last executing test programs: 10m3.20047902s ago: executing program 32 (id=1056): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x8, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xfff2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x3a}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1401, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r4, &(0x7f0000002080)={0x2020}, 0x2020) read$FUSE(r4, &(0x7f0000004440)={0x2020}, 0x2020) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r6}, 0x8) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000300)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x14, r8, 0x1, 0x1fff, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x20, 0x1, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000680), 0x5, 0x2) r10 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x1000001000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000000)={0x980914, 0x8}) ioctl$vim2m_VIDIOC_QUERYCAP(r10, 0x80685600, &(0x7f0000000180)) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="5bffd08307d80c79b1cb7b5f0c5b4d719c69c8513f748fbe425a7bc388c9019bef114779f7a10dc03a883d6e16a0a704f74297f381ff1db75098a9b38bb67206a7ff22e6ca46dc760bdad8a79d5951988c55a368dd1132ba7f129c2e65441eaa27492c069488df0881f123ca01ae873f5b36eb0fddb8f07420f5484d81cabde167c87ffbab6a94b24b5537bb1a08d56469f516fd4b7c66e2ac50d5ff4e52c628d0a89e53d0e78582a5ab2a2c714f66", 0xfe7c}], 0x1) 8m56.937905586s ago: executing program 33 (id=1892): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@deltaction={0xb4, 0x31, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x3ffd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x81}, 0x2000c004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x4, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002000010000000000000000000600000400000000000000000502190056026822"], 0x24}}, 0x48850) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x41e2}]}, 0x2c}}, 0x40) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r9) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, &(0x7f0000000000)={0x0, 0xfdff, &(0x7f0000000200)={&(0x7f0000000480)={0x50, r10, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xfe}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) ioctl$EVIOCSCLOCKID(r8, 0x400445a0, &(0x7f00000001c0)=0x1) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$hidraw(0x0, 0x0, 0x280) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) sendmsg$IPCTNL_MSG_EXP_NEW(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6c0000000002010100000000000000000a000003800e0006007369702d32303030300000000600074000020000060007400002000004000180300002802c00018014000300fc0100000000000000000000000000001400040020010000000000000000000000000001"], 0x6c}, 0x1, 0x0, 0x0, 0x4801}, 0x20000810) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000000)={0x48, 0xc, 0x0, 0x0, 0x1fffd, 0x40000000d}) 7m12.933977712s ago: executing program 5 (id=3382): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cd", 0x3f}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = inotify_init() unshare(0x400) inotify_add_watch(r5, &(0x7f0000000080)='./bus\x00', 0x400096e) mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0xa4) r6 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)="c0", 0x1}], 0x1, 0x5) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) fsopen(&(0x7f0000000040)='nfs4\x00', 0x1) mount$cgroup2(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x400, &(0x7f00000003c0)=ANY=[@ANYBLOB='pids_localevents,memory_hugetlb_accounting,nsdelegate,pids_localevents,favordynmods,nsdelegate,euid=', @ANYRESDEC=0x0, @ANYBLOB="1f1fdf25174a714633887ea88fa5d8f9", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x3ec0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r8, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r6, 0xaea2, 0xd) 7m12.910750676s ago: executing program 5 (id=3384): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req={0x4, 0xfffbfff9, 0x7fffffff, 0x9}, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) (async, rerun: 32) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) (async) fcntl$getown(r5, 0x9) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r7 = dup3(r6, r5, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000380)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f0000000080)={0x1, 0x1}) r9 = syz_open_dev$vcsa(&(0x7f0000000280), 0x2, 0x200400) (async) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r10, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r10, 0x4028af11, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r10, 0x4008af03, &(0x7f0000000a40)={0x1, 0x0, [{0x9fe86477836682cf, 0x1000, &(0x7f0000002000)=""/4096}]}) (async, rerun: 32) ppoll(&(0x7f00000002c0)=[{r3, 0x8008}, {r10, 0x2060}, {r9, 0x2600}, {r1, 0x10}, {r4}, {r2, 0xd}, {r6, 0x102}], 0x7, &(0x7f0000000440)={0x77359400}, 0x0, 0x0) (async, rerun: 32) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) (async, rerun: 64) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) (rerun: 64) 7m12.833504122s ago: executing program 5 (id=3386): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000000)={0x3, "81e0fa532f9494d430e747a199e44eee63b6fb1774352066bd791cced003339697cf0d0f46d191e5f37e4ce222bff60646c374e6f3503553bbc8b779525084b85f55ca1f54b9a54fc55214294028395c9846c6b94019151ed2230706ea82551120799949c01f9ceeeeb2e8aed4fe9faab27036b90b982d5a7c05a32cb4e3204720230730e2f483cba956627344715bb02c7cccbc1cc4415066cfc98f514e89139ab3c26c37485afb8f0b07c2a351ac6fd323a8921998026a9e7808294e07b5a848be44bd4b658673003e12373c77ae56595a2295d6808755aebdecc7c4796e2b2d8ae8efbef13021d155ff2efaed47a98b50d24fc9e5bb7b7ac4b4240ec09ac12dd3bcf1bb18a4c15d7fe0bf716dff418d49bdcdf42d2f40cf2b1d4e04f12dada5d6520ee034a361095283f7302bd080866dcd8aff5dbb721ab63496090f5b56d298fa9ede8382d894173457f6dbe9d806c39e16310f4edcde21d528727a5ff60a05dcaf0f89264196cf47d9397a398043671a2c369e000818be478177fa2f5324c79feb1682c818ea77d09e50e6bace82e7748efaab871e68fd7b07b0bf77dc5fb505de5da85cebfe2557fbc05155d612d2fc9abe4e667b2cda677f9debee92c575aa4c757930e12adff68bef4bc7ccd586c2ea1c980cbdab390e672ea13044869e03a73bb6b22a7a36585948acf6f59f4c62a2ba88e6c765119d5fce174e95"}) (async) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000240)={{r0}, "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"}) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001240)=0x0) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000001280)={0x27, r1, 0x1, 0x7, 0x51, 0x4, "0ef7796e0afd1054e6fd0c5cd756f40d8973ef269bcf37ae0d0f45cd7ed59d8b68449a9f646367799166e96e55db123c65e7281e2fd0c5b9442833ab3901ec", 0xa}, 0x60) r2 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000001300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x258a, 0x36, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x20, 0x90, 0x7, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x2, 0xf8, {0x9, 0x21, 0x100, 0x6, 0x1, {0x22, 0x5b7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x1, 0xe}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0xa2, 0xa, 0x9}}]}}}]}}]}}, &(0x7f00000014c0)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x250, 0x0, 0x1, 0x3, 0xff}, 0x16, &(0x7f0000001380)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x6, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x1, 0xfb, 0x8cc}]}, 0x1, [{0xfc, &(0x7f00000013c0)=@string={0xfc, 0x3, "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"}}]}) syz_usb_control_io$hid(r2, &(0x7f0000001700)={0x24, &(0x7f0000001500)={0x0, 0xb, 0xf7, {0xf7, 0x4, "801ca65154cf2112d37074e02048cd896132e49c61b74ea34cecdfef891c1155b883130ea1a908402836f87c52aa971dfc14d14af43681273ad1eab8d49c7d62fcf4588ca7d7b6cdf0dca543cc49eed3e1439e7796d351e703dade6957fbb9c4f30d8ee04080cb01728d2c82da2244dc541bc3c9876fdf5822acef7f2675c2afb2ad37f87f81002864d4ea7f43e3fed9ed7335b976ee88f8e9f787bd73582aacfcfb1c812f3d58bf042bfdc43710c1aab650f482c3af7b7b7ea12c467b45b31a37fb89c554813b0f07d622bc76bb7595c95508ef89f58a3a95067b4797ba4aa200838803f03f4cb926b9e892011a7163664571fca6"}}, &(0x7f0000001600)={0x0, 0x3, 0x4f, @string={0x4f, 0x3, "ef5bfa6f7871307ac9cafc991034cd9e71ab65c4cbb9ebcf38cd5a36e21a9c6157e3b917e45a741563cc636eeb7b0e24812bee7e72940c35ba1f0572af239c7b5a537c61a5fd6119e4f681d3e8"}}, &(0x7f0000001680)={0x0, 0x22, 0x4, {[@local=@item_012={0x1, 0x2, 0x3, '@'}, @main=@item_012={0x1, 0x0, 0x9, "bb"}]}}, &(0x7f00000016c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x8}}}}, &(0x7f0000001880)={0x2c, &(0x7f0000001740)={0x0, 0x1, 0x9, "39afe95d7c77fba332"}, &(0x7f0000001780)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000017c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001800)={0x20, 0x1, 0x12, "be31de910489dc903bebda3a99381dae20a3"}, &(0x7f0000001840)={0x20, 0x3, 0x1, 0x35}}) (async) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r3, &(0x7f00000018c0)="8b8096716203fccfee61519e5117077f1e353bac4c5e7bb64f9999a78048bf5153102da81086a032f480a34175ec0f4ef39db5eceb318314cdbe0574a77a811a20325be5d2126a2882bca65419763640f486746eda331aa1c357ea19ababceccaab52836144efaa3e5d0a60b8150e490817d1de3194e104987a9c4b43c17e36de80cbcd230281bb3f755b7d8ecf7fa", 0x8f, 0x408a0, &(0x7f0000001980)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2}, [@null, @null, @bcast, @null, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000001a80)={0x0, 0x4c, &(0x7f0000001a00)=[@in6={0xa, 0x4e22, 0x2, @loopback, 0x10}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x30}}, @in={0x2, 0x4e22, @private=0xa010102}]}, &(0x7f0000001ac0)=0x10) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000001b00)={r4, 0x8}, 0x8) (async) r5 = syz_open_dev$evdev(&(0x7f0000001b40), 0x4, 0x400000) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000001b80)=""/4096) (async) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000002b80), 0x28000, 0x0) connect$ax25(r6, &(0x7f0000002bc0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) (async) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r7, 0x80489439, &(0x7f0000002c80)) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000002d00)=0x3, 0x4) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003100)={r6, 0x58, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000003280)={0x1f, 0x3b, &(0x7f0000002d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xffffff8e}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7f}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @alu={0x4, 0x1, 0x0, 0xb, 0x8, 0xfffffffffffffffe}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe37c}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000002f40)='GPL\x00', 0x5, 0xf9, &(0x7f0000002f80)=""/249, 0x41000, 0x45, '\x00', r9, @fallback=0x8, r6, 0x8, &(0x7f0000003140)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000003180)={0x2, 0x10, 0x1, 0xc1ab}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f00000031c0)=[r6, r6], &(0x7f0000003200)=[{0x1, 0x2, 0x1, 0xc}, {0x4, 0x2, 0xa, 0x3}, {0x1, 0x3, 0x2, 0xb}, {0x3, 0x4, 0x7, 0x1}, {0x0, 0x4, 0x7, 0x8}], 0x10, 0xff}, 0x94) (async) ioctl$DVD_AUTH(r3, 0x5390, &(0x7f0000003340)=@lsk={0x2, 0x2, "fd275dc30c"}) (async) ioctl$SIOCPNADDRESOURCE(r6, 0x89e0, &(0x7f0000003380)=0x3) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003640)={0x18, 0x18, &(0x7f00000033c0)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}, @jmp={0x5, 0x0, 0xa, 0x5, 0x9, 0x80, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @alu={0x4, 0x1, 0xa, 0x3, 0xa, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], &(0x7f0000003480)='syzkaller\x00', 0x5, 0xfe, &(0x7f00000034c0)=""/254, 0x41000, 0x6, '\x00', r9, 0x0, r6, 0x8, &(0x7f00000035c0)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000003600)=[{0x0, 0x2, 0x8, 0x7}], 0x10, 0x6083}, 0x94) (async) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000003700)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x1}) r10 = creat(&(0x7f0000003740)='./file0\x00', 0x18) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r10, 0x10f, 0x84, &(0x7f0000003780), &(0x7f00000037c0)=0x4) syz_usb_connect$cdc_ecm(0x1, 0x6d, &(0x7f0000003800)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x1, 0x1, 0xa, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x5}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0xc, 0x7, 0x1}, [@dmm={0x7, 0x24, 0x14, 0x7f, 0x101}, @mdlm={0x15, 0x24, 0x12, 0x2}, @acm={0x4, 0x24, 0x2, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0xe, 0xfa, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0x0, 0x2}}}}}]}}]}}, &(0x7f0000003b80)={0xa, &(0x7f0000003880)={0xa, 0x6, 0x300, 0x9, 0x5, 0x4, 0x0, 0x6}, 0x9c, &(0x7f00000038c0)={0x5, 0xf, 0x9c, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x71, 0x7, 0xd4, 0x1, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "9cd37c0bc789c6758b82a1c8c2fd3aed"}, @generic={0x6d, 0x10, 0xa, "69e372b4e44bd7e5236eadc7772da0eded33a98ce165097a56afdb0db436a5340d66d79d0dd68b25758e20bce9bda146d6132f50713409732d0c6463e10048ccd3ded5f0bf01ceb5984be9d96e1d6af8a0d4d8be29c061625383519d3523393d97bb50f824b8048320b3"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0xf, 0x4, 0x401, 0x3}]}, 0x4, [{0x1d, &(0x7f0000003980)=@string={0x1d, 0x3, "9cd4dac51a24cf701d30fdc122a65e99a4762a0fdbeaba1d5c6675"}}, {0xe8, &(0x7f00000039c0)=@string={0xe8, 0x3, "7b087b8df6ceaf67b267eab6f1c75698f84f432b8d22a4c68752fdde0c0258766cc401c6a4a05eddd88bb52f121d5bb62a4d5d1b4e535563ef5d333846a0b1bfd89e1c3f969da0b2978dc302d215fc243df2256a182ebdf9ee5ff2bf41bc54a0de7163845988432974226d1ac32345f1a55597157c8d99c97babe75d6b08d835274673332079b5dd5882259b3c16ff6edbe72078c2bf22a53f50b3db9541e8520cd699f7a7725d1d63498e097a3c9fc8526ba8bd789388a9feba929ad4f3a26edf879964d7870ce3fb481c431839d8c0308e57e41a2baa346ff568d0af4f2e268d26539f1e0d"}}, {0x5b, &(0x7f0000003ac0)=@string={0x5b, 0x3, "df53ab6d17878ee0d2fc35eac2381f6dd65f77907d898756cc0867681c97fdaeedc09298c23a3d3b6c5415d5a0f88cafacd5020fd1be98a2b6f31e2731dcbad2ae376dc1401963bd40f944f2d3dc011058738521a564fd29c4"}}, {0x4, &(0x7f0000003b40)=@lang_id={0x4, 0x3, 0xfcff}}]}) (async) getsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000003c00)=0x4, &(0x7f0000003c40)=0x4) (async) write$selinux_load(r8, &(0x7f0000003c80)={0xf97cff8c, 0x8, 'SE Linux', "2c6f39dcc507762aa1160f89585eccc664f52b06221fdfbb362e3d31b51dc024bd4d32e81f0cec10c799a0379de55b65f9949ca9bcacbaa5ff255b06f02270dccbe10ae4da762ef7676f485433d1b138cf4264b6b2f137cfe1597a0bec5d248a4c152da0e506be89ef4d0810a1c3615848370e9750f5b19d832d04164d282254b659c04cc98a34d8f37f45d5b14f41"}, 0x9f) (async) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000003dc0)=[@text64={0x40, &(0x7f0000003d40)="660f57220f20c035200000000f22c0b9800000c00f3235002000000f30c4e3c15c4ce1326965f2f247d9b465de000000b9860200000f320f0dafa3000000450fc72fc461e9e5564766440f011b", 0x4d}], 0x1, 0x40, &(0x7f0000003e00)=[@vmwrite={0x8, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc3}], 0x1) 7m12.139162071s ago: executing program 5 (id=3389): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x8a}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @broadcast}]}}}]}, 0x4c}, 0x1, 0x2000000000000000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x8a}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @broadcast}]}}}]}, 0x4c}, 0x1, 0x2000000000000000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000004140)={{0x800, 0x7b5b85af}, 0x100, './bus\x00'}) r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)='\x00', 0x1, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c"], 0x50) mount$overlay(0x0, 0x0, 0x0, 0x800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (async) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r4, r2}, &(0x7f00000000c0)=""/67, 0x43, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000003a40)={'pimreg\x00', &(0x7f0000003a00)=@ethtool_cmd={0x49, 0x100, 0xfff, 0x7, 0x10, 0x3, 0x5, 0x0, 0xff, 0x6, 0x400, 0x4, 0x2, 0xf9, 0x0, 0x5, [0x7, 0x8]}}) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000003a40)={'pimreg\x00', &(0x7f0000003a00)=@ethtool_cmd={0x49, 0x100, 0xfff, 0x7, 0x10, 0x3, 0x5, 0x0, 0xff, 0x6, 0x400, 0x4, 0x2, 0xf9, 0x0, 0x5, [0x7, 0x8]}}) sendmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ca7b16995f8de88a2d28968ce6ab516aed6e5af1bc29e1463e7d396141bfd05a6611d2b7e73c4cf947ed1d8910faca64e52ab0ca372b9bf88535a193820c40ba108848ece90efd200d400249826b19161be34986397db58171bd5d7f579d0ac3ff97ad3a62035fbc4fc6bfdd9341c0bbc1e9c14c85212307a4acbcfce2cf6c2ac67e1bab3388550461da4b93ca70c728bc56227367a5ddb716aa17e0c25fd5a600a1239abb31821b248ab34b9eeb48455204d2ba37d453c6159c7dda95507cfffe15fbe8c06770a66ed94f54536168038d0b62ec2e50f034d5ae120cc221104cd5329de39f4735a6aca82d02c178621b42ddcf59", 0xf4}], 0x1, &(0x7f0000000340)=[{0x90, 0x116, 0x7, "ef55437ebd55d90ca63bb4cac4cdc660c334c1ccf774368a9a701ef221ff2fc3e53db30769b3680329dfa081a73c03b7ec84670d2338cbaf5ed60f9c418c1cd4897c87d5147af0d575461206e96f20cbf5e17d6ce38d659b0e504f20873b18ea4ad3ec3ffb553b148783b579436b81d8563b573f08a01de2f3d8392912"}, {0x70, 0x10d, 0xe, "919f432f8c4dae7e79b97b2e65ba40c8fd69d29306185abde650a8148cec136d77867c0f98c1a2c4eb229deffc2a9d7b61b38a2503d6cc6dda0958a9138c570797499baabdbc1f39325b885ac5f9e89e81320a447ad1b569423d7440"}, {0x10, 0x0, 0x4}], 0x110}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)="11c8dd852b9d166f36baede794e17a7b6c6f7628c09fadcf3e725978092acc0210008713447b889a1184cf985e40bfecda22670f67d85775b5df2801353206245d614bfb1d438e782f57d6466b65c39678970bf21c03e327e85f9f9c44dc593fd93b4bca4e", 