320] do_syscall_64+0x106/0xf80 [ 496.848178][T27320] ? clear_bhb_loop+0x40/0x90 [ 496.848191][T27320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.848202][T27320] RIP: 0033:0x7f8b7f19c629 [ 496.848212][T27320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.848222][T27320] RSP: 002b:00007f8b8003f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.848234][T27320] RAX: ffffffffffffffda RBX: 00007f8b7f415fa0 RCX: 00007f8b7f19c629 [ 496.848241][T27320] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000006 [ 496.848247][T27320] RBP: 00007f8b8003f090 R08: 0000000000000000 R09: 0000000000000000 [ 496.848254][T27320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.848259][T27320] R13: 00007f8b7f416038 R14: 00007f8b7f415fa0 R15: 00007fff49de2938 [ 496.848273][T27320] [ 496.930625][T27322] syzkaller0: entered promiscuous mode [ 496.932585][T27322] syzkaller0: entered allmulticast mode [ 496.999894][T27325] netlink: 'syz.8.6142': attribute type 1 has an invalid length. [ 496.999910][T27326] __nla_validate_parse: 1 callbacks suppressed [ 496.999923][T27326] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6142'. [ 497.041243][T27329] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 497.136015][T27335] netlink: 100 bytes leftover after parsing attributes in process `syz.8.6145'. [ 497.137726][T27339] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 497.185349][T27343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=27343 comm=syz.8.6147 [ 497.193780][T27343] syzkaller0: entered promiscuous mode [ 497.195933][T27343] syzkaller0: entered allmulticast mode [ 497.384414][T27352] syzkaller0: entered promiscuous mode [ 497.387745][T27352] syzkaller0: entered allmulticast mode [ 497.391837][T27352] FAULT_INJECTION: forcing a failure. [ 497.391837][T27352] name failslab, interval 1, probability 0, space 0, times 0 [ 497.397465][T27352] CPU: 3 UID: 0 PID: 27352 Comm: syz.8.6151 Tainted: G L syzkaller #0 PREEMPT(full) [ 497.397490][T27352] Tainted: [L]=SOFTLOCKUP [ 497.397497][T27352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 497.397507][T27352] Call Trace: [ 497.397513][T27352] [ 497.397520][T27352] dump_stack_lvl+0x100/0x190 [ 497.397551][T27352] should_fail_ex.cold+0x5/0xa [ 497.397573][T27352] should_failslab+0xc2/0x120 [ 497.397598][T27352] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 497.397621][T27352] ? sidtab_sid2str_get+0x17a/0x670 [ 497.397645][T27352] kmemdup_noprof+0x29/0x60 [ 497.397670][T27352] sidtab_sid2str_get+0x17a/0x670 [ 497.397692][T27352] security_sid_to_context_core+0x35a/0x6d0 [ 497.397710][T27352] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 497.397735][T27352] avc_audit_post_callback+0x109/0x910 [ 497.397758][T27352] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 497.397777][T27352] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 497.397796][T27352] ? skb_put+0x138/0x180 [ 497.397817][T27352] ? audit_log_n_string+0x256/0x550 [ 497.397842][T27352] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 497.397862][T27352] common_lsm_audit+0x23f/0x2b0 [ 497.397887][T27352] ? __pfx_common_lsm_audit+0x10/0x10 [ 497.397905][T27352] ? lockdep_hardirqs_on+0x78/0x100 [ 497.397922][T27352] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 497.397951][T27352] slow_avc_audit+0x186/0x210 [ 497.397973][T27352] ? __pfx_slow_avc_audit+0x10/0x10 [ 497.397996][T27352] ? avc_denied+0x14a/0x190 [ 497.398018][T27352] ? avc_has_perm_noaudit+0x2fc/0x3b0 [ 497.398043][T27352] avc_has_perm+0x1a6/0x1e0 [ 497.398065][T27352] ? __pfx_avc_has_perm+0x10/0x10 [ 497.398087][T27352] ? __lock_acquire+0x4a5/0x2630 [ 497.398117][T27352] sock_has_perm+0x251/0x2f0 [ 497.398142][T27352] ? __pfx_sock_has_perm+0x10/0x10 [ 497.398168][T27352] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 497.398188][T27352] ? import_ubuf+0x1b6/0x220 [ 497.398242][T27352] security_socket_sendmsg+0xd3/0x230 [ 497.398269][T27352] ____sys_sendmsg+0x85f/0xc30 [ 497.398291][T27352] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.398321][T27352] ___sys_sendmsg+0x190/0x1e0 [ 497.398343][T27352] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.398391][T27352] __sys_sendmsg+0x170/0x220 [ 497.398408][T27352] ? __pfx___sys_sendmsg+0x10/0x10 [ 497.398439][T27352] do_syscall_64+0x106/0xf80 [ 497.398455][T27352] ? clear_bhb_loop+0x40/0x90 [ 497.398476][T27352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.398492][T27352] RIP: 0033:0x7f8b7f19c629 [ 497.398508][T27352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.398523][T27352] RSP: 002b:00007f8b8003f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.398540][T27352] RAX: ffffffffffffffda RBX: 00007f8b7f415fa0 RCX: 00007f8b7f19c629 [ 497.398551][T27352] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000006 [ 497.398561][T27352] RBP: 00007f8b8003f090 R08: 0000000000000000 R09: 0000000000000000 [ 497.398572][T27352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.398581][T27352] R13: 00007f8b7f416038 R14: 00007f8b7f415fa0 R15: 00007fff49de2938 [ 497.398604][T27352] [ 497.586403][ T9] usb 12-1: new full-speed USB device number 32 using dummy_hcd [ 497.646100][T27354] syzkaller0: entered promiscuous mode [ 497.648684][T27354] syzkaller0: entered allmulticast mode [ 497.758129][ T9] usb 12-1: config 0 has an invalid interface number: 1 but max is 0 [ 497.761670][ T9] usb 12-1: config 0 has no interface number 0 [ 497.764433][ T9] usb 12-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 497.769264][ T9] usb 12-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 64 [ 497.773906][ T9] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 497.778383][ T9] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.785101][ T9] usb 12-1: config 0 descriptor?? [ 497.788367][T27348] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 497.798918][ T9] iowarrior 12-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 497.820724][T27358] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 497.848490][T27361] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 497.994634][T14841] usb 12-1: USB disconnect, device number 32 [ 498.012550][T27367] syzkaller0: entered promiscuous mode [ 498.015006][T27367] syzkaller0: entered allmulticast mode [ 498.560496][T27370] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6158'. [ 498.663506][T27372] i2c i2c-1: Invalid block write size 34 [ 499.235162][ T40] kauditd_printk_skb: 197 callbacks suppressed [ 499.235180][ T40] audit: type=1400 audit(2000000353.851:71731): avc: denied { create } for pid=27377 comm="syz.2.6160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 499.246884][ T40] audit: type=1400 audit(2000000353.851:71732): avc: denied { bind } for pid=27377 comm="syz.2.6160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 499.255141][ T40] audit: type=1400 audit(2000000353.851:71733): avc: denied { setopt } for pid=27377 comm="syz.2.6160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 499.264900][ T40] audit: type=1400 audit(2000000353.851:71734): avc: denied { accept } for pid=27377 comm="syz.2.6160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 499.273326][ T40] audit: type=1400 audit(2000000353.851:71735): avc: denied { perfmon } for pid=27377 comm="syz.2.6160" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 499.282668][ T40] audit: type=1400 audit(2000000353.851:71736): avc: denied { prog_load } for pid=27377 comm="syz.2.6160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 499.291882][ T40] audit: type=1400 audit(2000000353.851:71737): avc: denied { bpf } for pid=27377 comm="syz.2.6160" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 499.300941][ T40] audit: type=1400 audit(2000000353.861:71738): avc: denied { prog_run } for pid=27377 comm="syz.2.6160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 499.570396][T27380] syzkaller0: entered promiscuous mode [ 499.572279][T27380] syzkaller0: entered allmulticast mode [ 499.575439][T27380] FAULT_INJECTION: forcing a failure. [ 499.575439][T27380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.579873][T27380] CPU: 