last executing test programs: 13m21.362696441s ago: executing program 32 (id=161): mkdir(&(0x7f0000000140)='./file7\x00', 0xa0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x810009c0) wait4(0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) syz_open_procfs(r0, &(0x7f0000000180)='net/ipv6_route\x00') chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents(r1, &(0x7f0000000440)=""/176, 0xb0) 12m39.807108726s ago: executing program 33 (id=611): prlimit64(0x0, 0x0, &(0x7f0000000000)={0x9, 0x100009b}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x7) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x1) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000300)="120983ff0000", 0x0, 0x4, 0x4, 0x0, 0x0}) setpgid(r0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x50) sendmsg$nl_generic(r4, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000077c0)={&(0x7f0000004580)=ANY=[@ANYBLOB="4c25000036007bc32dbd7000fddbdf2503"], 0x254c}}, 0x4000) 12m5.763116705s ago: executing program 34 (id=1222): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0xff, 0x281) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000000c0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1000000, 0x1, 0x0, 0x0, 0x17, 0x5, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4b69d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "3bc529791f04004dc252840b0000000000f2fffff2845d9ee84ef80b7407cfbe", [0xfffffffffeff7ff9, 0x4a]}}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000740)={0x0, {}, 0x0, {}, 0x940, 0x12, 0x20, 0xc, "e21121bc22389a821cec0a324fbc71e024ad6a6f460e38ef6085152eb5a3e3e87707c9d89402fff28400", "3721905db7f4dfd09d8d8b37158cb6d03aff7054186d607acfcd47f814a305c7", [0x10000, 0xa8]}) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v1={0x2, "fccf4562e8ee92bbcd979fb1d4188582a503"}, 0x13, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r3, 0x92b, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x60}, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r5, 0x107, 0x6, 0x0, &(0x7f0000000100)) 11m31.117668481s ago: executing program 35 (id=1773): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x1c90c0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1) 10m55.617324202s ago: executing program 36 (id=2306): r0 = socket(0x10, 0x3, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000000}, 0x20048000) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x40001043, r1, 0x0) vmsplice(r1, &(0x7f0000000700)=[{&(0x7f0000000500)="6bf4", 0x2}], 0x1, 0x1) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0xceaf, 0x44008002, 0x9, 0x2, 0x4, 0x6, 0x0, 0x0, 0x80, 0x800}}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600a7"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2048884) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 10m7.571156917s ago: executing program 37 (id=2933): name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x9) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001000370400000000eaff0000000000000ac445473757af", @ANYRES32=0x0, @ANYBLOB="00000000002200001800128008000100677265000c000280080004000e000000", @ANYBLOB="49dd08724351d72fb00ebd7e2e08172744f8e7e4681720ef61eea0d3fea05aa56fe1cbab45abd269ac108d6d21b870d06c7049738cae0acaef4adf48def3835ae32bb2e5b7285fae99c1709a4c218ea5c119b774de679d5dfd9b272542b682db75902395e89ea182da8384b26f77356f21e23233faec99a46395e0605eccf81d161019b915765021d21610ce0cc543a4d27214a752b620b79f9d8910c33135167218f32eb1df30a315b9846869644c48993c1aaa4cb2884faa6db53b4ef7cc3225f02eb327d4b130027f9b79b46aa952a284b520798681a2e367b87bc848364b53"], 0x38}}, 0x0) (async, rerun: 64) copy_file_range(r1, &(0x7f0000000040)=0x2000000000000, r1, &(0x7f00000000c0)=0x1f5d, 0x0, 0x0) 9m45.76096171s ago: executing program 38 (id=3279): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r0, 0xa702}], 0x1, &(0x7f0000000400)={0x0, 0x989680}, 0x0, 0x0) 9m1.357147416s ago: executing program 39 (id=3975): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000280)={0x7f, 0x6, 0x0, 0x6, 0x4, 0x6}) r1 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x20000) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000005000000a30c03b5"]) 7m44.519381789s ago: executing program 4 (id=5212): r0 = socket$kcm(0x10, 0x2, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x191411, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r2 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="2ff8a81b133d", 0x0, 0x0, 0x10060, 0x0, 0x0}) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) preadv(r5, &(0x7f0000000280)=[{&(0x7f0000000200)=""/27, 0x1b}], 0x1, 0x1001000, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r3}, @ldst={0x1, 0x2, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) syz_open_procfs(r4, &(0x7f00000001c0)='net/wireless\x00') close(r2) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/address_bits', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xfffffff3, 0x3, 0x5}) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a888a8b96688a882006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) 7m44.349376702s ago: executing program 4 (id=5216): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "000000000000000500"}}}}}}, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb8}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb8}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) write$sndseq(r0, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {0x6}, @addr={0x7, 0x3}}, {0x9, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {0x2}, @connect={{0x2, 0x3}, {0x4, 0x2}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0xc}, {}, @control}, {0x0, 0xfc, 0x0, 0x0, @time, {0x3, 0x1}, {}, @connect={{0x0, 0x20}, {0x0, 0x5}}}, {0x8, 0x5, 0xa, 0x1, @time={0x2, 0x1}, {0x0, 0x6}, {0xa3, 0x2}, @addr={0xb7, 0x5}}, {0xd0, 0x2, 0x3, 0x0, @tick=0xfffffffe, {0x3}, {0xc, 0x40}, @addr={0x8, 0xa}}], 0xa8) 7m44.146614428s ago: executing program 4 (id=5219): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001040), r0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x22004091) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@gettaction={0x6c, 0x32, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$binfmt_misc(r2, &(0x7f0000000600)="566fbd5a8e5a838739", 0x9) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @void}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r3, &(0x7f0000006340)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x2, 0xc044) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x10) r10 = dup(r4) ioctl$KVM_RUN(r10, 0xae80, 0x0) 7m44.093544218s ago: executing program 40 (id=5219): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001040), r0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x22004091) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@gettaction={0x6c, 0x32, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$binfmt_misc(r2, &(0x7f0000000600)="566fbd5a8e5a838739", 0x9) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @void}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r3, &(0x7f0000006340)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x2, 0xc044) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x10) r10 = dup(r4) ioctl$KVM_RUN(r10, 0xae80, 0x0) 6m39.770605792s ago: executing program 41 (id=5921): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0xff, 0x281) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000000c0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1000000, 0x1, 0x0, 0x0, 0x17, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4b69d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "3bc529791f04004dc252840b0000000000f2fffff2845d9ee84ef80b7407cfbe", [0xfffffffffeff7ff9, 0x4a]}}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000740)={0x0, {}, 0x0, {}, 0x940, 0x12, 0x20, 0xc, "e21121bc22389a821cec0a324fbc71e024ad6a6f460e38ef6085152eb5a3e3e87707c9d89402fff28400000000000000000000000000ffffffc900", "3721905db7f4dfd09d8d8b37158cb6d03aff7054186d607acfcd47f814a305c7", [0x10000, 0xa8]}) 4m54.077152183s ago: executing program 42 (id=7558): r0 = socket$packet(0x11, 0x2, 0x300) r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x145880, 0x0) (rerun: 64) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup2(r5, r6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) (async) sendto$inet6(r6, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000140)=0x8) (async) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r8, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="03b0f51fd507ed5061ec0000"], 0x2c}}, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r4, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="360f09640f01c8f2ded766b88d5700000f23c00f21f86635020009000f23f8dd4a00440f20c0663505000000440f22c00f9e7b06440f20c0663502000000440f22c066b8780000000f23d00f21f86635300000050f23f866b8040000000f23c80f21f866350000b0000f23f8", 0x6c}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, r0, 0xcceb1000) (async) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r2, 0xec, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff58, 0x0, 0x8, 0x0, 0x0}}, 0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x2, 0x6}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000380)={0x7, 0x200, 0x4, 0x4, r11}, 0x10) 4m15.667028491s ago: executing program 43 (id=7911): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) fsmount(0xffffffffffffffff, 0x0, 0x6) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0xfd, 0x5ae9}, {0x6, 0x9, 0xa1, 0x1000}]}, 0x10) (async) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@flushpolicy={0x38, 0x12, 0x105, 0x4, 0x25dfdbff, "", [@address_filter={0x28, 0x1a, {@in6=@mcast2, @in6=@mcast1, 0xa, 0xd}}]}, 0x38}}, 0x20040840) (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) syz_init_net_socket$ax25(0x3, 0x2, 0xcd) 4m11.457336141s ago: executing program 44 (id=7947): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6002, &(0x7f0000000040)=0xa, 0x7, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x8000) 3m49.476896822s ago: executing program 2 (id=8195): ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x4e21, @loopback}}) (async) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x4e21, @loopback}}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r0, 0x8949, &(0x7f0000000000)) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x1c) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000300), 0x400, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000340)="0f60ad02000f6fea6567660f73fb5fb8e7018ee8660f38814306f30fc2af000038660f388221bad004b00fee0f225abaf80c66b8e40c708766efbafc0c66b80070000066ef", 0x45}], 0x1, 0x40, &(0x7f0000000400), 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x84000) pipe2(&(0x7f0000000240), 0x0) (async) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r4, 0xfffffffffffffc01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = mq_open(&(0x7f00000000c0)='&\x00', 0x40, 0x100, 0x0) mq_notify(r6, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) (async) mq_notify(r6, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) close(0x3) (async) close(0x3) poll(0x0, 0x0, 0x133200) (async) poll(0x0, 0x0, 0x133200) close_range(r5, 0xffffffffffffffff, 0x0) (async) close_range(r5, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x111, 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r7}}, 0x18) getpeername$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x1c) (async) getpeername$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x1c) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r8, 0x3b8d, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000000180)=[{0x0, 0x2}, {0x1}], 0xdeadbeef, 0x8, 0x2}) 3m49.273752473s ago: executing program 2 (id=8198): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x84) mount$9p_virtio(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000480), 0x9, &(0x7f0000000540)={'trans=virtio,', {[{@cache_mmap}]}}) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x8000, @empty}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x8000, 0x102) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x84) (async) mount$9p_virtio(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000480), 0x9, &(0x7f0000000540)={'trans=virtio,', {[{@cache_mmap}]}}) (async) socket$l2tp(0x2, 0x2, 0x73) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x8000, @empty}, 0x10) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x8000, 0x102) (async) 3m49.273193681s ago: executing program 2 (id=8200): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000080)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x10, 0x3f6, 0x200, 0x70bd26, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040880}, 0x80) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000100)={&(0x7f0000001000)={[{0x0}, {0x0, 0x0, 0x2}, {0x0}, {0x0}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x1}, {&(0x7f0000005000)='\f', 0x1, 0x3}, {0x0}]}, 0x8, 0x2}, 0x1) r3 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000402505a8a440000102030109022400010106200b0904000002070103020905010220000e0900000000000000010cf9"], &(0x7f0000000700)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x9, 0x3, 0x3, 0xff, 0xc}, 0xc, &(0x7f0000000140)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0x4, 0x4}]}, 0x9, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x480a}}, {0xdc, &(0x7f0000000380)=@string={0xdc, 0x3, "96bdd1d52308c8c3fe2f8155244b2656feba7c4ff6a628f6b127a1e576a0083b7887c92f4405b570c0ca5f4a3b13274f607698a3db90678ea035c1846932dc3c2cbd93117b2906ff5420f671facb609cb7cfd009f75f209286717987b921c0729e507693d130f7d498e9060411c282684587d5dec11652e924b340203eb20777bba7af895c22067006e5db7fa49dcdf621ca82bd93c4a67b939ea9171dbd9ffdf84534fb380713a4c1ade0a1397d153282bd5a7fe09fd567fa54210c3400cbf518f166f3558bc0885930a5dcf7ca2be1efa56e7ed868953e3687"}}, {0xf, &(0x7f0000000240)=@string={0xf, 0x3, "dc997640a40b9d7e56ce334d31"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81d}}, {0xc3, &(0x7f0000000500)=@string={0xc3, 0x3, "6c212f4f7df512647256edcb439f523047dec769ab5eb5ebceb96347a9ac80637d0c94ca6909821b153a330d0a5fba7b266f149bcce549b5f01d6dbce465ef9534147d9f7bfe68edbcca0918be81e5f5a3518b0e53c176fceff02ab81421272fdbb9ff67891cf3a782e7e21083b82622f35afca317fbb11fef294e52605a3a75b9f722654c1781b77acac989563a5be9907417608c4d849117264c7b22a35f0f03bc35f48521502d287d13c43eb339df80e41e4ca535e31fa7091c1acd3ea29f94"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x443}}, {0xc2, &(0x7f0000000600)=@string={0xc2, 0x3, "c28d347c1723a4f5bbc3c0657d9de2273ac49bb4ca96d6f2a1a4b2bd27c66e8af433419283ca618e4be8186104b9df9a59e5da36077368b4aab45c0fb11ae849c9dde74dbba88c5cf629d30d0d021b80dbedee3c45facbdbd90994084d5bf55c7739c9c480d7671609e455ed6f1c6779567afc106e8c09d57640db7ee4a265bfe99f257c50fc692814333c525189748bb69b84b2ea646e48e0299968da1048b788c076e6f74a37a37cfe960a7117f3a93de0cb00081dc81c50adcbb9e128c0f8"}}]}) syz_usb_control_io$printer(r3, &(0x7f0000000480)={0x14, &(0x7f00000007c0)={0x20, 0x5, 0xa6, {0xa6, 0x8, "ffeedd3679f702b8964ed1eec4f3627938b5b4db3809bb89147b924af9881aca930fbc303fa076a4be1fbc9d41677cbb6a43d173cf8c93bcc538c8fed1a6da0815095bd839f7dedf770085bb50e99ef56b4b3d27b9dc62a7898d3ccb643b8015fdc350178f080adf87c17821777e98522b0f323f7a7c586c613cb0ea97fd7b4c9a41cd9c4862c3f17df4194102e676f3de54309b858b63333a39e54425213e66de374358"}}, &(0x7f0000000880)={0x0, 0x3, 0xef, @string={0xef, 0x3, "1757626f4413ccbaa11b0c0b60a4a98d0c079450b87d2a298196bc1d997792294eb7c4df6156fa3ad7e3314336b28b874e53a9c9acff316df7497557cc6de5081826865226b7483f857b2f8cddb81d93146fd2452eb4492dc8bfbd93f80ee3e199991e88d4bad7abe5e48188050656790c4bc0deeeac779a5fe58f94387045a608231531db989e83ba31af8a3b448ea0703eacc78fbadd15a4b98b6af2f2e0d347ef43c89b2f304270f3eb4c51586b2cfc919ce19d65c099cb5a41e3eed1e7c9daba644977ffbfc837a3d0fbad55af156be01f2a94986590ceaec6fe9e5889304e4cd45d5a8bb0c9b164719103"}}}, &(0x7f0000000b40)={0x34, &(0x7f0000000980)={0x40, 0x31, 0x30, "068d273016f061ff53ce19557ff96202a5e78be66da170d136fdc92aed03c11484c0b51500b93f26efde19956478e52a"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000a40)={0x20, 0x0, 0x6c, {0x6a, "ae0d1c404694d5a9490640e5c8f6edcfb18b61b0c2d378348d00a8a0b358ad128504031d939c77b6d5912fcedac57dc428e5a72c4a3633220da93f6f3f8a954953c9692f9fbe531d937866af235e91aa1d331037074f182017be6fbb639e8bd8f9ccdbe90f488298ffa4"}}, &(0x7f0000000ac0)={0x20, 0x1, 0x1, 0xc5}, &(0x7f0000000b00)={0x20, 0x0, 0x1, 0x1}}) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) close(0x3) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e0b06c90001008d"], 0xe) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) write$binfmt_format(r4, &(0x7f0000000100)='0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r4, &(0x7f0000000300)="ca0e808bb35b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3m45.73317146s ago: executing program 2 (id=8260): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0xc4, "098df852856f87dc27f8f7eae5eb87eec1cf23a64ac10245ff0f1eaf900acd2d6ee2675313deea1183c389482858dce0303ba42404aebd544fb8bbd007041bdd70069bc9f59268c1975ec12619fd568ede4cd0aa442788cfa7dbf90e9bc17d3aec9bf63945802e4bc578de6959aaa5d3ea988ce48b7553e661ddb83e25585f73715a57184f04446bd7470e300f2470f08f6aaaec2cfd775246ac7e1ae4b297019cd2df940726124cb1518372eacca51b6438710f293e48a49e19e071497b265fb5d332d0"}, &(0x7f0000000280)=0xcc) sendmmsg$inet_sctp(r0, &(0x7f0000000380)=[{&(0x7f0000000100)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000440), 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="1900"], 0x48}, {&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000005c0)="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", 0x1000}], 0x1, &(0x7f00000002c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x8208, 0x401, 0x8}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0x5, 0x0, 0x8, 0x4, 0x7fffffff, 0x1, 0x4, r1}}, @init={0x18, 0x84, 0x0, {0x8, 0xcb2c, 0x81, 0x40}}], 0x88, 0x40840}], 0x2, 0x40) 3m45.732881635s ago: executing program 2 (id=8261): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) poll(&(0x7f00000000c0)=[{r2, 0x1117}], 0x1, 0xfffffffb) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 3m45.413486723s ago: executing program 2 (id=8265): syz_open_dev$usbfs(&(0x7f0000000180), 0x7, 0x40140) 3m45.369884334s ago: executing program 45 (id=8265): syz_open_dev$usbfs(&(0x7f0000000180), 0x7, 0x40140) 2m21.014222851s ago: executing program 0 (id=9027): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r2, &(0x7f00000000c0)='lp\x00', 0xfffffdef) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 2m20.930968644s ago: executing program 0 (id=9029): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) (async) sendmmsg$alg(r1, &(0x7f0000004180)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008}], 0x1, 0x4) (async) setreuid(0xee01, 0x0) (async, rerun: 64) setresuid(0x0, 0xee01, 0x0) (rerun: 64) 2m20.930732097s ago: executing program 0 (id=9030): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, 0x0, 0x0, 0x1}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1, 0x360, 0x100}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x7, 0x8, 0x0, 0x4, 0x4, 0x81, 0x40, 0x632, r2}, &(0x7f0000000140)=0x20) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) (async) r5 = socket$kcm(0x2, 0x1, 0x84) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0xe, 0x1}]}}, 0x0, 0x26}, 0x28) setsockopt$sock_attach_bpf(r5, 0x84, 0x84, &(0x7f0000000000), 0x90) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) 2m20.823887644s ago: executing program 0 (id=9031): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x10}]}}]}, 0x3c}}, 0x0) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0) (async) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000001, 0x7]}}) 2m20.823372893s ago: executing program 0 (id=9032): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x13, 0x1f, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@alu={0x0, 0x1, 0x9, 0x1, 0x9, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x1, 0x0, 0x1, 0x6, 0x4, 0x10}, @call={0x85, 0x0, 0x0, 0x88}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x10001, 0xd3, &(0x7f0000000140)=""/211, 0x41100, 0x2, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x5, 0x9, 0x8, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x6, 0x4}, {0x4, 0x4, 0x6}], 0x10, 0xe4}, 0x94) pread64(r0, &(0x7f00000003c0)=""/45, 0x2d, 0x1) (async) pread64(r0, &(0x7f00000003c0)=""/45, 0x2d, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000440)=""/99, 0x63}, {&(0x7f00000004c0)=""/5, 0x5}, {&(0x7f0000000500)=""/249, 0xf9}, {&(0x7f0000000600)=""/24, 0x18}, {&(0x7f0000000640)=""/155, 0x9b}, {&(0x7f0000000700)=""/188, 0xbc}], 0x6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000840)='ns/net\x00') (async) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000840)='ns/net\x00') setns(r2, 0x4000000) (async) setns(r2, 0x4000000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000880)={0x0, 'vxcan1\x00', {0x4}, 0x8}) r3 = socket(0x1f, 0x800, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r1, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x49cb, 0x5c}}}}, ["", ""]}, 0x28}}, 0x40800) (async) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r1, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x49cb, 0x5c}}}}, ["", ""]}, 0x28}}, 0x40800) socket$alg(0x26, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r0, {0x101}}, './file0\x00'}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000a40)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000b80)={0x28, 0x5, r6, 0x0, &(0x7f0000000a80)="cc5ea2f81df99886f050279f6acf6aefab89293f8c5a96cfc6eac31c19e48b60d14bb5cfbf0476c05e0bfcc714a0dea34a5714b2d7340fccc1b8aa1a956b66f591675cd1b2f92e539a0b472bd02e875c4c4b40ae83c052bdb6d4eb7ac9bc79bff30c726879d01fc7ffe54041149d0589fdfe507b2c10cb448c45a0ad5153850e1f93b92b0f5965fdb9a2aa92d38f1213d40370e83990a7033abbcc39982b2f1d8f81755c47ed18e17b3446f3ee16f41e0100c936b0db5dad2fed082aaef21eb34034564bc0845b82", 0xc8, 0x5}) (async) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000b80)={0x28, 0x5, r6, 0x0, &(0x7f0000000a80)="cc5ea2f81df99886f050279f6acf6aefab89293f8c5a96cfc6eac31c19e48b60d14bb5cfbf0476c05e0bfcc714a0dea34a5714b2d7340fccc1b8aa1a956b66f591675cd1b2f92e539a0b472bd02e875c4c4b40ae83c052bdb6d4eb7ac9bc79bff30c726879d01fc7ffe54041149d0589fdfe507b2c10cb448c45a0ad5153850e1f93b92b0f5965fdb9a2aa92d38f1213d40370e83990a7033abbcc39982b2f1d8f81755c47ed18e17b3446f3ee16f41e0100c936b0db5dad2fed082aaef21eb34034564bc0845b82", 0xc8, 0x5}) socket$kcm(0x29, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000bc0)={0xc}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00), 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r1, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000000) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d40)={0x11c, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x3b}, @void, @val={0xc, 0x99, {0x0, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2626367d4b5cb2d3494e186f9513fbe6bb46e17d6b519f77"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9c433d70557dca8b8093cb6e4060bd2069909b19e4e0da01"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3aa34941e22d6bb35c1ea17aeb5e07863cbe11398e43118f"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a3d1bfd3b59127e1bdca4ac329a7aa075a5a6ac558315948"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4004050}, 0x4000) write(r0, &(0x7f0000000f00)="b68c96d1d1c2e9b10c4d5496151b5efe7f9dfb7ac141c5762de05aa69b63b04496bb3879fdb569e51a5bf04fedfdf9d20701d01bcd069e546ffde3dcd535be250e0d8feb59e2ce7c8b64ba114b10d449a5191dd38d23fa1215f2f370da0d1c471fb8c131cdc269338e0d8bed2cc4b2cc9d6be26dfbc712622e77b23f6b91644f95bb38aeaa", 0x85) (async) write(r0, &(0x7f0000000f00)="b68c96d1d1c2e9b10c4d5496151b5efe7f9dfb7ac141c5762de05aa69b63b04496bb3879fdb569e51a5bf04fedfdf9d20701d01bcd069e546ffde3dcd535be250e0d8feb59e2ce7c8b64ba114b10d449a5191dd38d23fa1215f2f370da0d1c471fb8c131cdc269338e0d8bed2cc4b2cc9d6be26dfbc712622e77b23f6b91644f95bb38aeaa", 0x85) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x6c, 0x3, 0x3, 0x101, 0x0, 0x0, {0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x7}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x311}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x80f0}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x7}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000180) (async) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x6c, 0x3, 0x3, 0x101, 0x0, 0x0, {0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x7}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x311}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x80f0}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x7}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000180) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000001100)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000001140)={0x1, 0x9, 0xffff, 0x934a7c145ff32f84, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000001180)={{0x1, 0x1, 0x18, r8, {0x1fa1}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000001180)={{0x1, 0x1, 0x18, r8, {0x1fa1}}, './file0\x00'}) r10 = accept4$vsock_stream(r9, &(0x7f00000011c0)={0x28, 0x0, 0x2711, @host}, 0x10, 0x100000) accept4$vsock_stream(r10, &(0x7f0000001200)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000001240)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000001240)={0x0, 0x0}) capset(&(0x7f00000012c0)={0x19980330, r11}, &(0x7f0000001300)={0x0, 0xc, 0xc, 0x4, 0x80000000, 0x7fff}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000001340)={@any, 0xfffffffe, 0xffff, 0x3, 0x7, 0x6c56, "590062416558e36a5a1a6c45c539e2342a6dc1c71419dbc9d811a0da534692decc7d8c9e0fbf220191fad32ec9a343e4ee5b13a165fdbfc2fd8a72775c1512460296164fad8d4004db6e90b3b7d36654fc58181e2f639b6ef47a6d695be54e0d07096962916e235e251e6b3b816fa428e0b7abf6a057fd2e8a6e9298a5311d4a"}) 2m20.355070442s ago: executing program 0 (id=9034): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000005000000a30c038a"]) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x400000080ffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x840) 2m20.248222102s ago: executing program 46 (id=9034): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000005000000a30c038a"]) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x400000080ffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x840) 2m18.168492984s ago: executing program 4 (id=9035): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x7, {{0xa, 0x4e22, 0x5, @mcast1}}}, 0x88) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x48, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "1c62acdfad905d2b4f6f2255ad1b963029028df42bc19c77", "4b2efecb22f91768539b1bf983c8123155f58650f790b44486a262078a7de578"}}}}}}}, 0x0) 2m18.008984201s ago: executing program 4 (id=9056): flock(0xffffffffffffffff, 0xa422928b49da8f63) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@can_newroute={0x134, 0x18, 0x1, 0x70bd26, 0x0, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x3a, 0x3a, 0x2b, 0x1, 0x5, "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", 0x2, "9406c1d334f25165f113b0dcd654598cad8e1d69"}}]}, 0x134}}, 0x0) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x1010044, &(0x7f0000000000)={[{@nofavordynmods}]}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000200), &(0x7f00000002c0)}) 2m17.944184139s ago: executing program 4 (id=9060): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x803, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r1, r1, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x24, &(0x7f0000000340)=0x100002, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250101f2800c00180008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f0000000600)={0x1c3, 0x5, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) ioctl$UFFDIO_CONTINUE(r5, 0x8010aa01, &(0x7f0000000000)={{&(0x7f0000600000/0x3000)=nil, 0x3000}}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r7 