0x65}, {&(0x7f0000000480)="dd399be28e410a556dba8e329b37fb72f22887453b9016204194b84ee9c5754a9dd192aa0e23948c02e80b007de834f47684cd6baa734e201a8b524bf013ac84ea9dd6f76b63c7794e72fb43117fd5eba921fca3431fcd5e96fdaa71ecce2487d3985850ff4e25fcab4cf15c58f5f54ae0c5c08dba5f2b7b", 0x78}, {&(0x7f0000000040)="14037a1907d4843b3ae466e4de5f27d433324ca2d16d3628d8dca9e351f77ed448f3a1c5c719bca2d3a08f038480365290d0c9885fb588bf", 0x38}, {&(0x7f0000000500)="b5cd42820bf30256ef2ace3c875560c9913ca87fdad76797dcf09d9f8f31848d90af21b0d0791c2af968c18a11c6e4d4793cca090979fddebcf0937134a69f0a57f78ce873288ba8bf3f4e654ef4dfc39aaf18e5e1877f18d9173f3efcd0a45b387e8bf855fe508d59faa1b60dc4f843fac98845be98ee6a6db24d55be17121c46cd57b146e20f1929c0104b0e49f28087c910ef00995df7fd1ca5b592b875d74654deea814b9332071004946cd090831b2399aa852d2666118f08abee94a83e57c61a8e3fc996810794ed", 0xcb}, {&(0x7f0000000600)="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", 0xfc}, {&(0x7f0000000700)="fdb73dca59ae268ebdb2ca767d19bb06506f005f9bbceba605de60cc94432b7b6e18bbd8e4bc94e3015173f089cbe66b382ef6e3546de87cd819f3f884f6e10d80dc1b3a2a4ca17b09a939a5cf51f60fb0f8f5762581", 0x56}, {&(0x7f0000000780)="1e57a5d53222275b2194c8837e0bc550a8ac434a8eea2ce57b524ac577ae99b650a4d5b7720a4532749b6bbac157385ffda074037c6a41fc943ce7c94672f6138ab763453a39fc3f21b1e96f2a8a7660bddff8518b2c405be9a01369c3726c23e7d010c499eb909c17703c3261334e3eba986d760e3dca3b34d4cc3fa7d88a2f0aa4328f786ea5c717c1fbd746", 0x8d}], 0x7, &(0x7f00000008c0)=[{0x48, 0x10a, 0x0, "feb8ac656c6daadc8946b04650d2eb5c702ba175eae7d8604efe041fb26819fe0a210bf4089ed6db8b86c92705f9d1f7c96f8b"}, {0x70, 0x102, 0x5c2, "10b7ce3ee076335983f41e37b7fcbb491a7cfff215a33f2b82012fe575b6be34e155b88b6a118bb0cd936bf7f2c0ef7a260f80965d62d4c8fdfa5835d81bbab6de62236ddd625588552d1282f9556a3ac188d164fa682601025e74f3983a6f"}, {0x18, 0x10a, 0x2ad28a3b, "0bf609"}, {0xc8, 0x103, 0x10, "f3ad2945081f0048e57fd29a37baa494feaf54b799edba86214c31858679362bd1288351fc40daef686552088c18f767065155bb993341b80d526982a2e43757c6c473dd6bab773f0ce6411b745cbeefae21a0c546a0aab4224316aceb6310688947d252b49b00e251c664bafc5722a049303eccbd6f84af57ed9118eeab36b07a2b469058cecc460c34ab6db6d2b2e3f8de7072131f25eb5b6405d853bd80f8df18a35ea6d1cdf860083ff0dae49c86e2"}, {0x40, 0x119, 0x3ff, "e64e724862c14e16e3fa269c3bc3a15c4126d3a3f1d6939a9af6066e2fd5451220137eba274c4e8e2e704d3d145c"}, {0x30, 0x116, 0x4, "e7bc537cb4b45fbc7ea09422fc006d2e87d4115d348b5660976d5b0c1542"}], 0x208}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b00)="8d2b15e5c5a5d1797a019f7c119b543c72f1073df8837b5d46c3ef0bbe98124e6606c60c088339639a8e3c84e0a538cc970acdc8dd1e3496e7755c4c9635eda0c9c53a6cff88ff4b97c2b42e091217d80a132670854fa004a1b80e8515ce4e200c5fd2310a95eddb7e050b0b65470ede6292c4a86719dc7792ed42689eb4af8074bd6b1ccf25c32075116e2ac084915905408e1e0404d0cbca", 0x99}, {&(0x7f0000000bc0)="4847b7e039698defdf034feffb2bfdab988483e51ff86888f70e536c19598abea2a0802a98174012a7170bc4e950e64b69d8d77da28959393057ca7a767166ca8e2086f17c3fde1fb5deb53732a937ffd7732765076582f2287693551177277caf1e327432fc8950b8cc4576c7cb2053ebf30927ef168142f7489f27e4b4c2284d7595bd6273f465b1eb", 0x8a}], 0x2, &(0x7f0000000c80)=[{0x1010, 0x108, 0x3, "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"}, {0x50, 0x114, 0xb, "d32dddccfcb40b1190765dce250528a42970ec0797c5aedad9ab3efb2b21287eda4bb00da1922c0a1035823ffc2dfaaef0693692ae9f73eb08d6031d47"}, {0x28, 0x107, 0x4, "38f647bde0600ce36d7298174bf9f43672e65b"}], 0x1088}}, {{&(0x7f0000001d40)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f0000003280)=[{&(0x7f0000001dc0)="9bd175d477e9777c9b8009f771e2ec516bd350fd5dee2d129da14801829b7e13f35eb4181b60566d74d6a022e46c36341c92bec7c4b479d005eca90aa89110980f1cd880723bff1fa1dcf5abb2fa123593bf6a723f52bae1bc3bb62627aa898f53ff275543b5cb25687521f9dcfae435cc94e6556938bc31570b61f7658fdec1ef360c8c3bc0c574fc1619ca723430ef3855b567162cd769c6aa161e15c7bbf68f59407f4f50192f8775038d7f5a25f0b19b6574067a86eb243720a3e9e6ba1e1f897d8302ec86565c67034137ac0508453e92de17808118ad314688d60849e857d044", 0xe3}, {&(0x7f0000001ec0)="7adf2051ca25f65bb44c9f1f8dca16bd85dcbb7c4a128a11fccdeb7732938b9d5a3f51e946939e51f5fd8bb6aac950f32a9b4e5ac3092031744bd061ddc3243cb65adfd4330b48a4c1298889df53778cc7c5b41aea804389f5dfef2f4a27708f827bf5", 0x63}, {&(0x7f0000001f40)="20da7ce9ca2b5a4c78befaf158964d4c738d894ebb92615baa84546ccff510105afa5e7145d6ade06a266dbbd8576b5bedd27e3b02a69254b4c4a8a1fd40b691731299761c4cede68083907ef08b05f208d38c6c96887681dfed652f29d03e87d136d07d9a3d192d8b743452c424100375036c10c7e8d967cba85f7142db423c694694298de0486ad606c1f17d93b29f0b375792e116892cc607b50ba037a950dc1906e448b02e82", 0xa8}, {&(0x7f0000002000)="46dcd55ddcb66cb98272a44832f486aa8d74812b25eb3550f8f90da0b06dd64e68e1e41551a4d4d335fab8b159baba2abc4aeeceae12f6359292e16d1965c5f903", 0x41}, {&(0x7f0000002080)="6b019062a18a946c4dc50fa412bea8505c669fb2a2e3447ac4d84dd84edcdf4ae12ce6be18ba4000d236ef3b9571628dbf2e5fdff4220c8fbe4ad896f20e18f793abd80d52cff9efc940c193e292787950c823069bcdc06d56082d95ad8ea64b5e2383aba992f5cc60217fa2315be637b8ec1b091f2b01fbb6d399cf216be0f765325bc5247dc1935de257999cc8e61decfd5a3839a5ae3e429f87d9b77ca4d3a7cb4808845f996d842b9c7abd07975d24d33c278fe7967da0589d707cb6b756be179710953e89307dd39466c8bcdf62dc37dc5d6a1dd7194fac7a72cec59424140ba6536f817690", 0xe8}, {&(0x7f0000002180)="2daacfe4254dfdaadc18738c96c8d93bd3d7ee9176a4b75bde8d63d789767ddfa51955ebb6dec7b6dc01c0185f820b4bec5f8f09bbda6e636c9d1a15d70562338c2a372372e93221e349cf650951c5608b8af0346baef1a3abaf5600cfb4fa003376c7422340376d0296dbaf4c6656078747fc7df9bddabd03f5cb18e7dee58ba98a75644f6b389f6d76d5ed41451e1c70fbc7a932aa467669c5b28d5ca63a28069f177bf0516091cc0afb2ba1fd83501272f434410abe7c963bdf3702f2064829d7f8323546ba65be25d04d80ed07bb1a6b490d8966f85fa8bd185e175d8ebdcc9a4cf43e28f4e715aad357b6bbf207e72bec", 0xf3}, {&(0x7f0000002280)="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", 0x1000}], 0x7, &(0x7f0000003300)=ANY=[@ANYBLOB="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"], 0x2a0}}, {{&(0x7f00000035c0)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000003800)=[{&(0x7f0000003640)="79b07024cd04066c4fd06905f7ca62cabec03fd191892418ce3ed0cc8a1aad9184859a623ce4c4cf4ca7cd6bd52f626af9a84af36ac2b7a87076682376f49c5b61643c2e3c4e448d5c910a04a5ec0cc7e2dc4495ff8b2a0d85e64c195f31a89e2df20b1a3e6054297617d66f9a773f29fac88659e3cc00d9b658a3b3", 0x7c}, {&(0x7f00000036c0)="f596e75b859baa0afef2a6b83c31b93f0ce09446463f983acd99cc8bcb5a7acfeeb79e58cbde51e7416b3665c76498b1534a31998124d4ef616bbe172a6597ab74354e64f70589d60aedb9f82a1d9adab66fcf283d557d32b546b8f0ffcc8fbdd5267c207f968fe9eaeca3b7646ecbd9c597539991fb6a306fc50987f142fa383c91cdc08e37ca8d6b62cfb5bfb84e2b5de10e7d15bb24c2d69c767be8be", 0x9e}, {&(0x7f0000003780)="12270271ddfeb13d05164158ef9d1fe3b727a3430700389351e45214e1ed2697f1513d3b9802c5992bad185ea5acb728a33081eaa8fcd73ea7db62191c965afbe56622a6f554bd13562bc946", 0x4c}], 0x3, &(0x7f0000003840)=[{0xc0, 0x101, 0x9, "12ae41679c569b0936358cabd9acede53cf0a28c2141cd9ff9e34d30cb57f67c43af075ac3100308576efb62eb4f46c26791bf2b9e84b7026c05078e7df6ed3b0542a82b6a183fc1a236ace8e130dda4e711b040923693ec3757a1f9dc80e22ccee1e05530a9f85d2e65ef4e77e28862912b621dbdca6d6329cd0e3b16a1ebf718c6da64261c0c7ec4c991be2c44619a550590d15c38d7c1ab0d79a23e97cfe70ebdfbfc32ac017f278336dc"}], 0xc0}}, {{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000003900)="45d5f10f2345705abb847647a478f7c554f00e523352101c7471a2c866da5eb1e084aea503d807c2d138e0e78ecd567e5944d62930d913544fefae69270f11e05ae37e6018bc2437b4301a6c8b5227f853604c936610f3f7604227a807c5797e8370ca064f44542a9f4e63811d644d5f6696297ca332", 0x76}, {&(0x7f0000003980)="9b7558b387864854f3668bf3e04cec6d878cf9d52c0f81f1f1d33db2a90d86", 0x1f}], 0x2, &(0x7f0000004080)=ANY=[@ANYBLOB="58000000000000001101000040000000fc1a79e9bae736489af6bdde88cd7b47bdf24c03db7289e50b139a943d898ca374a48889457b54ed5d85ddecab810cbcf5ac6023580d215ddf2b721679663e1746ee66ad8db020b1c489eb2ecf00c69c073bca2e3b6dfec2074ab3b651f6a792d2cff84d6ad3955df08eefd4ff4d19807d600f47be825c387668048b384e0a0e328082f6a6dd2ba56b0554a17185f6e13a36"], 0x58}}, {{&(0x7f0000003a80)=@nl=@kern={0x10, 0x0, 0x0, 0x400000}, 0x80, &(0x7f0000003d80)=[{&(0x7f0000003b00)="8489df38da95d7e81bd0a765d9b40e5e562a2e8143d593c635a066f0f14a6e603448305c341fcad4ea87eba218dea1118d6f614ff4dabdea36d19996f99cc54c4a5e821537a77034", 0x48}, {&(0x7f0000003b80)="290f73b285059d8af99feefdcb733fbe9615b2e15772a2937fe7f0802f4b8db337ff607bbaf9ec188e5f719661f8a08290c2a113fcacca7dab04134e511fd3b3c6d01c73b3008ee99f64eb4e62705903f3e2c144a05001", 0x57}, {&(0x7f0000003c00)="f3d25f9647ce6cea1c2302527fb353dc7876069c483cd4a7f326d7a02326ea27", 0x20}, {&(0x7f0000003c40)="27c65f94edbda3f957b638ec65d6aa9846e0fb9fd690d8cf08e2e6ac882462a4aeee12c484295610931363060a958b553b0975c42ecf978b32973161c0fd5f10bda57cc79cef835c75536ac08e0b3fcf46493696b3519697c0e855909e009f002a5f6d742c08ec59584c0f0ac05a3bd752af507d61442303ace375f220501294abe2de133938339534581b7e12695371b332c38d05b88225c28714d0cf90fe2110e39a791a8bfa86d06a68e7", 0xac}, {&(0x7f0000003d00)="b3815caa28a8a129e295579ef8120e16993aff6353c8a389a1ca0349d6f0db3d7f2b332802b67f869ac3116f4383e24b661e9590b823fc2ecff277fa49b66d86386f89", 0x43}], 0x5, &(0x7f0000003e00)=[{0x90, 0x108, 0x4, "c54bf172dc220b74433bed838d815093a3de04ef7f3063155781defe8ce0cc619d7993cd68266389adfc1763d89d5c62144dbc75562c67cfc314a588402575289d5d83058f3d178a7fc17a32271f9f862c8b05626e139fcaf6e55a5e7d5a2248c95ce9beda1e3d9612ecad45db6e8bac210ce65519d54f61fa7bb52b3a7dd7"}], 0x90}}], 0x7, 0x8401) 7m11.988057487s ago: executing program 5 (id=3391): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@local, @private0, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {}, {}, 0x2b, 0x1, 0x3, 0x18}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x8001, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0x2a}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x2000080, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r3) sendmsg$NL802154_CMD_GET_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x20, r4, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000440)={0x4c, r6, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nicvf0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4062}, 0x0) r7 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.log\x00', 0x20280, 0x21) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r9, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x2004851}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r9, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x80) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r6, 0x420, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x20084001}, 0x4c851) 7m11.984411434s ago: executing program 5 (id=3393): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0xc002}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x6b61, &(0x7f0000000040)={0x0, 0x7b4b, 0xf080, 0xc, 0x21c}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0xc97a, 0x1, 0x3}, 0x18, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000ac0), 0x1, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000010400009ccf2e53"]) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1000) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x19) close(0x4) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x3, 0x40) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x5411, &(0x7f0000000000)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x4, 'syz0\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}) syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) read$usbmon(r4, &(0x7f0000007500)=""/4096, 0x1000) landlock_restrict_self(r2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x6}}) 6m59.776115178s ago: executing program 3 (id=3572): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x2f) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="44010000100001000000000800000000ac1e00010000000000000000000008001000000000000000000000002000000000000000000000000000000010000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000000000000000010000000090000000200000000000000000000000200010000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x144}}, 0x0) io_setup(0xffff, &(0x7f0000000940)) io_setup(0x8, &(0x7f0000000bc0)) 6m59.565742759s ago: executing program 3 (id=3573): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000080)={'batadv_slave_0\x00', @ifru_map={0x1, 0x9, 0x10d, 0x1, 0x1, 0x6}}) 6m59.564804124s ago: executing program 3 (id=3575): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@host}, 0x1, 0x0, 0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x5, 0x640380) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000100)={0x15}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000001608000340000000000800024000000000080008400020000108000840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x4000) 6m59.495432629s ago: executing program 3 (id=3576): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r0, &(0x7f0000000000), 0xd4ba103) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) unlink(&(0x7f0000000100)='./file0/file1\x00') link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') 6m59.494663909s ago: executing program 3 (id=3578): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) unshare(0x2c020400) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0xc, 0x0, 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f0000000500)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r1, 0x351e, 0x483, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f00000000c0)={0x5, 0x3, 0x6, 0xf, 0x5, 0x9, 0x7ac5}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r6, 0x800448d3, &(0x7f00000001c0)={@any, 0x93, 0x5, 0x6, 0x8001, 0x23ad, "70ea4d8bc9b609ec265dd71867184e9353a4fcc05e00141575a6d1955576cd8cc2aaf1a7e2cd88a7f391bf9ecb8083f5e7241572f8df2a5fb57814dc54e7dafe29fc8fb90e7fd5b59ef827fa8f5022d78bc043eaa515ceff6bfe97e363b9f8c339e29deb22d9d506f7225f900efa9ccd86cb2ac436fe193144f29cdee8439c80"}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x34, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}}, 0x0) 6m59.414874992s ago: executing program 3 (id=3580): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c2", 0x4}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "60000100", "9de66ebc3914c06f0f109088d190e700", "000e3102", "f8dd000000000092"}, 0x28) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000080)=0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) 6m56.819270764s ago: executing program 34 (id=3393): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0xc002}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x6b61, &(0x7f0000000040)={0x0, 0x7b4b, 0xf080, 0xc, 0x21c}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0xc97a, 0x1, 0x3}, 0x18, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000ac0), 0x1, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000010400009ccf2e53"]) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1000) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x19) close(0x4) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x3, 0x40) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x5411, &(0x7f0000000000)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x4, 'syz0\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}) syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) read$usbmon(r4, &(0x7f0000007500)=""/4096, 0x1000) landlock_restrict_self(r2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x6}}) 6m44.38091956s ago: executing program 35 (id=3580): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c2", 0x4}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "60000100", "9de66ebc3914c06f0f109088d190e700", "000e3102", "f8dd000000000092"}, 0x28) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000080)=0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) 5m10.481906424s ago: executing program 0 (id=4842): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000002c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0xfffff4ce, @private2={0xfc, 0x2, '\x00', 0x3}, 0x6}, 0x1c) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x4c, 0x12, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2b, 0x40, 0xd8, 0x3, {0x4e22, 0x4e21, [0xffff64ac, 0x1014, 0x4, 0x6], [0xb3a, 0x80000001, 0xec, 0x5ae], 0x0, [0xffff0001, 0x9]}, 0x6, 0x9}}, 0x4c}}, 0xc4) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000003c0)={@broadcast, @local}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0xfffffffffffffc9e) write(r0, &(0x7f00000000c0)="822a0a7abd8c008926eca2fe0261cf5453783a1cc82b0304", 0x18) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000002c0)=ANY=[], 0x8) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0xfffff4ce, @private2={0xfc, 0x2, '\x00', 0x3}, 0x6}, 0x1c) (async) socket$inet(0x2, 0x5, 0x0) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x4c, 0x12, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2b, 0x40, 0xd8, 0x3, {0x4e22, 0x4e21, [0xffff64ac, 0x1014, 0x4, 0x6], [0xb3a, 0x80000001, 0xec, 0x5ae], 0x0, [0xffff0001, 0x9]}, 0x6, 0x9}}, 0x4c}}, 0xc4) (async) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000003c0)={@broadcast, @local}, 0xc) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0xfffffffffffffc9e) (async) write(r0, &(0x7f00000000c0)="822a0a7abd8c008926eca2fe0261cf5453783a1cc82b0304", 0x18) (async) 5m10.406646226s ago: executing program 0 (id=4846): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0003400008000000340012a00e0001006970366772657461700000002000028014000600000000eaffffff00000000000200060011004e240000"], 0x54}, 0x1, 0xba01, 0x0, 0x44844}, 0x0) 5m10.405390709s ago: executing