3 UID: 0 PID: 27380 Comm: syz.7.6161 Tainted: G L syzkaller #0 PREEMPT(full) [ 499.579891][T27380] Tainted: [L]=SOFTLOCKUP [ 499.579895][T27380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 499.579902][T27380] Call Trace: [ 499.579907][T27380] [ 499.579912][T27380] dump_stack_lvl+0x100/0x190 [ 499.579933][T27380] should_fail_ex.cold+0x5/0xa [ 499.579948][T27380] _copy_from_user+0x2e/0xd0 [ 499.579964][T27380] kstrtouint_from_user+0xd6/0x1d0 [ 499.579975][T27380] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 499.579986][T27380] ? __lock_acquire+0x4a5/0x2630 [ 499.580005][T27380] ? lock_acquire+0x1cf/0x380 [ 499.580025][T27380] proc_fail_nth_write+0x83/0x220 [ 499.580041][T27380] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 499.580059][T27380] vfs_write+0x2aa/0x1070 [ 499.580078][T27380] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 499.580093][T27380] ? __pfx_vfs_write+0x10/0x10 [ 499.580109][T27380] ? __fget_files+0x215/0x3d0 [ 499.580122][T27380] ? __fget_files+0x21f/0x3d0 [ 499.580136][T27380] ksys_write+0x12a/0x250 [ 499.580152][T27380] ? __pfx_ksys_write+0x10/0x10 [ 499.580172][T27380] do_syscall_64+0x106/0xf80 [ 499.580182][T27380] ? clear_bhb_loop+0x40/0x90 [ 499.580197][T27380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.580208][T27380] RIP: 0033:0x7f74c8f5cece [ 499.580219][T27380] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 499.580229][T27380] RSP: 002b:00007f74c9d83fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 499.580240][T27380] RAX: ffffffffffffffda RBX: 00007f74c9d846c0 RCX: 00007f74c8f5cece [ 499.580247][T27380] RDX: 0000000000000001 RSI: 00007f74c9d840a0 RDI: 0000000000000009 [ 499.580253][T27380] RBP: 00007f74c9d84090 R08: 0000000000000000 R09: 0000000000000000 [ 499.580260][T27380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.580266][T27380] R13: 00007f74c9216038 R14: 00007f74c9215fa0 R15: 00007ffc6754d878 [ 499.580281][T27380] [ 499.590709][T27382] syzkaller0: entered promiscuous mode [ 499.656556][T27382] syzkaller0: entered allmulticast mode [ 499.660769][ T40] audit: type=1400 audit(2000000354.281:71739): avc: denied { ioctl } for pid=27383 comm="syz.8.6163" path="socket:[133274]" dev="sockfs" ino=133274 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 499.668593][ T40] audit: type=1400 audit(2000000354.281:71740): avc: denied { module_request } for pid=27383 comm="syz.8.6163" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 499.787364][T27392] bridge5: entered promiscuous mode [ 499.877029][T27398] syzkaller0: entered promiscuous mode [ 499.878921][T27398] syzkaller0: entered allmulticast mode [ 500.013299][T27416] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 500.039325][T27419] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 500.166407][T14841] usb 12-1: new full-speed USB device number 33 using dummy_hcd [ 500.347685][T14841] usb 12-1: config 0 has an invalid interface number: 1 but max is 0 [ 500.350302][T14841] usb 12-1: config 0 has no interface number 0 [ 500.352310][T14841] usb 12-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 500.356801][T14841] usb 12-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 64 [ 500.360221][T14841] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 500.363411][T14841] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.367547][T14841] usb 12-1: config 0 descriptor?? [ 500.369697][T27409] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 500.376948][T14841] iowarrior 12-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 500.455229][T23810] tipc: Resetting bearer [ 500.471656][T23810] tipc: Disabling bearer [ 500.495117][ T63] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 500.504323][ T63] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 500.508784][ T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 500.513621][ T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 500.517288][ T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 500.584351][T17664] usb 12-1: USB disconnect, device number 33 [ 500.669290][T27443] chnl_net:caif_netlink_parms(): no params data found [ 500.718939][T27443] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.721374][T27443] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.723791][T27443] bridge_slave_0: entered allmulticast mode [ 500.727850][T27443] bridge_slave_0: entered promiscuous mode [ 500.731159][T27443] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.733587][T27443] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.735933][T27443] bridge_slave_1: entered allmulticast mode [ 500.738934][T27443] bridge_slave_1: entered promiscuous mode [ 500.756844][T27443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.761283][T27443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.777478][T27443] team0: Port device team_slave_0 added [ 500.780547][T27443] team0: Port device team_slave_1 added [ 500.794781][T27443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.797257][T27443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.805350][T27443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.809942][T27443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.812181][T27443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.820518][T27443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.844567][T27443] hsr_slave_0: entered promiscuous mode [ 500.846998][T27443] hsr_slave_1: entered promiscuous mode [ 500.849272][T27443] debugfs: 'hsr0' already exists in 'hsr' [ 500.851119][T27443] Cannot create hsr debugfs directory [ 501.067058][T27463] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 501.235733][T27478] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6189'. [ 501.367371][T27496] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 501.403251][ T53] ------------[ cut here ]------------ [ 501.405341][ T53] workqueue: cannot queue hci_conn_timeout on wq hci0 [ 501.407565][ T53] WARNING: kernel/workqueue.c:2270 at __queue_work+0xd08/0x1150, CPU#1: kworker/1:1/53 [ 501.410590][ T53] Modules linked in: [ 501.412464][ T53] CPU: 1 UID: 0 PID: 53 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 501.416037][ T53] Tainted: [L]=SOFTLOCKUP [ 501.417418][ T53] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 501.420593][ T53] Workqueue: events l2cap_chan_timeout [ 501.422427][ T53] RIP: 0010:__queue_work+0xd0c/0x1150 [ 501.424211][ T53] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 04 04 00 00 48 8d 3d a8 92 0c 0f 48 8b 75 18 <67> 48 0f b9 3a e9 2a f7 ff ff e8 15 cd 38 00 90 0f 0b 90 e9 b2 f5 [ 501.430334][ T53] RSP: 0018:ffffc90000a6fa30 EFLAGS: 00010046 [ 501.432336][ T53] RAX: dffffc0000000000 RBX: ffff88801b8f1000 RCX: 1ffff11005bc214b [ 501.434878][ T53] RDX: ffff88802dbf3178 RSI: ffffffff8a86dc50 RDI: ffffffff90dc64e0 [ 501.437389][ T53] RBP: ffff88802de10a40 R08: 0000000000000005 R09: 0000000000000000 [ 501.439902][ T53] R10: 0000000000200000 R11: 0000000000000000 R12: ffff88802dbf3000 [ 501.442451][ T53] R13: ffff8880220dc900 R14: ffff88802de10a88 R15: ffff88802de10a48 [ 501.445060][ T53] FS: 0000000000000000(0000) GS:ffff8880d644a000(0000) knlGS:0000000000000000 [ 501.447884][ T53] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 501.449973][ T53] CR2: 000000110c327e44 CR3: 000000002d8bb000 CR4: 0000000000352ef0 [ 501.452524][ T53] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 501.455177][ T53] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 501.457674][ T53] Call Trace: [ 501.458775][ T53] [ 501.459748][ T53] ? __cancel_work+0x2b5/0x340 [ 501.461321][ T53] ? lockdep_hardirqs_on+0x78/0x100 [ 501.463002][ T53] ? __cancel_work+0x245/0x340 [ 501.464917][ T53] __queue_delayed_work+0x365/0x470 [ 501.466760][ T53] queue_delayed_work_on+0x180/0x1e0 [ 501.467714][T27443] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 501.468488][ T53] l2cap_chan_del+0x649/0x930 [ 501.472176][ T53] l2cap_chan_close+0x3b0/0xa70 [ 501.473816][ T53] ? debug_object_deactivate+0x2e4/0x3b0 [ 501.475580][ T53] ? __pfx_l2cap_chan_close+0x10/0x10 [ 