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x180900) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00') preadv(r10, &(0x7f0000000500)=[{&(0x7f0000000080)=""/149, 0x95}], 0x1, 0x9, 0x4317d336) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1f}}, "00186371ae9b1c03"}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x2, 0x7, 0x3cab, 0x10000, r7, 0xfffffffa, '\x00', r8, r9, 0x3, 0x5, 0x0, 0x0, @void, @value, @value=r10}, 0x50) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r4) 2m1.917793085s ago: executing program 47 (id=9060): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x803, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r1, r1, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x24, &(0x7f0000000340)=0x100002, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250101f2800c00180008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f0000000600)={0x1c3, 0x5, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) ioctl$UFFDIO_CONTINUE(r5, 0x8010aa01, &(0x7f0000000000)={{&(0x7f0000600000/0x3000)=nil, 0x3000}}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r7 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x180900) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00') preadv(r10, &(0x7f0000000500)=[{&(0x7f0000000080)=""/149, 0x95}], 0x1, 0x9, 0x4317d336) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1f}}, "00186371ae9b1c03"}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x2, 0x7, 0x3cab, 0x10000, r7, 0xfffffffa, '\x00', r8, r9, 0x3, 0x5, 0x0, 0x0, @void, @value, @value=r10}, 0x50) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r4) 1m59.708531839s ago: executing program 1 (id=9292): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfff7f038}, {0x6}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e2a, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@private=0xa010101, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1, 0x3}, {0xb, 0x7}, 0x0, 0x0, 0x1, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xba, 0x6, 0x8000000}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg$unix(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000ac}}], 0x1, 0x24002104) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="02180000100000000000000000000000030005000000000002000010e000000100000000000000000800120000000000000000000000000010000000000000000000000000000000ac1414bb000000000000000000000000fc010000000000000000000000000000030006000000000002"], 0x80}}, 0x0) fanotify_mark(r4, 0x2d, 0x1001, r3, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) r6 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) io_uring_setup(0x665c, &(0x7f0000000700)={0x0, 0xe70a, 0x1fffff, 0x3, 0x1d6}) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fc00ff0fff070000000000000c000000010b0000e77ad9328420e79905331f400a47d0244ae2bf6660ea037daba298fa2f05d006a20f069f9375fadead8661948d1c0bfad282147cc97fc60267de8562f5a064eab506382f1291f6204da399c79e0a98ee95e6d595803abbafc731ef902eb99b7c8981c4db0a30384dfd285fea7d62be645b5be798d1e5969e1c0dd075f252d9d4ce6a0cf58584526edb6a310606540641322c58dedb835ea2d41ec1170a32e8df6c704d1d1e6d8c3a852ae0417a977196e831ed932ffecb20a2b9b9a8bd40bb7cbd27c2a18a8803bd443c59a7f83e76a1af0bd7965a5357be5784b17fe5742a13ba7e65917b538ea396c75946ac56b5095de8ad69d1ef63ebb624166a"], 0x214) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x102, 0x0) write(r8, &(0x7f0000004200)="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", 0xf81) 1m58.736990296s ago: executing program 1 (id=9310): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x15, 0x0, 'lblcr\x00'}, 0x2c) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async) mmap(&(0x7f00003cd000/0x3000)=nil, 0x3000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) 1m58.733225275s ago: executing program 1 (id=9312): ioctl$CDROMPLAYTRKIND(0xffffffffffffffff, 0x5304, &(0x7f0000000000)={0x4, 0x7e, 0x4}) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0x80, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xd000}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) 1m58.652591207s ago: executing program 1 (id=9315): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf2501000000100002800c000580080001000000000004000180"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8000) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000008, 0x20010, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x80, &(0x7f0000000140)=0x8, 0x0, 0x4) 1m58.535640628s ago: executing program 1 (id=9316): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x2180, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x144, 0x24, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0x2}, {0x7, 0xfff2}, {0x1, 0xfff3}}, [@q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xc06}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x453}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x22}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9f}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x26}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x11}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x400}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x58}]}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4054}, 0x4000000) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 1m58.19387759s ago: executing program 1 (id=9317): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f00000001c0), 0x4}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x2, 0x21e3d, 0x4}) socket$alg(0x26, 0x5, 0x0) 1m58.099136198s ago: executing program 48 (id=9317): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f00000001c0), 0x4}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x2, 0x21e3d, 0x4}) socket$alg(0x26, 0x5, 0x0) 26.303612743s ago: executing program 9 (id=10504): syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) (async, rerun: 64) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (rerun: 64) epoll_create(0x1) (async) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) (async) epoll_create(0x7) (async, rerun: 32) close(0x3) (async, rerun: 32) unshare(0x2c020400) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8350, 0x2, 0x2, 0x8, 0x4}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8808}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) syz_io_uring_setup(0x111, &(0x7f00000003c0)={0x0, 0xf5cc, 0x2, 0x4}, 0x0, 0x0) 26.209216255s ago: executing program 9 (id=10506): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4000000) r0 = io_uring_setup(0x67bd, &(0x7f0000000280)={0x0, 0x40}) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000001c0)=0x1, 0xfffffffffffffc01, 0x4) io_uring_enter(r0, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000000)=0xf, 0xff09) getsockopt$inet6_buf(r2, 0x29, 0x6, 0xffffffffffffffff, &(0x7f00000003c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000b8000000b8000000090000000a00000000fe0dcdaff926dffbee43d7300d00000c070000000c000000040000130500000008000000000000800a000000060000000300000004000000ea0f000002000000050000000a0000000700000008000000000000000000000b050000000000000000000003000000000500000005000000060000000a0000000000000100000000750007010000000000000003000000000500000002000000000000000800000000000012030000000300000001000004050000000800000000000000"], &(0x7f0000000300)=""/4096, 0xd9, 0x1000, 0x0, 0xfffffff7, 0x10000, @value=r1}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4000000) (async) io_uring_setup(0x67bd, &(0x7f0000000280)={0x0, 0x40}) (async) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000001c0)=0x1, 0xfffffffffffffc01, 0x4) (async) io_uring_enter(r0, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) (async) close(r1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000000)=0xf, 0xff09) (async) getsockopt$inet6_buf(r2, 0x29, 0x6, 0xffffffffffffffff, &(0x7f00000003c0)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000b8000000b8000000090000000a00000000fe0dcdaff926dffbee43d7300d00000c070000000c000000040000130500000008000000000000800a000000060000000300000004000000ea0f000002000000050000000a0000000700000008000000000000000000000b050000000000000000000003000000000500000005000000060000000a0000000000000100000000750007010000000000000003000000000500000002000000000000000800000000000012030000000300000001000004050000000800000000000000"], &(0x7f0000000300)=""/4096, 0xd9, 0x1000, 0x0, 0xfffffff7, 0x10000, @value=r1}, 0x28) (async) 26.154189535s ago: executing program 9 (id=10509): syz_emit_ethernet(0x9e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8100350086dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e2200649078020000000100000004001000628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74882ed6741e7632daeaec0c95f2ad1cd68fb3d9fd3efe8e4ea8b5ec7448ddd6a3215990e1b896120966af96b22cf049f0dbb35c519297121b8d574e5cf79cb2e919356de0a2de29aeb0f005035e3146113cdbce5cd425e9006d1de958635d3c18b430c42fe7895bacda407e17a99600d84bbfb36e12df"], 0x0) (async, rerun: 64) r0 = socket$pppoe(0x18, 0x1, 0x0) (rerun: 64) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @broadcast, 'geneve0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) (async) socket$inet(0x2, 0x6, 0xeef7) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) setresuid(0xffffffffffffffff, 0x0, 0xee01) 26.153000317s ago: executing program 9 (id=10510): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000002c0)={@val, @void, @eth={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x21, 0x67, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0xd, 0x0, @opaque="5ae5a8db4e"}}}}}}, 0x33) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bsg/0:0:0:0\x00', 0x28903, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r4, 0x5386, &(0x7f0000000380)) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, &(0x7f0000000380)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000080)='./file0\x00') syz_clone(0x82008200, &(0x7f0000000600)="d8708b305c4a7668e7b5ae06a39761a8bdf098e1517970cf8196f9bc43c9bb1c8690d84cd1d3aaea885ffd169fcefcfa72e8890b38be0532f73b56e091b18029bf36a5c4a537ab7cc187a702e9acf76075d692afeb8bc9efd2dbbbf0426a03a83c1fa8f72f8931cb81e1d2208936069badd0281d4d66e92c2f6163391a3773678d79bb450590032f43bdd16fbeea34", 0x8f, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000001640)="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") r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x5005, 0x4000000002004003) recvfrom(r5, &(0x7f0000000500)=""/200, 0xc8, 0x40, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x2, 0x1, {0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}}, 0x80) readlink(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000400)=""/230, 0xe6) 26.046569245s ago: executing program 9 (id=10511): r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x9, 0x301402) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000100000001800e080140002007665746830000000000000000f00000005000d5638b215fa"], 0x34}}, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0x4, 0x1000, 0x4, @dev={0xfe, 0x80, '\x00', 0x17}, @remote, 0x0, 0x1, 0x0, 0x8e}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x1, 0x4, 0x44, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x8, 0x8, 0xffffffff, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x6, 0x1ff00, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8, 0x7, 0x2, 0x1}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x6, 0x1ff00, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8, 0x7, 0x2, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x80, 0x80, 0x9, 0x7ff, {{0x11, 0x4, 0x0, 0x0, 0x44, 0x64, 0x0, 0x4, 0x4, 0x0, @empty, @broadcast, {[@generic={0x82, 0x11, "87dd661ab6dee80eb07916e1796e30"}, @timestamp={0x44, 0x10, 0x28, 0x0, 0x6, [0x80000000, 0x8, 0x6]}, @timestamp={0x44, 0xc, 0x56, 0x0, 0x1, [0x3, 0x7]}, @end]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x80, 0x80, 0x9, 0x7ff, {{0x11, 0x4, 0x0, 0x0, 0x44, 0x64, 0x0, 0x4, 0x4, 0x0, @empty, @broadcast, {[@generic={0x82, 0x11, "87dd661ab6dee80eb07916e1796e30"}, @timestamp={0x44, 0x10, 0x28, 0x0, 0x6, [0x80000000, 0x8, 0x6]}, @timestamp={0x44, 0xc, 0x56, 0x0, 0x1, [0x3, 0x7]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r2, @ANYBLOB="100029bd7000fedbdf25130000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="14000180080003000300000008000100", @ANYRES32=r3, @ANYBLOB="3800072c41398563237ebed6650c86818008000300010100001484020062ab0c00000000008902c2a600617e2d12bb0579cb676d9a3f804370b41e76655f31000008000300", @ANYRES32=r4, @ANYBLOB="2c000180140002006272696467655f736c6176655f300000140002006e657464657673696d30000000000000300001801400020076657468305f746f5f626f6e64000000080003000100000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB], 0xc8}}, 0x8000) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f0000000540)={0x5, 0x0, [{0x373, 0x0, 0x2}, {0x9c4, 0x0, 0x5}, {0xaa6, 0x0, 0x3}, {0xb35, 0x0, 0x9}, {0x862, 0x0, 0x9}]}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}}) 25.900432619s ago: executing program 3 (id=10512): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)}, {0x0}], 0x2}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x360}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 25.708614203s ago: executing program 3 (id=10513): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)={0x8c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x5e}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x37}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x8c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_bridge\x00', &(0x7f0000000200)=@ethtool_dump={0x40, 0x2, 0xbdc, 0xaa, "772f6ffaa83c4991a692dbe77109315f65d574ce85284c0f0ac5628f21ff2b5d8ef60033506879d0953d6f76e73bc16736b10025f3802985a4164aedd0e9a49898f6aebf793f3ee79720fbc040398d8cc5027527634a605ae16a71c5f2cd1e673d07c7d9201d279430dcb6ff577a59ee381cb4de5407b361ca4f860413ada33627f7f34ad2f55f0bc166994b1856c47361529d87e0b96bc4a90a836891083d09044f0acc76237c848ab7"}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_bridge\x00', &(0x7f0000000200)=@ethtool_dump={0x40, 0x2, 0xbdc, 0xaa, "772f6ffaa83c4991a692dbe77109315f65d574ce85284c0f0ac5628f21ff2b5d8ef60033506879d0953d6f76e73bc16736b10025f3802985a4164aedd0e9a49898f6aebf793f3ee79720fbc040398d8cc5027527634a605ae16a71c5f2cd1e673d07c7d9201d279430dcb6ff577a59ee381cb4de5407b361ca4f860413ada33627f7f34ad2f55f0bc166994b1856c47361529d87e0b96bc4a90a836891083d09044f0acc76237c848ab7"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xdb, 0x602, 0x7a, 0x1, 0xc84, 0x5}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) (async) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xdb, 0x602, 0x7a, 0x1, 0xc84, 0x5}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r9, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r9, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)="5b40e01061d8c8be400cfd523e8785d698c8f2fb2fa2b2b5c36077644b56e151e51743bf24c9669873c9cfaf5a36ba036416468a9fd249dbcac14138487b2d87ba5555499e788216c725ac813ad6d98e7b6a3c1cb996bb624ccc3a83ef227b4ff739cde93c35819c7c51454489c8be7fd1cd6eca0fe2963f30a78d10cc3b7d70aea4c8099af1cb51db90ca1436c9bb2893726a0b009df3ecc39e1079e72b90b97d497ac526b8e573643fd10779155bac0bd7c739480cbb924b746509b9791873ebecd582f684e1fe1aa695c406ad2535f9b467d2634e4384deaab15284fed9c7bb4bcb320d8a95e5b956dc45017d5c825d9abebc81fb108369d04de9e56ae592b4b7703bf64c475cb73cfb7fefd1fa29e37e8f2e9d22e1136b196a91f0e9cc4ac34d616305ace76c9b80cfa4a9d68e544133d2d943c0aa1a8ce1dac2c8d940d0addc45b584480f936c71541c20ba855ee6202ac91724a0ce25d2ea0e105cd505ec09613d500afe3533e20aaaf9d65e3cb62debcd0e30b5aa2220688f3159b1621769c31d898822d527c8c889d00c740bfc74a63d31fd3b2babbdfa3bda2996da90d07a31e520ba1b80f37bc7793ea5eaa8b6652fa37bbf99d42f8e570b8cc2ffe232cfbb831a011a9d0cdaff55d2d0dde64c3e7209d73e4dc2c4b0192c97b5633ffe04719eda71c0086861494b747bf5132ec7bf02fc75ffc2bb6e5553cfa60344c4afbfb46dc9fc2aa844a4107907f7e0635e5d678a5d9cab0c5dc1541c3dd7170583871a00b1f8da6c9e48770f49fa1229d4d8f153d62d31c4aaeb3164ad0f579406fc98bb5bcc9927eadcd9127dd67853dd7025bd9a3e4011b5c0a4af3de19ec6318ca2e0e2e1db2224289696326dcdde0590df02bfc196aa465600db284453f9ed0f9775c82974f1d0c3c6eb5d16795ef463efd364ec9668011105fd932f6052bd45b6b3130350583e3511b3b81145cced34c7a18307e8bb776beaf58e9c23759fa26425183ceb1973181fca0c94cd50fddf9d1a5a32c22b1da73bd2427f81ae56d963d4281add8dd8e7e2e8c049d6a909040f92c6355f19e24874db2ef93f8ef4ee77e86fd93f94c3e76baf7bb1da0cfdf8cb6fff157190b1fe1e28ecf3e3b5e555e24989774341d1646f7a51368c7fd7e7d55e8490a38bbe224650d70446dd5be262863990830e0aab698ee60baa155187f7a83fc49de710cf46bea5328de88ed3bd6c1a517a3c91a4929fd9215f2ef4cfaf84f34dfa46b4151262e0f6bb2f410b3cc76e5a42654ff02c8f306a7725d331d0418f540a4eb4999c06bc0bf3bf1479acfe67d15dea8421cb8b5c79508b1cd569578239d53b664f92e7b8a41ba6093d3ec5d7b6e9f2657142483145ca0f43aed21ad03a5d53a9a471d12d23fd906d8768bfef81fb8bb5edb3afde3ff328ec88d79f00d4d7d8c8b31079c2501a51daef25caad4628dae05c8719c6d7afa4bd986937814409cdecce732eaf5de4a9c78113cd8a9d224b8f06d0ee06d2402227ef2c21964c3bf45afdfc25de903490f176c1471e8df804d40997c246eb330d9d5eded786fc4cf1635d7a0f912bd05ad405f4c1a5696de28c20494db68595ec45f65e1a09c55ed7fee6c0cf76f026e3b50fcf607cceb9988e2b245b5cf21f9007335f13f4a01fec518154da9f87fe7d226cec2b0e297bf52a8dac1add345ed02f3936463ca8e213ab29d1096cfb408117beb54b385e5bfa64fde5c45585832137e93ffd876d613048664c6a8c853eb71fda249a43442c2d177090cfe8a682f1f45c5bccac86e9fc9cbaeb47df3e91b16da33ceaa2502c160dda66c88b071d0785a190a8d19501a046ca5115b5e94c4e4621bd82746c5d7ce50c997fc27cade289649b6e004dc93ff2cad9126e878197fb8bc3553b73d914db3de5bc6fb53a3e950008877c7ea6db4d48e5c5bb857927fb15464eb1c5910fd9ce0cf5c16c37cd52a075f4d616f91fe0aa4935419a3a7b42283fe7924d062f3c6e6112060270feca8b6d53f0205978bbd57cfc60a2d07a7269ba98a477ae2998ba0f3be5499c4f051a142cf0ac118bc5704c514c6b1ceda4eca65098b6e474b73ec8aa2bcc293550c743a99833a41010765fc6bb11b5c42c74b0ae58cad3b02075f67cd404aa12e8ef1cb3ef4e93e0c6b4764ddadb65966ba15ac39d0a706e1e684647c12fcaae86d6fabf24788c93659fc21e6da7ae2645c367675fbb8867118813835a7ff88ffd193c8dbcd1c0072157dec6a3bf0d1b6af1248beffbd97e2ca67ab75261af6e1fd22ac329124ba2c7ebb6a70d8907142ebacab6cda5598738d562ab9c6b2a36bf654dc792ba937dde4cfcbc53a516fe4f666e0092f8628926b1994f0881bd626a6f49d534cd41612d389340a33b9361748bd28ce0e9252e815298c3e793b06ed951414195f069128712caa166b5a47155fadbba955d8e9dac0fbe03d6e25862e30207b016f68ee35a780e3f9b51afdf452027bf7752cc333c34d2bcb9daa1bcf88b88a44e78b72432754f9503d381cd7ed51a2add6b43be6e72ce548138ab95cfa1e7976b801d1c98f072b24202b0e26c3c21321d8073f0904b6417a4f0c8e51084c1efd5c0ebd1cd5df2a0089937176a21b47fd2e9ffd777b126c66d25b10177c5bdd011d9f8753918ee5af6e3121c115cbdcd145628597c2eb441af2a918cb6be639c4ccf459f5289eb1895e9ba71587de7c133ef37798977ccbe3800889f63ebd46e4d5c375554ffc407d68a18b8ed2ec484490de21c9e12f503f5dd7a29617d124e0a87c572776717544860baac841f9ff30726ff42e094088b0d9e83f611caefb2d08f7d6f47f545ff9d115d9a8a23ea99fd1d25ca51bc8a14420b4f796ab37318e0d1ca8708b831325f89551426b2242c1cfda14fdf42b034dfa02387e793010ad6eef7092fbbc41bc09e26508276f27f4d50f5d55b619b9d7e6c3701a9afe6ba65c2908366ef1120285ab5f45ac0331abaa8710b46c4dac7a4b2ac1f0686d5a3cd66c9c68bedfe01a2d3bc1ca2d2885bdb814817de7f5faf89c19199f30b1be245a1e98ef93e4d21e85d51d6501e26c257d5375627660c46988e79b78a940aa493f3f658d1673e707e451bf2908876c46a26da64fbcfb7166886f8388b17f1ee9795afaa0854ba028cfcf2a8e42b34e0f3630ffd48d912b4bf72977a11d1e731ae9aa3de8edd505b31239dd35d80ca81ab3319a320e1444d805a73c709d4f91e673f7e5202e5fc2e4fd66cc4053c3f540205ff4cd9a07c18c50ff82e6568f3b91d850f2862aae317ea83117881c34d9768658ca318edbe9afd1800095289260976db334f4d69a137ef2e4b7d21d16f5d0d31f5cdb839accafaca17ad80e264829272cda3819559de9b26802bf521b0b30f112437395a4280394e698bbe8a69f4dcf89ee0075032a2b13aa3fed6143e3862b89179d95e56f211b043615b120efb8242a605b41a0614e0cfa6e3d93e14dd8d93cb6e0af82eac962f4793b84d59879d629c147cea29adfa7ba3099449e40644c0ef2cd9bd966a2c1e89a86647c880b03903628733f1a79e79e3f0f7f9931b21e6142d555b9c885cbac200bf31ee18dee3886da2e4e81bd8991360f5ce59422c495b1c65f7e8f20bc9ffce42188b4adcc77777b3f1f4c47980bc7c4e045cfae01cc7f0bd6b35f1b56e7a224371761e27e6d4d3985ded5cab5ab28b2d3d2224269ca6850cd87ee3423ea7b53095e94f2ed8b9fe85e96b0b544fde3d60a50f807f34c2ace532ca387ebeae68bef62c87a1061b53f2fd75021e5f9eeb01b00ab744d1cdfa42a3edb00ee93c4caebccfa4fbf33cf868eb7e7f4cc6a59d218e2cc8a4f34eedc98ee2abc78cefac69aee2e144575a565c09f9d17f524bea6541a93409e6797a94dc99b36e8c159714af2b2aa72d4fe86b26de7ec77df4dac78d091f56e78f2ac8947a8a3517316e85029e270f183fe59594cb1ace78ac528935f5583fb948843d59fb51a2d0d19f77e7bcf0d8dbf4647120fa75effd72e4fa76f87faeebc5c050c6a6b43711facd4d35360b9584fb56ce0dc767155241d7a20df322514089f5b4ddab6eb71e22bc60265b8963a4efa96b0806ceb9af03adf270eaec552e24939f0202311b4d7e43a6545f2c068f5d2456c949b5bc8f37302c0b8e95ec2ea93341b198721a1f69f17528b9809377211b63e3dadcde5a665e1d1e19ddd6f1c0f43115b679496374267f8610bf3a7197cf83226c7dd148b8e4ce1a61f1f3688e93b09e8a331fe9de0a74cf35852ca8c781cac67f4bed128bebab53e88ee239a62847c118f02f0adf50ecd5898c62fcec4345cfa95a59dbfb0aac99df2bbada8649ddc440614a150b64a0e2bd93bbdbcdc56e6607f5cc46d965e95bee00b1c708ce21078a269479a6d92bc2f7a8b8b14e4df3426d442d1b01f2c7e15057f1aab151b16a962421d75300099126d106daae2bda9df88307cb7e188ab96988d3bfc155a154fb1298b97d45c57dbac7b3cca5d88494c67bb2d7c9cc47024f3f48cd7f1a908cbaff2336b17aa1a32ab57bc10242912f0d44cdcdab972e984cdf1d39fd2df3e1c61d1b860f97f3076e48b58fef46de9d200ac927a1d4cb8e0690f3fc1e7d014d5bea3c7fb076dbfaa103f70ebc819126a1a893bdd4dfba7f867956faa20925b8778e352a5f39a87bf7e3811f310f14c54065b7d4a700df199e2e80b0e9b5d1277a71e7488865b88f7b24831531e253d795c0b396ff71a54916c77a355561a2081a7681e2ddee151585962d00b073f4008551a488536d6635e14d8f47dc16e16ecca35c5e8986f465085f70309046e57d85649cce2adc36feea658a4e5feb85d5ee9b54d96bf60047aa4263c82333759bc9ea100a9d77bcbefc69b2798cf69e2b48fe8cada517027e0ee5c344244e2758f4d051650e548894c57bf604b6b7203d9dc563f08a0bbe8922af840ce26835faaf80cc1f340107def3c377da228f48e0ce3b58476a47292aba0c1f502175464b03187973afdd82698f8d31a142fe332a98bcc8fdae4a0874001af0771606edff9456e89c887d58c258cdd541136324ca3e89c82bfa2786f0d8d89f17806dd73ea44cb99f2d577f1a806e8c11a8e281dd0ab4a991a07441dbcf436f41b72028215408880ccd8841fda368cfd429f7340df0b55c83d94042f0c244497c8a22e58ac8267f57693620d491c339f67a6d0a26ded079a833cbbff392a5405813ce528dcabbe12e3f5451ee475b096c96453affc25d63b6e3c93ab367b41b00c680390c6f761a8d9f6cf852d5ff8f7595d6b8bd7c16a8a56517e6ae65cb56a430915419c1a590e20815c42812f66f466183bc310d473a4a64f97fc2a5a7901db2a7230e5b80132114b24a786a03da9f6ab201014a264e2bee5180ac1f0a4f33e4d42d406e66897394dde254541d53eea409e7b41cb0dcf8337c84c70a0d5dc587f20045d507b16900c6b68d80cbd5bd9482bb3328e1cb6a160852211d787d49933a0822869d727e715bf3c854253e124adcd89faf8a32e746750439e1258701e33dbd7572a8890484b859e01e42f533315c495ffbb06f08bd21c59bf814d86bd9ce45a0e69266791ad915d6ba0cdb96bab6d76d044c9dbe1c546ad784755cb9df8b45c05166e6b72449ff1b00f7fcf817a8ee05b0ccd5a31493d101b2452f1fbc7a533e2119e4d3829b16d113f01ab690b66642b4157efbd8085c6f6a76be9379d61f861b1d51d8c220b87c2b58211d1351d26b0de82eb8381630585d2e47feed920af6d19c8b5c", 0x1000}, {&(0x7f0000001440)="4528150f05ea0411ca05d156147f52670404d9293656da049735e9cf11f93b5a788a82e87f54cfd2cf802d4f1cb12af1719a9f1cf733dbcebe4ba2557b479872e1af4f1abf47c664a1de4f9a21c879cff3e2459d541838db6df59826ba649f375d07b6669b640807fcfe3bd4842b0aa832b9be5a75a0099aeeabb54f9c5f3c3c460a8526814d5aab4f54902407ed5cb4e5192a4d92b7e2d72c758c596b475e520d40544985b013983675aeeac0f7663ac1604a73871afc32b72c2f243eda346863c4ec3caa8dc6a0320e9bc2189e418fa87754482e84e34331fe9543be502af7a3cb74e255", 0xe5}, {&(0x7f0000001540)="e1e47fd335a2fcd41f304659e79e4c5d42e22776cd2431690658eca3ddd5a64f860c7942f17367254b117eba3f963f1dd27096b45e29437a79fa731f8bba120b11df6f33340b79fd00201a9f9a2777de2d50944e63cefca25b75753f86a934dd18e59ace43ccc74491ecfe83fe947407d30768c32efeabce24103633425effecf81dd2905a36e966426b647bee8d654ddc04afa4d44be29828fe8f7ceff85b3cc3cf771f65a5b15e5abe87ceb9bc557c32edc70f9562e024080a583c986e908287b6a774a0e04b983433c8552dc26d880bdeffb26e78", 0xd6}], 0x3, &(0x7f0000001640)=[{0x48, 0x117, 0x0, "e15fa0d060779d571578d26687c47514dcf1b4174ab552eb02e45b50477e9b535f13ba027c18272dc1e01e752848cb36f77fa118d4162d3e"}, {0x78, 0x3a, 0x8, "f6321b4c880c5f5728e471a0f14cc48d8938393b2b344af5fd81d2e7ee918c6785b3e5efb9069962d998272e3148f655c3f528584138b3ebfae3eb157e4c877aff55008abc742c19b42baeb570f64fbab20c6da6fb046e03a53f0da55d7c428165"}, {0x1010, 0x1, 0x88, "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"}], 0x10d0}}], 0x1, 0x441c0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x40820, 0x1802a}, [@IFLA_LINKINFO={0xffffffffffffff29, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FAST_LEAVE={0x5, 0x7, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x8000) 25.633817069s ago: executing program 9 (id=10514): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000004c0)={{0x0, 0xffffffffffffffff, 0x3, 0x2, 0x7fffffff, 0x7, 0x0, 0x9, 0x1ff, 0x14, 0x5, 0x400, 0x8, 0x800, 0xf}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000104000000000000000000000500", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r4], 0x40}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000080), &(0x7f0000000a40)=@udp=r4}, 0x20) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000000c0)={{r1, 0x8, 0x9, 0xb56, 0x7, 0x5, 0x5, 0x20000000, 0x9, 0x8e, 0xd, 0x1477e90a, 0x80000000, 0xc35, 0x5}, 0x8, [0x0]}) set_mempolicy(0x1, &(0x7f0000000000)=0xffffffffffffffff, 0x6) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x4844}, 0x0) 25.586058354s ago: executing program 49 (id=10514): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000004c0)={{0x0, 0xffffffffffffffff, 0x3, 0x2, 0x7fffffff, 0x7, 0x0, 0x9, 0x1ff, 0x14, 0x5, 0x400, 0x8, 0x800, 0xf}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000104000000000000000000000500", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r4], 0x40}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000080), &(0x7f0000000a40)=@udp=r4}, 0x20) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000000c0)={{r1, 0x8, 0x9, 0xb56, 0x7, 0x5, 0x5, 0x20000000, 0x9, 0x8e, 0xd, 0x1477e90a, 0x80000000, 0xc35, 0x5}, 0x8, [0x0]}) set_mempolicy(0x1, &(0x7f0000000000)=0xffffffffffffffff, 0x6) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x4844}, 0x0) 23.6521772s ago: executing program 3 (id=10537): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x48a, 0x0, 0xfffffffffffffffc}]}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000a40)={'ip_vti0\x00', {0x2, 0x4e21, @broadcast}}) 23.587220634s ago: executing program 3 (id=10539): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) prctl$PR_SET_MM_MAP(0x49, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000005000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xffffffffffffff90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) prctl$PR_SET_THP_DISABLE(0x41, 0x1) prctl$PR_SET_THP_DISABLE(0x41, 0x1) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f000000a180)=ANY=[@ANYBLOB="400097a67f14580000", @ANYRES16=r5, @ANYBLOB="020027bd7000fbdbdf250100000008001700", @ANYRES32=r2, @ANYBLOB="080018007f0000010c0010000600000000000000050012000e00000006001c0007000000"], 0x40}, 0x1, 0x0, 0x0, 0x20040004}, 0x8800) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x6, 0x400}}, './file0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r7, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r7}, 0x8) r11 = socket(0x0, 0x800, 0x6) ioctl$BTRFS_IOC_SPACE_INFO(r10, 0xc0109414, &(0x7f0000000740)={0x66c, 0x7, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xebd53000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r12 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SYNC(r12, 0xffffffff80000101, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r11, 0x6a, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x8, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fe60d8f1000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000bf0900000000000055090100000000009500000000000000bf9100000000006d6d527800010000008500006a36464f7ad228be6adbe11a3c0084000000b7000000000000009500000000"], &(0x7f0000000540)='syzkaller\x00', 