program 0 (id=4848): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, r3, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r2, 0x3b8c, &(0x7f0000000780)={0x30, r4, 0x0, 0x0, 0xffffffffffffffff, 0x7ffffffffffffffe, 0x80000000000000ad, 0x0}) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x204600) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) process_madvise(r8, 0x0, 0x0, 0x4, 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x58533}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000810) ioctl$SNDCTL_SEQ_OUTOFBAND(r9, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x6, 0x0, 0x0, @generic}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r6, 0x2cb3b0415539fbbb, 0x70bd2b, 0x21dfdbfd, {{}, {@val={0x8, 0x1, 0x78}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000004000a0007"], 0x28}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r12) sendmsg$TIPC_CMD_ENABLE_BEARER(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01b07722de26963e7300010000000000000501"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r13, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x1, 0x6, @l2={'ib', 0x3a, 'geneve0\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x60040080}, 0x8000) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0xfc, r14, 0x405, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x100}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x438}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x88}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4181d846}, {0x6, 0x11, 0xf}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x40800) 5m10.202436369s ago: executing program 0 (id=4852): socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r1, &(0x7f0000000240)='./file0\x00') sendmmsg$inet6(r0, &(0x7f0000007500)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x6, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000"], 0x18}}], 0x1, 0x68034) 5m10.151611965s ago: executing program 0 (id=4853): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x0, 0x2000000}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x1, 0x0, 0x0, "00000000000300"}, 0x10}}, 0x20000000) read(r0, &(0x7f0000002340)=""/232, 0xe8) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032cbd70004000000802000000000000000100010008001a"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x9c, 0x2, 0x6, 0xa523a0da1be43f0c, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}, @IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}}}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) 5m9.640539136s ago: executing program 0 (id=4860): r0 = socket(0x2, 0x80805, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x10, 0x0, &(0x7f0000000680)='syzkaller\x00', 0xa, 0x1016, &(0x7f0000001880)=""/4118, 0x41000, 0xd}, 0x94) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000106d040cc500000000000109022400010000c04009040000010300000009218100000122a4000905810b"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r3 = userfaultfd(0x80001) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff}) (async) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000004060101000000e8ffffffffffffff000500010007000000"], 0x1c}}, 0x0) (async) splice(r7, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x218}) syz_emit_ethernet(0x72, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c200000effffffffffff080045000064000100000067907800000000ffffffff310190780d312500000029000002e00000008618000712b0d89300f6f1ac7cd8565f442f00000044141c51ac1414aa80000000ac1e010100000375f506000400d51ba3000000"], 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x9, 0xffffffffffffffff, 'id0\x00'}) r9 = socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x1) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r10, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[@ANYBLOB="55b600000000000080abd9be6e287ad8c5167c85ba504a4436fc2835596c87d6217244ff57b57d281e31dd873d48f8bf745a4413b69fd67519099134a980033c2c0d0234cb89933da666c163b19b3555fbfa9a46fc6fbd4a49c87b4bce0dd7b70e13e16a291fc52859eb60dcc700"/125, @ANYRES16=r11], 0x74}, 0x1, 0x0, 0x0, 0x4089}, 0x40) sendmsg$IPVS_CMD_FLUSH(r9, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="b9b7b4a5a0bbc55f2fb0f82418fee46d84087618190b3f62a87e9e2c6bcf9373b30e781dfc0862613df820f4a58f853a2efb4cb1cb498bd1f3821448c09e4b86d2c33d89c1b7b5575f25b630bcbb291db44247d756ee96a925eb16a318faf2a348f2d2", @ANYRES16=r11, @ANYBLOB="000125bd7000fbdbdf25110000000c00038008000100020000001c000280080003000300000005000d0001000000080006003e00000034000380140002006e65747063693000000000000000000014000600fc01000000000000000000000000000005000800010000000800060000f8ffff1c000280080004003c06000006000f0001fe000008000800ff070000"], 0x94}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sync_file_range(r10, 0x7, 0x6, 0x1) (async) close(r0) 5m9.47270549s ago: executing program 36 (id=4860): r0 = socket(0x2, 0x80805, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x10, 0x0, &(0x7f0000000680)='syzkaller\x00', 0xa, 0x1016, &(0x7f0000001880)=""/4118, 0x41000, 0xd}, 0x94) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000106d040cc500000000000109022400010000c04009040000010300000009218100000122a4000905810b"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r3 = userfaultfd(0x80001) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff}) (async) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000004060101000000e8ffffffffffffff000500010007000000"], 0x1c}}, 0x0) (async) splice(r7, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x218}) syz_emit_ethernet(0x72, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c200000effffffffffff080045000064000100000067907800000000ffffffff310190780d312500000029000002e00000008618000712b0d89300f6f1ac7cd8565f442f00000044141c51ac1414aa80000000ac1e010100000375f506000400d51ba3000000"], 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x9, 0xffffffffffffffff, 'id0\x00'}) r9 = socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x1) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r10, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[@ANYBLOB="55b600000000000080abd9be6e287ad8c5167c85ba504a4436fc2835596c87d6217244ff57b57d281e31dd873d48f8bf745a4413b69fd67519099134a980033c2c0d0234cb89933da666c163b19b3555fbfa9a46fc6fbd4a49c87b4bce0dd7b70e13e16a291fc52859eb60dcc700"/125, @ANYRES16=r11], 0x74}, 0x1, 0x0, 0x0, 0x4089}, 0x40) sendmsg$IPVS_CMD_FLUSH(r9, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="b9b7b4a5a0bbc55f2fb0f82418fee46d84087618190b3f62a87e9e2c6bcf9373b30e781dfc0862613df820f4a58f853a2efb4cb1cb498bd1f3821448c09e4b86d2c33d89c1b7b5575f25b630bcbb291db44247d756ee96a925eb16a318faf2a348f2d2", @ANYRES16=r11, @ANYBLOB="000125bd7000fbdbdf25110000000c00038008000100020000001c000280080003000300000005000d0001000000080006003e00000034000380140002006e65747063693000000000000000000014000600fc01000000000000000000000000000005000800010000000800060000f8ffff1c000280080004003c06000006000f0001fe000008000800ff070000"], 0x94}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sync_file_range(r10, 0x7, 0x6, 0x1) (async) close(r0) 4m54.512759897s ago: executing program 7 (id=5059): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x188}}], 0x1, 0x810) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x1) fanotify_mark(r1, 0x39, 0x1a, r0, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000002840)="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", 0x1000}, {&(0x7f0000000280)="73279da5846a40df1e8ec5a30e45a4a3a94ce31d093d8001cdd4aeffa8627074352792ffc9aa0e4205abe712373bcb1abce73a2195b8c19e7b2331f34e359fa498f557a80adceba48bb2ff5145477fe341ac3a8f37086264fb63078e45c043ea09675bb6bbb9fec66ffae56c514ee606a108b468ef11ff2e46c25916057b53921ce6930e5981b87eb688cb836286a15db57bdfd5f681619f8e4d8db1a7e7f314cc8762bf43ce50edb5c54ecb812ef0f1dbff711512f83bf3014158a931ea8acf167d4523a913bb436899d17b97ae8edd50aa3e0e", 0xd4}, {&(0x7f0000000600)="0bdec532231e0b4821637f92f33a4f796e96a85267800c79b4476b0b7ddf2b7f6ed454793ef98ce8cba1ed5ffa81101443ae29241604a39fbbbd36a6c56b17346eee0503558ddb964c4c1512e8ba3b9ebc0518ede18e93f5658827a9b599f6f59bf0da7e6f22da1c8b2824bc00e4b811ec6160e4865f", 0x76}], 0x3) (async) getdents(r0, &(0x7f0000000400)=""/108, 0x6c) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859}}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) r6 = accept4(r5, 0x0, 0x0, 0x800) (async) pwritev(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bc949377a01c2d322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c6069395793", 0xa5}, {&(0x7f0000000880)="3ed8269a24bf45844c983ea0eeeb58f212eeac22d35800c1a94b360b7b20a38c4009daad6421963cbcd5621f4aa4892eb9937191078bfbceee60ee759765c992659367fc8bd35cf5d87272d4c4bbccb6fe258a2bc4cf778776b91c3e1da4690fe0506ba67577475d", 0x68}, {&(0x7f00000006c0)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a24", 0x3b}, {&(0x7f0000000700)="741f5b18def5626f94488e0226f355f40b503367000000000000", 0x1a}, {&(0x7f0000000a80)}, {&(0x7f0000000540)="5bb34a3a98078882a797391d4c85a6d5575b49a3d3444894816d354b7212b0e22223b2590251c1a9549cc9dd173c2eb660727ac6726fb0", 0x37}, {&(0x7f0000000900)="76e28e50ace853e1917eb48f37b5f3576cec3ac6dc80d691004c6c297e6df7c9fa937ed60b3053812ca0937a7db54b11d0c7bd83eda0dbbab62f14debc0ef0745489499f8367175a634b45360516eef3cc3f3ffd68a2b5d617f707b10a94", 0x5e}, {&(0x7f0000000c80)="bea32066c702483bbdf476769730b40118066f49924431ef5b2d24e2b81b3bf614e6bd24ec3827ffee94ea654022394e94dea31f2d0149936bd49bc8e11eea7c43c1a0711631e01af8effcedb33a2af7808e77a6d68d450736e3960c2134775304deb7e3bc2548b712e4f1b8df2aecc7434a29ce6b8c514f96021368518b50953586070dda6828ec3f5f0455d2c80a89510106760b2813b914c7e86347f354dd91294b4e5c21678bc9ffe6e29c9f43b209fe75e4bb42d49a0f343d5abb1779f8", 0xc0}], 0x9, 0x4d9e, 0x8) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000680)="650f340f350f20e035080000000f22e00f00d8b8050000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x34}], 0x1, 0x58, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4m54.332786489s ago: executing program 7 (id=5063): syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0xfffffffc, 0x13580}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100003040000000004000000000074003c99877ba4608faf09a5fdcaf66c52b514e5bb53382cfb7882fc42ec9cb19653c3eb5cb4266c4ea416f7a3459a34fd7de3cc1fbc30d17a9d54fee3c15e98", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) r0 = socket(0x400000000010, 0x6, 0x8000) (rerun: 32) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 4m54.33178157s ago: executing program 7 (id=5065): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000d40)=0xfffffffe, 0x4) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/241, 0xf1}, {&(0x7f0000000300)=""/219, 0xdb}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000000)=""/5, 0x5}], 0x4, 0x9cdb, 0xe4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x7c3d, r1, 0x4}, 0x38) poll(&(0x7f0000000000), 0x0, 0x1) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 4m53.877166778s ago: executing program 7 (id=5079): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x5da1, 0x6efa, 0x8, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="c3", 0x1}], 0x1}}], 0x1, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000bdb000/0x3000)=nil, 0x3000, &(0x7f0000000040)='&\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="090000000e0000000500000001"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x20) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x1400) unlink(&(0x7f00000002c0)='./file0\x00') mount$tmpfs(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4m53.545101445s ago: executing program 7 (id=5088): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1100, 0x40}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x3, 0xe56, 0x1, 0x3ca}}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r2, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000000)=[@request_death, @decrefs], 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) mq_notify(r6, &(0x7f0000000080)={0x0, 0x20, 0x2, @tid=r7}) flock(r0, 0x1) 4m53.33090382s ago: executing program 7 (id=5092): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14}}, 0xa4}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000000)) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x7d4165c9) listen(r5, 0x0) r7 = fsopen(&(0x7f0000000040)='befs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000180)='iocharset', 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r9, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x16, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 4m53.237505763s ago: executing program 37 (id=5092): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14}}, 0xa4}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000000)) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x7d4165c9) listen(r5, 0x0) r7 = fsopen(&(0x7f0000000040)='befs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000180)='iocharset', 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r9, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x16, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2m17.025912085s ago: executing program 4 (id=7243): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setreuid(0x0, 0xee00) ioctl$KDSETLED(r0, 0x4b32, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r2, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) 2m17.024009152s ago: executing program 4 (id=7245): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000002d, &(0x7f0000000200)=0xb1e0, 0x4) socket$l2tp(0x2, 0x2, 0x73) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 2m17.010137634s ago: executing program 9 (id=7246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x100) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r1, 0x300, 0x70bc2d, 0x21dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008850}, 0x40000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) 2m16.94560793s ago: executing program 4 (id=7247): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r2, r5) (async) dup2(r2, r5) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) (async) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r4], 0x9) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r4], 0x9) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000500050001000000080004000000000005000600000000000800030001000000"], 0x34}}, 0x0) 2m16.817365702s ago: executing program 4 (id=7248): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000001400)="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", 0x75b}, {&(0x7f0000000600)="bbc6351d5b17d69316ec14fbebe6d4f456979602ad91ae24f9a1da6834e77a49a31a836afb32294cf8453b100f60525874c6dd34f59950a10b18499cd72145cf42ccb624e515", 0x46}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed2", 0x13}, {&(0x7f00000006c0)="2219a8d1a15d2cc1d9f7e487ed6138173c17bebef35e5c7319", 0x19}, {0x0}], 0x6}, 0x800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x94, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_b, @from_mac=@device_b}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1000, 0x1, 0x7, 0x0, {0x8, 0x80, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x300, 0x0, 0x1}}, @void, @void, @void, [{0xdd, 0x6, "069835fd3962"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1d}]}]}, 0x94}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000002780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)={0x68, r3, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_DATA={0x39, 0xc5, "10029d03c50fb32e45c4b74ddf91faeded1feab1e484b3ef04ef60a5051da1ec0b85a3907bf02f3cdc17f472425701aed122988dc5"}]}, 0x68}, 0x1, 0x0, 0x0, 0x480d4}, 0x8041) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0008df2512000000180001801400020077673000000000000000000000000000080006000f0200000801b49c36f3009de400060007000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0xc96) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a0103"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r10, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r10, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r11 = socket(0xa, 0x3, 0x3a) recvmmsg(r9, &(0x7f0000002540)=[{{&(0x7f00000003c0)=@isdn, 0x80, &(0x7f0000000200)=[{&(0x7f0000000440)=""/151, 0x97}], 0x1, &(0x7f0000000600)=""/172, 0xac}, 0x2}, {{&(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/190, 0xbe}, {&(0x7f0000000800)=""/249, 0xf9}, {&(0x7f0000000900)=""/92, 0x5c}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/180, 0xb4}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/242, 0xf2}, {&(0x7f0000001c00)=""/69, 0x45}], 0x8, &(0x7f0000001d00)=""/134, 0x86}, 0x200000}, {{&(0x7f0000001dc0)=@caif=@util, 0x80, &(0x7f0000002140)=[{&(0x7f0000001e40)=""/188, 0xbc}, {&(0x7f0000001f00)=""/182, 0xb6}, {&(0x7f0000001fc0)=""/131, 0x83}, {&(0x7f0000002080)=""/155, 0x9b}, {&(0x7f0000000500)=""/16, 0x10}], 0x5, &(0x7f0000000580)=""/53, 0x35}, 0x1}, {{&(0x7f00000021c0)=@generic, 0x80, &(0x7f0000002400)=[{&(0x7f0000002240)=""/159, 0x9f}, {&(0x7f0000002300)=""/32, 0x20}, {&(0x7f0000002340)=""/172, 0xac}], 0x3, &(0x7f0000002440)=""/225, 0xe1}, 0x8}], 0x4, 0x12023, &(0x7f0000002640)) r12 = openat$pmem0(0xffffffffffffff9c, &(0x7f00000009c0), 0x42800, 0x0) ioctl$BLKREPORTZONE(r12, 0xc0101282, &(0x7f0000001300)={0x7}) setsockopt$MRT6_ADD_MFC(r11, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r11, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYRESHEX=r0, @ANYRES8=r0], 0xac}, 0x1, 0x0, 0x0, 0x4040051}, 0x0) 2m16.816114577s ago: executing program 4 (id=7251): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r3, &(0x7f00000002c0)=""/106, 0x6a) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xff0a, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x6) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) close_range(r1, r2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) fstat(r6, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r8 = syz_open_dev$vcsn(&(0x7f0000000100), 0xa4, 0x210200) ioctl$TFD_IOC_SET_TICKS(r8, 0x40085400, &(0x7f0000000140)=0x3) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01010000000000ff", @ANYRES32=r7, @ANYBLOB="04004600050034006e000000080026006c090000140051801000008009000100dba06c8914000000"], 0x44}, 0x1, 0x0, 0x0, 0x20007040}, 0x20004840) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x2000080, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00'/10, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r10, 0x810c9365, 0x0) 2m16.069243827s ago: executing program 9 (id=7266): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0xf6ff, 0x0) 2m15.984761254s ago: executing program 9 (id=7267): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000140)) openat$kvm(0xffffffffffffff9c, 0x0, 0x800001, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010029bd8c00fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="331900000300000014001680100001800c0009000180000000000000050021"], 0x3c}}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e25, 0x68, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0xfffefffd}}], 0x18}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r9 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x4, 0x12, {0x0, "f1b9a81697008d68a0328c49d2ee"}}]}, 0x30}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r9, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r8, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x44, r6, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "cdb5850bf681a8f418735a75d8b8105e"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4e}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m15.602083862s ago: executing program 9 (id=7271): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r4, r5, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r5], 0x50) r6 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x24, 0x14, 0x105, 0x70bc26, 0x25dfdb7b, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "053e3e71ed07348ace"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r9 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000680)={0x1, 0x0, 0x98, &(0x7f0000000000)={0xfffffffffffffffd, 0x40000, 0xa}}) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r10, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) 2m15.474369072s ago: executing program 9 (id=7272): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) (async) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000c00)=ANY=[@ANYBLOB="ffffffffffaaaaaaaaaabb86dd6000000800303afffe8000110000000000000000000000aaff0200000000000000000000000000018700907800000000fe8000000000000000000000000000aa0e02000000000000000000000000000101012025b07f3c5800"], 0x0) 2m15.2405032s ago: executing program 4 (id=7275): r0 = syz_open_dev$dmmidi(&(0x7f0000000180), 0xfff, 0x301300) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0xfffd, 0x0, 0x0, "e872185081e6c67e"}) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0x108000) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000002c0)=0xe, 0x0) (async) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x100}, {r1, 0xa406}, {r2, 0x8020}, {0xffffffffffffffff, 0x84}, {r3, 0x1000}, {r4, 0x400}], 0x6, &(0x7f0000000340)={0x77359400}, &(0x7f0000000400)={[0x7]}, 0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getuid() (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000100001001e000000000000010500000a3c0000001d0a090000000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) syz_emit_ethernet(0x56, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@canfd={0xd, {{0x4}, 0x17, 0x2, 0x0, 0x0, "8074e7482231adfe1c4f561997927740751e46ecfe041c141163343a78ecbcd8a53a7060bc45e0a92e9090cd2588259fb8d06a2997938c25c9138926fb12a9b6"}}}}, &(0x7f0000000080)={0x0, 0x3, [0xef4, 0x181, 0x1e1, 0x66a]}) 2m15.03804018s ago: executing program 9 (id=7276): r0 = syz_io_uring_setup(0x3ae3, &(0x7f0000000540)={0x0, 0x9b34, 0x20, 0x1, 0x121}, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_setup(0x4f8c, &(0x7f0000000000)={0x0, 0xb2d0, 0x400, 0x2, 0x333, 0x0, r0}, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r2 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000640)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x5}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="01b6fb8f71c41506544e01272ead2a5de686002dd2bbba3f78122fbbf07b63061ea0a2e7", 0x24}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)="478e18d1e1a3351cbd48e345a84e705cc01bdeacd1e76b8fc5c9afe00b13414134eddef24578c82059dff7926b0c84c03da6a9d113aa921bca07453e8527413b50d97e8c7decd97f562027a6eda6d06784f6446f8c8fb8379e9790a449a4fbc9f15bdf79b00eb58ba82a0fed2ade4100ed", 0x71}, {&(0x7f0000000600)="a6e19b3d9f0a3040bae7664a747c5e02c5058ec2643170d91ef26bdf9f183f9deb7cf82552660019086bf41b35d3f39a297f30dcb167ed38884d8d7618306fde3a5ae22d6647c9be1f51b8362255de32b08c121684ae755f64ef246a7010821b5a69702282f38053cea90d575552708c1ea9d7d3fe23987f7cc9ea23b2cac7740a10a830ad1b57d2d91da88948232cf84ff94e29260622d2654db1054e74b6b7f798bd9694b52cb16a60a722eb5ee443097735573b41bea8bca7613d501a5fd58bf43120a04eba07c6e5a0168eb7ee9b672435fc3bfc6d93dbf6464ce7c77dc1196a9b018df3328c040a1fcbd6b5e4ee0233dadf2a9327", 0xf7}, {&(0x7f0000000240)="f84079d4d1afb7ba732b8b70a8e0e03a68b17b3f993704ab2df8ae", 0x1b}], 0x3}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)="e9fc268253698143627ee9abcaf8b53e19194a2bf7132dd291ddb7549fb8006be52514048110579f65379eb7aaf847e2ee7a3cba3626cd1f9d09e6a9f08eb761e0d9c43f63a0c70dd2a9ca212777dab0b920c882ab325811cd39e6fb20c9733cf14c70678ddbff995e644f86584a7038db", 0x71}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a00)="47cc6fd13bf55a8a3c60100a8f31e7f9664b6fb0aedc8ecc89", 0x19}, {&(0x7f0000000a40)="ce8fb6ac9cfbf16b0aaa8b18131da95a22d2831ebcb1357ee0cc921784f47a75e6d98c9f71b5a2f35354bb8645afed648a2d30d35dcd6617d9a0550e9a0d473d53fca0e9175cebca8f1f404001b69184e3ed6e6febde0c1134032c17507271cabb018e1cf38481e7c6d401c065f8a2ef2e171c28c82292d06cb5427f860da1f7ee2eafcdde63f0659c", 0x89}, {&(0x7f0000000b00)="bc205d680252d6fc55b542475cf419d272755560d61d2d811755cb7dab917b39ace26f13fa5ecd375c76315ed4e70a42c0cef2fba0904dc8514af16f87f4b85564994e78e256d237d92935c50b620edf39f05a7340f06347cb3b314a0d0ba04dbded99f667ec0ea41a3c671b3fd4ddeba8b7876ddf957dad5a87c7b6075fe9c5aaa6780b461fb4e418a1768523d4c94aa37bd77862b8fe42adfb78a0bc941adbc7d34416f40872fce9fc99ec0d989480b7671352dd449aa6", 0xb8}, {&(0x7f0000000bc0)="9cf2be5074eaf644e9632c24c48f6e983f8879a91dcc62f7c3f29d7a4664094d8c48bea0c79b29d3ef871c19a02eb5f9df5297554f0d5658250d1ee4f575f78262a5b634b71219809bc597eeea6b57fea1fd24730640537b9ab0e40c7e107dec20f120dc0a00d9b26d442717fcc3e603545473e447080b33cfda836eef5e48bdd29dd25dc143528682f2c37768d6c76c95ab098a0b932f91b9", 0x99}, {&(0x7f0000000c80)="1841ac659f7a35bc27c61ead7f9a91de6290c6fb439c852aab02ad11c77e7f109887c5debef4", 0x26}], 0x5}}], 0x4, 0x48803) sendmmsg(r3, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)='T', 0x1}], 0x1}}], 0x1, 0x4000005) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x2000, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010101, @private=0xa010101}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) splice(r5, 0x0, r6, &(0x7f00000002c0)=0xe, 0xffff, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000140)=0x7ffff, 0x4) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, 0x0, 0x0) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 2m14.9652758s ago: executing program 38 (id=7276): r0 = syz_io_uring_setup(0x3ae3, &(0x7f0000000540)={0x0, 0x9b34, 0x20, 0x1, 0x121}, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_setup(0x4f8c, &(0x7f0000000000)={0x0, 0xb2d0, 0x400, 0x2, 0x333, 0x0, r0}, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r2 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000640)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x5}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="01b6fb8f71c41506544e01272ead2a5de686002dd2bbba3f78122fbbf07b63061ea0a2e7", 0x24}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)="478e18d1e1a3351cbd48e345a84e705cc01bdeacd1e76b8fc5c9afe00b13414134eddef24578c82059dff7926b0c84c03da6a9d113aa921bca07453e8527413b50d97e8c7decd97f562027a6eda6d06784f6446f8c8fb8379e9790a449a4fbc9f15bdf79b00eb58ba82a0fed2ade4100ed", 0x71}, {&(0x7f0000000600)="a6e19b3d9f0a3040bae7664a747c5e02c5058ec2643170d91ef26bdf9f183f9deb7cf82552660019086bf41b35d3f39a297f30dcb167ed38884d8d7618306fde3a5ae22d6647c9be1f51b8362255de32b08c121684ae755f64ef246a7010821b5a69702282f38053cea90d575552708c1ea9d7d3fe23987f7cc9ea23b2cac7740a10a830ad1b57d2d91da88948232cf84ff94e29260622d2654db1054e74b6b7f798bd9694b52cb16a60a722eb5ee443097735573b41bea8bca7613d501a5fd58bf43120a04eba07c6e5a0168eb7ee9b672435fc3bfc6d93dbf6464ce7c77dc1196a9b018df3328c040a1fcbd6b5e4ee0233dadf2a9327", 0xf7}, {&(0x7f0000000240)="f84079d4d1afb7ba732b8b70a8e0e03a68b17b3f993704ab2df8ae", 0x1b}], 0x3}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)="e9fc268253698143627ee9abcaf8b53e19194a2bf7132dd291ddb7549fb8006be52514048110579f65379eb7aaf847e2ee7a3cba3626cd1f9d09e6a9f08eb761e0d9c43f63a0c70dd2a9ca212777dab0b920c882ab325811cd39e6fb20c9733cf14c70678ddbff995e644f86584a7038db", 0x71}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a00)="47cc6fd13bf55a8a3c60100a8f31e7f9664b6fb0aedc8ecc89", 0x19}, {&(0x7f0000000a40)="ce8fb6ac9cfbf16b0aaa8b18131da95a22d2831ebcb1357ee0cc921784f47a75e6d98c9f71b5a2f35354bb8645afed648a2d30d35dcd6617d9a0550e9a0d473d53fca0e9175cebca8f1f404001b69184e3ed6e6febde0c1134032c17507271cabb018e1cf38481e7c6d401c065f8a2ef2e171c28c82292d06cb5427f860da1f7ee2eafcdde63f0659c", 0x89}, {&(0x7f0000000b00)="bc205d680252d6fc55b542475cf419d272755560d61d2d811755cb7dab917b39ace26f13fa5ecd375c76315ed4e70a42c0cef2fba0904dc8514af16f87f4b85564994e78e256d237d92935c50b620edf39f05a7340f06347cb3b314a0d0ba04dbded99f667ec0ea41a3c671b3fd4ddeba8b7876ddf957dad5a87c7b6075fe9c5aaa6780b461fb4e418a1768523d4c94aa37bd77862b8fe42adfb78a0bc941adbc7d34416f40872fce9fc99ec0d989480b7671352dd449aa6", 0xb8}, {&(0x7f0000000bc0)="9cf2be5074eaf644e9632c24c48f6e983f8879a91dcc62f7c3f29d7a4664094d8c48bea0c79b29d3ef871c19a02eb5f9df5297554f0d5658250d1ee4f575f78262a5b634b71219809bc597eeea6b57fea1fd24730640537b9ab0e40c7e107dec20f120dc0a00d9b26d442717fcc3e603545473e447080b33cfda836eef5e48bdd29dd25dc143528682f2c37768d6c76c95ab098a0b932f91b9", 0x99}, {&(0x7f0000000c80)="1841ac659f7a35bc27c61ead7f9a91de6290c6fb439c852aab02ad11c77e7f109887c5debef4", 0x26}], 0x5}}], 0x4, 0x48803) sendmmsg(r3, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)='T', 0x1}], 0x1}}], 0x1, 0x4000005) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x2000, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010101, @private=0xa010101}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) splice(r5, 0x0, r6, &(0x7f00000002c0)=0xe, 0xffff, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000140)=0x7ffff, 0x4) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, 0x0, 0x0) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 1m58.362546352s ago: executing program 39 (id=7275): r0 = syz_open_dev$dmmidi(&(0x7f0000000180), 0xfff, 0x301300) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0xfffd, 0x0, 0x0, "e872185081e6c67e"}) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0x108000) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000002c0)=0xe, 0x0) (async) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x100}, {r1, 0xa406}, {r2, 0x8020}, {0xffffffffffffffff, 0x84}, {r3, 0x1000}, {r4, 0x400}], 0x6, &(0x7f0000000340)={0x77359400}, &(0x7f0000000400)={[0x7]}, 0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getuid() (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000100001001e000000000000010500000a3c0000001d0a090000000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) syz_emit_ethernet(0x56, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@canfd={0xd, {{0x4}, 0x17, 0x2, 0x0, 0x0, "8074e7482231adfe1c4f561997927740751e46ecfe041c141163343a78ecbcd8a53a7060bc45e0a92e9090cd2588259fb8d06a2997938c25c9138926fb12a9b6"}}}}, &(0x7f0000000080)={0x0, 0x3, [0xef4, 0x181, 0x1e1, 0x66a]}) 5.24250227s ago: executing program 8 (id=9055): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000000), 0x619, r2}, 0x38) r3 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r4, &(0x7f0000006800)="10", 0x1) r5 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x80001021, 0x80, 0x7, 0x110}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r5, 0x6e2, 0xc49, 0x1, 0x0, 0x0) write$char_usb(r4, 0x0, 0x0) syz_usb_disconnect(r3) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00'}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000005c0)={[0x10009, 0x8, 0x7, 0x4000000080000e52, 0x1, 0x1, 0x1043, 0x200000000006, 0x4, 0x5, 0x1, 0x100000000, 0x800000000000001, 0x40000000008, 0x8000000000005, 0x800040066], 0x0, 0x40110}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3.080529096s ago: executing program 6 (id=9078): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000240)=0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000340)={0x0, 0xe3}, &(0x7f0000000400)=0x8) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000002c0)={0x10000000000000cf, 0x0, [{0x40000107, 0xbc9faef6, 0x10003a}]}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="180000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x30, 0x10, 0xc01, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xea43}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x4000000) r12 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r12, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000340)=[r13, r14, r14], 0x3, 0x80000}) socket$inet_udp(0x2, 0x2, 0x0) write(r0, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf08000100050100000800028001000000", 0x24) 2.791660128s ago: executing program 6 (id=9080): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) recvfrom$netrom(r2, &(0x7f0000000640)=""/234, 0xea, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b13f8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0xd8, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_USERDATA={0xc4, 0x6, "954fdd2d9e3d87cf521bedfd07d83ede6758ebc1eb01c86aac5d69de6980bb6f876c5d45a64f45651c78acea24c069f44d236d3e3fe847952f4ceefb1f9782a867a6c5cf2d164853e9e2cf6644418f9a4a2764302feaeedc44670d0c80541e4dab69348809e9f5c4948c78b4756498cb28fe827998ab3821db61323dbf85dc64f870c13064f6362ec4f3b5a3eb1b8a53807aa679a4fa690c61446c151088a498295945a8487f9ffc4d4e491ea64373b84a6a3cee61b15c590c66f1299b8933d3"}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_DELSET={0x5c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_EXPRESSIONS={0x48, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @reject={{}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}]}], {0x14}}, 0x89}, 0x1, 0x0, 0x0, 0xc9}, 0x0) capset(&(0x7f0000000080)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000100)={0x8, 0x1400000, 0x10000, 0x6, 0xfffeffff, 0x7}) 2.728494533s ago: executing program 6 (id=9082): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xbdae, 0x10, 0x0, 0x30f}, &(0x7f0000000500)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000040)=[r1], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000200)={{0x80000000, 0x0, 0xf5a1c2b8e98148d, [0x6, 0xfe]}, {0x80000000, 0x0, 0x7, [0x4, 0xb]}, 0x2, [0x5, 0x84000000]}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x10, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x21, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f00000001c0)={0xa, 0x1, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)="8f", 0x1}], 0x1}}], 0x1, 0x4004) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xbdae, 0x10, 0x0, 0x30f}, &(0x7f0000000500), &(0x7f0000000140)) (async) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000040)=[r1], 0x1) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000200)={{0x80000000, 0x0, 0xf5a1c2b8e98148d, [0x6, 0xfe]}, {0x80000000, 0x0, 0x7, [0x4, 0xb]}, 0x2, [0x5, 0x84000000]}) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x10, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) (async) io_uring_enter(r2, 0x47bc, 0x0, 0x21, 0x0, 0x0) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) (async) sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f00000001c0)={0xa, 0x1, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)="8f", 0x1}], 0x1}}], 0x1, 0x4004) (async) 2.664834681s ago: executing program 6 (id=9083): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000019400)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x6, 0x3}, 0x0, 0x0, 0x4, 0x2, 0xffffffffffff8000, 0x4, 0x4b}}], 0x58}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='wchan\x00') ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x400000, 0x3, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002d74e508fedbdf252100000032c36a1ec1fa5b37"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x810) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x84}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) 2.51558014s ago: executing program 6 (id=9086): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{r0, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) setgroups(0x0, 