501.477263][ T53] l2cap_chan_timeout+0x196/0x330 [ 501.478849][ T53] process_one_work+0x9d7/0x1920 [ 501.480416][ T53] ? __pfx_process_one_work+0x10/0x10 [ 501.482122][ T53] ? __pfx_l2cap_chan_timeout+0x10/0x10 [ 501.484010][ T53] worker_thread+0x5da/0xe40 [ 501.485471][ T53] ? kthread+0x13a/0x450 [ 501.486811][ T53] ? __pfx_worker_thread+0x10/0x10 [ 501.488423][ T53] kthread+0x370/0x450 [ 501.489712][ T53] ? __pfx_kthread+0x10/0x10 [ 501.491209][ T53] ret_from_fork+0x754/0xd80 [ 501.492668][ T53] ? __pfx_ret_from_fork+0x10/0x10 [ 501.494667][ T53] ? __switch_to+0x7b4/0x1120 [ 501.496315][ T53] ? __pfx_kthread+0x10/0x10 [ 501.497800][ T53] ret_from_fork_asm+0x1a/0x30 [ 501.499317][ T53] [ 501.500298][ T53] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 501.502596][ T53] CPU: 1 UID: 0 PID: 53 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 501.505890][ T53] Tainted: [L]=SOFTLOCKUP [ 501.507258][ T53] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 501.510482][ T53] Workqueue: events l2cap_chan_timeout [ 501.512529][ T53] Call Trace: [ 501.513740][ T53] [ 501.514806][ T53] dump_stack_lvl+0x100/0x190 [ 501.516436][ T53] vpanic+0x552/0x970 [ 501.517869][ T53] ? __pfx_vpanic+0x10/0x10 [ 501.519485][ T53] panic+0xd1/0xe0 [ 501.520675][ T53] ? __pfx_panic+0x10/0x10 [ 501.522121][ T53] ? check_panic_on_warn+0x1f/0x90 [ 501.523901][ T53] check_panic_on_warn.cold+0x19/0x34 [ 501.525817][ T53] ? __queue_work+0xd08/0x1150 [ 501.527320][ T53] __warn.cold+0x191/0x348 [ 501.528709][ T53] __report_bug+0x296/0x3d0 [ 501.530179][ T53] ? __queue_work+0xd08/0x1150 [ 501.531704][ T53] ? __pfx___report_bug+0x10/0x10 [ 501.533296][ T53] ? __pfx_hci_conn_timeout+0x10/0x10 [ 501.535064][ T53] ? __pfx_debug_object_assert_init+0x10/0x10 [ 501.537013][ T53] report_bug_entry+0xe1/0x290 [ 501.538525][ T53] ? __queue_work+0xd0c/0x1150 [ 501.540029][ T53] handle_bug+0x1c9/0x2a0 [ 501.541409][ T53] exc_invalid_op+0x17/0x50 [ 501.542899][ T53] asm_exc_invalid_op+0x1a/0x20 [ 501.544496][ T53] RIP: 0010:__queue_work+0xd0c/0x1150 [ 501.546233][ T53] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 04 04 00 00 48 8d 3d a8 92 0c 0f 48 8b 75 18 <67> 48 0f b9 3a e9 2a f7 ff ff e8 15 cd 38 00 90 0f 0b 90 e9 b2 f5 [ 501.552317][ T53] RSP: 0018:ffffc90000a6fa30 EFLAGS: 00010046 [ 501.554421][ T53] RAX: dffffc0000000000 RBX: ffff88801b8f1000 RCX: 1ffff11005bc214b [ 501.556861][ T53] RDX: ffff88802dbf3178 RSI: ffffffff8a86dc50 RDI: ffffffff90dc64e0 [ 501.559290][ T53] RBP: ffff88802de10a40 R08: 0000000000000005 R09: 0000000000000000 [ 501.561861][ T53] R10: 0000000000200000 R11: 0000000000000000 R12: ffff88802dbf3000 [ 501.564420][ T53] R13: ffff8880220dc900 R14: ffff88802de10a88 R15: ffff88802de10a48 [ 501.566946][ T53] ? __pfx_hci_conn_timeout+0x10/0x10 [ 501.568669][ T53] ? __cancel_work+0x2b5/0x340 [ 501.570217][ T53] ? lockdep_hardirqs_on+0x78/0x100 [ 501.571914][ T53] ? __cancel_work+0x245/0x340 [ 501.573494][ T53] __queue_delayed_work+0x365/0x470 [ 501.575175][ T53] queue_delayed_work_on+0x180/0x1e0 [ 501.576863][ T53] l2cap_chan_del+0x649/0x930 [ 501.578388][ T53] l2cap_chan_close+0x3b0/0xa70 [ 501.579956][ T53] ? debug_object_deactivate+0x2e4/0x3b0 [ 501.581781][ T53] ? __pfx_l2cap_chan_close+0x10/0x10 [ 501.583563][ T53] l2cap_chan_timeout+0x196/0x330 [ 501.585191][ T53] process_one_work+0x9d7/0x1920 [ 501.586810][ T53] ? __pfx_process_one_work+0x10/0x10 [ 501.588540][ T53] ? __pfx_l2cap_chan_timeout+0x10/0x10 [ 501.590318][ T53] worker_thread+0x5da/0xe40 [ 501.591743][ T53] ? kthread+0x13a/0x450 [ 501.593091][ T53] ? __pfx_worker_thread+0x10/0x10 [ 501.594770][ T53] kthread+0x370/0x450 [ 501.595968][ T53] ? __pfx_kthread+0x10/0x10 [ 501.597454][ T53] ret_from_fork+0x754/0xd80 [ 501.598972][ T53] ? __pfx_ret_from_fork+0x10/0x10 [ 501.600598][ T53] ? __switch_to+0x7b4/0x1120 [ 501.602160][ T53] ? __pfx_kthread+0x10/0x10 [ 501.603835][ T53] ret_from_fork_asm+0x1a/0x30 [ 501.605648][ T53] [ 501.607287][ T53] Kernel Offset: disabled [ 501.608697][ T53] Rebooting in 86400 seconds..