0x8, 0xa6, &(0x7f0000000280)=""/166, 0x41100, 0x31, '\x00', 0x0, @cgroup_skb, r0, 0x8, &(0x7f00000001c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x2, 0x0, 0x1}, 0x10, 0x0, r3, 0x6, &(0x7f0000000480)=[r0, r7, r8, r9, r0, r0, r7, r0], &(0x7f00000004c0)=[{0x4, 0x2, 0xc, 0xb}, {0x0, 0x5, 0x5, 0x5}, {0x3, 0x3, 0xd, 0xb}, {0x5, 0x1, 0xf, 0x5}, {0x4, 0x1, 0x9, 0x6}, {0x4, 0x2, 0x3, 0x8}], 0x10, 0x4}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) 23.469863547s ago: executing program 3 (id=10541): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000000340)) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_int(r2, 0x0, 0x12, 0x0, &(0x7f0000000040)) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100007d6ea054a2", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) fcntl$setstatus(r3, 0x4, 0x400) (async) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r3, r3}, 0x4) bind$inet(r5, &(0x7f00000004c0)={0x2, 0x4e20, @multicast2}, 0x10) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0302000004000000040000000a01000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7, r7}, &(0x7f0000000600), &(0x7f0000000640)=r6}, 0x1c) (async) r9 = syz_open_dev$evdev(&(0x7f0000000300), 0x9, 0x10800) ioctl$EVIOCGKEYCODE(r9, 0x80084504, &(0x7f0000000840)=""/203) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'nr0\x00'}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x202000, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000002c0)={'bond_slave_1\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'gre0\x00', &(0x7f00000007c0)={'sit0\x00', 0x0, 0x10, 0x7, 0x3, 0x1, {{0x12, 0x4, 0x0, 0x3d, 0x48, 0x66, 0x0, 0x8d, 0x2f, 0x0, @empty, @loopback, {[@ssrr={0x89, 0x23, 0x10, [@empty, @loopback, @multicast2, @empty, @loopback, @rand_addr=0x64010102, @empty, @dev={0xac, 0x14, 0x14, 0x3e}]}, @timestamp_prespec={0x44, 0xc, 0xf2, 0x3, 0x3, [{@rand_addr=0x64010101}]}, @generic={0x89, 0x3, "fe"}]}}}}}) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x3f, 0x30, 0xfffc, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x14, 0x0, 0x0, @remote, "53f683785c5b987df5ff06000000007ee410f074"}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000780)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', r12, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71d}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r8}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) 23.381350093s ago: executing program 3 (id=10543): r0 = syz_open_dev$hidraw(&(0x7f0000001980), 0x0, 0x1) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000013c0)={0xffffffffffffffff}) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0x4004e502, &(0x7f0000001940)=0x40) r2 = socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 64) socket(0x2b, 0x2, 0x0) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xe4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0xff, 0x4, 0x81, 0xffffffff, 0x0, 0x17, 0x4, 0x0, [0x0, 0x100000]}}) r5 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) (async) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000100)=0x3) (async) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0x7ff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf25020000000800080046"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x844) (async) ppoll(&(0x7f0000000000)=[{r6}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) (rerun: 32) write$dsp(r8, &(0x7f0000000280)="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", 0x100000) (async, rerun: 32) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) (async, rerun: 32) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001580), 0x6001, 0x0) (rerun: 32) ioctl$SNDCTL_DSP_SETFMT(r10, 0xc0045005, &(0x7f0000001800)=0xa) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x5, 0xc2, &(0x7f0000001280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb0, 0x3, 0x1, 0x9, 0xb0, 0xff, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x27}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x100, 0x5, 0x10, 0x5, 0x76, 0x10}, @extension_unit={0x7, 0x24, 0x8, 0x4, 0x1ff}, @extension_unit={0xa, 0x24, 0x8, 0x4, 0xfffa, 0x2b, "9179fb"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xb, 0x9, 0x5, {0x7, 0x25, 0x1, 0x4, 0x2, 0x94}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x2, 0x3, 0x5, "6b80", "c312"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x401, 0x6, 0x8a}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x0, 0x3, 0x3, 0x8, "9fe87c1f01"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x0, 0x6, 0x4}, @as_header={0x7, 0x24, 0x1, 0x8, 0x1, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x4, 0x3, 0x5, {0x7, 0x25, 0x1, 0xc, 0x1, 0x1}}}}}}}}]}}, &(0x7f0000001680)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x5, 0x0, 0x8, 0x10, 0x96}, 0x49, &(0x7f0000000200)={0x5, 0xf, 0x49, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0x84, 0x3de7}, @ssp_cap={0x24, 0x10, 0xa, 0x13, 0x6, 0x0, 0xf00, 0x7, [0xf, 0x3f0f, 0x0, 0xffc000, 0x0, 0x30]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4a, 0x7, 0x2, 0x504d}, @wireless={0xb, 0x10, 0x1, 0x4, 0x84, 0x5, 0x5, 0x9, 0x9}]}, 0x7, [{0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0xc09}}, {0x61, &(0x7f0000001840)=ANY=[@ANYBLOB="6103f826010dc1f0510ff9611b8eca223c6224149876db125008e65f5f8b78731547a28ab8ef5c2fffac13f8fbce790a80c616e6fdc099e72c0581f2777e5e6d2347f7b5a0ec632b9138d6428b8ca6cd671e1cc5001df0e1ccc2853f83886195ca5aa9655f3a6fa34721b23d585e67b7e90b36891f207e2c534bcfe00458370224060a2df4115dbae7418daf139461f9b38f15ef0e386ecbc40eddba9e6200de7aed92a063167e11530b4674b1196debb6bd5290598d3dc75566090000000000000000"]}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x445}}, {0xce, &(0x7f0000001480)=@string={0xce, 0x3, "d97887d3f45ca9235444880b96b466812cd503b7e57fd31d83a8a2f3cc3479221f9333b66061e09a9fdc43d5af7bd7f93a2ebf742d2a9a8a8c3efa5d8ae07f0c6d364d8f5dc6573be5db9e2471f90424775f9408929804f5c0aa0528ca8d8c6831e9d990324d44123965d3f8b1814679f4a0667234ee51b0df809eb177e5453a4d79724175b095d648131e4dc1ae559b9ec29da4029aef04637295838d4e472957be84074a1ed4a8140ee238903a8c1962e5a03fe945ffba496b2d8150e2e95d2cf1553e8070ece253e4bd6a"}}, {0xee, &(0x7f0000001700)=@string={0xee, 0x3, "d03db789cf30aac314c8c0752a9242b7c60053547dc3363ed38432abd5a88480a2e87e9b53080a1e0843b0d9e09369851ebf89b6ac2f06262aac24324e97d353932c9f9de3b579eba04a715bf99c6e55fbde36d91d3127189537c3d8f8309fdf0717bd0bd04ae0999c60e3321ba6fc3749ed7af80be7c71c2525dff73731f1385708ca91bf6a8c1b3ff33fdb9614777875f53bed4505650ffc3e2147196efa72b34af5447b0e28e5257aceeba352af3b881e3359c15ff3dafb084ba41e185da235bc8a9ed4c866fe7ddb75796be957cfcaacc5c6e8eb7c53608bdbd2b879efae073b89aa74e86ba87e375ed9"}}, {0x68, &(0x7f00000015c0)=@string={0x68, 0x3, "39f062bb3e3c334afea9de31c9014bb23c345329fe2f830aec04c966f08a26f0a7574670560d7b9b7cd33008d1ba187ccd2d6ed51b5205820cfc6fea2240e9cdec2bdfbce6fb61e90c7d659431f7f9664e257ee2b09565f2abb70c0a6ca5da633779d0284d87"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0xc0a}}]}) (async) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000013000100000000400000000004000080592f4e23e372bcffa2fda40106aec47b31c7edd459f1d6e1d62d48d0ae4aae769805cd0eef0c2f98738a02c0baef1a9ab17693277f8269f24be9ad9dfcba26c039a85af5e574182c656cc5e6ae00"/107], 0x14}], 0x1, 0x0, 0x0, 0x88}, 0x0) syz_usb_disconnect(r5) (async) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES64=r9, @ANYRES64=r5, @ANYRES16=r9, @ANYBLOB], 0x0) 7.291056919s ago: executing program 50 (id=10543): r0 = syz_open_dev$hidraw(&(0x7f0000001980), 0x0, 0x1) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000013c0)={0xffffffffffffffff}) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0x4004e502, &(0x7f0000001940)=0x40) r2 = socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 64) socket(0x2b, 0x2, 0x0) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xe4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0xff, 0x4, 0x81, 0xffffffff, 0x0, 0x17, 0x4, 0x0, [0x0, 0x100000]}}) r5 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) (async) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000100)=0x3) (async) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0x7ff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf25020000000800080046"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x844) (async) ppoll(&(0x7f0000000000)=[{r6}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) (rerun: 32) write$dsp(r8, &(0x7f0000000280)="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", 0x100000) (async, rerun: 32) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) (async, rerun: 32) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001580), 0x6001, 0x0) (rerun: 32) ioctl$SNDCTL_DSP_SETFMT(r10, 0xc0045005, &(0x7f0000001800)=0xa) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x5, 0xc2, &(0x7f0000001280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb0, 0x3, 0x1, 0x9, 0xb0, 0xff, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x27}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x100, 0x5, 0x10, 0x5, 0x76, 0x10}, @extension_unit={0x7, 0x24, 0x8, 0x4, 0x1ff}, @extension_unit={0xa, 0x24, 0x8, 0x4, 0xfffa, 0x2b, "9179fb"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xb, 0x9, 0x5, {0x7, 0x25, 0x1, 0x4, 0x2, 0x94}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x2, 0x3, 0x5, "6b80", "c312"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x401, 0x6, 0x8a}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x0, 0x3, 0x3, 0x8, "9fe87c1f01"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x0, 0x6, 0x4}, @as_header={0x7, 0x24, 0x1, 0x8, 0x1, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x4, 0x3, 0x5, {0x7, 0x25, 0x1, 0xc, 0x1, 0x1}}}}}}}}]}}, &(0x7f0000001680)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x5, 0x0, 0x8, 0x10, 0x96}, 0x49, &(0x7f0000000200)={0x5, 0xf, 0x49, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0x84, 0x3de7}, @ssp_cap={0x24, 0x10, 0xa, 0x13, 0x6, 0x0, 0xf00, 0x7, [0xf, 0x3f0f, 0x0, 0xffc000, 0x0, 0x30]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4a, 0x7, 0x2, 0x504d}, @wireless={0xb, 0x10, 0x1, 0x4, 0x84, 0x5, 0x5, 0x9, 0x9}]}, 0x7, [{0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0xc09}}, {0x61, &(0x7f0000001840)=ANY=[@ANYBLOB="6103f826010dc1f0510ff9611b8eca223c6224149876db125008e65f5f8b78731547a28ab8ef5c2fffac13f8fbce790a80c616e6fdc099e72c0581f2777e5e6d2347f7b5a0ec632b9138d6428b8ca6cd671e1cc5001df0e1ccc2853f83886195ca5aa9655f3a6fa34721b23d585e67b7e90b36891f207e2c534bcfe00458370224060a2df4115dbae7418daf139461f9b38f15ef0e386ecbc40eddba9e6200de7aed92a063167e11530b4674b1196debb6bd5290598d3dc75566090000000000000000"]}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x445}}, {0xce, &(0x7f0000001480)=@string={0xce, 0x3, "d97887d3f45ca9235444880b96b466812cd503b7e57fd31d83a8a2f3cc3479221f9333b66061e09a9fdc43d5af7bd7f93a2ebf742d2a9a8a8c3efa5d8ae07f0c6d364d8f5dc6573be5db9e2471f90424775f9408929804f5c0aa0528ca8d8c6831e9d990324d44123965d3f8b1814679f4a0667234ee51b0df809eb177e5453a4d79724175b095d648131e4dc1ae559b9ec29da4029aef04637295838d4e472957be84074a1ed4a8140ee238903a8c1962e5a03fe945ffba496b2d8150e2e95d2cf1553e8070ece253e4bd6a"}}, {0xee, &(0x7f0000001700)=@string={0xee, 0x3, "d03db789cf30aac314c8c0752a9242b7c60053547dc3363ed38432abd5a88480a2e87e9b53080a1e0843b0d9e09369851ebf89b6ac2f06262aac24324e97d353932c9f9de3b579eba04a715bf99c6e55fbde36d91d3127189537c3d8f8309fdf0717bd0bd04ae0999c60e3321ba6fc3749ed7af80be7c71c2525dff73731f1385708ca91bf6a8c1b3ff33fdb9614777875f53bed4505650ffc3e2147196efa72b34af5447b0e28e5257aceeba352af3b881e3359c15ff3dafb084ba41e185da235bc8a9ed4c866fe7ddb75796be957cfcaacc5c6e8eb7c53608bdbd2b879efae073b89aa74e86ba87e375ed9"}}, {0x68, &(0x7f00000015c0)=@string={0x68, 0x3, "39f062bb3e3c334afea9de31c9014bb23c345329fe2f830aec04c966f08a26f0a7574670560d7b9b7cd33008d1ba187ccd2d6ed51b5205820cfc6fea2240e9cdec2bdfbce6fb61e90c7d659431f7f9664e257ee2b09565f2abb70c0a6ca5da633779d0284d87"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0xc0a}}]}) (async) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000013000100000000400000000004000080592f4e23e372bcffa2fda40106aec47b31c7edd459f1d6e1d62d48d0ae4aae769805cd0eef0c2f98738a02c0baef1a9ab17693277f8269f24be9ad9dfcba26c039a85af5e574182c656cc5e6ae00"/107], 0x14}], 0x1, 0x0, 0x0, 0x88}, 0x0) syz_usb_disconnect(r5) (async) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES64=r9, @ANYRES64=r5, @ANYRES16=r9, @ANYBLOB], 0x0) 2.427473544s ago: executing program 6 (id=10750): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x1, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x1}]}}]}, 0x44}}, 0x24004000) (async) r2 = socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='stack\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) (async) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r4, 0x0, 0x3000, 0x1000000, 0x0, 0x10}]) ioctl$TIOCL_SETSEL(r3, 0x560c, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x33, 0x2, @tid=0xffffffffffffffff}) (async) sendmmsg(r2, &(0x7f00000002c0), 0x0, 0x20008091) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000003c0)="ad3462b929dba1e48b97d9e4b36732e0db33cfe236150b2ec671330282b68897c583a1da996cb150a69acc73dd1871870f2997e3e47feba08bf59973a4e1f0d340a0a326a52e8ddd74ec86192e1d1ade55aabd68699b3c09c20c23c170b4300b41516d40bd169c19cdde4cc43b35bf55db172b7c9b71765f92ce573ffdbc37914c12889a15c5aec89a24e6ad4722e4447fe200000000000000000000000000b2010419c3aceb8e23a21ca218c1b740e150e9b665c79be1d7", 0xb8) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r7) 2.259822052s ago: executing program 6 (id=10753): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x01\xe1=\x8d\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) r2 = fsmount(r0, 0x0, 0x3) r3 = openat$cgroup(r2, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000000)={0x201800000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) (async) r4 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000000)={0x0, 0xb8, 0x2, &(0x7f00000004c0)={0xfa, "f4e1a230be8f46463fb1a5f1b46f44eaa25e485b747a07678118bc00"}}) 2.24855507s ago: executing program 6 (id=10755): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@deltclass={0x68, 0x29, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x2}, {0xc}, {0x0, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x7d, 0x8c}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_qfq={{0x8}, {0x2c, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0xa}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x3f4c}, @TCA_QFQ_LMAX={0x8, 0x2, 0x7}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x6}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5c680000}]}}]}, 0x68}}, 0x481d5) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) socket$kcm(0x29, 0x2, 0x0) 2.184079273s ago: executing program 6 (id=10757): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) close(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="a137f5b87731e51b2540", 0xa}], 0x1) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1031}}, 0x1006) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f00000000c0)={0x400, 0x400, 0x10, 0x80, 0x0, 0x0, 0x20, 0x1, {0xc, 0x2}, {0x1, 0x2, 0x1}, {0xfff, 0x10000}, {0x1, 0x2, 0x1}, 0x1, 0x180, 0x1, 0x3, 0x1, 0x0, 0x0, 0x7fff, 0x5, 0xdb, 0x0, 0x6, 0x8, 0x100, 0x1, 0x7}) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000080)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c0000000800010003"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='hpfs\x00', 0x800, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='hpfs\x00', 0x800, 0x0) 2.119826245s ago: executing program 6 (id=10760): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2c2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000080)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.99509413s ago: executing program 6 (id=10762): r0 = syz_io_uring_setup(0x2089, &(0x7f0000000000)={0x0, 0xc114, 0x40, 0x1, 0x32e}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = syz_io_uring_complete(r1) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000100)={0x80, 0x5, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xdb18, 0x101}) write$cgroup_pid(r3, &(0x7f0000000140)=r4, 0x12) r5 = mq_open(&(0x7f0000000180)=',+\'%\x00', 0x40, 0x5d, &(0x7f00000001c0)={0x5, 0x1e000000000000, 0x8000, 0x16af}) mq_getsetattr(r5, &(0x7f0000000200)={0x3, 0x7, 0x2, 0x5}, &(0x7f0000000240)) mq_timedsend(r0, &(0x7f0000000280)="a6f68484a36d542d36217ded5f80385a32a9376524513b405fb9c46da891f4b018bea4d7c363387c07ba0b0e8409c5966c4fa430d3539265119f63342cfe988b7688dcdda983228d433a47888aadb7f482447ae91877816c52c85ffb0cea333ec357bb5edb186537e2eb435e341e56ea5153aadb4b17b60c18d741579f5b77df8665f7bcf08b78e9d8ecad5fdff54568f0556d7a86c51d07f1238802651aee46113dc3ec99ef817611be463d70d71893017cf5653a8c8dfaafcbd0e49f8fac0d369539b1b08274fbd08cc43acf83de00f1ab3d2396b54ffc2629065b28291af6c992b9787a", 0xe5, 0x7, &(0x7f0000000380)={0x0, 0x3938700}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_WRITE_FIXED={0x5, 0x8, 0x2007, @fd=r3, 0x7fffffff, 0x0, 0x9, 0x2, 0x0, {0x2, r6}}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x2240, 0x0) r8 = syz_usb_connect$midi(0x2, 0x99, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x18, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x1, 0x1, 0x1, 0x10, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0xdb, [@midi_out_jack={0x19, 0x24, 0x3, 0x44398223c0e9bb64, 0x3, 0x9, [{0x1, 0x80}, {0x5, 0x6}, {0x8, 0xd}, {0x8, 0x7}, {0x2, 0x80}, {0x92, 0xf9}, {0x58, 0xfe}, {0xa, 0x5}, {0x3, 0x2}], 0x22}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x4, 0xf7}, @midi_out_jack={0x19, 0x24, 0x3, 0x1, 0x9, 0x9, [{0x2a, 0x2}, {0x1, 0x7}, {0xf6, 0x7}, {0x9, 0x9}, {0x3, 0x3}, {0x5, 0xe}, {0x4, 0x9}, {0x1, 0x1}, {0xa, 0x4f}], 0x6}, @midi_out_jack={0x17, 0x24, 0x3, 0x2, 0x3, 0x8, [{0xbc, 0xff}, {0x6, 0x94}, {0x0, 0x6}, {0x7f, 0x9}, {0xfa, 0x3}, {0x2, 0x8}, {0x40, 0x3}, {0x7, 0x9}], 0x10}], [{{0x9, 0x5, 0x9, 0x2, 0x8, 0x2, 0x7, 0x0, {0xf, 0x25, 0x1, 0xb, "6ef2e19316c4640fd58962"}}}, {{0x9, 0x5, 0x1, 0x1, 0x20, 0x6, 0x40, 0x5, {0x5, 0x25, 0x1, 0x1, "e5"}}}]}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x110, 0xd, 0x1c, 0x1, 0x8, 0xf8}, 0x19, &(0x7f0000000540)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xb, "4284e8d060e57293f7414e4d0cd09e21"}]}, 0x3, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x812}}, {0xd0, &(0x7f00000005c0)=@string={0xd0, 0x3, "1619f864c1cd0428be2bf339b65348598b4c86149525128777840aa56bc286d770a2c95d8f1aa7c95ac8f64712c5ce29d3cf9bf94546d1c797c835111d73d3d8f55e2e2e23edef96eb0d4fec91c27f3fdacc01933691754f13ca421089ac8c255fd58c1c4b50312b50d6e35b87d213c5f11368ed97c12caec3f9ed1ab310872b224cb23065d654d5d5b6781c0225b2614661f386705c314e71319b58f1fa001ee98f80c37df738677cdfcac5f8305bc9b392237c6ca4c8b717fef1da0c487c35d1faf6e9c2da40d7fd8998a38562"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x5e77f3cd652fd798}}]}) syz_usb_disconnect(r8) r9 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000740), 0x4c6480, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r9, 0x40406f06, &(0x7f0000000780)={0x6, 0x3, 0x6616, 0x5f, 0x1}) syz_pidfd_open(r4, 0x0) read$FUSE(r3, &(0x7f00000007c0)={0x2020, 0x0, 0x0}, 0x2020) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) ioctl$BLKFRASET(r3, 0x1264, &(0x7f0000002800)) syz_usb_connect$midi(0x5, 0xc8, &(0x7f0000002840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1053, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x1, 0x1, 0x8, 0x90, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x0, 0x40, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x9, 0x6}], [{{0x9, 0x5, 0x89, 0x0, 0x40, 0x40, 0x0, 0x3, {0x5, 0x25, 0x1, 0x1, "e6"}}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x1, 0x0, 0x1, {0x6, 0x25, 0x1, 0x2, "11ee"}}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x1, 0x3, 0x81, {0x8, 0x25, 0x1, 0x4, "f044e641"}}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x1, 0x5, 0x23, {0xb, 0x25, 0x1, 0x7, "3465f28d457b90"}}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x81, 0x10, 0x8, {0x13, 0x25, 0x1, 0xf, "9dec49068fb3f1185eeda96d0b9fb1"}}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x2, 0x3, 0x1, {0xe, 0x25, 0x1, 0xa, "3cf2173c4bdbdabd885b"}}}, {{0x9, 0x5, 0x2, 0x8, 0x20, 0x3, 0x81, 0xff, {0x10, 0x25, 0x1, 0xc, "41e5028daaa670f20b3b2205"}}}, {{0x9, 0x5, 0xa, 0xc, 0x8, 0x9, 0x1, 0x2, {0x7, 0x25, 0x1, 0x3, "c71479"}}}]}}}}}]}}, &(0x7f0000002a00)={0xa, &(0x7f0000002940)={0xa, 0x6, 0x201, 0x9, 0x40, 0x2, 0x40, 0x80}, 0x2b, &(0x7f0000002980)={0x5, 0xf, 0x2b, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "2dbdc340b3746bc23fdc2bacf5754fd2"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xf, 0x5, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x18, 0xf8, 0xaf, 0xfffd, 0xf}]}, 0x1, [{0x4, &(0x7f00000029c0)=@lang_id={0x4, 0x3, 0x1038}}]}) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r7) fcntl$setpipe(r0, 0x407, 0xe2) ioctl$NBD_PRINT_DEBUG(r3, 0xab06) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002a40), 0x2, 0x0) r12 = semget(0x3, 0x1, 0x210) semctl$SETALL(r12, 0x0, 0x11, &(0x7f0000002a80)=[0x416, 0x7f]) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r5, 0x40049366, &(0x7f0000002ac0)=0x2) semctl$IPC_RMID(r12, 0x0, 0x0) write$FUSE_INIT(r11, &(0x7f0000002b00)={0x50, 0x0, r10, {0x7, 0x2d, 0x80, 0x4000000, 0xfe40, 0x7, 0x6, 0x20000, 0x0, 0x0, 0x1, 0x3fa}}, 0x50) capset(&(0x7f0000002b80)={0x20080522}, &(0x7f0000002bc0)={0x8, 0x2, 0x1, 0xfffffffe, 0x6, 0xc}) preadv2(r9, &(0x7f0000003040)=[{&(0x7f0000002c00)=""/200, 0xc8}, {&(0x7f0000002d00)=""/158, 0x9e}, {&(0x7f0000002dc0)=""/223, 0xdf}, {&(0x7f0000002ec0)=""/40, 0x28}, {&(0x7f0000002f00)=""/53, 0x35}, {&(0x7f0000002f40)=""/148, 0x94}, {&(0x7f0000003000)=""/42, 0x2a}], 0x7, 0x9, 0x6, 0x6) 1.908292328s ago: executing program 5 (id=10765): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mount$afs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x800000, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) syz_open_procfs(r1, &(0x7f0000000080)='attr\x00') 1.854768475s ago: executing program 5 (id=10766): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r0 = getpid() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) wait4(r0, &(0x7f0000000340), 0x40000000, &(0x7f0000000240)) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000100)=0x8) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={[&(0x7f0000000180)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, 0x0) 1.769412728s ago: executing program 5 (id=10767): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d80762ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x80000001, 0x0, 0x0, 0x10000004, {0x40, 0xd08, 0x0, 0xfe, 0x0, 0x100000000000000, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r5, 0x4004092b, 0x200000000005) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x1, 0x3, 0x8, 0xffffffc0}, 0x4, 0x1, 0x8, 0x0, 0x3, 0x0, 0x16, 0x13, 0x3, 0xca, {0x0, 0x8, 0x3, 0x5, 0x84, 0x8}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xc}, {}, {0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x1, 0x5}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1.576302098s ago: executing program 5 (id=10771): r0 = socket(0x1d, 0x2, 0x6) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {}, 0x2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@getchain={0x24, 0x66, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xffff, 0x3}, {0xfff1, 0x56e7de01af07971a}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x20, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='gfs2\x00', 0x21000d, 0x0) 745.281052ms ago: executing program 7 (id=10784): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x7f1}, {0x8, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1, "8fc60f", 0xd, 0x6, "8f15088044938ebc8afbe7c27262665cfeb7f5531da8ce6aa89da344d4d6d77fa59dac50d52de6212503f38b8406269cf2768c2cd2c496ba8ed31caeebdf8679a956e79b5ca154ec48d0c46f82981e032d25a5ee79c8d1f11fc25b7618848ff7156c70e4628e8c5532d5f98e8b495639b1483f08c56b1fc43974af82757e9e81d1793d718c92e40fb364d4c1aee7f32425c930df0cae73ae298178ad0410f752e9940c8042e6fb66f7fd9da25bc6d711ef7e102116c50adb1deaece8fd155d588e4ff8321b2aad6a4aac068c269d8ce2b40600723114f2977b6a38d2bea2ee5e3105715110e3b10fa1cc0d117d426401"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x8, "0975e1", 0x1, 0x8d, "af2a9aa1fcccaaea05db5065dab7d1d576671544a31b21ae53fad7e097951018a4550b80413b743cc74b854d5c07dc8e7760b7830826283f61a26bd21460b43c96b0bd95fb80ff8935bbdd7054a89ed53bcea5ddabd83275d2009d70fefbeaaac6d1091e0e1ada986274b5ef62e9c7f088a179c6b5f2be045144279bcfd2bd5cd92078ecfad029a20476ca0684bea08a767daea81242737b6a1e94c2fc6217a604c6c0ab22be37dbe7abbba2398a37b1158f8541edf2481d66002153ea7f914ea34c40de35a0ee30c7d7dfbe88608c0e576701c2acd79722734422c72b0f7719ed32e958df9565b91551aac24280f8fd"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0xfb, "fab7e4", 0x7ff, 0x9, "d3a89dfaca78237ebd4ae3137ac3d2d202aa8ea255f7aef1d2f6c1608e038debb5a173f4da4c5ca7e09efba0b08c9756df27aa313280db95a548cb523ab87dbdf361ef91ba9465a8c547a3a5764381f0ac094d52a63a1c4fd11790e7f60d11999fe0befe672b7b8ebb8b8742304de364dd9e8bcaed7e826b2f5fb1c56849b06a52c2c108a4efab7237685b679c7004885bf80b62340032e1c4a5325af996a4b1498131215d03e14250a2d1dac9faf17067c7bce7d29b915b0b2333b200a5b3f74fd523ebfda9ef686d3b810590823b5adba81ac52db7d3ac525e155329e7f581f12c91274128d26396be07b692e600f8"}, {@none, 0x72, 0x59, "9918de", 0x82, 0x3a, "a1fcf3b546d1e34f450e8fe524d50bcb204cc69d9dbc1aa8a979ad4e1c8d651dc20fc1bb043bf135963d5e2607abe28d547265f3368527a8f93d3ff7954c377d3caeb9e91a5fa29eff0324323dcf2d67756d9b68374886d6662b444bc333571d32ec3ec538740ba43f40f69d02de37a7c60f6e5b64c9b0f3887e9e79f8974a4873360144484936fe2df8a8d333fc1d8c8b763c7907b07f49abf6e610bfeca833d8434aa07fecb075b90be383a16e4fb8e443ab9ffb76dd9a544cedf281678ff2e3b930aea3c5afd546c7af882a19eb525724d5fe4ba52d5cd9d74cca7ab30a15ab4d8df780d8481635ec7d4d20584509"}, {@any, 0x9, 0x10, "a8a106", 0x1ff, 0x6, "d3e64b94dc369d6596b95228a4ce08a69648d9ad6e931849510269d555493b74578ac6225a36a919d0d076932bd88f3a998143c49e58d046f308b81a1309826050297dbcec614c2da2581ce12ea12329d5fc9ff623fe27495b0690a86a14f518d29dca5d8e53324e7072777898838073184927d822bd12e31a3933dea05d92eb18ad45c639f63f4c809ee2f082cd341d736d498aa1506008aa5d128b4da834bb1b739883e4ca4e0084f961060d9eae69aaacf45065c89f5b5df0dc9ef49ff74e4a55a1b22c20a7e1a8fcafbb0cdd9085b11d6ca3fcefaf8efb3550abbd03ace6851787e9f1400fd21dbe19df7c63683c"}, {@any, 0x3, 0x9, "66e06f", 0x7, 0xff, "31bea3cffccd4115ce632f8dd8e1258c3b8c105c292ed9a63e7f734386db1d90aa30be3636b2d116d6ceeddfbf6a8f717f19307e5afb5968c4ce684220d8a28fa2aa7e53056f4ea03ca65bbc887df2edfac270ef73995c10cba7a1f7a9231e0e87d605d98ea2064ec4e970ac977a225b25d7f2d80c80ac00cbb64f2311ce7f161e9a40a502c7a468d8f64371b3dcb11dea43a1b9dba5921077b78c4cf62045e36bda21f9e0ac0c8e880a8ef721fb403eb564bed80510be0059511ef9d6e873e83c132e4f8f9eeae82b4ea0897b2facd8996907c12a241d23469ba5750cf43c54f1dcf0312596749966f91ab6a160872e"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xd, 0x2, "f19d72", 0xff, 0x5, "6f72a83b7b5752952fa1e6da9d54a90721bd746bf191a6336299a26481d74c79ca39193f11643663355f2bc2d185c74b072f5e88220579b8021e1f7e649f9a4c853ea23d140eb122c0f6a158b8c82108ef2815f8a4607f786749fc2d909fb1fc3cf8ddba41232aa5faeb6071741bd11e05d111aa57db2ce288987eea6922beb405b505989c8d940b534013189e58d2c89038c11292dd9e8b5ad983adbec43e3b60c1d67b016f9a93c3be287d08ffde337c123c6b572cb589d17a282bdc9455d7e02877ce3f6c6bb27a0cb6dc740ab5c66d834e4502879842e588acf763c9a97b3fe8677e1418a86e25dc9ef258dc9994"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb, 0x7, "40a320", 0x7, 