0x0) (async) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r4) (async) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x4) 2.514422113s ago: executing program 6 (id=9087): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_user(r2, &(0x7f00000000c0)={'system_u:object_r:syslogd_initrc_exec_t:s0', 0x20, 'staff_u\x00'}, 0x33) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r3], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$igmp(0x2, 0x3, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$selinux_user(r2, &(0x7f00000000c0)={'system_u:object_r:syslogd_initrc_exec_t:s0', 0x20, 'staff_u\x00'}, 0x33) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'}) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r3], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) (async) 2.236772429s ago: executing program 8 (id=9089): r0 = memfd_create(&(0x7f0000000a40)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x06t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\x04n0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81\xbd\xd5\x00\x00C6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x1c\xd11\xfc\xa7\x93E\xff\xff\xd0\xac\b\x01\x10\xcc\xcd\x9a0\xd83\xb6\r\xbb\xe1u_KUd3l\x862\xa8I\xa7\x8f\xfb\xed\xdbn\xbd\xbe\xf0+a\xc8JC\x03:&9\xae\xb8\xd8TdMf[\x1c\n#\x87\xfc\x81O`\x19P\x142~|\xdf\xbc\xaf\xe4^\xac\xa5\xfbyy\xcb\f\x14}g\xa7\xc2\xe1\xa9\xdf\xbf\xdbV\x94:\xa6I\xa9\x15\x0f', 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000480)={0x7, 0x0, [{0x40000001, 0xffffffff, 0x1, 0xffffff89, 0xa, 0x3, 0x2}, {0x1, 0x4, 0x6, 0x8, 0x27, 0x7, 0xffb}, {0xb, 0x8, 0x0, 0x3ff, 0x7ffffdff, 0x8005, 0xfffd}, {0x80000019, 0xe5f, 0x1, 0x7, 0xdf1, 0x6, 0x80000001}, {0x80000000, 0x2bb, 0x1, 0xd, 0x3, 0x7ff, 0x400}, {0x80000000, 0x7, 0x4, 0x6, 0x3, 0x2, 0x3}, {0x2, 0x2, 0x0, 0xfffffff7, 0xfffffffa, 0xff, 0x6}]}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) 1.257445552s ago: executing program 1 (id=9097): r0 = socket(0x10, 0x3, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r1, &(0x7f00000006c0)=[{0xf, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @raw8}], 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000340)=@newqdisc={0x148, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff6}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x1, 0x0, 0x80000, 0x0, 0x0, 0x2, 0x3}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x8000) 1.256469664s ago: executing program 1 (id=9098): syz_emit_ethernet(0xc4, &(0x7f0000000240)={@broadcast, @empty, @val={@val={0x88a8, 0x4, 0x1, 0x4}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x86, 0x3c, 0x0, @mcast2, @mcast2, {[@hopopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @private2}, @hao={0xc9, 0x10, @private1}]}], {0x0, 0x0, 0x56, 0x0, @gue={{0x2}, "a6aef52baabb4cad326948ed86806b9334a2efde8116886a64ec49951f0d4d2d9bcd28704b959b43e545fa4636cde29f9bd7944b14db0e4258840678e2ec0572a6dcdaeb76fd"}}}}}}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) r1 = gettid() sigaltstack(&(0x7f00000000c0)={&(0x7f0000002400)=""/4095, 0x0, 0xfff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) rt_sigqueueinfo(r1, 0x21, &(0x7f0000000000)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1.204397624s ago: executing program 1 (id=9099): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a000000560000004200000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000280), 0xffff, r0}, 0x38) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0xc0042, 0x80) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYRES16=0x0, @ANYRES8=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x8048895) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) 935.566218ms ago: executing program 8 (id=9101): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) write$sndseq(r0, &(0x7f0000000300)=[{0x84, 0x77, 0x0, 0x0, @time={0x8, 0x80}, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick, {0xfd}, {}, @note={0x81}}, {0x6, 0x3, 0x9, 0xff, @time={0x10000, 0x4}, {0x10, 0x5}, {0xc, 0x2}, @time=@time={0x5, 0x2000b436}}, {0x0, 0x3, 0xa, 0x4, @tick, {0xbb, 0x3}, {0xdb}, @result={0x5, 0xc}}], 0x70) 934.999604ms ago: executing program 8 (id=9102): r0 = socket(0x1, 0x2, 0x1) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x8102) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) writev(r1, &(0x7f0000001500)=[{&(0x7f0000000000)="47ad3d32240000006bdb74ecb9f7c342cc2c008d3ec3c2d2d5bbf6a4e41419ec3dc11a4f85980084665ea561e52d97fbe9e839a0", 0x34}], 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000200)={0x7, 'bridge_slave_1\x00', {}, 0x2}) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000240)={0x0, &(0x7f0000000580)=[@nested_load_syzos={0x136, 0x70, {0x1, 0x7a, [@nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @guest16=0x80e, 0x6, 0x73, 0x8}}, @nested_vmresume={0x130, 0x18, 0x1}]}}, @wr_crn={0x67, 0x20, {0x3, 0x3}}, @nested_amd_clgi={0x17f, 0x10}, @rdmsr={0x66, 0x18, {0xb5c}}, @nested_load_code={0x12e, 0x7a, {0x1, "3e440f01c1460f01b802000000b9f5090000b800980000ba000000000f30c441fe2cd8f30f8d000000000f0966b81b008ed8c7442400dd000000c7442402ae9c0519c7442406000000000f0114240fc72bb9ec0b0000b8679c0000ba000000000f30"}}, @nested_load_code={0x12e, 0x65, {0x3, "660fc7343d8b8e000066ba6100ecc4421dbaf766f3420fc733c4a325780eff3e656564470f79bca80f383975b9800000c00f3235008000000f30660f38809b19bfb3924184a1004000000f01f8"}}, @wr_drn={0x68, 0x20, {0x7, 0x10000}}, @cpuid={0x64, 0x18, {0x9}}, @out_dx={0x6a, 0x28, {0x3d02, 0x5, 0x4}}, @wrmsr={0x65, 0x20, {0x3a2, 0x4}}], 0x217}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x1}, 0x21, 0x0) landlock_restrict_self(r7, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1}, 0x6e) connect$unix(r5, &(0x7f0000000640)=@file={0x1}, 0x6e) r8 = socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x2c, r9, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x10000}]}, 0x2c}}, 0x20000) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000100)) getpid() openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x141a82, 0x12) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b503b) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f0000000140)={'trans=virtio,', {[{@version_u}]}}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000100)={0x41, 0x1, 0x0, "4749570000000000000000000e00000008000000000000001400"}) socket(0x10, 0x3, 0x0) 553.848055ms ago: executing program 1 (id=9108): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="030300000000000000003200000008000300", @ANYRES32=r5], 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c003e80f1d230082600001000d8c23b290000000000000000000005211791517659233d2ddc7d525f2389ee767f02a95cdb09ad8565a3255e696ed3bb2f3d605c4b1f9f505b132afb6fe8eac92673cd020dfdbd8473722270ded679bc0e70c15f3bb1a2fd768c07a8d0c2f7eedf76e37328e16506c908266a8e6143f37f7702000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000002001c0012800b00010062726964676500000c00028008001c0081000000"], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x2, 0x0, 0x98, &(0x7f0000000000)={0xb282, 0x7, 0xb}}) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)=ANY=[@ANYBLOB="02000080bc1d1a00616161616161616161616161616161616161616161616161616161616161616131e80c3131313131313131313131317231313131313131313131313131313131"], 0x48, 0xfffffffffffffffe) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x9d, 0x200003, 0x0, 0x0, 0x40000003}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x1, 0xffffffff, 0x0, &(0x7f0000000400)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f00000016c0)) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001800)=""/193, 0x0, 0x5000}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0, 0x0}) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) open_by_handle_at(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e000000090000000000000909000000000000000700000031b1f490a0b49cdd"], 0x1110a0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0x8}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xeeef0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) syz_kvm_setup_syzos_vm$x86(r10, &(0x7f000047a000/0x400000)=nil) socket$inet6_sctp(0xa, 0x1, 0x84) 500.892032ms ago: executing program 1 (id=9109): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r2, &(0x7f0000000440)=""/145, 0x91) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000006c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x6, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0x5}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) 435.446326ms ago: executing program 2 (id=9110): set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26, 0x0, 0x0, 0xfbc}, 0x28) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x1, 0x1}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r2}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@can_newroute={0x2c, 0x18, 0x1, 0x70bd26, 0x0, {}, [@CGW_MOD_AND={0x15, 0x1, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "32ba630f60057a49"}, 0x7}}]}, 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv6_newroute={0x7c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x80, 0x0, 0x0, 0xff, 0x2, 0x0, 0x0, 0x400}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x50, 0x16, 0x0, 0x1, @SEG6_LOCAL_SRH={0x4c, 0x2, {0x2b, 0x8, 0x4, 0x4, 0x6, 0x60, 0x8, [@loopback, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}]}, 0x7c}}, 0x0) 434.847843ms ago: executing program 2 (id=9111): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x64}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}]}, 0x34}}, 0x0) (async) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r5 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r6 = dup(r5) unshare(0x28000600) (async) ftruncate(r5, 0xdcb) (async) copy_file_range(r5, &(0x7f0000000100)=0xb76, r6, 0x0, 0x2aad109b, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@getchain={0x34, 0x66, 0x100, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0x7}, {0x10, 0xd}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000003"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000090c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000101400028006001900040000000500010002000000"], 0x44}}, 0x0) 341.337158ms ago: executing program 2 (id=9112): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r2, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1}) (async) syz_open_dev$evdev(&(0x7f0000000880), 0x9, 0x8000) (async, rerun: 32) r3 = syz_open_dev$swradio(&(0x7f0000000a80), 0x0, 0x2) (rerun: 32) ioperm(0x6, 0x1, 0x95d) (async) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) (async) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000ac0)={0x1, "12f7f538cc9ad9f769d66b3d1dd9cd911e9a080bd3ae2ae3ea00"}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 32) ioctl$DVD_READ_STRUCT(r0, 0x5390, &(0x7f0000000040)=@disckey={0x2, 0x0, "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"}) (rerun: 32) 340.820159ms ago: executing program 1 (id=9113): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) sendmsg$xdp(r1, &(0x7f00000007c0)={&(0x7f0000000180)={0x2c, 0xd, r2, 0x2a}, 0x10, &(0x7f0000000740)=[{&(0x7f00000001c0)="73acad084e6f2b3290443fa71c8b730b79ca62810a201467b9f12dcc15d36c2fb3a4cbd577e1727483a93a073b03136cae8749e0f82cb9a6a1503d1da2565520580952ce1403a948aeac8b5b90e3f9ddfc6c7e2e601addf2ff0d65b983039b998f4ffdc0b9fae15537ba8b8e6df30580df1e56de9d4167479ea538f5ecba4ef84ac2af76619b709b7febb39c0b32bc0fc07fcd4d8b03f71551656bc302f26f52ba75ef98b2fba88bbc06e83be53e6a2f69b7e1ad5973e0ed0f19ea9d78c56b90ad7c8badb4aa", 0xc6}, {&(0x7f0000000340)="f65ac32726c272539ec08555e4a7e341060831ef93e7ff1c984523a0ffbe285de45ef413ce6ab297a8c81d112b6030ec1a90bbb1fe2012c7a00ccf5e6a8943477305d2e87a9466f5965a1eeae2783925fc59f8492a16682fadf00fcd7dfbe2b9b4ea4a8f77a227229504e2c599f101f1fb90500dabd6b3ede7b348740cd5d783a338fc9d232f57a49dc2ecbd19386619b88f754bafa0745a930f080a07567289f2f2b78eb812e3d982ca00a8b56d72511a6b0b75445267e78dcb900ce69d60625b0051", 0xc3}, {&(0x7f0000000440)="ad4547bdb301980e87fd2493971a37f06c46dc3fdf719f157fd3dd65eb86eb4911fb2e0304fefd87302b78bffeb2", 0x2e}, {&(0x7f0000000480)="b22fea0c0b31257be4da6dff9e337cbcee09de2af176f2cd81ee601053b042b2278fefbc0798ae8e03aea4c5fbe9483089f411120b0ad3cf857ffc755a8481397d807d3b16d7fb62", 0x48}, {&(0x7f0000000500)="468673b68c7def7a32212575125642da723bbbd6401fe3f42175390e884d31227ff15f0f79be641554cad02263d66f77c782ee9c4a7f18babdb648450da3a33c07426f63bc536f381ccb4cc9ac83f7998dbb92eaa30351a6105be94cc8aa585fac01beba1a3fbc151a281e6e0f63b6bf088afae8c687a45841e11a2af01c8b21a70e88b101ef316ec3bcc68c3fb1a079a2a8e94c86b69715d2b7aae1bd34897f237b1314edd8c40aa0fa4f92148d3897e9ef2185d960f9efbcffe053bfebb6062df2b8f01867080e884d7378c4211ccf", 0xd0}, {&(0x7f0000000600)="2bc77e9e7f40c6611172b8348b6c4310c00231f4dd7bc0ffad00f36e71a6b76b3b02a6788cc30eb39590d66dbae1b4c4b3eaf05e2ed6aef7c50b7b1ae6480bf1046409099c2edcf5d43808b0050198fd2e2adee0684a051c1d508e55621213d95e2c110388b55489f9804734638a96eda134f34835cce816793228335fee0563822a5d5f3e9786548f111f88ca82084ff8df395d7091f3d32271c40351a8d71826eac730cce297230028c34d014f802d210a5c8c861ddad21c1becacdb2f52e53c9ee8a27ae3d0929d10e3ea9c16c5d840f1247883d3ecef10fa75c4ffcad21b886e81e8cc15a750c11c077fef", 0xed}, {&(0x7f0000000700)="04", 0x1}], 0x7, 0x0, 0x0, 0x40000}, 0x4000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000200)={0x0, 0x2, 0x1}) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x3}, 0x8) sendto$inet6(r0, &(0x7f0000000140)="9f", 0x34000, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000300)={r6, 0x6}, 0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r6, 0x8eb}, 0x8) 255.925794ms ago: executing program 2 (id=9114): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @random="ea6576681159", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x1}}, 0x4c) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) (async) socket$igmp(0x2, 0x3, 0x2) 255.56784ms ago: executing program 2 (id=9115): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@gettclass={0x24, 0x2a, 0x8, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xdbddf5f01e66ca3d, 0xfff2}, {0xffe0, 0x10}, {0xfff3, 0xa}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x10}, 0x20040846) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@gettclass={0x24, 0x2a, 0x8, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xdbddf5f01e66ca3d, 0xfff2}, {0xffe0, 0x10}, {0xfff3, 0xa}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x10}, 0x20040846) (async) 192.175191ms ago: executing program 2 (id=9116): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a000000560000004200000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000280), 0xffff, r0}, 0x38) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0xc0042, 0x80) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYRES16=0x0, @ANYRES8=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x8048895) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) 165.118µs ago: executing program 8 (id=9117): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) 0s ago: executing program 8 (id=9118): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440c0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000080)={{0x0, 0x0, 0xffffff3f, 0x2, 0x2}, 0x4, 0x8}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x13e) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28042, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={{r2}, 0x0, 0x0, 0x100000}) r3 = socket$inet(0x2, 0x1, 0x100) listen(r3, 0x9) listen(r3, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0xfe92, 0x12) kernel console output (not intermixed with test programs): parsing attributes in process `syz.6.8167'. [ 662.463325][ T1960] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 662.466304][ T1960] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 662.471071][ T1960] vhci_hcd vhci_hcd.0: Device attached [ 662.528564][ T1962] usbip_core: unknown command [ 662.530217][ T1962] vhci_hcd: unknown pdu 117440512 [ 662.532378][ T1962] usbip_core: unknown command [ 662.535112][ T7995] vhci_hcd vhci_hcd.2: stop threads [ 662.536813][ T7995] vhci_hcd vhci_hcd.2: release socket [ 662.538663][ T7995] vhci_hcd vhci_hcd.2: disconnect device [ 662.541554][ T40] audit: type=1326 audit(2000000018.351:62176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1964 comm="syz.6.8169" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f767ed9c629 code=0x0 [ 662.551025][ T40] audit: type=1400 audit(2000000018.351:62177): avc: denied { connect } for pid=1968 comm="syz.8.8170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 662.567864][ T1327] libceph: connect (1)[c::]:6789 error -13 [ 662.570174][ T1327] libceph: mon0 (1)[c::]:6789 connect error [ 662.647183][ T1981] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8169'. [ 662.840150][ T1327] libceph: connect (1)[c::]:6789 error -13 [ 662.843514][ T1327] libceph: mon0 (1)[c::]:6789 connect error [ 662.892014][ T1994] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8176'. [ 662.896909][ T40] audit: type=1400 audit(2000000018.688:62178): avc: denied { setopt } for pid=1993 comm="syz.2.8176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 662.933447][ T1996] netlink: 'syz.2.8177': attribute type 3 has an invalid length. [ 662.936999][ T1996] netlink: 'syz.2.8177': attribute type 1 has an invalid length. [ 662.976340][ T1996] comedi comedi4: bad chanlist[0]=0x00000049 chan=73 range length=1 [ 662.990511][ T40] audit: type=1400 audit(2000000018.782:62179): avc: denied { watch } for pid=1995 comm="syz.2.8177" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 662.991051][ T1996] afs: Unknown parameter '' [ 662.999962][ T40] audit: type=1400 audit(2000000018.782:62180): avc: denied { watch_sb watch_reads } for pid=1995 comm="syz.2.8177" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 663.105833][ T1999] x_tables: ip_tables: osf match: only valid for protocol 6 [ 663.394287][ T1327] libceph: connect (1)[c::]:6789 error -13 [ 663.396954][ T1327] libceph: mon0 (1)[c::]:6789 connect error [ 663.427964][ T1969] ceph: No mds server is up or the cluster is laggy [ 663.546104][ T40] audit: type=1400 audit(2000000019.298:62181): avc: denied { shutdown } for pid=2012 comm="syz.6.8183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 663.546396][ T2013] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 663.554985][ T2015] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 663.555792][ T2013] PKCS7: Only support pkcs7_signedData type [ 663.598251][ T2017] netlink: 'syz.2.8185': attribute type 18 has an invalid length. [ 663.613450][ T7995] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.613561][ T2017] netlink: 'syz.2.8185': attribute type 18 has an invalid length. [ 663.616921][ T7995] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.625671][ T7995] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.632370][ T7995] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.680726][ T2021] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 663.689566][ T40] audit: type=1400 audit(2000000019.430:62182): avc: denied { relabelto } for pid=2019 comm="syz.8.8186" name="349" dev="tmpfs" ino=1907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 663.700079][ T40] audit: type=1400 audit(2000000019.430:62183): avc: denied { associate } for pid=2019 comm="syz.8.8186" name="349" dev="tmpfs" ino=1907 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 663.738861][ T2027] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 663.742831][ T2026] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 663.774562][ T2026] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 663.780219][ T2026] overlayfs: failed to look up (tracing) for ino (-66) [ 663.785449][ T2026] netlink: 'syz.8.8188': attribute type 4 has an invalid length. [ 664.053170][ T2049] tmpfs: Cannot enable quota on remount [ 664.257273][ T1327] usb 11-1: new high-speed USB device number 45 using dummy_hcd [ 664.417544][ T1327] usb 11-1: Using ep0 maxpacket: 8 [ 664.429169][ T1327] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 664.432416][ T1327] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 664.436166][ T1327] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 664.446431][ T1327] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 664.451432][ T1327] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 664.454284][ T1327] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.464324][ T2062] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 664.472778][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 664.472794][ T40] audit: type=1400 audit(2000000020.171:62194): avc: denied { read } for pid=2061 comm="syz.2.8199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 664.674491][ T2047] validate_nla: 1 callbacks suppressed [ 664.674544][ T2047] netlink: 'syz.6.8194': attribute type 6 has an invalid length. [ 664.686366][ T1327] usb 11-1: GET_CAPABILITIES returned 0 [ 664.688304][ T1327] usbtmc 11-1:16.0: can't read capabilities [ 664.900879][ T2047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.906324][ T2047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.983994][ T831] usb 11-1: USB disconnect, device number 45 [ 665.403238][ T40] audit: type=1400 audit(2000000021.043:62195): avc: denied { mount } for pid=2084 comm="syz.8.8206" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 665.486001][ T40] audit: type=1400 audit(2000000021.118:62196): avc: denied { unmount } for pid=30591 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 665.542405][ T40] audit: type=1400 audit(2000000021.175:62197): avc: denied { read } for pid=2092 comm="syz.1.8208" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 665.545861][ T2093] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 665.567555][ T40] audit: type=1400 audit(2000000021.193:62198): avc: denied { read } for pid=2092 comm="syz.1.8208" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 665.603438][ T40] audit: type=1400 audit(2000000021.193:62199): avc: denied { read } for pid=2092 comm="syz.1.8208" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 665.615924][ T40] audit: type=1400 audit(2000000021.193:62200): avc: denied { read } for pid=2092 comm="syz.1.8208" name="/" dev="overlay" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 665.625854][ T40] audit: type=1400 audit(2000000021.193:62201): avc: denied { open } for pid=2092 comm="syz.1.8208" path="/148/file0" dev="overlay" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 665.635748][ T40] audit: type=1400 audit(2000000021.193:62202): avc: denied { read } for pid=2092 comm="syz.1.8208" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 665.645104][ T40] audit: type=1400 audit(2000000021.193:62203): avc: denied { read } for pid=2092 comm="syz.1.8208" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 665.691768][ T2111] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 665.694611][ T2110] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 665.695686][ T2111] bond0: (slave sit0): Error -95 calling set_mac_address [ 665.803442][ T2116] tipc: MTU too low for tipc bearer [ 665.917422][ T2126] kvm: kvm [2114]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 665.935525][ T2126] kvm: kvm [2114]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 665.941466][ T2129] netlink: 'syz.1.8221': attribute type 10 has an invalid length. [ 665.949509][ T2129] team0: Device vxcan1 is of different type [ 665.969243][ T2129] team0: Device gtp0 is of different type [ 666.080018][ T1327] usb 13-1: new high-speed USB device number 27 using dummy_hcd [ 666.252294][ T1327] usb 13-1: config 0 has no interfaces? [ 666.254854][ T1327] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 666.258847][ T1327] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.271513][ T1327] usb 13-1: config 0 descriptor?? [ 666.497800][ T53] usb 13-1: USB disconnect, device number 27 [ 666.575990][ T2143] netlink: 'syz.1.8225': attribute type 5 has an invalid length. [ 666.778088][ T2156] netlink: 'syz.6.8230': attribute type 4 has an invalid length. [ 666.781286][ T2156] netlink: 'syz.6.8230': attribute type 1 has an invalid length. [ 666.789104][ T2156] __nla_validate_parse: 16 callbacks suppressed [ 666.789119][ T2156] netlink: 228 bytes leftover after parsing attributes in process `syz.6.8230'. [ 666.805243][ T2156] xt_hashlimit: size too large, truncated to 1048576 [ 666.923288][ T2156] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.8230'. [ 666.932970][ T2156] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8230'. [ 666.943342][ T2172] netlink: 'syz.2.8235': attribute type 1 has an invalid length. [ 666.964395][ T2172] bond3: entered promiscuous mode [ 666.967135][ T2172] 8021q: adding VLAN 0 to HW filter on device bond3 [ 666.982779][ T2172] bond3: (slave bridge3): making interface the new active one [ 666.985736][ T2172] bridge3: entered promiscuous mode [ 666.996063][ T2172] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 667.301649][ T2189] netlink: 156 bytes leftover after parsing attributes in process `syz.8.8241'. [ 667.813929][ T2205] kvm: pic: non byte write [ 667.963417][ T2221] netlink: 'syz.1.8253': attribute type 1 has an invalid length. [ 667.966779][ T2221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 668.008471][ T2227] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8254'. [ 668.037812][ T2227] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2227 comm=syz.6.8254 [ 668.080712][ T2231] dlm: no locking on control device [ 668.109795][ T2233] netlink: 'syz.6.8256': attribute type 11 has an invalid length. [ 668.112736][ T2233] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8256'. [ 669.098158][ T2293] netlink: 'syz.1.8273': attribute type 39 has an invalid length. [ 669.099066][ T2288] erofs (device loop2): cannot find valid erofs superblock [ 669.208795][ T2295] ptrace attach of "/syz-executor exec"[31826] was attempted by " b\x0a\x0c ! \x07    ?j}6ٱĞ Dl\x0a9:$VQ\x09d'ZbWzr‘Q``V\x5c4fL\x0a6\x0az^k`q0ȟ [ 669.295409][ T2301] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 669.315160][ T2302] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8276'. [ 669.333297][ T2301] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 669.342405][ T2301] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 669.345539][ T2301] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 669.348861][ T2301] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 669.352831][ T2301] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 669.381928][ T2306] veth0_to_bond: entered allmulticast mode [ 669.390492][ T2306] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8277'. [ 669.415894][ T2308] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8278'. [ 669.587041][ T2315] loop2: detected capacity change from 0 to 7 [ 669.595086][T32001] Dev loop2: unable to read RDB block 7 [ 669.597249][T32001] loop2: AHDI p1 p2 [ 669.598885][T32001] loop2: partition table partially beyond EOD, truncated [ 669.601889][T32001] loop2: p1 start 1818582900 is beyond EOD, truncated [ 669.606498][ T2315] Dev loop2: unable to read RDB block 7 [ 669.609010][ T2315] loop2: AHDI p1 p2 [ 669.610753][ T2315] loop2: partition table partially beyond EOD, truncated [ 669.614366][ T2315] loop2: p1 start 1818582900 is beyond EOD, truncated [ 669.686542][ T2323] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8284'. [ 669.779993][ T2327] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 669.786477][ T2327] xt_ecn: cannot match TCP bits for non-tcp packets [ 669.836524][ T2332] vlan4: entered promiscuous mode [ 669.838609][ T2332] bridge0: entered promiscuous mode [ 669.862561][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 669.862576][ T40] audit: type=1400 audit(2000000025.218:62229): avc: denied { lock } for pid=2331 comm="syz.6.8287" path="socket:[181079]" dev="sockfs" ino=181079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 670.030290][ T2338] [U] [ 670.168217][ T40] audit: type=1400 audit(2000000025.509:62230): avc: denied { setattr } for pid=2373 comm="syz.2.8301" name="NETLINK" dev="sockfs" ino=181104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 670.399471][ T2385] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 670.484881][ T2387] binder: 2386:2387 ioctl c0306201 2000000003c0 returned -14 [ 670.525351][ T2390] loop5: detected capacity change from 0 to 2640 [ 670.530045][T32001] buffer_io_error: 485 callbacks suppressed [ 670.530057][T32001] Buffer I/O error on dev loop5, logical block 0, async page read [ 670.539288][ T2390] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 670.542538][T32001] Buffer I/O error on dev loop5, logical block 3, async page read [ 671.099175][ T2402] overlayfs: failed to resolve './file1': -2 [ 671.262209][ T2409] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 671.265447][ T2409] overlayfs: missing 'lowerdir' [ 671.267829][ T2410] block nbd6: not configured, cannot reconfigure [ 671.270043][ T2409] block nbd6: not configured, cannot reconfigure [ 671.300252][ T40] audit: type=1400 audit(2000000026.569:62231): avc: denied { read append } for pid=2411 comm="syz.6.8315" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 671.601928][ T2424] 8021q: adding VLAN 0 to HW filter on device bond4 [ 671.707790][T19632] usb 11-1: new high-speed USB device number 46 using dummy_hcd [ 671.879839][T19632] usb 11-1: config 0 has no interfaces? [ 671.881866][T19632] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 671.884871][T19632] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.890676][T19632] usb 11-1: config 0 descriptor?? [ 672.117352][T19632] usb 11-1: USB disconnect, device number 46 [ 672.466425][ T2440] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8213 sclass=netlink_xfrm_socket pid=2440 comm=syz.8.8322 [ 672.665316][ T2448] __nla_validate_parse: 5 callbacks suppressed [ 672.665334][ T2448] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8326'. [ 672.741728][ T829] usb 13-1: new full-speed USB device number 28 using dummy_hcd [ 672.925225][ T829] usb 13-1: config 0 has an invalid interface number: 251 but max is 0 [ 672.928382][ T829] usb 13-1: config 0 has no interface number 0 [ 672.930508][ T829] usb 13-1: config 0 interface 251 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 672.936863][ T829] usb 13-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 672.940085][ T829] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.942851][ T829] usb 13-1: Product: syz [ 672.944883][ T829] usb 13-1: Manufacturer: syz [ 672.946731][ T829] usb 13-1: SerialNumber: syz [ 672.950015][ T829] usb 13-1: config 0 descriptor?? [ 672.955802][ T829] asix 13-1:0.251: probe with driver asix failed with error -22 [ 673.053642][ T2461] overlayfs: failed to resolve './file0': -2 [ 673.107491][ T40] audit: type=1400 audit(2000000028.277:62233): avc: denied { setopt } for pid=2462 comm="syz.2.8332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 673.115627][ T40] audit: type=1400 audit(2000000028.277:62232): avc: denied { setopt } for pid=2462 comm="syz.2.8332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 673.126725][ T40] audit: type=1400 audit(2000000028.296:62234): avc: denied { watch watch_reads } for pid=2462 comm="syz.2.8332" path="/proc/637" dev="proc" ino=182186 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 673.136305][ T40] audit: type=1400 audit(2000000028.296:62235): avc: denied { watch watch_reads } for pid=2462 comm="syz.2.8332" path="/proc/637" dev="proc" ino=182186 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 673.161058][ T40] audit: type=1400 audit(2000000028.324:62236): avc: denied { append } for pid=2470 comm="syz.2.8334" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 673.224110][ T2468] x_tables: duplicate underflow at hook 1 [ 673.226567][ T40] audit: type=1400 audit(2000000028.380:62237): avc: denied { getopt } for pid=2466 comm="syz.1.8333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 673.267799][ T2478] netlink: 31 bytes leftover after parsing attributes in process `syz.1.8335'. [ 673.270736][ T2478] veth0_to_bond: entered allmulticast mode [ 673.276613][ T2478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8335'. [ 673.281119][ T2478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8335'. [ 673.901226][ T2489] kAFS: No cell specified [ 673.905035][ T2490] kAFS: No cell specified [ 673.931983][ T2493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8338'. [ 674.081279][ T53] libceph: connect (1)[c::]:6789 error -101 [ 674.083364][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 674.288285][ T2513] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=40150 sclass=netlink_tcpdiag_socket pid=2513 comm=syz.1.8343 [ 674.323435][ T2519] deleting an unspecified loop device is not supported. [ 674.362666][ T53] libceph: connect (1)[c::]:6789 error -101 [ 674.364794][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 674.417674][ T2528] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.8347'. [ 674.452467][ T2535] dns_resolver: Unsupported content type (234) [ 674.877214][ T2573] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8356'. [ 674.908286][ T53] libceph: connect (1)[c::]:6789 error -101 [ 674.910490][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 674.961715][ T2497] ceph: No mds server is up or the cluster is laggy [ 675.491691][T19632] usb 11-1: new high-speed USB device number 47 using dummy_hcd [ 675.668229][T19632] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.677855][T19632] usb 11-1: config 0 has no interfaces? [ 675.682104][ T10] usb 13-1: USB disconnect, device number 28 [ 675.684828][T19632] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.688924][T19632] usb 11-1: config 0 has no interfaces? [ 675.707483][T19632] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.711341][T19632] usb 11-1: config 0 has no interfaces? [ 675.716447][T19632] usb 11-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 675.719783][T19632] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 675.722912][T19632] usb 11-1: Product: syz [ 675.736711][T19632] usb 11-1: Manufacturer: syz [ 675.738468][T19632] usb 11-1: SerialNumber: syz [ 675.742435][T19632] usb 11-1: config 0 descriptor?? [ 675.944201][ T2633] siw: device registration error -23 [ 675.962710][ T2607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.971366][ T2607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.980916][ T2607] ip6gretap0: entered promiscuous mode [ 675.983738][ T2607] ip6gretap0: entered allmulticast mode [ 676.049107][ T829] usb 11-1: USB disconnect, device number 47 [ 676.084910][ T2644] netlink: 'syz.8.8376': attribute type 29 has an invalid length. [ 676.088766][ T2644] netlink: 'syz.8.8376': attribute type 3 has an invalid length. [ 676.092124][ T2644] netlink: 76 bytes leftover after parsing attributes in process `syz.8.8376'. [ 676.098170][ T2644] netlink: 