0x1, "cc031098db876cf2253d9b473090922a0a702297cad54d98ea2b5990998149added815ca16cedcfcf5c78e785f10be70939c7deac1c1ee7b32e1af1be86d3015f6343d5d4d06fe81e7a1c8466f9c587f7f7e0f23980833644270c7d20be6bd7aabb39c25141bdecb6f753ae2d33954ca307dbc853316d2f0d9705ff1ac10c121197f820615b1028c37b5e29437d9b8bcb5fbad1330de5c3c60cb8cff4a3283127b92f5b99bb1018988acdefe32625f7d26abcba76bbbcd2ea438bdafd66be9811b1e899dbdae6fb8199cc63d240f9a3b23cd7badc0a9a5d810d6380349775f9f0f58e623899b76f8699b99edf9effb9e"}]}}}, 0x7f4) syz_emit_vhci(&(0x7f0000000840)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000880)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0xc6}, @l2cap_cid_signaling={{0xc2}, [@l2cap_conf_req={{0x4, 0x7, 0x21}, {0x7, 0x27, [@l2cap_conf_rfc={0x4, 0x9, {0x2, 0xdc, 0x5, 0x7fff, 0x1b, 0x9}}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x1, 0xaf, 0x2, 0x8, 0x7fffffff}}]}}, @l2cap_conf_req={{0x4, 0x1, 0x48}, {0x5, 0x4, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x4, 0xe, 0x3, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x1, 0x6, 0xc5, 0x80000000, 0xee6}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x9}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x0, 0x81, 0xfffffffa, 0x3, 0x7}}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x4, 0x4, 0x401, 0x6, 0x7}}]}}, @l2cap_conf_rsp={{0x5, 0x4, 0xe}, {0x400, 0x6, 0x4, [@l2cap_conf_mtu={0x1, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0x6}]}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0x0, 0x7}}, @l2cap_conn_rsp={{0x3, 0x0, 0x8}, {0x27cf, 0x0, 0x5, 0x6}}, @l2cap_conf_rsp={{0x5, 0x0, 0x28}, {0x0, 0x52, 0x1, [@l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0xa, 0x1, 0xfff, 0x0, 0x1, 0x7ff}}, @l2cap_conf_flushto={0x2, 0x2, 0x7}, @l2cap_conf_flushto={0x2, 0x2, 0x7}, @l2cap_conf_ews={0x7, 0x2, 0x3}]}}]}}, 0xcb) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000980)=0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) fchmod(r1, 0x110) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r0, 0x0, 0x83, 0x5d, &(0x7f0000000a00)="769021f6992d877bb362847d6d7664d8b7f3577387c258328daac935a24b802c5ed7f4602f5db7564d902b23b59b4a0e89e36dd41f24c2df1641aa3c3615e28e95a794928b9a2337df66a945e1289427757eeacac354ae8953443f5974082337c85e6fb7c21c41166dcb3935c9496a1dfe63b34dd3a1d00174cc2eda46183f8cb29be3", &(0x7f0000000ac0)=""/93, 0x4, 0x0, 0x7, 0x20, &(0x7f0000000b40)="339717f9bee17b", &(0x7f0000000b80)="43a26468c8773f5c80912af8a02b213aa95d3e910a498838a095ead6abeeaf37", 0x4, 0x0, 0x2}, 0x50) syz_emit_vhci(&(0x7f0000000c40)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000c80)={0x1, 0x4, 0x10001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000cc0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000ec0)={"bc2f2e43d49679e95c6b5010fecae244", r3, 0x0, {0x6, 0x400}, {0x3, 0x80000000}, 0x1, [0x7fff, 0x9, 0x5, 0x8, 0x100, 0x1, 0x8, 0x2, 0x8, 0x6, 0xfffffffffffffff2, 0xdd, 0x8, 0x234e8b98, 0x61, 0x9]}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000fc0)={0x0, @in6={{0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}, [0xfff, 0x9, 0x3, 0xffffffff, 0x5, 0x0, 0x6, 0x7, 0x474, 0x4689, 0x8000000000000001, 0x7, 0x4, 0x100000001, 0x9]}, &(0x7f00000010c0)=0x100) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000001100)=@assoc_value={r4, 0x8}, 0x8) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000001140)=0x3, 0x4) r5 = syz_open_dev$sg(&(0x7f0000001180), 0x7, 0x381803) ioctl$SG_SET_DEBUG(r5, 0x227e, &(0x7f00000011c0)=0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001200), 0xc200, 0x0) ioctl$KVM_GET_API_VERSION(r6, 0xae00, 0x0) syz_emit_vhci(&(0x7f0000001240)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x4}}}, 0x4) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000012c0)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @remote}, 0x2a, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001280)='geneve0\x00', 0x1000, 0x2, 0xe}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000001340)=0x1a) syz_emit_vhci(&(0x7f0000001380)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) ioctl$XFS_IOC_FSBULKSTAT(r6, 0xc0205865, &(0x7f0000001740)={&(0x7f00000013c0)=0x8000, 0x9, &(0x7f0000001400)=[{}, {}, {}, {}], &(0x7f0000001700)}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r6, &(0x7f0000001780)={0x2000}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000017c0)={r4, @in6={{0xa, 0x4e21, 0x7, @local, 0x82f}}}, 0x84) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000001880)={[0x9, 0x8001, 0x401, 0xff, 0xb280, 0xd450, 0xffffffffffffffff, 0x80, 0xb, 0x6, 0x1, 0x6, 0x4, 0x2, 0x8000000000000000, 0xefe], 0x0, 0x80002}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000019c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xe45}}, 0x10) 674.86562ms ago: executing program 7 (id=10786): socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff0000000000000000000000000000ffff"], 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0xc000) eventfd(0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x802}, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x2c, r5, 0x1, 0x72bd27, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 596.551957ms ago: executing program 8 (id=10788): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0xff, 0x281) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000000c0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1000000, 0x1, 0x0, 0x0, 0x17, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4b69d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "3bc529791f04004dc252840b0000000000f2fffff2845d9ee84ef80b7407cfbe", [0xfffffffffeff7ff9, 0x4a]}}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000740)={0x0, {}, 0x0, {}, 0x940, 0x12, 0x20, 0xc, "e21121bc22389a821cec0a324fbc71e024ad6a6f460e38ef6085152eb5a3e3e87707c9d89402fff2840000000000000000000000000000000000000000032957", "3721905db7f4dfd09d8d8b37158cb6d03aff7054186d607acfcd47f814a305c7", [0x10000, 0xa8]}) 594.012003ms ago: executing program 7 (id=10789): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) (async) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000440)='\xf8\xda\xafH\xf7u\x00\x00\x00\x80\x00\x00\x00\x00X\x0e\xa1\xcf\x1a\x98Sw\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc9Z=\xc4\xb6=\xed\xec\xff\x0f\x00\x00\x00\x00\x00\x006\x90{s\xebr=/]d;\xc4VE\xdb\t\xc0\xe1\xcc\x0e\xf6+\x16\xc2\x17\xe0\f%n\xb3u\xa2~\x86,\xdek\x05\xda\xf5\xb6!\xfc\xdbl\x96\xedm\xd9nf\x00\x00\x00M\x1c\a\x81\x1d\xa24\x8e\xe8\xf3\x9e\\\x17*Ip\xbf1\xd4\x0f\xcc\x1e\x85A\x85\tH\xc2\xe6X\xc7\xc5\v\x1cZ56Buj\x81G\xca5\xed\xda\xd9{|\x18gY\x06\x9a\xa1\x04\xbd\x85\xbaq\xb1\xaduR\f\x01\xc65\xe7\x81K\xbf\xab\xc1hUd\xb7\x8b^\x06\xdbZ\xa4>\x1dg5\x1bFFs\x1c\xf5\a\xef\x97\xa5|\x01\x9e\x13\x1e\x8a\xecY!n\x88\x8f\x053\xaa\x80\xd8\xdcU3\xee\x8ddz\x00a\x95oKc\xd6\xf4/\x9a\x9c6c\x98\bxz\x04\xf7\xecj\x99\xc1=\x01Q\xb2\xdfR\xd5\x17\x9a=\xf3s\xbc\xac\"7\xb8Z\xa4\x04\xf9\xf8\x86\x8f\xb3\x89\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\xa8\x9aJ\xc6\x03\xb4\x9b\x14\xb1+\xa1\x93\xeb/\xd3tq\x98\xd3L\x1a\xfc\xb14i_aFlb\xa3h0\xee.?\x90h\xc9\xc9m\xe1C\xe1\xa9\xf5\xf6\vf\x00\x00\x00', 0x6) fcntl$addseals(r3, 0x409, 0x7) (async) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x8000}) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r5, 0x2004, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000300035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) (async) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x4004af07, &(0x7f0000001180)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r8 = syz_open_dev$mouse(&(0x7f0000000780), 0x2, 0x408000) mmap$snddsp_status(&(0x7f0000136000/0x2000)=nil, 0x1000, 0x2, 0x10, r8, 0x82000000) (async) r9 = dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r10 = syz_open_pts(r0, 0x80) dup3(r10, r0, 0x80000) (async) read(r0, &(0x7f00000005c0)=""/228, 0xe4) (async) ioctl$TCSETSW2(r9, 0x402c542c, &(0x7f00000001c0)={0x3, 0x2, 0x2, 0xfbdfffd3, 0x3, "65bd219f000062f800", 0xfffff7a4, 0xc}) (async) quotactl_fd$Q_QUOTAOFF(r4, 0xffffffff80000300, 0x0, 0x0) (async) fcntl$dupfd(r4, 0x406, r8) (async) write$9p(r10, &(0x7f00000008c0)="00bd98d04b99f1df00ddb7414e9f125b8c3f1aadd09d66f27295098d117b11d3bc487bccdcd2ca6229b965af21475c3067fdd682347860fdf939d2d2428f9f1a4f7fea2c27c8f31bada0ecf8856018706e8d5f976061cf97c6605eb73fb0b2dd19181d4c1b2c9ee9fed821417f299ce3fabb52bab358f24f48fec57e1ed9f7b19caf3e9e6cd73d63ec79a0fd4a4dd7a67abee9d373b35f8d2c8bdfa995db73cb99176a822267ffeb2e2e0b1fc8152db113ad8b3aa9191a94abd9b0beca567efd6cb458b193b99460fd195f7674b7eef5db3fdfa1ccf057dd037ea5460f45cd9d4055984556ed0d59cd601b8e08d35fb6cc494fa7f36c4ae550496d03000019f9d5b002123e298aab19e4b7a94aba6f8a55324bc3c9bf1226ec68ec92672d01eb20c39449bc6060ec4905820772bc822c898c3a51fb9b67267f6f9795f0cf9e969440cd6d", 0x144) (async) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000040)={'gre0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x78e1, 0x1, 0x0, 0xb939, {{0x13, 0x4, 0x3, 0x4, 0x4c, 0x65, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@end, @ssrr={0x89, 0x7, 0x32, [@remote]}, @ssrr={0x89, 0x27, 0xf5, [@local, @remote, @multicast2, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}, @broadcast]}, @generic={0x82, 0x2}, @generic={0x94, 0x7, "18d2cdb9a5"}]}}}}}) fsetxattr$security_capability(r1, &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x31e5, 0x101}, {0xe, 0x4}]}, 0x14, 0x1) (async) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001800000429bd7000fddbdf25801080a20001c8090022000008000500ac1414bb080006000500000008000400", @ANYRES32=r12, @ANYBLOB="08000200e0000e04e137ef537e6a3890", @ANYRES32=r12, @ANYBLOB="08000200ac1414bb"], 0x50}, 0x1, 0x0, 0x0, 0x4041}, 0x0) 593.400938ms ago: executing program 7 (id=10790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x41, 0x0) writev(r1, &(0x7f0000005500)=[{&(0x7f0000003440)="0600000000000000839dda8b05257a6d6136e19271de93a120d8af19df66cf6039f1f64c7b9f823dfcd870324392314a3c965f000b25fd7da27c50794c07ca8a4809c5b5ba2f2b5c2a399a164cbe8323c843c21f05bef0f6daffa4bac0373c194da474fa0b72473e", 0x68}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file0', [{}, {0x20, '/dev/dlm-control\x00'}, {0x20, '&.^#[([{@$}*'}], 0xa, "041de010686fac265b6fb89c8ca433df3835515afcc521dfdab11362167f719a40b6caca1b7f2b6d8030dbb03a8e36da27a0fdcd54caf98e2eee"}, 0x65) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002403000400004803c0001800a0001006d617463680000002c00028014000300f4f03b020000000018e808116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) 490.106994ms ago: executing program 7 (id=10791): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0x0, 0xffff, 0x0, 0x0, 0x0, "f6a6946c9832508c"}) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000100)="1876d433b8c266f9be2253e7c12fc9ea10343a19c358547a9357a174911e926c57b51eab3d0a4a2297653ac0c62201010000881a8789adddd1ca89ebd8632972a4f65ad1505ed06b6785508eb1dee994d18b084ef189ce72b079ed03ef849c46e3dedf604c01fae7c32f782dd9a45993a0798444d6ba181f2546b88893bf12575b27c1af55a55c55ca8855d5dc89db3e110430d10f429cc423ff64acc9fdb59a76caf809ce3c954f8a9618ebe5c3", 0xae}], 0x1) setns(r3, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 489.360117ms ago: executing program 8 (id=10792): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000280)={0x54, r2, 0x101, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x51}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x17}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x9}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xb}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272", 0x22}, {&(0x7f0000000540)}, {0x0}, {&(0x7f0000000d00)}], 0x4, 0x4d9e, 0x8) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x1) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 488.149895ms ago: executing program 5 (id=10793): r0 = io_uring_setup(0x40f1, &(0x7f00000002c0)={0x0, 0x5aa0, 0x8, 0x2, 0x127}) r1 = syz_io_uring_setup(0x1544, &(0x7f00000001c0)={0x0, 0xf800, 0x8000, 0xfffffffe, 0x19d, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000000580)={0x1, 0x0, 0x0, &(0x7f0000000180)=[{0x0}], &(0x7f0000000540)=[0x7]}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x39b3) socketpair(0x2b, 0x800, 0x8, &(0x7f0000000000)) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0xffffffffffff2836) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x6, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) r4 = userfaultfd(0x801) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r5 = syz_open_dev$vcsa(&(0x7f0000000140), 0x223, 0x200141) mmap(&(0x7f0000c38000/0x4000)=nil, 0x4000, 0x8, 0x10, r5, 0x31ae9000) ioctl$UFFDIO_CONTINUE(r4, 0x8010aa01, &(0x7f0000000000)={{&(0x7f0000600000/0x3000)=nil, 0x3000}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r8, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x1, 0x21, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e22, 0xfffffffe, @empty, 0x4}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000faffffff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r2], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r8}, 0x4) unshare(0x6a040000) 426.668533ms ago: executing program 7 (id=10794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x168, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x401}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x6}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6f}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xf}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xfd}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x43d}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x1}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x45137b50}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}}, @IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x168}, 0x1, 0x0, 0x0, 0x85}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r1, 0x0, 0x5) 159.133512ms ago: executing program 8 (id=10795): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000016c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea600000000f36514001ac0040005000a00010004000200ea0400a705251e618294ff0051f60a84c9f4d4938037e7e5a6d0001000000e4509c5bbcd72c6c95356852b8b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYBLOB="94010000100001002bbd700000000000fe8800000000000000000000000000017f0000010000000000000000000000000000ecdf000002000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x4050) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x8000000000000001, 0x2000) write$snddsp(r2, &(0x7f00000001c0)="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", 0xfd) 157.710482ms ago: executing program 8 (id=10796): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000100)=ANY=[], 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r2, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r2, 0x0) 94.154113ms ago: executing program 8 (id=10797): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x0, 0x5, 0x800}, 0x5, 0x0, 0xffffff3d, 0x6, 0xb, 0x1, 0x1f, 0x12, 0x0, 0x4, {0x0, 0xf, 0x7, 0x5d, 0xe9, 0x7}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0x0, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x9, 0x10}, {}, {0x8, 0xffe1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x2a, 0x2, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x0, 0x5, 0x800}, 0x5, 0x0, 0xffffff3d, 0x6, 0xb, 0x1, 0x1f, 0x12, 0x0, 0x4, {0x0, 0xf, 0x7, 0x5d, 0xe9, 0x7}}}}]}, 0x78}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0x0, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x9, 0x10}, {}, {0x8, 0xffe1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4080) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 92.297375ms ago: executing program 5 (id=10798): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, r1, 0x8b3b2c1205c54311, 0x70bd38, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x2180, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x0, 0x0, 0x0, 0x4}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x4f23, 0x2, 0x1, 0x4000, 0x1, 0x5, 0xa, 0xd287, 0xa, 0xfd, 0xffeffffa, 0x23, 0x4, 0x1, 0x6, 0x101, 0xf7fffffe, 0x1, 0x2, 0x1, 0x8, 0x927, 0xeb96, 0x401, 0xb, 0xe69, 0x6, 0x10008, 0x3, 0x1cdc, 0xfbfffff8]}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x41, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x2000006, 0x5f, 0x80000000, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x10006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000004, 0x40000, 0x3, 0xe, 0x0, 0x4, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x0, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x7, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x101, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0xfffffffb, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x7, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xffffeffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0xd, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a0ed, 0x2, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x9, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x2, 0xf40, 0x7, 0x1, 0x6c1c, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r8 = eventfd2(0x4, 0x801) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000300)={r8, 0x0, 0x2, r8}) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000000)={r8, 0x0, 0x2, r8}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000101010300000000000000000a0000000c00198008000100ad0800003c0001800c000280050001003a0000002c000180140003"], 0x5c}, 0x1, 0x0, 0x0, 0x8000850}, 0x20040040) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 0s ago: executing program 8 (id=10799): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) io_uring_setup(0x105, &(0x7f0000000100)={0x0, 0xb99e, 0x4, 0x40004, 0x105}) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0x5, 0x80000, r3}) bind$tipc(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) r6 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40088a01, &(0x7f0000000000)=0x8000) r7 = socket(0x10, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000040)={0x40002010}) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000f010000100000046d828170000000000000600000a14000000110001000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40004000}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 5 (id=10800): r0 = syz_io_uring_setup(0x5b1b, &(0x7f0000000580)={0x0, 0x0, 0x10300, 0x2}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './bus\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000001c0)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0x2}, 0x18) bind$packet(r3, &(0x7f0000000240)={0x11, 0x11, r6, 0x1, 0x1, 0x6, @broadcast}, 0x14) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) ioprio_set$pid(0x1, 0x0, 0x2000) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r7 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000000007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x0, 0x83, 0xd612, 0x10000006, 0x9, 0x0, 0x4000, 0x0, 0xee00, 0xee00, 0xd31, 0x1}}, {0x0, 0xa}}}, 0xa0) sendfile(r7, r7, &(0x7f0000000080), 0x7f07) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r8, r8, 0x0, 0xb) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x207a98, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 52, changing to 9 [ 816.850449][ T5999] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 816.858951][ T5999] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 816.861919][ T5999] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 816.864796][ T5999] usb 14-1: Product: syz [ 816.866258][ T5999] usb 14-1: Manufacturer: syz [ 816.870718][ T5999] cdc_wdm 14-1:1.0: skipping garbage [ 816.872549][ T5999] cdc_wdm 14-1:1.0: skipping garbage [ 816.875093][ T5999] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 816.877078][ T5999] cdc_wdm 14-1:1.0: Unknown control protocol [ 816.917819][ T8947] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 816.925538][T17530] cdc_mbim 10-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 816.928388][T17530] cdc_mbim 10-1:1.0: setting rx_max = 2048 [ 817.001666][ T40] audit: type=1800 audit(2000524903.077:120582): pid=8995 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.9930" name="nullb0" dev="tmpfs" ino=1865 res=0 errno=0 [ 817.032397][ T8999] netlink: 'syz.3.9932': attribute type 1 has an invalid length. [ 817.048279][ T8999] 8021q: adding VLAN 0 to HW filter on device bond5 [ 817.060305][ T9000] bond5: (slave geneve4): making interface the new active one [ 817.063575][ T9000] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 817.139291][T17530] cdc_mbim 10-1:1.0: setting tx_max = 184 [ 817.142214][T17530] cdc_mbim 10-1:1.0: cdc-wdm1: USB WDM device [ 817.161637][T17530] wwan wwan0: port wwan0mbim0 attached [ 817.183059][T17530] cdc_mbim 10-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, d6:b6:b7:fd:42:3e [ 817.189679][ T841] usb 14-1: USB disconnect, device number 52 [ 817.224555][ T40] audit: type=1400 audit(2000524903.274:120583): avc: denied { map } for pid=9019 comm="syz.3.9939" path="socket:[235203]" dev="sockfs" ino=235203 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 817.274448][ T9028] hpfs: hpfs_map_sector(): read error [ 817.295019][ T9023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=9023 comm=syz.6.9936 [ 817.299260][ T9023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=9023 comm=syz.6.9936 [ 817.303318][ T9023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=9023 comm=syz.6.9936 [ 817.308633][ T9023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=9023 comm=syz.6.9936 [ 817.312798][ T9023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=9023 comm=syz.6.9936 [ 817.318702][ T9023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=9023 comm=syz.6.9936 [ 817.324779][ T9023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=9023 comm=syz.6.9936 [ 817.329202][ T9034] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 817.329897][ T9023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=9023 comm=syz.6.9936 [ 817.337515][ T9035] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 817.340852][ T9023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=9023 comm=syz.6.9936 [ 817.346373][ T9023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=9023 comm=syz.6.9936 [ 817.356228][T16464] usb 10-1: USB disconnect, device number 36 [ 817.360274][T16464] cdc_mbim 10-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 817.448440][T16464] wwan wwan0: port wwan0mbim0 disconnected [ 817.635205][ T841] usb 14-1: new full-speed USB device number 53 using dummy_hcd [ 817.824896][ T9029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.829541][ T9029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.833275][ T9029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.836318][ T9029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.840151][ T9029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.843098][ T9029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.847529][ T9029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.851258][ T9029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.866425][ T841] usb 14-1: unable to read config index 0 descriptor/start: -71 [ 817.869951][ T841] usb 14-1: can't read configurations, error -71 [ 818.013714][ T9050] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 818.080227][ T9058] __nla_validate_parse: 2 callbacks suppressed [ 818.080243][ T9058] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9947'. [ 818.086767][ T9058] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9947'. [ 818.440609][ T9068] bond0: entered promiscuous mode [ 818.442380][ T9068] bond_slave_0: entered promiscuous mode [ 818.444395][ T9068] bond_slave_1: entered promiscuous mode [ 818.447592][ T9068] batadv0: entered promiscuous mode [ 818.450290][ T9068] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 818.556789][ T9068] netlink: 'syz.9.9949': attribute type 11 has an invalid length. [ 818.657896][ T9075] netlink: 16 bytes leftover after parsing attributes in process `syz.9.9950'. [ 819.151625][ T40] audit: type=1400 audit(2000524905.094:120584): avc: denied { audit_read } for pid=9077 comm="syz.5.9951" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 819.234827][ T9081] (syz.5.9952,9081,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 819.237536][ T9081] (syz.5.9952,9081,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 819.239907][ T9081] (syz.5.9952,9081,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 819.242841][ T9081] (syz.5.9952,9081,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 819.305660][ T40] audit: type=1400 audit(2000524905.235:120585): avc: denied { ioctl } for pid=9090 comm="syz.6.9957" path="socket:[236142]" dev="sockfs" ino=236142 ioctlcmd=0x4948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 819.336736][ T9095] netlink: 'syz.6.9958': attribute type 2 has an invalid length. [ 819.831488][ T9105] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9961'. [ 819.907610][ T40] audit: type=1400 audit(2000524905.807:120586): avc: denied { shutdown } for pid=9110 comm="syz.9.9963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 820.206893][ T40] audit: type=1400 audit(2000524906.089:120587): avc: denied { read } for pid=9113 comm="syz.5.9964" lport=21904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 820.565108][ T40] audit: type=1400 audit(2000524906.417:120588): avc: denied { accept } for pid=9132 comm="syz.6.9971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 820.856987][ T9153] fuse: blksize only supported for fuseblk [ 820.999370][ T40] audit: type=1400 audit(2000524906.830:120589): avc: denied { getopt } for pid=9162 comm="syz.9.9982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 821.077259][ T9173] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9986'. [ 821.080542][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9986'. [ 821.083976][ T9173] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9986'. [ 821.086959][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9986'. [ 821.089381][ T9170] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9985'. [ 821.155804][ T9188] xt_hashlimit: size too large, truncated to 1048576 [ 821.184883][ T9187] loop5: detected capacity change from 0 to 524287995 [ 821.237470][ T9193] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.240845][ T9193] bridge_slave_1: left allmulticast mode [ 821.242795][ T9193] bridge_slave_1: left promiscuous mode [ 821.244726][ T9193] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.251637][ T9193] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 821.256928][ T9193] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9992'. [ 821.259105][ T9188] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 821.353159][ T9204] overlayfs: overlapping lowerdir path [ 821.357631][ T9202] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 821.360444][ T9202] overlayfs: overlapping lowerdir path [ 821.430472][ T40] audit: type=1400 audit(2000524907.233:120590): avc: denied { write } for pid=9206 comm="syz.5.9996" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 821.465316][ T40] audit: type=1400 audit(2000524907.261:120591): avc: denied { shutdown } for pid=9216 comm="syz.5.9997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 821.473600][ T40] audit: type=1400 audit(2000524907.261:120592): avc: denied { read } for pid=9216 comm="syz.5.9997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 821.541304][ T5294] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 821.546095][ T9235] vivid-000: ================= START STATUS ================= [ 821.548696][ T9235] vivid-000: RDS Tx I/O Mode: Controls [ 821.552786][ T9235] vivid-000: RDS Program ID: 32904 [ 821.554507][ T9235] vivid-000: RDS Program Type: 3 [ 821.556101][ T9235] vivid-000: RDS PS Name: VIVID-TX [ 821.558118][ T9235] vivid-000: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 821.561481][ T9235] vivid-000: RDS Stereo: true [ 821.563104][ T9235] vivid-000: RDS Artificial Head: false [ 821.565053][ T9235] vivid-000: RDS Compressed: false [ 821.566754][ T9235] vivid-000: RDS Dynamic PTY: false [ 821.568637][ T9235] vivid-000: RDS Traffic Announcement: false [ 821.570859][ T9235] vivid-000: RDS Traffic Program: true [ 821.572775][ T9235] vivid-000: RDS Music: true [ 821.574435][ T9235] vivid-000: ================== END STATUS ================== [ 821.682898][ T40] audit: type=1326 audit(2000524907.468:120593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.3.10005" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c1f99c799 code=0x0 [ 822.153278][ T9257] CIFS mount error: No usable UNC path provided in device string! [ 822.153278][ T9257] [ 822.159924][ T9257] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 822.169430][ T40] audit: type=1400 audit(2000524907.928:120594): avc: denied { create } for pid=9253 comm="syz.5.10008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 822.188126][ T9259] loop5: detected capacity change from 0 to 524287995 [ 822.267937][ T9274] netlink: 'syz.6.10015': attribute type 1 has an invalid length. [ 822.278753][ T9274] bond3: entered promiscuous mode [ 822.280631][ T9274] 8021q: adding VLAN 0 to HW filter on device bond3 [ 822.292028][ T9274] bond3: (slave bridge7): making interface the new active one [ 822.294793][ T9274] bridge7: entered promiscuous mode [ 822.297303][ T9274] bond3: (slave bridge7): Enslaving as an active interface with an up link [ 822.463516][ T5973] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 822.539779][ T9290] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 822.571373][ T9292] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 822.625862][ T5973] usb 10-1: Using ep0 maxpacket: 8 [ 822.629683][ T5973] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 822.632575][ T5973] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 822.636388][ T5973] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 822.639613][ T5973] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 822.643289][ T5973] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 822.645448][ T9295] loop5: detected capacity change from 0 to 524287995 [ 822.647787][ T5973] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 822.652856][ T5973] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.879932][ T5973] usb 10-1: usb_control_msg returned -32 [ 822.881870][ T5973] usbtmc 10-1:16.0: can't read capabilities [ 823.375216][ T9332] input: syz0 as /devices/virtual/input/input125 [ 823.523639][ T40] audit: type=1400 audit(2000524909.194:120595): avc: denied { getopt } for pid=9333 comm="syz.9.10034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 824.085595][ T9339] __nla_validate_parse: 7 callbacks suppressed [ 824.085606][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10035'. [ 824.198956][ T9343] netlink: 45 bytes leftover after parsing attributes in process `syz.3.10037'. [ 824.202707][ T9343] netlink: 45 bytes leftover after parsing attributes in process `syz.3.10037'. [ 824.202977][ T9344] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10037'. [ 824.319896][ T9348] netlink: 168 bytes leftover after parsing attributes in process `syz.3.10039'. [ 824.414140][ T9356] loop5: detected capacity change from 0 to 524287995 [ 824.460803][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10042'. [ 824.621458][ T40] audit: type=1400 audit(2000524910.226:120596): avc: denied { setopt } for pid=9364 comm="syz.3.10044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 824.630412][ T40] audit: type=1326 audit(2000524910.236:120597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9364 comm="syz.3.10044" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c1f99c799 code=0x0 [ 825.560158][ T9376] netlink: 'syz.6.10047': attribute type 11 has an invalid length. [ 825.562758][ T9376] netlink: 199828 bytes leftover after parsing attributes in process `syz.6.10047'. [ 825.609312][ T9381] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10048'. [ 825.618649][ T9384] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10049'. [ 825.621614][ T9384] openvswitch: netlink: Flow key attr not present in new flow. [ 825.638107][ T9378] netlink: 'syz.3.10046': attribute type 1 has an invalid length. [ 825.654650][ T9378] bond6: entered promiscuous mode [ 825.655537][ T9390] program syz.9.10050 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 825.656533][ T9378] 8021q: adding VLAN 0 to HW filter on device bond6 [ 825.664368][ T9392] program syz.9.10050 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 825.752634][ T40] audit: type=1400 audit(2000524911.286:120598): avc: denied { connect } for pid=9398 comm="syz.9.10052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 826.205633][ T9408] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 826.339383][ T9417] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 826.405007][ T9425] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10061'. [ 826.470795][ T9435] bridge0: entered promiscuous mode [ 826.473390][ T9435] macvlan2: entered promiscuous mode [ 826.628144][ T9463] rtc_cmos 00:05: Alarms can be up to one day in the future [ 826.857952][ T9497] batman_adv: batadv0: Adding interface: gretap1 [ 826.860150][ T9497] batman_adv: batadv0: Interface activated: gretap1 [ 826.903234][ T9509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 826.997576][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 826.997588][ T40] audit: type=1800 audit(2000524912.459:120601): pid=9517 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.10086" name="nullb0" dev="tmpfs" ino=1865 res=0 errno=0 [ 827.014901][ T40] audit: type=1800 audit(2000524912.459:120602): pid=9517 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.10086" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 827.073635][ T9522] ip6tnl1: entered promiscuous mode [ 827.178411][ T9530] nfs4: Unknown parameter 'rdma30' [ 827.181392][ T40] audit: type=1400 audit(2000524912.628:120603): avc: denied { read } for pid=9529 comm="syz.3.10091" path="socket:[240920]" dev="sockfs" ino=240920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 827.198980][ T40] audit: type=1400 audit(2000524912.637:120604): avc: denied { ioctl } for pid=9529 comm="syz.3.10091" path="socket:[240920]" dev="sockfs" ino=240920 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 827.232399][ T9534] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 827.260942][ T40] audit: type=1400 audit(2000524912.694:120605): avc: denied { accept } for pid=9531 comm="syz.6.10092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 827.419469][ T9540] selinux_netlink_send: 2 callbacks suppressed [ 827.419482][ T9540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=9540 comm=syz.6.10094 [ 827.430905][ T40] audit: type=1400 audit(2000524912.863:120606): avc: denied { ioctl } for pid=9541 comm="syz.3.10095" path="socket:[239172]" dev="sockfs" ino=239172 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 827.439807][ T9542] bond7: option xmit_hash_policy: invalid value (6) [ 827.457804][ T9542] bond7 (unregistering): Released all slaves [ 827.458096][ T9545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10784 sclass=netlink_route_socket pid=9545 comm=syz.6.10096 [ 827.510156][ T9551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 827.612224][ T9558] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 827.765684][ T9570] bond4: invalid ARP target 0.0.0.0 specified for addition [ 827.768197][ T9570] bond4: option arp_ip_target: invalid value (0) [ 827.776410][ T9570] bond4 (unregistering): Released all slaves [ 828.036138][ T9581] xt_hashlimit: invalid rate [ 828.167599][ T9588] overlayfs: missing 'workdir' [ 828.230824][ T40] audit: type=1400 audit(2000524913.604:120607): avc: denied { map } for pid=9591 comm="syz.3.10109" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 828.395499][ T40] audit: type=1400 audit(2000524913.763:120608): avc: denied { accept } for pid=9601 comm="syz.3.10112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 828.437515][ T1145] bond1 (unregistering): Released all slaves [ 828.448331][ T1145] bond2 (unregistering): Released all slaves [ 828.457184][ T1145] bond3 (unregistering): Released all slaves [ 828.468516][ T1145] bond4 (unregistering): Released all slaves [ 828.477927][ T1145] bond5 (unregistering): Released all slaves [ 828.503339][ T1145] bond0 (unregistering): Released all slaves [ 828.530329][ T9599] team0 (unregistering): Port device team_slave_0 removed [ 828.537465][ T9599] team0 (unregistering): Port device team_slave_1 removed [ 828.644558][ T9613] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 828.663743][ T9322] usbtmc 10-1:16.0: usb_control_msg returned -110 [ 828.676791][ T1145] tipc: Left network mode [ 828.694164][T17531] usb 10-1: USB disconnect, device number 37 [ 828.732175][ T1145] IPVS: stopping master sync thread 28708 ... [ 828.922086][ T9636] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9636 comm=syz.3.10119 [ 828.944419][ T9626] ªªªªªª: renamed from vlan0 (while UP) [ 829.028118][ T9643] program syz.9.10125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 829.106233][ T9644] bond1 (unregistering): Released all slaves [ 829.219687][ T40] audit: type=1400 audit(2000524914.533:120609): avc: denied { watch } for pid=9661 comm="syz.6.10129" path="pipe:[239223]" dev="pipefs" ino=239223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 829.413553][ T1145] hsr_slave_0: left promiscuous mode [ 829.426504][ T1145] hsr_slave_1: left promiscuous mode [ 829.428671][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 829.437469][ T1145] pim6reg (unregistering): left allmulticast mode [ 829.516367][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 829.525911][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 829.602942][ T9684] tipc: Started in network mode [ 829.604857][ T9684] tipc: Node identity ee85e79ef258, cluster identity 4711 [ 829.607458][ T9684] tipc: Enabled bearer , priority 0 [ 829.609959][ T9680] syzkaller0: entered promiscuous mode [ 829.611774][ T9680] syzkaller0: entered allmulticast mode [ 829.662039][ T9680] tipc: Resetting bearer [ 829.681990][ T9679] tipc: Resetting bearer [ 829.702693][ T9679] tipc: Disabling bearer [ 829.844357][ T9686] __nla_validate_parse: 12 callbacks suppressed [ 829.844380][ T9686] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10136'. [ 829.851934][ T9686] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10136'. [ 829.857976][ T9686] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10136'. [ 829.861737][ T9686] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10136'. [ 830.132708][ T40] audit: type=1400 audit(2000524915.396:120610): avc: denied { lock } for pid=9717 comm="syz.5.10149" path="socket:[241780]" dev="sockfs" ino=241780 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 830.138373][ T9719] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10149'. [ 830.168324][ T9725] binder_alloc: binder_alloc_mmap_handler: 9723 200000ffd000-200001000000 already mapped failed -16 [ 830.174322][ T9724] binder: BINDER_SET_CONTEXT_MGR already set [ 830.176350][ T9724] binder: 9723:9724 ioctl 4018620d 200000004a80 returned -16 [ 830.179095][ T9725] binder_alloc: 9723: binder_alloc_buf, no vma [ 830.181380][ T9724] binder: 9723:9724 ioctl c0306201 200000000ac0 returned -11 [ 830.217308][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10144'. [ 830.232480][ T9729] nbd: must specify at least one socket [ 830.240266][ T9729] vim2m vim2m.0: vidioc_s_fmt queue busy [ 830.326890][ T9746] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10152'. [ 830.397281][ T9760] netlink: 'syz.9.10157': attribute type 4 has an invalid length. [ 830.401920][ T9759] overlayfs: workdir and upperdir must be separate subtrees [ 830.426430][ T9759] Bluetooth: MGMT ver 1.23 [ 830.474560][ T9771] syz_tun: entered allmulticast mode [ 830.477678][ T9772] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 830.481449][ T9772] mroute: pending queue full, dropping entries [ 830.502473][ T9770] IPVS: Scheduler module ip_vs_sip not found [ 830.507070][ T9769] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10162'. [ 830.534349][ T9769] 8021q: adding VLAN 0 to HW filter on device bond4 [ 830.745495][ T5973] usb 14-1: new high-speed USB device number 55 using dummy_hcd [ 830.906805][ T5973] usb 14-1: config 1 has an invalid interface number: 7 but max is 0 [ 830.910105][ T5973] usb 14-1: config 1 has no interface number 0 [ 830.912662][ T5973] usb 14-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 830.917474][ T5973] usb 14-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 830.921616][ T5973] usb 14-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.930899][ T5973] usb 14-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 830.931002][ T9796] netlink: 'syz.5.10168': attribute type 3 has an invalid length. [ 830.934506][ T5973] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.943019][ T5973] usb 14-1: Product: syz [ 830.944757][ T5973] usb 14-1: Manufacturer: syz [ 830.946741][ T5973] usb 14-1: SerialNumber: syz [ 830.961135][ T9772] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 831.379616][ T9810] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 831.388382][ T9810] binder: 9808:9810 ioctl c0306201 2000000003c0 returned -14 [ 831.431606][ T9816] bond2: entered allmulticast mode [ 831.439499][ T9816] macvlan2: entered promiscuous mode [ 831.441348][ T9816] macvlan2: entered allmulticast mode [ 831.443666][ T9816] bond2: entered promiscuous mode [ 831.445961][ T9816] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 831.451526][ T9816] bond2: left promiscuous mode [ 831.486815][ T9822] trusted_key: encrypted_key: keyword 'u' not recognized [ 831.556577][ T9772] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 831.678946][ T9838] tipc: Started in network mode [ 831.680637][ T9838] tipc: Node identity , cluster identity 4711 [ 831.682695][ T9838] tipc: Failed to obtain node identity [ 831.685334][ T9838] tipc: Enabling of bearer rejected, failed to enable media [ 831.749816][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10179'. [ 831.752888][ T9831] netlink: 'syz.5.10179': attribute type 30 has an invalid length. [ 831.755598][ T9831] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10179'. [ 831.900827][ T9857] binder: 9856:9857 ioctl c0306201 2000000003c0 returned -14 [ 831.905785][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 831.910580][ T9858] binder: 9856:9858 ioctl 4018620d 200000003280 returned -16 [ 832.604583][ T9875] bond0: (slave sit0): Error: Device type is different from other slaves [ 832.815020][ T9891] overlayfs: conflicting options: userxattr,redirect_dir=on [ 833.519749][ T9905] netlink: 'syz.6.10205': attribute type 10 has an invalid length. [ 833.525200][ T9905] team0: Device vxcan1 is of different type [ 833.685923][ T5973] usb 14-1: Incompatible driver and firmware versions [ 833.698758][ T5973] usb 14-1: USB disconnect, device number 55 [ 833.725019][ T9925] netlink: 'syz.6.10208': attribute type 1 has an invalid length. [ 833.885450][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 833.885466][ T40] audit: type=1400 audit(2000524918.914:120617): avc: denied { ioctl } for pid=9935 comm="syz.6.10212" path="socket:[239537]" dev="sockfs" ino=239537 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 834.115206][ T9956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=9956 comm=syz.6.10216 [ 834.157173][ T9962] netlink: 'syz.3.10217': attribute type 10 has an invalid length. [ 834.159906][ T9962] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 834.164687][ T9962] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 834.793285][ T9986] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20001 [ 834.887845][ T9994] netlink: 'syz.9.10227': attribute type 32 has an invalid length. [ 835.046959][ T40] audit: type=1400 audit(2000524920.002:120618): avc: denied { mount } for pid=10003 comm="syz.9.10228" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 835.076994][ T40] audit: type=1400 audit(2000524920.040:120619): avc: denied { unmount } for pid=7313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 835.114566][T10006] bond2: entered promiscuous mode [ 835.117191][T10006] 8021q: adding VLAN 0 to HW filter on device bond2 [ 835.126430][T10007] 8021q: adding VLAN 0 to HW filter on device bond2 [ 835.129670][T10007] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 835.134004][T10007] bond2: (slave vcan1): Error -95 calling set_mac_address [ 835.229258][T10010] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 835.234248][T10011] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 835.263260][T10016] __nla_validate_parse: 10 callbacks suppressed [ 835.263275][T10016] netlink: 188 bytes leftover after parsing attributes in process `syz.9.10231'. [ 835.313283][T10021] netlink: 'syz.5.10233': attribute type 16 has an invalid length. [ 835.316638][T10021] netlink: 'syz.5.10233': attribute type 17 has an invalid length. [ 835.337711][T10021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 835.360764][T10019] loop5: detected capacity change from 0 to 524287995 [ 835.669616][ T6018] usb 14-1: new high-speed USB device number 56 using dummy_hcd [ 835.832212][ T6018] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 835.836088][ T6018] usb 14-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 835.840627][ T6018] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 835.844529][ T6018] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 835.849340][ T6018] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 835.855892][ T6018] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 835.859894][ T6018] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 835.863608][ T6018] usb 14-1: Product: syz [ 835.865492][ T6018] usb 14-1: Manufacturer: syz [ 835.875058][ T6018] cdc_wdm 14-1:1.0: skipping garbage [ 835.877487][ T6018] cdc_wdm 14-1:1.0: skipping garbage [ 835.881658][ T6018] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 835.884436][ T6018] cdc_wdm 14-1:1.0: Unknown control protocol [ 836.677810][T10033] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10235'. [ 836.894109][ T6016] usb 14-1: USB disconnect, device number 56 [ 837.360849][ T9962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 837.406773][ T40] audit: type=1400 audit(2000524922.216:120620): avc: denied { unmount } for pid=6356 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 837.472759][T10052] overlayfs: overlapping lowerdir path [ 837.476254][ T40] audit: type=1400 audit(2000524922.282:120621): avc: denied { watch } for pid=10051 comm="syz.9.10240" path="/186/file0" dev="tmpfs" ino=1002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 837.492764][ T40] audit: type=1400 audit(2000524922.282:120622): avc: denied { watch_sb } for pid=10051 comm="syz.9.10240" path="/186/file0" dev="tmpfs" ino=1002 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 837.528252][T10058] xt_cluster: node mask cannot exceed total number of nodes [ 837.532780][T10060] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10240'. [ 837.711375][T10079] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10248'. [ 837.911854][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10255'. [ 837.943913][ T40] audit: type=1400 audit(2000524922.723:120623): avc: denied { read } for pid=10108 comm="syz.6.10256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 837.952739][T10109] siw: device registration error -23 [ 837.987757][ T5973] IPVS: starting estimator thread 0... [ 838.100051][T10112] IPVS: using max 24 ests per chain, 57600 per kthread [ 838.110991][ T6018] usb 14-1: new high-speed USB device number 57 using dummy_hcd [ 838.276281][ T6018] usb 14-1: config 1 has an invalid descriptor of length 220, skipping remainder of the config [ 838.302343][ T6018] usb 14-1: config 1 interface 0 altsetting 100 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 838.307495][ T6018] usb 14-1: config 1 interface 0 has no altsetting 0 [ 838.316754][ T6018] usb 14-1: New USB device found, idVendor=0458, idProduct=9317, bcdDevice=f5.2f [ 838.320453][ T6018] usb 14-1: New USB device strings: Mfr=66, Product=2, SerialNumber=3 [ 838.324035][ T6018] usb 14-1: Product: è”⤀觥悳ﹺ夗촂å„é¿ìª¦Â€ [ 838.327015][ T6018] usb 14-1: Manufacturer: syz [ 838.328887][ T6018] usb 14-1: SerialNumber: 퇿䃜䙕臸봥呋丕ä¢é—®á›ä“侫ǯ⣷ᲇè¶ëˆ¸è’œè‘…㻋솰å«ê“®âŽœå´¥ë¥§ä‹¡å©ç¼°æ‘ºì…¢î©¨á‚±ÙŽâ ²â¿­É®çŽ‹è‹šä·Ê”➲尵꛻៑픖íµëž“é¶ê²Œé³³Ñ‡çŸ„ᩊ䊸ꑤ鯺䥙㶾ãœç¿¸ç¢Žá—²æ“Šì¦® [ 838.367844][T10121] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10261'. [ 838.497751][T10139] veth0: entered promiscuous mode [ 838.499039][T10140] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10264'. [ 838.669465][ T6018] usbhid 14-1:1.0: couldn't find an input interrupt endpoint [ 838.676581][ T6018] usb 14-1: USB disconnect, device number 57 [ 838.846547][T10159] tmpfs: Bad value for 'huge' [ 839.123208][ T841] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 839.293701][ T841] usb 10-1: Using ep0 maxpacket: 8 [ 839.297452][ T841] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 839.300043][ T841] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 839.303901][ T841] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 839.308478][ T841] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 839.312504][ T841] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 839.316779][ T841] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 839.320687][ T841] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 839.325223][ T841] usb 10-1: config 168 interface 0 has no altsetting 0 [ 839.328882][ T841] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 839.331623][ T841] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 839.335426][ T841] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 839.339747][ T841] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 839.343637][ T841] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 839.347606][ T841] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 839.351377][ T841] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 839.355779][ T841] usb 10-1: config 168 interface 0 has no altsetting 0 [ 839.359356][ T841] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 839.361823][ T841] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 839.365389][ T841] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 839.369702][ T841] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 839.373427][ T841] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 839.377037][ T841] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 839.381085][ T841] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 839.385329][ T841] usb 10-1: config 168 interface 0 has no altsetting 0 [ 839.390288][ T841] usb 10-1: string descriptor 0 read error: -22 [ 839.392369][ T841] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 839.395240][ T841] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.408948][T10161] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 839.413396][ T841] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 839.677339][ T6016] usb 10-1: USB disconnect, device number 38 [ 839.689815][T10167] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10273'. [ 839.741275][ T40] audit: type=1400 audit(2000524924.402:120624): avc: denied { write } for pid=10168 comm="syz.3.10274" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 839.820485][T10176] program syz.3.10277 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 839.824256][ T5294] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 839.863231][ T40] audit: type=1400 audit(2000524924.524:120625): avc: denied { read } for pid=10177 comm="syz.3.10278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 839.990045][T10166] netlink: 63747 bytes leftover after parsing attributes in process `syz.5.10270'. [ 840.018391][T10186] loop5: detected capacity change from 0 to 524287995 [ 840.181508][T10193] netlink: 'syz.9.10283': attribute type 1 has an invalid length. [ 840.212447][T10193] bond3: entered promiscuous mode [ 840.214543][T10193] 8021q: adding VLAN 0 to HW filter on device bond3 [ 840.263355][T10195] 8021q: adding VLAN 0 to HW filter on device bond3 [ 840.266987][T10195] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 840.271392][T10195] bond3: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 840.280877][T10195] bond3: (slave vxcan1): making interface the new active one [ 840.283656][T10195] vxcan1: entered promiscuous mode [ 840.287656][T10195] bond3: (slave vxcan1): Enslaving as an active interface with an up link [ 840.299304][T10195] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 840.309231][T10195] bond3: (slave vxcan3): Enslaving as a backup interface with an up link [ 840.320553][T10195] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 840.325299][T10195] bond3: (slave vxcan5): Enslaving as a backup interface with an up link [ 840.340902][T10195] bond3: (slave vxcan7): The slave device specified does not support setting the MAC address [ 840.346633][T10195] bond3: (slave vxcan7): Enslaving as a backup interface with an up link [ 840.358420][T10195] bond3: (slave vxcan9): The slave device specified does not support setting the MAC address [ 840.365562][T10195] bond3: (slave vxcan9): Enslaving as a backup interface with an up link [ 840.380275][T10195] bond3: (slave vxcan11): The slave device specified does not support setting the MAC address [ 840.386946][T10195] bond3: (slave vxcan11): Enslaving as a backup interface with an up link [ 840.399539][T10195] bond3: (slave vxcan13): The slave device specified does not support setting the MAC address [ 840.406528][T10195] bond3: (slave vxcan13): Enslaving as a backup interface with an up link [ 840.414196][T10195] bond3: (slave vxcan15): The slave device specified does not support setting the MAC address [ 840.419837][T10195] bond3: (slave vxcan15): Enslaving as a backup interface with an up link [ 840.431333][T10195] bond3: (slave vxcan17): The slave device specified does not support setting the MAC address [ 840.438327][T10195] bond3: (slave vxcan17): Enslaving as a backup interface with an up link [ 840.447810][T10195] bond3: (slave vxcan19): The slave device specified does not support setting the MAC address [ 840.452472][T10195] bond3: (slave vxcan19): Enslaving as a backup interface with an up link [ 840.460374][T10195] bond3: (slave vxcan21): The slave device specified does not support setting the MAC address [ 840.465606][T10195] bond3: (slave vxcan21): Enslaving as a backup interface with an up link [ 840.473431][T10195] bond3: (slave vxcan23): The slave device specified does not support setting the MAC address [ 840.480284][T10195] bond3: (slave vxcan23): Enslaving as a backup interface with an up link [ 840.493264][T10195] bond3: (slave vxcan25): The slave device specified does not support setting the MAC address [ 840.504143][T10195] bond3: (slave vxcan25): Enslaving as a backup interface with an up link [ 840.517671][T10195] bond3: (slave vxcan27): The slave device specified does not support setting the MAC address [ 840.524646][T10195] bond3: (slave vxcan27): Enslaving as a backup interface with an up link [ 840.537351][T10195] bond3: (slave vxcan29): The slave device specified does not support setting the MAC address [ 840.544111][T10195] bond3: (slave vxcan29): Enslaving as a backup interface with an up link [ 840.556852][T10195] bond3: (slave vxcan31): The slave device specified does not support setting the MAC address [ 840.562507][T10200] netlink: 'syz.6.10285': attribute type 39 has an invalid length. [ 840.564181][T10195] bond3: (slave vxcan31): Enslaving as a backup interface with an up link [ 840.593218][T10195] bond3: (slave vxcan33): The slave device specified does not support setting the MAC address [ 840.600516][T10195] bond3: (slave vxcan33): Enslaving as a backup interface with an up link [ 840.611350][T10195] bond3: (slave vxcan35): The slave device specified does not support setting the MAC address [ 840.616518][T10195] bond3: (slave vxcan35): Enslaving as a backup interface with an up link [ 840.624401][T10195] bond3: (slave vxcan37): The slave device specified does not support setting the MAC address [ 840.629208][T10195] bond3: (slave vxcan37): Enslaving as a backup interface with an up link [ 840.639240][T10195] bond3: (slave vxcan39): The slave device specified does not support setting the MAC address [ 840.643904][T10195] bond3: (slave vxcan39): Enslaving as a backup interface with an up link [ 840.652142][T10195] bond3: (slave vxcan41): The slave device specified does not support setting the MAC address [ 840.656871][T10195] bond3: (slave vxcan41): Enslaving as a backup interface with an up link [ 840.670713][T10195] bond3: (slave vxcan43): The slave device specified does not support setting the MAC address [ 840.675517][T10195] bond3: (slave vxcan43): Enslaving as a backup interface with an up link [ 840.686673][T10195] bond3: (slave vxcan45): The slave device specified does not support setting the MAC address [ 840.693519][T10195] bond3: (slave vxcan45): Enslaving as a backup interface with an up link [ 840.703004][T10195] bond3: (slave vxcan47): The slave device specified does not support setting the MAC address [ 840.708462][T10195] bond3: (slave vxcan47): Enslaving as a backup interface with an up link [ 840.717555][T10195] bond3: (slave vxcan49): The slave device specified does not support setting the MAC address [ 840.727708][T10195] bond3: (slave vxcan49): Enslaving as a backup interface with an up link [ 840.740500][T10195] bond3: (slave vxcan51): The slave device specified does not support setting the MAC address [ 840.748119][T10195] bond3: (slave vxcan51): Enslaving as a backup interface with an up link [ 840.764067][T10195] bond3: (slave vxcan53): The slave device specified does not support setting the MAC address [ 840.771752][T10195] bond3: (slave vxcan53): Enslaving as a backup interface with an up link [ 840.795019][T10195] bond3: (slave vxcan55): The slave device specified does not support setting the MAC address [ 840.802946][ T5294] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 840.805243][T10195] bond3: (slave vxcan55): Enslaving as a backup interface with an up link [ 840.824414][T10195] bond3: (slave vxcan57): The slave device specified does not support setting the MAC address [ 840.831821][T10195] bond3: (slave vxcan57): Enslaving as a backup interface with an up link [ 840.847051][T10195] bond3: (slave vxcan59): The slave device specified does not support setting the MAC address [ 840.855412][T10195] bond3: (slave vxcan59): Enslaving as a backup interface with an up link [ 840.874835][T10195] bond3: (slave vxcan61): The slave device specified does not support setting the MAC address [ 840.883122][T10195] bond3: (slave vxcan61): Enslaving as a backup interface with an up link [ 840.899925][T10195] bond3: (slave vxcan63): The slave device specified does not support setting the MAC address [ 840.911952][T10195] bond3: (slave vxcan63): Enslaving as a backup interface with an up link [ 840.925137][T10195] bond3: (slave vxcan65): The slave device specified does not support setting the MAC address [ 840.926896][T10214] binder: 10213:10214 ioctl c0306201 200000000080 returned -14 [ 840.931847][T10195] bond3: (slave vxcan65): Enslaving as a backup interface with an up link [ 840.964931][T10195] bond3: (slave vxcan67): The slave device specified does not support setting the MAC address [ 840.973072][T10195] bond3: (slave vxcan67): Enslaving as a backup interface with an up link [ 840.986019][T10195] bond3: (slave vxcan69): The slave device specified does not support setting the MAC address [ 840.994847][T10195] bond3: (slave vxcan69): Enslaving as a backup interface with an up link [ 841.003722][T10195] bond3: (slave vxcan71): The slave device specified does not support setting the MAC address [ 841.008931][T10195] bond3: (slave vxcan71): Enslaving as a backup interface with an up link [ 841.010404][T10215] loop5: detected capacity change from 0 to 524287995 [ 841.016714][T10195] bond3: (slave vxcan73): The slave device specified does not support setting the MAC address [ 841.021256][T10221] CUSE: unknown device info "ý<±5æç—‘ë\áïð«ºzöŒ0z,~XY©+A}sÎ…F'%ÓËó:„Ij!ó@Q…åmß‘RÞúGQãò––q 6*³5p)ÙxÙ?," [ 841.040080][T10195] bond3: (slave vxcan75): Enslaving as a backup interface with an up link [ 841.042761][T10221] CUSE: unknown device info "ÿŽ&b¬í%Z‰ñWú«)«×3\my­ åû" [ 841.042770][T10221] CUSE: unknown device info "Ò­Sû‡¨‚¨«€ýmMÀiÊ_¿Ä0˱°Ý¯;qÈ]Â{ìi¹ë79ñ©{Ò0Ôµßt•º~ø±>V¤ûÞÂZÀ\.9êÁOC‡«®U™&†qÿ…±Ïmsfûkž½cêð±"" [ 841.042778][T10221] CUSE: DEVNAME unspecified [ 841.137945][T10228] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 841.196462][ T5294] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 841.265478][T10241] sp0: Synchronizing with TNC [ 841.268962][T10241] [U] è [ 841.294524][ T40] audit: type=1400 audit(2000524925.866:120626): avc: denied { watch_mount } for pid=10238 comm="syz.5.10300" path="/190" dev="tmpfs" ino=1047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 841.491311][T10256] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 842.323278][T10251] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 842.396750][T10277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10311'. [ 842.481691][T10283] IPVS: sed: FWM 3 0x00000003 - no destination available [ 842.587322][T10293] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10315'. [ 842.735194][T10303] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 842.739966][T10303] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.813001][T10307] netlink: 3900 bytes leftover after parsing attributes in process `syz.3.10321'. [ 842.813595][T10308] netlink: 3900 bytes leftover after parsing attributes in process `syz.3.10321'. [ 842.851910][T10303] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 842.855341][T10303] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.900753][T10310] overlay: Unknown parameter '€Ü' [ 842.938913][T10303] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 842.943472][T10303] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.010714][T10303] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 843.014610][T10303] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.050832][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10323'. [ 843.119634][ T7054] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.123150][ T7054] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.132471][ T7054] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.135155][ T7054] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.146440][ T7054] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.150705][ T7054] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.162653][ T7054] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.165337][ T7054] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.234429][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10326'. [ 843.246369][ T1249] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.254002][ T1249] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.257955][ T1249] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.258818][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10326'. [ 843.266573][ T1249] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.365264][T10333] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10330'. [ 843.429636][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10330'. [ 843.437419][T10334] input: syz1 as /devices/virtual/input/input127 [ 843.450993][T10334] netlink: 'syz.3.10330': attribute type 9 has an invalid length. [ 843.454172][T10334] netlink: 47 bytes leftover after parsing attributes in process `syz.3.10330'. [ 843.535790][ T6018] usb 14-1: new high-speed USB device number 58 using dummy_hcd [ 843.637649][T10342] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 843.639976][T10342] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 843.642782][T10342] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 843.695733][ T6018] usb 14-1: Using ep0 maxpacket: 32 [ 843.699347][ T6018] usb 14-1: config 0 has an invalid interface number: 85 but max is 0 [ 843.702454][ T6018] usb 14-1: config 0 has no interface number 0 [ 843.705100][ T6018] usb 14-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 843.709653][ T6018] usb 14-1: config 0 interface 85 has no altsetting 0 [ 843.714325][ T6018] usb 14-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 843.714603][ T40] audit: type=1400 audit(2000524928.136:120627): avc: denied { unmount } for pid=6979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 843.718158][ T6018] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.729085][ T6018] usb 14-1: Product: syz [ 843.730809][ T6018] usb 14-1: Manufacturer: syz [ 843.732904][ T6018] usb 14-1: SerialNumber: syz [ 843.736876][ T6018] usb 14-1: config 0 descriptor?? [ 843.822469][T10361] vlan3: entered allmulticast mode [ 843.824950][T10361] dummy0: entered allmulticast mode [ 843.877715][T10365] netlink: 'syz.6.10339': attribute type 10 has an invalid length. [ 843.881213][T10365] dummy0: left promiscuous mode [ 843.888714][T10365] team0: Port device dummy0 added [ 844.020707][ T40] audit: type=1400 audit(2000524928.427:120628): avc: denied { setopt } for pid=10371 comm="syz.6.10341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 844.290047][T10394] xt_socket: unknown flags 0xc [ 844.510492][T10399] kvm: pic: non byte write [ 844.714486][T10420] 9pnet: Found fid 0 not clunked [ 844.823168][T10428] 9p: Bad value for 'version' [ 845.042371][T10440] netlink: 'syz.3.10364': attribute type 1 has an invalid length. [ 845.046244][T10441] netlink: 'syz.3.10364': attribute type 1 has an invalid length. [ 845.072095][T10440] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 845.077089][T10440] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 845.125202][T10441] gretap1: entered promiscuous mode [ 845.129504][T10441] bond7: (slave gretap1): making interface the new active one [ 845.132666][T10441] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 845.224323][ T5294] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 845.254472][T10463] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 845.265376][ T40] audit: type=1400 audit(2000524929.600:120629): avc: denied { cmd } for pid=10462 comm="syz.3.10372" path="socket:[245821]" dev="sockfs" ino=245821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 845.323533][ T40] audit: type=1400 audit(2000524929.647:120630): avc: denied { read } for pid=10462 comm="syz.3.10372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 845.340946][ T40] audit: type=1400 audit(2000524929.666:120631): avc: denied { ioctl } for pid=10468 comm="syz.5.10374" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 845.699552][ T1336] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 845.806018][ T5294] Bluetooth: hci3: command 0x0c1a tx timeout [ 845.806310][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout [ 845.806337][ T7314] Bluetooth: hci1: command 0x040f tx timeout [ 845.871442][ T1336] usb 10-1: config 0 has an invalid interface number: 0 but max is -1 [ 845.874228][ T1336] usb 10-1: config 0 has an invalid descriptor of length 92, skipping remainder of the config [ 845.877634][ T1336] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 845.880708][ T1336] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 845.885045][ T1336] usb 10-1: New USB device found, idVendor=2282, idProduct=0014, bcdDevice=e4.8d [ 845.888016][ T1336] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.898832][ T1336] usb 10-1: config 0 descriptor?? [ 846.117545][T10476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.121598][T10476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.126971][ T39] usb 10-1: USB disconnect, device number 39 [ 846.242227][T10482] xt_hashlimit: size too large, truncated to 1048576 [ 846.452014][T10493] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 846.486050][ T6018] appletouch 14-1:0.85: Failed to read mode from device. [ 846.489958][ T6018] appletouch 14-1:0.85: probe with driver appletouch failed with error -5 [ 846.497538][ T6018] usb 14-1: USB disconnect, device number 58 [ 846.508703][T10529] netlink: 'syz.9.10382': attribute type 11 has an invalid length. [ 846.517362][ T40] audit: type=1804 audit(2000524930.773:120632): pid=10529 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.10382" name="/newroot/209/file0" dev="tmpfs" ino=1121 res=1 errno=0 [ 846.662168][T10541] sctp: [Deprecated]: syz.6.10386 (pid 10541) Use of struct sctp_assoc_value in delayed_ack socket option. [ 846.662168][T10541] Use struct sctp_sack_info instead [ 846.669166][T10541] sctp: [Deprecated]: syz.6.10386 (pid 10541) Use of struct sctp_assoc_value in delayed_ack socket option. [ 846.669166][T10541] Use struct sctp_sack_info instead [ 846.723620][T10552] ipt_ECN: cannot use operation on non-tcp rule [ 847.321514][T10574] openvswitch: netlink: Key type 51 is out of range max 32 [ 847.325323][T10575] openvswitch: netlink: Key type 51 is out of range max 32 [ 847.425484][ T40] audit: type=1400 audit(2000524931.617:120633): avc: denied { map } for pid=10585 comm="syz.3.10401" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 847.615117][ T5939] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 848.193958][ T5998] usb 14-1: new high-speed USB device number 59 using dummy_hcd [ 848.366556][ T5998] usb 14-1: config index 0 descriptor too short (expected 39, got 27) [ 848.369319][ T5998] usb 14-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 848.372614][ T5998] usb 14-1: config 0 interface 0 has no altsetting 0 [ 848.380339][ T5998] usb 14-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 848.383521][ T5998] usb 14-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 848.386372][ T5998] usb 14-1: Product: syz [ 848.387865][ T5998] usb 14-1: Manufacturer: syz [ 848.389506][ T5998] usb 14-1: SerialNumber: syz [ 848.394714][ T5998] usb 14-1: config 0 descriptor?? [ 848.398365][ T5998] hub 14-1:0.0: bad descriptor, ignoring hub [ 848.400670][ T5998] hub 14-1:0.0: probe with driver hub failed with error -5 [ 848.404792][ T5998] usb 14-1: selecting invalid altsetting 0 [ 848.484234][T10638] overlayfs: conflicting options: userxattr,redirect_dir=on [ 848.596251][T10646] loop9: detected capacity change from 0 to 7 [ 848.606230][ T7683] Dev loop9: unable to read RDB block 7 [ 848.608439][ T7683] loop9: unable to read partition table [ 848.611887][ T7683] loop9: partition table beyond EOD, truncated [ 848.624627][T10646] Dev loop9: unable to read RDB block 7 [ 848.626960][T10646] loop9: unable to read partition table [ 848.629057][T10646] loop9: partition table beyond EOD, truncated [ 848.632834][T10646] loop_reread_partitions: partition scan of loop9 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ œëÜ%õ«`Éæ˜Èµ4FLQkÝŠ5) failed (rc=-5) [ 848.669960][T10636] netlink: 'syz.9.10416': attribute type 1 has an invalid length. [ 848.670112][T10652] could not allocate digest TFM handle /dev/kvm [ 848.702958][ T40] audit: type=1400 audit(2000524932.818:120634): avc: denied { mounton } for pid=10659 comm="syz.5.10421" path="/217/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 848.719617][T10635] __nla_validate_parse: 10 callbacks suppressed [ 848.719628][T10635] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10416'. [ 848.748464][T17531] usb 14-1: USB disconnect, device number 59 [ 848.890317][T10672] overlayfs: failed to clone upperpath [ 849.171694][T10689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10689 comm=syz.6.10432 [ 849.178508][T10689] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10432'. [ 849.293228][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10436'. [ 849.330513][T10703] netlink: 'syz.6.10438': attribute type 1 has an invalid length. [ 849.342632][T10698] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 849.365559][T10698] kvm: requested 36038 ns i8254 timer period limited to 200000 ns [ 849.369876][T10698] kvm: requested 108952 ns i8254 timer period limited to 200000 ns [ 849.373227][T10698] kvm: requested 113142 ns i8254 timer period limited to 200000 ns [ 849.376828][T10698] kvm: requested 125714 ns i8254 timer period limited to 200000 ns [ 849.388250][T10698] kvm: requested 38552 ns i8254 timer period limited to 200000 ns [ 849.391903][T10698] kvm: requested 116495 ns i8254 timer period limited to 200000 ns [ 849.416826][ T40] audit: type=1400 audit(2000524933.484:120635): avc: denied { getopt } for pid=10710 comm="syz.6.10441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 849.423993][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10441'. [ 849.427561][T10711] netlink: 'syz.6.10441': attribute type 21 has an invalid length. [ 849.427655][T10717] tmpfs: Bad value for 'mpol' [ 849.431086][T10711] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10441'. [ 849.438170][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10441'. [ 849.441056][T10711] netlink: 'syz.6.10441': attribute type 21 has an invalid length. [ 849.444006][T10711] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10441'. [ 849.455698][ T40] audit: type=1400 audit(2000524933.522:120636): avc: denied { write } for pid=10718 comm="syz.9.10442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 849.456105][T10719] netlink: 165 bytes leftover after parsing attributes in process `syz.9.10442'. [ 849.486472][T10724] netlink: 348 bytes leftover after parsing attributes in process `syz.6.10443'. [ 849.491771][T10724] netlink: 72 bytes leftover after parsing attributes in process `syz.6.10443'. [ 849.608959][ T40] audit: type=1400 audit(2000524933.662:120637): avc: denied { watch watch_reads } for pid=10727 comm="syz.6.10445" path="/527/file0" dev="tmpfs" ino=2817 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 849.617817][T10733] random: crng reseeded on system resumption [ 849.658034][T10740] netlink: 'syz.6.10448': attribute type 19 has an invalid length. [ 849.660695][T10740] netlink: 'syz.6.10448': attribute type 19 has an invalid length. [ 849.736368][T10753] misc userio: Invalid payload size [ 849.742273][T10753] misc userio: No port type given on /dev/userio [ 849.996403][T10772] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 850.000113][ T40] audit: type=1400 audit(2000524934.038:120638): avc: denied { mounton } for pid=10770 comm="syz.9.10453" path="/syzcgroup/unified/syz9" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 850.005786][T10772] qnx6: wrong signature (magic) in superblock #1. [ 850.009951][T10772] qnx6: unable to read the first superblock [ 850.440591][T10774] devtmpfs: Cannot change global quota limit on remount [ 852.870849][T10746] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 852.954755][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 852.954773][ T40] audit: type=1400 audit(2000524936.805:120640): avc: denied { bind } for pid=10780 comm="syz.3.10458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 852.955207][T10781] delete_channel: no stack [ 852.970192][T10783] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 853.151545][T10808] overlayfs: failed to clone upperpath [ 853.231899][T10822] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 853.322522][T10834] 9p: Could not find request transport: v [ 853.391875][T10845] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 853.394651][T10845] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 853.398532][T10845] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 853.401561][T10845] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 853.404330][T10845] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 853.407321][T10845] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 853.410145][T10845] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 853.412948][T10845] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 853.415723][T10845] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 853.423673][T10845] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 853.431234][T10848] geneve3: entered promiscuous mode [ 853.517076][ T40] audit: type=1400 audit(2000524937.340:120641): avc: denied { getopt } for pid=10856 comm="syz.5.10480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 853.527763][ T40] audit: type=1400 audit(2000524937.350:120642): avc: denied { map } for pid=10856 comm="syz.5.10480" path="socket:[247909]" dev="sockfs" ino=247909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 853.537899][T10858] netlink: 'syz.5.10480': attribute type 12 has an invalid length. [ 853.540502][T10858] netlink: 'syz.5.10480': attribute type 29 has an invalid length. [ 853.543009][T10858] netlink: 'syz.5.10480': attribute type 2 has an invalid length. [ 853.560080][T10869] netlink: 'syz.6.10484': attribute type 1 has an invalid length. [ 853.571654][T10869] 8021q: adding VLAN 0 to HW filter on device bond6 [ 853.577898][T10869] "syz.6.10484" (10869) uses obsolete ecb(arc4) skcipher [ 853.608415][T10865] loop5: detected capacity change from 0 to 524287995 [ 853.643106][T10877] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 853.661826][T10876] vlan3: entered promiscuous mode [ 853.663531][T10876] bond6: entered promiscuous mode [ 853.684770][T10876] vlan3: entered allmulticast mode [ 853.686683][ T5973] hid_parser_main: 7 callbacks suppressed [ 853.686694][ T5973] hid-generic 0005:00B6:0009.001A: unknown main item tag 0x0 [ 853.687411][T10876] bond6: entered allmulticast mode [ 853.688875][ T5973] hid-generic 0005:00B6:0009.001A: unknown main item tag 0x0 [ 853.697004][ T5973] hid-generic 0005:00B6:0009.001A: unknown main item tag 0x0 [ 853.699699][ T5973] hid-generic 0005:00B6:0009.001A: unknown main item tag 0x0 [ 853.702135][ T5973] hid-generic 0005:00B6:0009.001A: unknown main item tag 0x0 [ 853.707275][ T5973] hid-generic 0005:00B6:0009.001A: unknown main item tag 0x0 [ 853.710170][ T5973] hid-generic 0005:00B6:0009.001A: unknown main item tag 0x0 [ 853.712715][ T5973] hid-generic 0005:00B6:0009.001A: unknown main item tag 0x0 [ 853.714174][T10876] bond6: (slave bridge11): making interface the new active one [ 853.715856][ T5973] hid-generic 0005:00B6:0009.001A: unknown main item tag 0x0 [ 853.718061][T10876] bridge11: entered promiscuous mode [ 853.720527][ T5973] hid-generic 0005:00B6:0009.001A: unknown main item tag 0x0 [ 853.722396][T10876] bridge11: entered allmulticast mode [ 853.728486][T10876] bond6: (slave bridge11): Enslaving as an active interface with an up link [ 853.750845][T10882] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 853.752704][ T5973] hid-generic 0005:00B6:0009.001A: hidraw0: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 853.754717][T10882] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 853.796640][T10883] fido_id[10883]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 853.802711][ T40] audit: type=1400 audit(2000524937.603:120643): avc: denied { write } for pid=10885 comm="syz.3.10489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 853.863178][T10894] tmpfs: Bad value for 'mpol' [ 854.097894][T10903] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 854.204298][T10907] binder: 10906:10907 ioctl c0306201 2000000003c0 returned -14 [ 854.302391][T10912] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 854.474733][T10919] netlink: 'syz.6.10499': attribute type 15 has an invalid length. [ 854.645215][T10922] macsec2: entered promiscuous mode [ 854.646987][T10922] macsec2: entered allmulticast mode [ 854.779664][T10959] __nla_validate_parse: 10 callbacks suppressed [ 854.779678][T10959] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10507'. [ 854.810533][ T40] audit: type=1400 audit(2000524938.541:120644): avc: denied { link } for pid=10960 comm="syz.9.10510" name="file1" dev="tmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 854.821364][ T40] audit: type=1400 audit(2000524938.541:120645): avc: denied { setattr } for pid=10960 comm="syz.9.10510" name="#e1" dev="tmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 854.829089][ T40] audit: type=1400 audit(2000524938.541:120646): avc: denied { rename } for pid=10960 comm="syz.9.10510" name="#e1" dev="tmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 854.870866][T10959] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10507'. [ 854.911055][T10962] syz_tun (unregistering): left allmulticast mode [ 855.392808][T10973] netlink: 104 bytes leftover after parsing attributes in process `syz.5.10515'. [ 855.453332][ T5294] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 855.457686][ T5294] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 855.463169][ T5294] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 855.467410][ T5294] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 855.470325][ T5294] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 855.655032][ T5973] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 855.734804][T10974] chnl_net:caif_netlink_parms(): no params data found [ 855.798762][T10974] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.801932][T10974] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.805723][T10974] bridge_slave_0: entered allmulticast mode [ 855.809677][T10974] bridge_slave_0: entered promiscuous mode [ 855.818950][T10974] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.823708][T10974] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.830768][ T5973] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 855.834758][ T5973] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 855.838781][ T5973] usb 10-1: Product: syz [ 855.840707][ T5973] usb 10-1: Manufacturer: syz [ 855.842768][ T5973] usb 10-1: SerialNumber: syz [ 855.846322][T10974] bridge_slave_1: entered allmulticast mode [ 855.851105][T10974] bridge_slave_1: entered promiscuous mode [ 855.855075][ T5973] usb 10-1: config 0 descriptor?? [ 855.871201][ T5973] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 855.873571][T10982] netlink: 'syz.6.10517': attribute type 2 has an invalid length. [ 855.874834][ T5973] dvb-usb: bulk message failed: -22 (2/0) [ 855.886321][T10974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.891172][ T5973] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 855.895549][T10974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 855.895696][ T5973] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 855.903344][ T5973] usb 10-1: media controller created [ 855.913646][T10974] team0: Port device team_slave_0 added [ 855.916817][T10974] team0: Port device team_slave_1 added [ 855.917118][ T5973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 855.930054][T10974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 855.932497][T10974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 855.940931][T10974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 855.945779][T10974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 855.948015][T10974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 855.956753][T10974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 855.981965][T10974] hsr_slave_0: entered promiscuous mode [ 855.984344][T10974] hsr_slave_1: entered promiscuous mode [ 855.987130][T10974] debugfs: 'hsr0' already exists in 'hsr' [ 855.989077][T10974] Cannot create hsr debugfs directory [ 856.094114][T10973] dvb-usb: bulk message failed: -22 (4/0) [ 856.096713][T10973] cxusb: i2c read failed [ 856.100512][T10997] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10519'. [ 856.114596][ T5973] cxusb: set interface failed [ 856.116669][ T5973] dvb-usb: bulk message failed: -22 (1/0) [ 856.140537][ T5973] DVB: Unable to find symbol mt352_attach() [ 856.143286][ T5973] dvb-usb: bulk message failed: -22 (5/0) [ 856.153246][ T5973] zl10353_read_register: readreg error (reg=127, ret==-121) [ 856.157920][ T5973] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 856.265106][ T5973] rc_core: IR keymap rc-dvico-mce not found [ 856.267735][ T5973] Registered IR keymap rc-empty [ 856.270790][ T5973] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 856.296034][ T5973] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input129 [ 856.314093][ T5973] dvb-usb: schedule remote query interval to 100 msecs. [ 856.317610][ T5973] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 856.323494][ T5973] usb 10-1: USB disconnect, device number 40 [ 856.384140][ T5973] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 856.634615][T10974] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 856.639853][T10974] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 856.643995][T10974] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 856.663797][T10974] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 856.791258][ T40] audit: type=1400 audit(2000524940.408:120647): avc: denied { mounton } for pid=11040 comm="syz.5.10528" path="/proc/728/cgroup" dev="proc" ino=250142 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 856.801579][ T40] audit: type=1400 audit(2000524940.417:120648): avc: denied { remount } for pid=11040 comm="syz.5.10528" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 856.812724][T10974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.839445][T10974] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.907565][ T7052] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.910082][ T7052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 856.934747][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.937504][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.119876][T10974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 857.127879][ T40] audit: type=1400 audit(2000524940.727:120649): avc: denied { execute } for pid=11079 comm="syz.6.10536" path="/file1" dev="ramfs" ino=249109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 857.130057][T11081] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10536'. [ 857.143033][T11082] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10536'. [ 857.149714][T11082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 857.167558][T11082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 857.340875][T10974] veth0_vlan: entered promiscuous mode [ 857.352253][T10974] veth1_vlan: entered promiscuous mode [ 857.387965][T10974] veth0_macvtap: entered promiscuous mode [ 857.394895][T10974] veth1_macvtap: entered promiscuous mode [ 857.434003][T10974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 857.446227][T10974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 857.456178][ T7049] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.462780][ T7049] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.476201][ T7059] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.479532][ T7059] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.570867][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.578316][ T7052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.581992][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.585317][ T7052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.648043][ T5294] Bluetooth: hci0: command tx timeout [ 857.706460][T11145] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10545'. [ 858.164323][T11193] netlink: 'syz.5.10557': attribute type 4 has an invalid length. [ 858.169922][T11200] netlink: 108 bytes leftover after parsing attributes in process `syz.8.10559'. [ 858.181966][T11200] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10559'. [ 858.265494][T11204] /dev/sg0: Can't lookup blockdev [ 858.279048][T11204] geneve2: entered promiscuous mode [ 858.422631][ T40] audit: type=1400 audit(2000524941.937:120650): avc: denied { write } for pid=11214 comm="syz.6.10564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 858.447471][T11217] Bluetooth: MGMT ver 1.23 [ 858.463494][T11217] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10565'. [ 858.467401][T11217] netlink: 'syz.5.10565': attribute type 7 has an invalid length. [ 858.472148][T11217] netlink: 'syz.5.10565': attribute type 8 has an invalid length. [ 858.579176][T11226] IPv6: NLM_F_CREATE should be specified when creating new route [ 858.605508][T11231] tipc: Enabling of bearer rejected, failed to enable media [ 858.799445][T11247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11247 comm=syz.8.10573 [ 859.019294][ T40] audit: type=1400 audit(2000524942.500:120651): avc: denied { ioctl } for pid=11269 comm="syz.5.10581" path="socket:[251539]" dev="sockfs" ino=251539 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 859.070552][T11276] bond7: option xmit_hash_policy: invalid value (6) [ 859.097130][T11276] bond7 (unregistering): Released all slaves [ 859.150076][ T40] audit: type=1400 audit(2000524942.613:120652): avc: denied { ioctl } for pid=11288 comm="syz.5.10586" path="socket:[248682]" dev="sockfs" ino=248682 ioctlcmd=0x6e85 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 859.206009][T11293] netlink: 'syz.8.10588': attribute type 3 has an invalid length. [ 859.293641][T11299] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 859.296335][T11299] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 859.299530][T11299] vhci_hcd vhci_hcd.0: Device attached [ 859.302251][T11297] netlink: 'syz.6.10590': attribute type 1 has an invalid length. [ 859.305553][ T40] audit: type=1400 audit(2000524942.763:120653): avc: denied { write } for pid=11296 comm="syz.6.10590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 859.312497][T11297] bridge0: Device is already in use. [ 859.389148][T11304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46352 sclass=netlink_route_socket pid=11304 comm=syz.6.10592 [ 859.428731][T11310] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11310 comm=syz.6.10593 [ 859.522680][T11315] netlink: 'syz.6.10595': attribute type 20 has an invalid length. [ 859.568432][ T10] usb 53-1: new low-speed USB device number 4 using vhci_hcd [ 859.571496][ T5973] usb 13-1: new full-speed USB device number 66 using dummy_hcd [ 859.748867][ T5973] usb 13-1: config 0 has no interfaces? [ 859.750737][ T5973] usb 13-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 859.753689][ T5973] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.760078][ T5973] usb 13-1: config 0 descriptor?? [ 859.865528][ T5294] Bluetooth: hci0: command tx timeout [ 859.931496][T11321] RDS: rds_bind could not find a transport for fe88::107, load rds_tcp or rds_rdma? [ 859.939135][T11322] RDS: rds_bind could not find a transport for fe88::107, load rds_tcp or rds_rdma? [ 859.976970][T11300] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 859.979345][ T46] vhci_hcd vhci_hcd.8: stop threads [ 859.981071][ T46] vhci_hcd vhci_hcd.8: release socket [ 859.983239][ T46] vhci_hcd vhci_hcd.8: disconnect device [ 860.146207][ T5973] usb 13-1: USB disconnect, device number 66 [ 860.398922][ T40] audit: type=1400 audit(2000524943.795:120654): avc: denied { create } for pid=11331 comm="syz.5.10600" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 860.406539][ T40] audit: type=1400 audit(2000524943.795:120655): avc: denied { write } for pid=11331 comm="syz.5.10600" name="file0" dev="tmpfs" ino=1449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 860.411084][T11332] netlink: 'syz.5.10600': attribute type 10 has an invalid length. [ 860.414567][ T40] audit: type=1400 audit(2000524943.795:120656): avc: denied { open } for pid=11331 comm="syz.5.10600" path="/262/file0" dev="tmpfs" ino=1449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 860.425255][ T40] audit: type=1400 audit(2000524943.795:120657): avc: denied { ioctl } for pid=11331 comm="syz.5.10600" path="/262/file0" dev="tmpfs" ino=1449 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 860.444188][ T40] audit: type=1400 audit(2000524943.833:120658): avc: denied { unlink } for pid=6979 comm="syz-executor" name="file0" dev="tmpfs" ino=1449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 860.468280][T11334] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 860.470562][T11334] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 860.473792][T11334] vhci_hcd vhci_hcd.0: Device attached [ 860.760280][ T5973] usb 48-1: SetAddress Request (2) to port 0 [ 860.762477][ T5973] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 860.770882][ T39] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 860.909452][ T39] usb 10-1: device descriptor read/64, error -71 [ 861.165277][ T39] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 861.303820][ T39] usb 10-1: device descriptor read/64, error -71 [ 861.421339][ T39] usb usb10-port1: attempt power cycle [ 861.783564][ T39] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 861.801386][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880375b4400: rx timeout, send abort [ 861.805447][ T39] usb 10-1: device descriptor read/8, error -71 [ 861.807098][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff8880375b4400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 861.813231][ T40] audit: type=1400 audit(2000524945.118:120659): avc: denied { read } for pid=5324 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 862.060623][ T39] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 862.082111][ T5294] Bluetooth: hci0: command tx timeout [ 862.082747][ T39] usb 10-1: device descriptor read/8, error -71 [ 862.199686][ T39] usb usb10-port1: unable to enumerate USB device [ 863.673251][T11336] vhci_hcd: connection reset by peer [ 863.675952][T10497] vhci_hcd vhci_hcd.5: stop threads [ 863.677989][T10497] vhci_hcd vhci_hcd.5: release socket [ 863.680157][T10497] vhci_hcd vhci_hcd.5: disconnect device [ 863.738916][T11354] ceph: No source [ 863.916655][T11340] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 863.951071][T11358] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=128 (256 ns) > initial count (24 ns). Using initial count to start timer. [ 863.963021][T11358] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 863.966442][T11361] __nla_validate_parse: 9 callbacks suppressed [ 863.966454][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10607'. [ 863.982407][T11363] cgroup: Invalid name [ 864.012584][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 864.012599][ T40] audit: type=1400 audit(2000524947.182:120664): avc: denied { getopt } for pid=11368 comm="syz.8.10610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 864.045035][T11374] : entered promiscuous mode [ 864.058854][T11379] netlink: 'syz.8.10612': attribute type 29 has an invalid length. [ 864.061701][T11380] netlink: 'syz.8.10612': attribute type 29 has an invalid length. [ 864.151503][T11392] comedi comedi3: pcmmio: I/O port conflict (0x8005,32) [ 864.163681][T11392] overlay: Unknown parameter 'func' [ 864.173293][ T40] audit: type=1400 audit(2000524947.332:120665): avc: denied { rename } for pid=11391 comm="syz.8.10614" name="file0" dev="9p" ino=74448901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 864.229066][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10616'. [ 864.232484][T11397] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10616'. [ 864.237075][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10616'. [ 864.240916][T11396] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10616'. [ 864.309821][ T5294] Bluetooth: hci0: command tx timeout [ 864.583175][ T40] audit: type=1400 audit(2000524947.717:120666): avc: denied { connect } for pid=11413 comm="syz.8.10621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 864.647662][ T40] audit: type=1400 audit(2000524947.773:120667): avc: denied { mounton } for pid=11413 comm="syz.8.10621" path="/30/file0" dev="tmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 864.681022][T11414] bond0: (slave sit0): Error: Device type is different from other slaves [ 864.858115][T11423] comedi comedi3: pcmmio: I/O port conflict (0x8005,32) [ 864.879724][ T40] audit: type=1400 audit(2000524947.998:120668): avc: denied { execute } for pid=11421 comm="syz.8.10625" name="file0" dev="9p" ino=74448907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 864.897670][ T40] audit: type=1400 audit(2000524948.008:120669): avc: denied { execute_no_trans } for pid=11421 comm="syz.8.10625" path="/33/file0/file0" dev="9p" ino=74448907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 864.911438][T11423] overlay: Unknown parameter 'func' [ 864.921839][ T40] audit: type=1400 audit(2000524948.036:120670): avc: denied { rename } for pid=11421 comm="syz.8.10625" name="file0" dev="9p" ino=74448907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 864.934962][ T40] audit: type=1400 audit(2000524948.036:120671): avc: denied { unlink } for pid=11421 comm="syz.8.10625" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=74448901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 865.057003][ T10] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 865.117644][ T5939] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 865.122779][ T5939] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 865.125991][ T5939] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 865.129021][ T5939] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 865.131868][ T5939] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 865.173237][ T5999] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 865.333756][ T5999] usb 10-1: Using ep0 maxpacket: 16 [ 865.344978][ T5999] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.349707][ T5999] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.353939][ T5999] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 865.356786][T11441] chnl_net:caif_netlink_parms(): no params data found [ 865.363515][ T5999] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 865.367971][ T5999] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.374345][ T5999] usb 10-1: config 0 descriptor?? [ 865.405013][T11447] nftables ruleset with unbound chain [ 865.457278][T11441] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.460854][T11441] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.464111][T11441] bridge_slave_0: entered allmulticast mode [ 865.468039][T11441] bridge_slave_0: entered promiscuous mode [ 865.472655][T11441] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.475672][T11441] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.478726][T11441] bridge_slave_1: entered allmulticast mode [ 865.483108][T11441] bridge_slave_1: entered promiscuous mode [ 865.512089][T11441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.518105][T11441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.543635][T11441] team0: Port device team_slave_0 added [ 865.548497][T11441] team0: Port device team_slave_1 added [ 865.573390][T11441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.576113][T11441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 865.585919][T11441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.592067][T11441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.594752][T11441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 865.604577][T11441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.660554][T11441] hsr_slave_0: entered promiscuous mode [ 865.663898][T11441] hsr_slave_1: entered promiscuous mode [ 865.666901][T11441] debugfs: 'hsr0' already exists in 'hsr' [ 865.669088][T11441] Cannot create hsr debugfs directory [ 865.776933][T11441] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.782846][T11441] netdevsim netdevsim6 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 865.786937][T11441] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 865.791366][T11441] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 865.813021][ T5999] hid_parser_main: 4086 callbacks suppressed [ 865.813034][ T5999] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 865.817221][ T5999] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 865.822605][ T5999] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 865.826212][ T5999] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 865.828599][ T5999] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 865.839894][ T5999] input: HID 0955:7214 Haptics as /devices/virtual/input/input131 [ 865.872379][ T5999] shield 0003:0955:7214.001B: Registered Thunderstrike controller [ 865.875124][ T5999] shield 0003:0955:7214.001B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 865.888947][T11441] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.892162][T11441] netdevsim netdevsim6 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 865.895311][T11441] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 865.898701][T11441] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 866.019006][T11441] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 866.022259][T11441] netdevsim netdevsim6 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 866.024439][T11429] netlink: 472 bytes leftover after parsing attributes in process `syz.5.10626'. [ 866.026707][T11441] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 866.032049][T11441] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 866.084722][ T5999] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 866.084922][T16464] usb 10-1: USB disconnect, device number 45 [ 866.089855][ T5999] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 866.089913][ T5999] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 866.089941][ T5999] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 866.109288][T11441] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 866.112621][T11441] netdevsim netdevsim6 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 866.115649][T11441] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 866.119512][T11441] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 866.176165][ T5973] usb 48-1: device descriptor read/8, error -110 [ 866.217608][T11477] loop5: detected capacity change from 0 to 524287995 [ 866.278156][T11479] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10642'. [ 866.295517][T11441] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 866.302560][T11441] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 866.309379][T11441] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 866.316236][T11441] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 866.350014][T11441] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.352838][T11441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 866.355474][T11486] block nbd8: NBD_DISCONNECT [ 866.355631][T11441] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.360186][T11441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 866.362968][T11479] block nbd8: Disconnected due to user request. [ 866.365693][T11479] block nbd8: shutting down sockets [ 866.370539][T11479] dlm: Unknown command passed to DLM device : 33 [ 866.370539][T11479] [ 866.412252][T11441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.424288][T10523] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.427652][T10523] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.438853][T11441] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.446362][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.448715][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 866.456828][ T7059] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.459344][ T7059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 866.602105][T11441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 866.602120][ T5973] usb usb48-port1: attempt power cycle [ 866.668657][T11498] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10644'. [ 866.773578][T11441] veth0_vlan: entered promiscuous mode [ 866.778979][T11441] veth1_vlan: entered promiscuous mode [ 866.828205][T11441] veth0_macvtap: entered promiscuous mode [ 866.834046][T11441] veth1_macvtap: entered promiscuous mode [ 866.847651][T11441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 866.855287][T11441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 866.863454][ T46] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.866297][ T46] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.870030][ T46] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.872969][ T46] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.199137][ T5973] usb usb48-port1: unable to enumerate USB device [ 867.294035][ T5939] Bluetooth: hci2: command tx timeout [ 867.410132][ T40] audit: type=1400 audit(2000524950.362:120672): avc: denied { remount } for pid=11511 comm="syz.8.10646" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 867.419149][T11511] delete_channel: no stack [ 867.460439][T11516] fuse: Bad value for 'rootmode' [ 869.500693][ T5939] Bluetooth: hci2: command tx timeout [ 869.862814][T11498] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 869.911632][ T7049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.917524][ T7049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.938203][ T7049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.941246][ T7049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.996474][ T40] audit: type=1400 audit(2000524952.792:120673): avc: denied { connect } for pid=11531 comm="syz.6.10631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 870.055239][ T5939] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 870.055689][T11539] bridge_slave_1: left allmulticast mode [ 870.060974][T11539] bridge_slave_1: left promiscuous mode [ 870.062963][T11539] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.067658][T11539] bridge_slave_0: left allmulticast mode [ 870.069718][T11539] bridge_slave_0: left promiscuous mode [ 870.071679][T11539] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.257123][ T6016] usb 13-1: new high-speed USB device number 67 using dummy_hcd [ 870.311036][ T5998] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 870.427908][ T6016] usb 13-1: Using ep0 maxpacket: 8 [ 870.431573][ T6016] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 870.436087][ T6016] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 870.440976][ T6016] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.446288][ T6016] usb 13-1: config 0 descriptor?? [ 870.470933][ T5998] usb 10-1: Using ep0 maxpacket: 8 [ 870.475034][ T5998] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 870.477816][ T5998] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 870.481137][ T5998] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 870.484377][ T5998] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 870.487680][ T5998] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 870.491913][ T5998] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 870.494853][ T5998] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.666503][ T6016] iowarrior 13-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 870.717209][ T5998] usb 10-1: GET_CAPABILITIES returned 0 [ 870.719654][ T5998] usbtmc 10-1:16.0: can't read capabilities [ 870.730661][T13781] usb 10-1: USB disconnect, device number 46 [ 870.924821][T11551] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10657'. [ 870.931407][T11552] overlay: ./bus is not a directory [ 871.095362][T13781] usb 13-1: USB disconnect, device number 67 [ 871.202122][T11558] sctp: [Deprecated]: syz.6.10659 (pid 11558) Use of int in maxseg socket option. [ 871.202122][T11558] Use struct sctp_assoc_value instead [ 871.568130][ T40] audit: type=1400 audit(2000524954.265:120674): avc: denied { getopt } for pid=11573 comm="syz.6.10664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 871.717545][ T5939] Bluetooth: hci2: command tx timeout [ 871.865386][T11593] netlink: 604 bytes leftover after parsing attributes in process `syz.6.10669'. [ 872.037163][T11598] loop5: detected capacity change from 0 to 524287995 [ 872.353576][T11603] bond1: entered promiscuous mode [ 872.730830][T11621] netlink: 'syz.6.10679': attribute type 10 has an invalid length. [ 872.748374][T11623] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 872.781068][T11621] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 873.050119][ T40] audit: type=1400 audit(2000524955.663:120675): avc: granted { setsecparam } for pid=11639 comm="syz.6.10683" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 873.126677][ T40] audit: type=1400 audit(2000524955.738:120676): avc: granted { setsecparam } for pid=11639 comm="syz.6.10683" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 873.338069][ T6016] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 873.482882][ T40] audit: type=1400 audit(2000524956.067:120677): avc: denied { accept } for pid=11647 comm="syz.8.10687" path="socket:[253977]" dev="sockfs" ino=253977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 873.501012][ T6016] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 873.504313][ T6016] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.507030][ T6016] usb 10-1: Product: syz [ 873.509565][ T6016] usb 10-1: Manufacturer: syz [ 873.511174][ T6016] usb 10-1: SerialNumber: syz [ 873.515845][ T6016] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 873.539352][ T6016] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 873.674673][T11654] netlink: 'syz.8.10690': attribute type 10 has an invalid length. [ 873.685936][ T5294] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 873.693351][ T5294] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 873.697028][ T5294] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 873.708089][ T5294] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 873.710391][T11654] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 873.715131][ T5294] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 873.755012][T13781] usb 10-1: USB disconnect, device number 47 [ 873.943790][ T5939] Bluetooth: hci2: command tx timeout [ 874.103636][T11655] chnl_net:caif_netlink_parms(): no params data found [ 874.129227][ T40] audit: type=1400 audit(2000524956.676:120678): avc: denied { listen } for pid=11671 comm="syz.8.10694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 874.164681][T11678] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10695'. [ 874.169580][T11678] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10695'. [ 874.172471][T11655] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.175822][T11655] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.178208][T11655] bridge_slave_0: entered allmulticast mode [ 874.183394][T11655] bridge_slave_0: entered promiscuous mode [ 874.184538][T11678] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10695'. [ 874.186744][T11655] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.191885][T11678] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10695'. [ 874.192198][T11655] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.198372][T11655] bridge_slave_1: entered allmulticast mode [ 874.198582][T11678] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10695'. [ 874.201731][T11655] bridge_slave_1: entered promiscuous mode [ 874.220602][T11655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.224971][T11678] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10695'. [ 874.227362][T11655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.243900][T11655] team0: Port device team_slave_0 added [ 874.244496][T11678] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10695'. [ 874.247086][T11655] team0: Port device team_slave_1 added [ 874.252265][T11678] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10695'. [ 