'syz.8.8376': attribute type 2 has an invalid length. [ 676.178028][ T2648] netlink: 'syz.8.8378': attribute type 16 has an invalid length. [ 676.180517][ T2648] netlink: 'syz.8.8378': attribute type 17 has an invalid length. [ 676.194003][ T2648] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.307886][ T2655] overlayfs: failed to resolve './file1': -2 [ 676.440151][ T2662] Cannot find del_set index 4 as target [ 676.445721][ T2662] geneve2: entered promiscuous mode [ 676.447378][ T2662] geneve2: entered allmulticast mode [ 676.449376][ T8012] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 676.455687][ T8012] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 676.458401][ T8012] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 676.461083][ T8012] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 676.867442][ T2694] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8391'. [ 676.876059][ T40] audit: type=1400 audit(2000000031.804:62238): avc: denied { watch watch_reads } for pid=2695 comm="syz.6.8392" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 676.909972][ T40] audit: type=1400 audit(2000000031.842:62239): avc: denied { mounton } for pid=2697 comm="syz.1.8393" path="/202/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 676.924127][ T40] audit: type=1400 audit(2000000031.851:62240): avc: denied { unmount } for pid=31826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 676.989775][ T2717] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8397'. [ 677.499802][ T2728] netlink: 'syz.1.8401': attribute type 21 has an invalid length. [ 677.759957][ T2750] SET target dimension over the limit! [ 677.895609][ T2758] dvmrp0: entered allmulticast mode [ 678.421774][ T2793] SELinux: failed to load policy [ 678.712837][ T2820] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 678.793013][ T2824] __nla_validate_parse: 1 callbacks suppressed [ 678.793026][ T2824] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8427'. [ 678.915784][ T2834] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8430'. [ 678.945743][ T2838] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8431'. [ 678.949181][ T2838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=2838 comm=syz.6.8431 [ 678.962565][ T2838] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 679.056059][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880333f4000: rx timeout, send abort [ 679.059691][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff8880333f4000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 679.121299][ T2854] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8436'. [ 679.128475][ T2854] bond0: (slave nr0): Enslaving as an active interface with an up link [ 679.448924][ T40] audit: type=1400 audit(2000000034.225:62241): avc: denied { bind } for pid=2867 comm="syz.8.8438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 679.594877][ T2872] tmpfs: Unknown parameter 'grpquota_inode_ha' [ 680.051623][ T2899] veth0_to_team: entered promiscuous mode [ 680.056846][ T2899] gretap0: entered promiscuous mode [ 680.059429][ T2899] debugfs: 'hsr1' already exists in 'hsr' [ 680.061287][ T2899] Cannot create hsr debugfs directory [ 680.139596][ T10] libceph: connect (1)[c::]:6789 error -101 [ 680.141641][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 680.417873][ T10] libceph: connect (1)[c::]:6789 error -101 [ 680.420726][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 680.960280][ T10] libceph: connect (1)[c::]:6789 error -101 [ 680.962346][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 681.106345][ T2929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8454'. [ 681.110753][ T2929] Unknown options in mask b7f2 [ 681.121287][ T2929] macvtap1: entered promiscuous mode [ 681.123751][ T2929] macvtap1: entered allmulticast mode [ 681.126680][ T2929] mac80211_hwsim hwsim62 wlan0: entered allmulticast mode [ 681.129556][ T2929] mac80211_hwsim hwsim62 wlan0: entered promiscuous mode [ 681.135256][ T2929] team0: Device macvtap1 failed to register rx_handler [ 681.138994][ T2929] mac80211_hwsim hwsim62 wlan0: left allmulticast mode [ 681.142515][ T2929] mac80211_hwsim hwsim62 wlan0: left promiscuous mode [ 681.269056][ T2935] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8455'. [ 681.284622][ T2935] syzkaller0: entered promiscuous mode [ 681.287022][ T2935] syzkaller0: entered allmulticast mode [ 681.398300][ T2937] FAULT_INJECTION: forcing a failure. [ 681.398300][ T2937] name failslab, interval 1, probability 0, space 0, times 0 [ 681.403029][ T2937] CPU: 2 UID: 0 PID: 2937 Comm: syz.2.8456 Tainted: G L syzkaller #0 PREEMPT(full) [ 681.403058][ T2937] Tainted: [L]=SOFTLOCKUP [ 681.403063][ T2937] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 681.403071][ T2937] Call Trace: [ 681.403075][ T2937] [ 681.403080][ T2937] dump_stack_lvl+0x100/0x190 [ 681.403155][ T2937] should_fail_ex.cold+0x5/0xa [ 681.403193][ T2937] ? tomoyo_realpath_from_path+0xb6/0x690 [ 681.403230][ T2937] should_failslab+0xc2/0x120 [ 681.403248][ T2937] __kmalloc_noprof+0xe0/0x850 [ 681.403266][ T2937] tomoyo_realpath_from_path+0xb6/0x690 [ 681.403282][ T2937] tomoyo_path_number_perm+0x23c/0x580 [ 681.403299][ T2937] ? tomoyo_path_number_perm+0x22e/0x580 [ 681.403317][ T2937] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 681.403349][ T2937] ? find_held_lock+0x2b/0x80 [ 681.403380][ T2937] ? __fget_files+0x215/0x3d0 [ 681.403390][ T2937] ? hook_file_ioctl_common+0x146/0x410 [ 681.403408][ T2937] ? __fget_files+0x21f/0x3d0 [ 681.403421][ T2937] security_file_ioctl+0xd3/0x230 [ 681.403434][ T2937] __x64_sys_ioctl+0xb7/0x210 [ 681.403450][ T2937] do_syscall_64+0x106/0xf80 [ 681.403462][ T2937] ? clear_bhb_loop+0x40/0x90 [ 681.403475][ T2937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.403486][ T2937] RIP: 0033:0x7f8130f9c629 [ 681.403496][ T2937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.403507][ T2937] RSP: 002b:00007f8131eba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 681.403539][ T2937] RAX: ffffffffffffffda RBX: 00007f8131215fa0 RCX: 00007f8130f9c629 [ 681.403545][ T2937] RDX: 0000200000000100 RSI: 00000000c01064c4 RDI: 0000000000000003 [ 681.403552][ T2937] RBP: 00007f8131eba090 R08: 0000000000000000 R09: 0000000000000000 [ 681.403558][ T2937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.403565][ T2937] R13: 00007f8131216038 R14: 00007f8131215fa0 R15: 00007ffcb24249a8 [ 681.403579][ T2937] [ 681.407126][ T2937] ERROR: Out of memory at tomoyo_realpath_from_path. [ 681.580333][ T40] audit: type=1400 audit(2000000036.223:62242): avc: denied { read } for pid=2943 comm="syz.2.8458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 681.588101][ T2946] netlink: 'syz.1.8459': attribute type 1 has an invalid length. [ 681.600897][ T2946] 8021q: adding VLAN 0 to HW filter on device bond5 [ 681.613943][ T2946] bond5: (slave gretap1): making interface the new active one [ 681.618280][ T2946] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 681.625976][ T40] audit: type=1400 audit(2000000036.261:62243): avc: denied { ioctl } for pid=2945 comm="syz.1.8459" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 681.675440][ T40] audit: type=1400 audit(2000000036.317:62244): avc: denied { write } for pid=2943 comm="syz.2.8458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 681.698678][ T2956] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2956 comm=syz.1.8459 [ 682.039901][ T2976] ip6gretap0 speed is unknown, defaulting to 1000 [ 682.098540][ T2976] netlink: 'syz.8.8464': attribute type 4 has an invalid length. [ 682.102174][ T2976] netlink: 17 bytes leftover after parsing attributes in process `syz.8.8464'. [ 682.193658][ T2985] tmpfs: User quota inode hardlimit too large. [ 682.199099][ T40] audit: type=1400 audit(2000000036.805:62245): avc: denied { mount } for pid=2983 comm="syz.8.8466" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 682.221369][ T40] audit: type=1400 audit(2000000036.824:62246): avc: denied { unmount } for pid=30591 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 682.253223][ T10] libceph: connect (1)[c::]:6789 error -101 [ 682.255284][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 682.397050][ T3005] bond0: (slave nr0): Error: Device is in use and cannot be enslaved [ 682.403720][ T3005] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8470'. [ 682.408024][ T3005] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8470'. [ 682.411102][ T3005] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8470'. [ 682.482230][ T3010] overlayfs: missing 'lowerdir' [ 682.482791][ T3015] Context (ID=0x4d6) not attached to queue pair (handle=0x1:0xffffffae) [ 682.497017][ T3010] erspan0: entered promiscuous mode [ 682.512323][ T3015] ip6gretap0 speed is unknown, defaulting to 1000 [ 683.148613][ T3032] 8021q: VLANs not supported on ip6_vti0 [ 683.281356][ T10] libceph: connect (1)[c::]:6789 error -101 [ 683.284427][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 683.296404][ T2901] ceph: No mds server is up or the cluster is laggy [ 683.488185][T23802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 683.493145][T23802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 683.499606][T23802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 683.503546][T23802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 683.509955][T23802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 683.544385][T30876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 683.551204][T30876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 683.554170][T30876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 683.566687][T30876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 683.570254][T30876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 683.601308][ T3043] ip6gretap0 speed is unknown, defaulting to 1000 [ 683.733395][ T7997] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 683.738086][ T7997] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 683.764080][ T3043] chnl_net:caif_netlink_parms(): no params data found [ 683.852289][ T7997] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 683.856722][ T7997] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 683.870751][ T3043] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.873311][ T3043] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.875939][ T3043] bridge_slave_0: entered allmulticast mode [ 683.878952][ T3043] bridge_slave_0: entered promiscuous mode [ 683.889065][ T3043] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.891885][ T3043] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.895261][ T3043] bridge_slave_1: entered allmulticast mode [ 683.902739][ T3043] bridge_slave_1: entered promiscuous mode [ 683.947848][ T3043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.954044][ T3043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.020317][ T7997] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 684.024817][ T7997] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 684.069279][ T3043] team0: Port device team_slave_0 added [ 684.072811][ T3043] team0: Port device team_slave_1 added [ 684.089031][ T3043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.091452][ T3043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.101007][ T3043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.108083][ T3043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.110751][ T3043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.120175][ T3043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.137042][ T7997] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 684.140514][ T7997] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 684.175349][ T3043] hsr_slave_0: entered promiscuous mode [ 684.190727][ T3043] hsr_slave_1: entered promiscuous mode [ 684.354471][ T7997] batadv0: left allmulticast mode [ 684.356146][ T7997] batadv0: left promiscuous mode [ 684.358086][ T7997] bridge0: port 3(batadv0) entered disabled state [ 684.364220][ T7997] bridge_slave_1: left allmulticast mode [ 684.366126][ T7997] bridge_slave_1: left promiscuous mode [ 684.368081][ T7997] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.435450][ T29] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 684.473880][ T7997] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 684.528892][ T3081] netlink: 'syz.8.8486': attribute type 8 has an invalid length. [ 684.568926][ T7997] gretap0 (unregistering): left promiscuous mode [ 684.599757][ T7997] bond0 (unregistering): (slave gretap2): Releasing active interface [ 684.706932][ T3085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3085 comm=syz.2.8484 [ 685.007680][ T3094] overlayfs: missing 'lowerdir' [ 685.141222][ T7997] bond1 (unregistering): Released all slaves [ 685.148130][ T7997] bond2 (unregistering): Released all slaves [ 685.155235][ T7997] bond3 (unregistering): Released all slaves [ 685.162570][ T7997] bond4 (unregistering): Released all slaves [ 685.169321][ T7997] bond5 (unregistering): Released all slaves [ 685.179048][ T7997] bond6 (unregistering): Released all slaves [ 685.188085][ T7997] bond0 (unregistering): Released all slaves [ 685.298416][ T7997] : left promiscuous mode [ 685.298461][ T3100] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 685.337303][ T3105] netlink: 'syz.2.8492': attribute type 1 has an invalid length. [ 685.355258][ T3108] QAT: Invalid ioctl -2144835806 [ 685.367861][ T3105] bond5: (slave geneve2): making interface the new active one [ 685.371521][ T3105] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 685.389724][ T8021] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 685.394117][ T8021] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 685.403263][ T3111] binder: 3109:3111 ioctl c0306201 0 returned -14 [ 685.414415][ T3111] binder: 3109:3111 ioctl c0306201 0 returned -14 [ 685.475478][ T8021] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 685.490974][ T8021] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 685.504207][ T3111] __nla_validate_parse: 3 callbacks suppressed [ 685.504225][ T3111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8494'. [ 685.602019][ T3111] efs: device does not support 512 byte blocks [ 685.604099][ T3111] device does not support 512 byte blocks [ 685.604099][ T3111] [ 685.609257][ T3118] ocfs2: Unknown parameter 'usrquota' [ 685.628285][ T3118] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8497'. [ 685.648430][ T3118] can0: slcan on ttyS3. [ 685.735277][ T3117] can0 (unregistered): slcan off ttyS3. [ 685.757507][T30876] Bluetooth: hci2: command tx timeout [ 685.777715][ T3130] (syz.1.8500,3130,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 685.780506][ T3130] (syz.1.8500,3130,3):ocfs2_fill_super:1177 ERROR: status = -22 [ 685.835918][ T40] audit: type=1400 audit(2000000040.211:62247): avc: denied { read } for pid=3139 comm="syz.8.8503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 685.853547][ T3137] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 685.871480][ T3143] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 685.871834][ T3144] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 685.874588][ T3143] cramfs: wrong magic [ 685.879372][ T3144] cramfs: wrong magic [ 686.151661][ T3158] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8506'. [ 686.274109][ T7997] veth0_to_team: left promiscuous mode [ 686.287360][ T7997] hsr_slave_0: left promiscuous mode [ 686.300385][ T7997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.305010][ T7997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.329383][ T3162] netlink: 'syz.8.8507': attribute type 10 has an invalid length. [ 686.575919][ T3161] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 686.608080][ T3043] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 686.633608][ T3043] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 686.649501][ T3043] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 686.655157][ T3043] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 686.719964][ T3175] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=45 sclass=netlink_tcpdiag_socket pid=3175 comm=syz.8.8509 [ 686.742717][ T3043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.763595][ T3043] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.773140][ T8011] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.776030][ T8011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.784138][ T8012] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.786446][ T8012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.836162][ T3181] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8510'. [ 686.861456][ T3181] sch_tbf: burst 88 is lower than device veth13 mtu (1514) ! [ 686.915067][ T3043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.937511][ T7997] IPVS: stop unused estimator thread 0... [ 687.096874][ T3196] syz_tun: entered allmulticast mode [ 687.106385][ T3196] syz_tun: left allmulticast mode [ 687.108925][ T3043] veth0_vlan: entered promiscuous mode [ 687.116562][ T3043] veth1_vlan: entered promiscuous mode [ 687.125349][ T3199] (syz.8.8513,3199,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 687.129295][ T40] audit: type=1400 audit(2000000041.421:62248): avc: denied { add_name } for pid=3198 comm="syz.8.8513" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 687.147181][ T3043] veth0_macvtap: entered promiscuous mode [ 687.147390][ T40] audit: type=1400 