874.263181][T11655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.265972][T11655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.273933][T11655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.278669][T11655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.281038][T11655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.289230][T11655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.320338][T11655] hsr_slave_0: entered promiscuous mode [ 874.322961][T11655] hsr_slave_1: entered promiscuous mode [ 874.325155][T11655] debugfs: 'hsr0' already exists in 'hsr' [ 874.329775][T11655] Cannot create hsr debugfs directory [ 874.617239][ T6016] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 874.620395][ T6016] ath9k_htc: Failed to initialize the device [ 874.625234][T13781] usb 10-1: ath9k_htc: USB layer deinitialized [ 874.640721][T11702] nbd: must specify an index to disconnect [ 874.844636][ T7041] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 874.852684][ T7052] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 874.855433][ T7052] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 874.858321][ T7052] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 875.084558][T11655] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 875.102462][T11655] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 875.109772][T11655] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 875.116021][T11655] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 875.187926][ T5939] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 875.209056][T11745] Cannot find set identified by id 3 to match [ 875.209450][T11744] Cannot find set identified by id 3 to match [ 875.210668][T11655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 875.220993][T11655] 8021q: adding VLAN 0 to HW filter on device team0 [ 875.231825][T10513] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.234198][T10513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 875.246314][T10513] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.248554][T10513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 875.373103][ T40] audit: type=1400 audit(2000524957.840:120679): avc: denied { bind } for pid=11756 comm="syz.5.10708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 875.457329][T11655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 875.468545][ T40] audit: type=1400 audit(2000524957.924:120680): avc: denied { write } for pid=11765 comm="syz.5.10709" path="socket:[252701]" dev="sockfs" ino=252701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 875.523919][ T40] audit: type=1400 audit(2000524957.990:120681): avc: denied { getattr } for pid=11773 comm="syz.5.10710" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=252706 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 875.590528][T11783] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 875.593326][T11783] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 875.596767][T11783] vhci_hcd vhci_hcd.0: Device attached [ 875.705560][T11655] veth0_vlan: entered promiscuous mode [ 875.725081][T11796] loop5: detected capacity change from 0 to 524287995 [ 875.727965][T11655] veth1_vlan: entered promiscuous mode [ 875.732675][T11785] vhci_hcd: connection closed [ 875.732932][T10513] vhci_hcd vhci_hcd.6: stop threads [ 875.757891][T10513] vhci_hcd vhci_hcd.6: release socket [ 875.760304][T10513] vhci_hcd vhci_hcd.6: disconnect device [ 875.773343][T11655] veth0_macvtap: entered promiscuous mode [ 875.783009][T11655] veth1_macvtap: entered promiscuous mode [ 875.798778][T11655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 875.799764][ T39] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 875.810930][T11655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 875.825781][T13781] usb 13-1: new high-speed USB device number 68 using dummy_hcd [ 875.849913][ T7052] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.853135][ T7052] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.856166][ T7052] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.887440][ T7052] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.907420][ T5939] Bluetooth: hci4: command tx timeout [ 875.975099][T10497] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 875.979562][T10497] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.002440][T13781] usb 13-1: Using ep0 maxpacket: 8 [ 876.021437][T13781] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 876.034620][T13781] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 876.038265][T13781] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 876.041998][T13781] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 876.050117][T13781] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 876.058853][ T7041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.064203][T13781] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 876.067211][T13781] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 876.070723][T13781] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 876.071182][ T7041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.074323][T13781] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 876.080280][T13781] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 876.089504][T13781] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 876.091818][T13781] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 876.095305][T13781] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 876.100191][T13781] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 876.103687][T13781] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 876.109507][T13781] usb 13-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 876.121919][T13781] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.124521][T13781] usb 13-1: Product: syz [ 876.125885][T13781] usb 13-1: Manufacturer: syz [ 876.127378][T13781] usb 13-1: SerialNumber: syz [ 876.130086][ T9842] usb 10-1: new full-speed USB device number 48 using dummy_hcd [ 876.135521][T10497] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 876.138849][T10497] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.158031][ T7041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.160613][ T7041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.193825][T11827] kAFS: unparsable volume name [ 876.229470][T10497] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 876.233777][T10497] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.303849][ T9842] usb 10-1: config 5 has an invalid descriptor of length 186, skipping remainder of the config [ 876.307367][ T9842] usb 10-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 876.321344][ T9842] usb 10-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 876.324935][ T9842] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.331954][ T9842] usb 10-1: Product: syz [ 876.333864][ T9842] usb 10-1: Manufacturer: syz [ 876.335375][ T9842] usb 10-1: SerialNumber: syz [ 876.337534][T10497] bond0: (slave netdevsim0): Releasing backup interface [ 876.350562][T10497] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 876.354353][T10497] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.395880][T11847] __nla_validate_parse: 64 callbacks suppressed [ 876.395893][T11847] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.10722'. [ 876.442809][T11852] comedi comedi3: dmm32at: I/O port conflict (0x4f27,16) [ 876.477042][T11777] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 876.554906][ T6016] usb 10-1: USB disconnect, device number 48 [ 876.557751][T13781] adutux 13-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 876.578063][T13781] usb 13-1: USB disconnect, device number 68 [ 876.579142][T10497] bridge_slave_1: left allmulticast mode [ 876.581860][T10497] bridge_slave_1: left promiscuous mode [ 876.583728][T10497] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.587990][T10497] bridge_slave_0: left allmulticast mode [ 876.590497][T11866] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10726'. [ 876.590674][T10497] bridge_slave_0: left promiscuous mode [ 876.595287][T10497] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.644848][T11875] netlink: 'syz.7.10728': attribute type 1 has an invalid length. [ 876.763946][T10497] bond7 (unregistering): (slave gretap1): Releasing active interface [ 876.782575][T10497] bond5 (unregistering): (slave geneve4): Releasing active interface [ 876.788253][T10497] bond3 (unregistering): (slave geneve3): Releasing active interface [ 877.095631][T10497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 877.100261][T10497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 877.105958][T10497] bond0 (unregistering): Released all slaves [ 877.123959][T10497] bond1 (unregistering): Released all slaves [ 877.135735][T10497] bond2 (unregistering): Released all slaves [ 877.147473][T10497] bond3 (unregistering): Released all slaves [ 877.161438][T10497] bond4 (unregistering): Released all slaves [ 877.178749][T10497] bond5 (unregistering): Released all slaves [ 877.193188][T10497] bond6 (unregistering): Released all slaves [ 877.211464][T10497] bond7 (unregistering): Released all slaves [ 877.219033][T11866] chnl_net:caif_netlink_parms(): no params data found [ 877.253987][T11879] netlink: 'syz.7.10729': attribute type 2 has an invalid length. [ 877.256663][T11879] tipc: Started in network mode [ 877.258256][T11879] tipc: Node identity 340008, cluster identity 4711 [ 877.268439][T11879] tipc: Node number set to 3407880 [ 877.325970][T11912] overlayfs: regular lower layers cannot follow data lower layers [ 877.339302][T11915] overlayfs: regular lower layers cannot follow data lower layers [ 877.553380][T10497] IPVS: stopping backup sync thread 7265 ... [ 877.653021][ T40] audit: type=1400 audit(2000524959.979:120682): avc: denied { read } for pid=11933 comm="syz.8.10736" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 877.653213][T11934] orangefs_devreq_write_iter: total:0: must be at least:8240: [ 877.702060][T11936] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.10737'. [ 877.721471][T11936] netlink: 'syz.7.10737': attribute type 13 has an invalid length. [ 877.982793][T11957] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.021456][T10497] hsr_slave_0: left promiscuous mode [ 878.024649][T10497] hsr_slave_1: left promiscuous mode [ 878.029759][T10497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 878.032964][T10497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 878.036895][T10497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 878.040574][T10497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.067026][T10497] veth1_macvtap: left promiscuous mode [ 878.069416][T10497] veth0_macvtap: left promiscuous mode [ 878.071949][T10497] veth1_vlan: left promiscuous mode [ 878.074316][T10497] veth0_vlan: left promiscuous mode [ 878.123344][ T5939] Bluetooth: hci4: command tx timeout [ 878.214907][T10497] vlan0 (unregistering): left allmulticast mode [ 878.217554][T10497] veth0_vlan (unregistering): left allmulticast mode [ 878.258847][T10497] team0 (unregistering): Port device team_slave_1 removed [ 878.265887][T10497] team0 (unregistering): Port device team_slave_0 removed [ 878.422723][T11957] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.551692][T11957] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.569946][T11998] input: syz0 as /devices/virtual/input/input132 [ 878.638737][T11957] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.697279][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10755'. [ 878.703794][T12011] : entered promiscuous mode [ 878.731064][T12013] netlink: 256 bytes leftover after parsing attributes in process `syz.7.10756'. [ 878.769104][ T7052] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.770691][T12015] hpfs: Bad magic ... probably not HPFS [ 878.774760][T12015] hpfs: Bad magic ... probably not HPFS [ 878.790860][ T7052] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.816831][ T46] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.823342][ T46] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.907294][T12027] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 878.910783][T12027] team0 (unregistering): Port device team_slave_0 removed [ 878.926738][T12027] team0 (unregistering): Failed to send options change via netlink (err -105) [ 878.929609][T12027] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 878.933148][T12027] team0 (unregistering): Port device team_slave_1 removed [ 878.936759][ T40] audit: type=1400 audit(2000524961.189:120683): avc: denied { watch_reads } for pid=12029 comm="syz.5.10764" path="pipe:[255346]" dev="pipefs" ino=255346 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 878.937705][T12030] program syz.5.10764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 879.004496][T12034] kAFS: Can only specify source 'none' with -o dyn [ 879.182837][T12042] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10768'. [ 879.185734][T12042] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10768'. [ 879.192122][T12042] geneve2: entered promiscuous mode [ 879.193842][T12042] geneve2: entered allmulticast mode [ 879.217233][T12043] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 879.221419][T13781] usb 11-1: new full-speed USB device number 51 using dummy_hcd [ 879.226729][T12043] block device autoloading is deprecated and will be removed. [ 879.229658][T12045] program syz.7.10769 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 879.232273][ T40] audit: type=1400 audit(2000524961.452:120684): avc: denied { ioctl } for pid=12039 comm="syz.5.10767" path="/301/file0/file0" dev="fuse" ino=64 ioctlcmd=0x92b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 879.281058][ T40] audit: type=1400 audit(2000524961.508:120685): avc: denied { create } for pid=12049 comm="syz.7.10770" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 879.281118][T12050] o2cb: This node has not been configured. [ 879.291937][T12050] o2cb: Cluster check failed. Fix errors before retrying. [ 879.294739][T12050] (syz.7.10770,12050,3):user_dlm_register:674 ERROR: status = -22 [ 879.298229][T12050] (syz.7.10770,12050,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 879.364036][T12055] syz.5.10771: attempt to access beyond end of device [ 879.364036][T12055] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 879.369809][T12055] gfs2: error -5 reading superblock [ 879.372581][T13781] usb 11-1: device descriptor read/64, error -71 [ 879.493521][T12059] tmpfs: Unknown parameter 'grpquota_be' [ 879.647900][T13781] usb 11-1: new full-speed USB device number 52 using dummy_hcd [ 879.719302][T12063] i2c i2c-1: Invalid block write size 34 [ 879.796678][T13781] usb 11-1: device descriptor read/64, error -71 [ 879.879074][T12068] syzkaller0: entered promiscuous mode [ 879.880913][T12068] syzkaller0: entered allmulticast mode [ 879.914767][T13781] usb usb11-port1: attempt power cycle [ 880.011187][ T40] audit: type=1400 audit(2000524962.193:120686): avc: denied { watch } for pid=12072 comm="syz.7.10778" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 880.052492][T12071] loop5: detected capacity change from 0 to 524287995 [ 880.066305][T12075] binder: BC_ACQUIRE_RESULT not supported [ 880.068726][T12075] binder: 12074:12075 ioctl c0306201 2000000001c0 returned -22 [ 880.072589][T12075] binder: 12074:12075 ioctl 8208ae63 200000000040 returned -22 [ 880.086275][T12077] tmpfs: Unknown parameter 'grpq' [ 880.134531][T12084] netlink: 'syz.7.10781': attribute type 11 has an invalid length. [ 880.137204][T12084] netlink: 160764 bytes leftover after parsing attributes in process `syz.7.10781'. [ 880.185367][ T5294] Bluetooth: hci4: hardware error 0x04 [ 880.257837][T12099] tipc: Enabling not permitted [ 880.259694][T12099] tipc: Enabling of bearer rejected, failed to enable media [ 880.270582][ T40] audit: type=1400 audit(2000524962.437:120687): avc: denied { listen } for pid=12092 comm="syz.7.10786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 880.297693][T13781] usb 11-1: new full-speed USB device number 53 using dummy_hcd [ 880.315365][T12103] netlink: 'syz.7.10789': attribute type 21 has an invalid length. [ 880.317869][T12103] netlink: 156 bytes leftover after parsing attributes in process `syz.7.10789'. [ 880.322084][T13781] usb 11-1: device descriptor read/8, error -71 [ 880.362628][T12101] loop5: detected capacity change from 0 to 524287995 [ 880.370422][T12109] xt_l2tp: invalid flags combination: 8 [ 880.428314][T12112] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 880.437404][T12110] [U] J"—E:ÀÆ" [ 880.610052][T13781] usb 11-1: new full-speed USB device number 54 using dummy_hcd [ 880.628627][T13781] usb 11-1: device descriptor read/8, error -71 [ 880.746016][T13781] usb usb11-port1: unable to enumerate USB device [ 880.848372][T12127] comedi comedi3: pcl818: I/O port conflict (0x4f23,16) [ 880.856709][T12127] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10798'. [ 880.991062][T12135] [ 880.992156][T12135] ====================================================== [ 880.995154][T12135] WARNING: possible circular locking dependency detected [ 880.998130][T12135] syzkaller #0 Tainted: G L [ 881.000846][T12135] ------------------------------------------------------ [ 881.003858][T12135] syz.5.10800/12135 is trying to acquire lock: [ 881.006458][T12135] ffff8880406bcbc0 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: lookup_slow+0x42/0x70 [ 881.010722][T12135] [ 881.010722][T12135] but task is already holding lock: [ 881.013954][T12135] ffff88803bfe0088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 881.017092][T12135] [ 881.017092][T12135] which lock already depends on the new lock. [ 881.017092][T12135] [ 881.020407][T12135] [ 881.020407][T12135] the existing dependency chain (in reverse order) is: [ 881.023270][T12135] [ 881.023270][T12135] -> #4 (&of->mutex){+.+.}-{4:4}: [ 881.025649][T12135] __mutex_lock+0x1a2/0x1b90 [ 881.027420][T12135] kernfs_seq_start+0x4f/0x2a0 [ 881.029149][T12135] traverse.part.0.constprop.0+0xaf/0x650 [ 881.031687][T12135] seq_read_iter+0x93f/0x1270 [ 881.033939][T12135] kernfs_fop_read_iter+0x46c/0x610 [ 881.036173][T12135] copy_splice_read+0x4ba/0xb90 [ 881.038337][T12135] do_splice_read+0x285/0x370 [ 881.040650][T12135] splice_direct_to_actor+0x2a1/0xa30 [ 881.043218][T12135] do_splice_direct+0x174/0x240 [ 881.045492][T12135] vfs_copy_file_range+0xc92/0x1910 [ 881.047934][T12135] __do_sys_copy_file_range+0x1a1/0x460 [ 881.050542][T12135] do_syscall_64+0x106/0xf80 [ 881.052923][T12135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.055689][T12135] [ 881.055689][T12135] -> #3 (&p->lock){+.+.}-{4:4}: [ 881.058733][T12135] __mutex_lock+0x1a2/0x1b90 [ 881.060991][T12135] seq_read_iter+0xe1/0x1270 [ 881.063249][T12135] proc_reg_read_iter+0x220/0x310 [ 881.065205][T12135] copy_splice_read+0x4ba/0xb90 [ 881.066937][T12135] do_splice_read+0x285/0x370 [ 881.068638][T12135] splice_file_to_pipe+0x82/0x120 [ 881.070597][T12135] do_sendfile+0x366/0xe20 [ 881.072584][T12135] __x64_sys_sendfile64+0x1d8/0x220 [ 881.075090][T12135] do_syscall_64+0x106/0xf80 [ 881.077376][T12135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.080257][T12135] [ 881.080257][T12135] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 881.083348][T12135] __mutex_lock+0x1a2/0x1b90 [ 881.085531][T12135] pipe_lock+0x69/0x80 [ 881.087562][T12135] iter_file_splice_write+0x1fd/0x10a0 [ 881.089928][T12135] do_splice+0x109c/0x1fd0 [ 881.092128][T12135] __do_splice+0x237/0x370 [ 881.094302][T12135] __x64_sys_splice+0x187/0x250 [ 881.096313][T12135] do_syscall_64+0x106/0xf80 [ 881.097979][T12135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.100562][T12135] [ 881.100562][T12135] -> #1 (sb_writers#6){.+.+}-{0:0}: [ 881.103490][T12135] mnt_want_write+0x6f/0x450 [ 881.105703][T12135] ovl_create_object+0x12b/0x3b0 [ 881.107597][T12135] lookup_open.isra.0+0xc47/0x11b0 [ 881.109403][T12135] path_openat+0x2291/0x31a0 [ 881.111602][T12135] do_file_open+0x20e/0x430 [ 881.113346][T12135] do_sys_openat2+0x10d/0x1e0 [ 881.115037][T12135] __x64_sys_open+0xfe/0x1d0 [ 881.116688][T12135] do_syscall_64+0x106/0xf80 [ 881.118353][T12135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.120465][T12135] [ 881.120465][T12135] -> #0 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 881.123274][T12135] __lock_acquire+0x14b8/0x2630 [ 881.125006][T12135] lock_acquire+0x1cf/0x380 [ 881.126686][T12135] down_read+0x99/0x460 [ 881.128174][T12135] lookup_slow+0x42/0x70 [ 881.129805][T12135] path_lookupat+0x5e8/0xc40 [ 881.131903][T12135] filename_lookup+0x202/0x590 [ 881.133683][T12135] kern_path+0x37/0x50 [ 881.135189][T12135] lookup_bdev+0xd8/0x280 [ 881.136809][T12135] resume_store+0x1d6/0x460 [ 881.138466][T12135] kobj_attr_store+0x58/0x80 [ 881.140399][T12135] sysfs_kf_write+0xf2/0x150 [ 881.142249][T12135] kernfs_fop_write_iter+0x3e0/0x5f0 [ 881.144693][T12135] iter_file_splice_write+0x830/0x10a0 [ 881.146878][T12135] direct_splice_actor+0x192/0x6c0 [ 881.148720][T12135] splice_direct_to_actor+0x345/0xa30 [ 881.150697][T12135] do_splice_direct+0x174/0x240 [ 881.152430][T12135] do_sendfile+0xadc/0xe20 [ 881.154065][T12135] __x64_sys_sendfile64+0x1d8/0x220 [ 881.155918][T12135] do_syscall_64+0x106/0xf80 [ 881.157590][T12135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.159681][T12135] [ 881.159681][T12135] other info that might help us debug this: [ 881.159681][T12135] [ 881.162885][T12135] Chain exists of: [ 881.162885][T12135] &ovl_i_mutex_dir_key[depth] --> &p->lock --> &of->mutex [ 881.162885][T12135] [ 881.167013][T12135] Possible unsafe locking scenario: [ 881.167013][T12135] [ 881.169406][T12135] CPU0 CPU1 [ 881.171199][T12135] ---- ---- [ 881.172932][T12135] lock(&of->mutex); [ 881.174247][T12135] lock(&p->lock); [ 881.176304][T12135] lock(&of->mutex); [ 881.178622][T12135] rlock(&ovl_i_mutex_dir_key[depth]); [ 881.180735][T12135] [ 881.180735][T12135] *** DEADLOCK *** [ 881.180735][T12135] [ 881.184138][T12135] 3 locks held by syz.5.10800/12135: [ 881.186212][T12135] #0: ffff88802dcae420 (sb_writers#8){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 881.189324][T12135] #1: ffff88803bfe0088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 881.192455][T12135] #2: ffff88801c3f7f08 (kn->active#71){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 881.195624][T12135] [ 881.195624][T12135] stack backtrace: [ 881.197501][T12135] CPU: 2 UID: 0 PID: 12135 Comm: syz.5.10800 Tainted: G L syzkaller #0 PREEMPT(full) [ 881.197518][T12135] Tainted: [L]=SOFTLOCKUP [ 881.197522][T12135] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 881.197530][T12135] Call Trace: [ 881.197535][T12135] [ 881.197540][T12135] dump_stack_lvl+0x100/0x190 [ 881.197559][T12135] print_circular_bug.cold+0x178/0x1c7 [ 881.197594][T12135] check_noncircular+0x146/0x160 [ 881.197613][T12135] __lock_acquire+0x14b8/0x2630 [ 881.197631][T12135] lock_acquire+0x1cf/0x380 [ 881.197647][T12135] ? lookup_slow+0x42/0x70 [ 881.197662][T12135] ? __pfx___might_resched+0x10/0x10 [ 881.197675][T12135] ? try_to_unlazy+0x296/0x910 [ 881.197691][T12135] down_read+0x99/0x460 [ 881.197705][T12135] ? lookup_slow+0x42/0x70 [ 881.197718][T12135] ? __pfx_down_read+0x10/0x10 [ 881.197732][T12135] lookup_slow+0x42/0x70 [ 881.197745][T12135] path_lookupat+0x5e8/0xc40 [ 881.197762][T12135] filename_lookup+0x202/0x590 [ 881.197779][T12135] ? __pfx_filename_lookup+0x10/0x10 [ 881.197801][T12135] ? __asan_memcpy+0x3c/0x60 [ 881.197817][T12135] kern_path+0x37/0x50 [ 881.197826][T12135] lookup_bdev+0xd8/0x280 [ 881.197842][T12135] ? __pfx_lookup_bdev+0x10/0x10 [ 881.197857][T12135] ? __asan_memcpy+0x3c/0x60 [ 881.197871][T12135] resume_store+0x1d6/0x460 [ 881.197883][T12135] ? __pfx_resume_store+0x10/0x10 [ 881.197897][T12135] ? find_held_lock+0x2b/0x80 [ 881.197910][T12135] ? sysfs_file_kobj+0xe4/0x290 [ 881.197924][T12135] ? sysfs_file_kobj+0xe4/0x290 [ 881.197938][T12135] ? __pfx_resume_store+0x10/0x10 [ 881.197949][T12135] kobj_attr_store+0x58/0x80 [ 881.197962][T12135] ? __pfx_kobj_attr_store+0x10/0x10 [ 881.197974][T12135] sysfs_kf_write+0xf2/0x150 [ 881.197989][T12135] kernfs_fop_write_iter+0x3e0/0x5f0 [ 881.198001][T12135] ? __pfx_sysfs_kf_write+0x10/0x10 [ 881.198016][T12135] iter_file_splice_write+0x830/0x10a0 [ 881.198031][T12135] ? __pfx_iter_file_splice_write+0x10/0x10 [ 881.198044][T12135] ? __pfx_copy_splice_read+0x10/0x10 [ 881.198058][T12135] ? __pfx_iter_file_splice_write+0x10/0x10 [ 881.198069][T12135] direct_splice_actor+0x192/0x6c0 [ 881.198081][T12135] splice_direct_to_actor+0x345/0xa30 [ 881.198093][T12135] ? __pfx_direct_splice_actor+0x10/0x10 [ 881.198105][T12135] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 881.198118][T12135] do_splice_direct+0x174/0x240 [ 881.198129][T12135] ? __pfx_do_splice_direct+0x10/0x10 [ 881.198140][T12135] ? avc_policy_seqno+0x9/0x20 [ 881.198155][T12135] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 881.198166][T12135] ? rw_verify_area+0xce/0x6d0 [ 881.198181][T12135] do_sendfile+0xadc/0xe20 [ 881.198197][T12135] ? __pfx_do_sendfile+0x10/0x10 [ 881.198213][T12135] ? __x64_sys_futex+0x34f/0x4d0 [ 881.198223][T12135] ? __x64_sys_futex+0x358/0x4d0 [ 881.198233][T12135] __x64_sys_sendfile64+0x1d8/0x220 [ 881.198245][T12135] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 881.198259][T12135] do_syscall_64+0x106/0xf80 [ 881.198271][T12135] ? clear_bhb_loop+0x40/0x90 [ 881.198283][T12135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.198294][T12135] RIP: 0033:0x7f4a7d19c799 [ 881.198305][T12135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.198316][T12135] RSP: 002b:00007f4a7e097028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 881.198328][T12135] RAX: ffffffffffffffda RBX: 00007f4a7d415fa0 RCX: 00007f4a7d19c799 [ 881.198336][T12135] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 881.198343][T12135] RBP: 00007f4a7d232c99 R08: 0000000000000000 R09: 0000000000000000 [ 881.198350][T12135] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000000 [ 881.198356][T12135] R13: 00007f4a7d416038 R14: 00007f4a7d415fa0 R15: 00007fff7f948498 [ 881.198366][T12135] [ 881.344679][T12135] PM: Image not found (code -22) [ 882.376039][ T5294] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 882.657705][T10501] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.752097][T10501] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.807141][T10501] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.859925][T10501] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.941885][T10501] bridge_slave_1: left allmulticast mode [ 882.943943][T10501] bridge_slave_1: left promiscuous mode [ 882.945992][T10501] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.950149][T10501] bridge_slave_0: left allmulticast mode [ 882.952634][T10501] bridge_slave_0: left promiscuous mode [ 882.954528][T10501] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.073119][T10501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 883.078067][T10501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 883.083974][T10501] bond0 (unregistering): Released all slaves [ 883.146923][T10501] tipc: Left network mode [ 883.366376][T10501] hsr_slave_0: left promiscuous mode [ 883.369305][T10501] hsr_slave_1: left promiscuous mode [ 883.371302][T10501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 883.373737][T10501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 883.376390][T10501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 883.379266][T10501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 883.384306][T10501] veth1_macvtap: left promiscuous mode [ 883.386670][T10501] veth0_macvtap: left promiscuous mode [ 883.392699][T10501] veth1_vlan: left promiscuous mode [ 883.395163][T10501] veth0_vlan: left promiscuous mode