audit(2000000041.421:62249): avc: denied { associate } for pid=3198 comm="syz.8.8513" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 687.181200][ T3043] veth1_macvtap: entered promiscuous mode [ 687.193878][ T3043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.200264][ T3043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 687.209808][ T7997] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.213298][ T7997] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.221032][ T7997] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.224547][ T7997] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.250615][ T3204] netlink: 'syz.8.8515': attribute type 1 has an invalid length. [ 687.286264][ T3204] 8021q: adding VLAN 0 to HW filter on device bond6 [ 687.322954][ T3204] bond6: (slave veth15): Enslaving as an active interface with a down link [ 687.329349][ T9516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.334150][ T9516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.345714][ T3204] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 687.349180][ T3204] bond6: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 687.364659][ T3204] openvswitch: netlink: Missing valid actions attribute. [ 687.368168][ T3204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 687.375150][ T7995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.378405][ T7995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.441945][ T3209] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8516'. [ 687.445619][ T3209] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:21 [ 687.449193][ T3211] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8516'. [ 687.480250][ T3214] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8517'. [ 687.534096][ T40] audit: type=1400 audit(2000000041.806:62250): avc: denied { create } for pid=3213 comm="syz.6.8517" name="cpuset.memory_pressure_enabled" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 687.547108][ T40] audit: type=1400 audit(2000000041.815:62251): avc: denied { append } for pid=3213 comm="syz.6.8517" name="cpuset.memory_pressure_enabled" dev="9p" ino=72614207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 687.972953][T30876] Bluetooth: hci2: command tx timeout [ 688.508208][ T3227] vivid-000: ================= START STATUS ================= [ 688.511082][ T3227] vivid-000: Enable Output Cropping: false [ 688.513891][ T3227] vivid-000: Enable Output Composing: false [ 688.516636][ T3227] vivid-000: Enable Output Scaler: true [ 688.519035][ T3227] vivid-000: Tx RGB Quantization Range: Automatic [ 688.521613][ T3227] vivid-000: Transmit Mode: HDMI [ 688.523743][ T3227] vivid-000: Hotplug Present: 0x00000000 [ 688.526194][ T3227] vivid-000: RxSense Present: 0x00000000 [ 688.530328][ T3227] vivid-000: EDID Present: 0x00000000 [ 688.532092][ T3227] vivid-000: ================== END STATUS ================== [ 688.723812][ T3231] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 688.895129][ T3235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=3235 comm=syz.8.8524 [ 688.951930][ T3240] can0: slcan on ttynull. [ 689.019512][ T3242] can0 (unregistered): slcan off ttynull. [ 689.029676][ T3254] 9pnet_virtio: no channels available for device syz [ 689.272053][ T3280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8532'. [ 689.359538][ T3286] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8533'. [ 689.360716][ T40] audit: type=1400 audit(2000000043.523:62252): avc: denied { write } for pid=3284 comm="syz.8.8533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 690.094094][ T829] usb 11-1: new high-speed USB device number 48 using dummy_hcd [ 690.179600][T30876] Bluetooth: hci2: command tx timeout [ 690.265875][ T829] usb 11-1: config 0 has no interfaces? [ 690.267744][ T829] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 690.271552][ T829] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.279616][ T829] usb 11-1: config 0 descriptor?? [ 690.505275][ T829] usb 11-1: USB disconnect, device number 48 [ 691.183903][ T40] audit: type=1400 audit(2000000045.230:62253): avc: denied { getopt } for pid=3314 comm="syz.8.8540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 691.202019][ T3312] loop8: detected capacity change from 0 to 7 [ 691.212105][ C2] blk_print_req_error: 41 callbacks suppressed [ 691.212122][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 691.218855][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 691.222380][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 691.226612][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 691.230527][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 691.234676][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 691.237962][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 691.241260][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 691.244389][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 691.247804][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 691.250543][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 691.254133][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 691.257108][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 691.260900][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 691.264234][ T3312] ldm_validate_partition_table(): Disk read failed. [ 691.267205][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 691.270995][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 691.273736][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 691.277697][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 691.281207][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 691.285316][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 691.289309][ T3312] Dev loop8: unable to read RDB block 0 [ 691.295062][ T3312] loop8: unable to read partition table [ 691.297299][ T3312] loop8: partition table beyond EOD, truncated [ 691.299908][ T3312] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 691.462277][ T40] audit: type=1400 audit(2000000045.493:62254): avc: denied { mount } for pid=3320 comm="syz.6.8542" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 691.472492][ T40] audit: type=1400 audit(2000000045.493:62255): avc: denied { remount } for pid=3320 comm="syz.6.8542" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 691.478808][ T40] audit: type=1400 audit(2000000045.502:62256): avc: denied { mounton } for pid=3320 comm="syz.6.8542" path="/5/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 691.493705][ T40] audit: type=1400 audit(2000000045.521:62257): avc: denied { unmount } for pid=3043 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 691.548318][ T3325] ip6gretap0 speed is unknown, defaulting to 1000 [ 692.193746][ T1327] usb 11-1: new high-speed USB device number 49 using dummy_hcd [ 692.376944][ T1327] usb 11-1: config 0 has no interfaces? [ 692.379314][ T1327] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 692.382958][ T1327] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.391184][ T1327] usb 11-1: config 0 descriptor?? [ 692.396351][T30876] Bluetooth: hci2: command tx timeout [ 692.430466][ T3290] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 692.488246][ T3344] netlink: 'syz.1.8548': attribute type 1 has an invalid length. [ 692.491682][ T3344] netlink: 'syz.1.8548': attribute type 2 has an invalid length. [ 692.503888][ T3344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8548'. [ 692.509475][ T3344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3344 comm=syz.1.8548 [ 692.587400][ T3349] sp0: Synchronizing with TNC [ 692.627858][ T1343] usb 11-1: USB disconnect, device number 49 [ 692.725439][ T3356] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8552'. [ 692.812431][ T3369] syzkaller0: entered promiscuous mode [ 692.817769][ T3369] syzkaller0: entered allmulticast mode [ 692.821871][ T3369] tipc: Started in network mode [ 692.822835][ T3374] netlink: 'syz.8.8557': attribute type 10 has an invalid length. [ 692.824645][ T3369] tipc: Node identity eae4d2f250d2, cluster identity 4711 [ 692.826532][ T3374] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8557'. [ 692.829843][ T3369] tipc: Enabled bearer , priority 0 [ 692.836919][ T3374] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 692.840555][ T3374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 692.870379][ T3368] tipc: Resetting bearer [ 692.890654][ T3368] tipc: Disabling bearer [ 692.897861][ T3373] netlink: 124 bytes leftover after parsing attributes in process `syz.2.8558'. [ 692.988692][ T40] audit: type=1400 audit(2000000046.919:62258): avc: denied { bind } for pid=3383 comm="syz.2.8562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 693.000121][ T40] audit: type=1400 audit(2000000046.928:62259): avc: denied { getopt } for pid=3383 comm="syz.2.8562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 693.007072][ T3387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8563'. [ 693.011978][ T3387] sit0: Master is either lo or non-ether device [ 693.072669][ T40] audit: type=1400 audit(2000000047.003:62260): avc: denied { setopt } for pid=3389 comm="syz.8.8564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 693.111277][ T3398] openvswitch: netlink: Flow actions attr not present in new flow. [ 693.274434][ T3407] 9pnet_virtio: no channels available for device syz [ 693.277181][ T3407] 9pnet_virtio: no channels available for device syz [ 693.280374][ T3407] 9pnet_virtio: no channels available for device syz [ 693.283618][ T3407] 9pnet_virtio: no channels available for device syz [ 693.286713][ T3407] 9pnet_virtio: no channels available for device syz [ 693.289808][ T3407] 9pnet_virtio: no channels available for device syz [ 693.292918][ T3407] 9pnet_virtio: no channels available for device syz [ 693.295427][ T3407] 9pnet_virtio: no channels available for device syz [ 693.298025][ T3407] 9pnet_virtio: no channels available for device syz [ 693.301138][ T3407] 9pnet_virtio: no channels available for device syz [ 693.304344][ T3407] 9pnet_virtio: no channels available for device syz [ 693.307133][ T3407] 9pnet_virtio: no channels available for device syz [ 693.309698][ T3407] 9pnet_virtio: no channels available for device syz [ 693.312095][ T3407] 9pnet_virtio: no channels available for device syz [ 693.314917][ T3407] 9pnet_virtio: no channels available for device syz [ 693.317716][ T3407] 9pnet_virtio: no channels available for device syz [ 693.320909][ T3407] 9pnet_virtio: no channels available for device syz [ 693.324429][ T3407] 9pnet_virtio: no channels available for device syz [ 693.327690][ T3407] 9pnet_virtio: no channels available for device syz [ 693.330488][ T3407] 9pnet_virtio: no channels available for device syz [ 693.333615][ T3407] 9pnet_virtio: no channels available for device syz [ 693.341633][ T3407] 9pnet_virtio: no channels available for device syz [ 693.344815][ T3407] 9pnet_virtio: no channels available for device syz [ 693.347752][ T3407] 9pnet_virtio: no channels available for device syz [ 693.350892][ T3407] 9pnet_virtio: no channels available for device syz [ 693.353883][ T3407] 9pnet_virtio: no channels available for device syz [ 693.356972][ T3407] 9pnet_virtio: no channels available for device syz [ 693.360064][ T3407] 9pnet_virtio: no channels available for device syz [ 693.362595][ T3407] 9pnet_virtio: no channels available for device syz [ 693.364933][ T3407] 9pnet_virtio: no channels available for device syz [ 693.367340][ T3407] 9pnet_virtio: no channels available for device syz [ 693.370351][ T3407] 9pnet_virtio: no channels available for device syz [ 693.417003][ T3413] ip6gretap0 speed is unknown, defaulting to 1000 [ 693.596079][ T3427] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.8577'. [ 693.627101][ T40] audit: type=1400 audit(2000000047.519:62261): avc: denied { write } for pid=3430 comm="syz.6.8578" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 693.692627][ T3443] SELinux: policydb magic number 0xc0 does not match expected magic number 0xf97cff8c [ 693.697897][ T3443] SELinux: failed to load policy [ 693.742665][ T3441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.747407][ T3441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.750910][ T3449] openvswitch: netlink: Message has 4 unknown bytes. [ 693.753866][ T3449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.259798][ T3472] mac80211_hwsim hwsim61 syzkaller0: entered promiscuous mode [ 694.263464][ T3472] mac80211_hwsim hwsim61 syzkaller0: entered allmulticast mode [ 694.853505][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 694.853521][ T40] audit: type=1400 audit(2000000048.673:62268): avc: denied { setopt } for pid=3502 comm="syz.1.8600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 694.857763][ T3503] veth0_vlan: left promiscuous mode [ 694.883946][ T3507] openvswitch: netlink: IP tunnel dst address not specified [ 694.948176][ T3514] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8604'. [ 695.225734][ T3552] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 695.227424][ T3551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=3551 comm=syz.6.8612 [ 695.275064][ T3562] dns_resolver: Unsupported content type (234) [ 695.291769][ T3560] ceph: Path missing in source [ 695.299026][ T3560] netlink: 'syz.8.8613': attribute type 21 has an invalid length. [ 695.305686][ T3560] netlink: 152 bytes leftover after parsing attributes in process `syz.8.8613'. [ 695.350540][ T3567] netlink: 'syz.8.8615': attribute type 21 has an invalid length. [ 695.358009][ T3567] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8615'. [ 695.839220][ T831] usb 13-1: new high-speed USB device number 29 using dummy_hcd [ 695.868952][ T40] audit: type=1400 audit(2000000049.621:62269): avc: denied { write } for pid=3591 comm="syz.6.8623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 695.879282][ T3592] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3592 comm=syz.6.8623 [ 695.983141][ T40] audit: type=1400 audit(2000000049.733:62270): avc: denied { lock } for pid=3593 comm="syz.6.8624" path="/28/file0/cpuset.effective_cpus" dev="9p" ino=72614225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 695.996988][ T40] audit: type=1400 audit(2000000049.743:62271): avc: denied { ioctl } for pid=3593 comm="syz.6.8624" path="/28/file0/file0" dev="9p" ino=72613967 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 696.013775][ T831] usb 13-1: config 0 has no interfaces? [ 696.015602][ T831] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 696.018539][ T831] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.022928][ T831] usb 13-1: config 0 descriptor?? [ 696.251583][ T1343] usb 13-1: USB disconnect, device number 29 [ 696.302699][ T3601] netlink: 'syz.6.8627': attribute type 3 has an invalid length. [ 696.306175][ T3601] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8627'. [ 696.408514][ T3606] netlink: 'syz.6.8628': attribute type 322 has an invalid length. [ 697.179615][ T3622] netlink: 'syz.8.8634': attribute type 28 has an invalid length. [ 697.182176][ T3622] netlink: 'syz.8.8634': attribute type 3 has an invalid length. [ 697.342812][ T3628] ALSA: seq fatal error: cannot create timer (-19) [ 697.346292][ T3628] sctp: [Deprecated]: syz.8.8636 (pid 3628) Use of int in max_burst socket option. [ 697.346292][ T3628] Use struct sctp_assoc_value instead [ 697.511273][ T3638] netlink: 'syz.8.8638': attribute type 1 has an invalid length. [ 697.515581][ T3638] openvswitch: netlink: Unknown key attributes 2 [ 697.679617][ T3656] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 697.682376][ T3656] overlayfs: overlapping lowerdir path [ 698.695638][ T10] usb 11-1: new high-speed USB device number 50 using dummy_hcd [ 698.751507][ T3685] __nla_validate_parse: 4 callbacks suppressed [ 698.751518][ T3685] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.8656'. [ 698.814415][ T3687] tmpfs: Bad value for 'huge' [ 698.886194][ T10] usb 11-1: config 0 has no interfaces? [ 698.888430][ T10] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 698.891734][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.894322][ T3689] netlink: 'syz.2.8657': attribute type 1 has an invalid length. [ 698.897219][ T3689] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8657'. [ 698.900270][ T3689] netlink: 'syz.2.8657': attribute type 1 has an invalid length. [ 698.902818][ T3689] netlink: 530 bytes leftover after parsing attributes in process `syz.2.8657'. [ 698.905710][ T3689] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8657'. [ 698.909453][ T10] usb 11-1: config 0 descriptor?? [ 699.065415][ T3698] xt_TPROXY: Can be used only with -p tcp or -p udp [ 699.400634][ T3713] xt_HMARK: spi-set and port-set can't be combined [ 699.476037][ T40] audit: type=1326 audit(2000000053.017:62272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3714 comm="syz.8.8667" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2ecd9c629 code=0x0 [ 699.584638][ T3717] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8667'. [ 700.392521][ T3723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3723 comm=syz.8.8669 [ 700.434844][ T3726] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8670'. [ 700.438656][ T3726] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8670'. [ 700.500453][ T3730] overlayfs: failed to clone upperpath [ 701.620535][ T10] usb 11-1: USB disconnect, device number 50 [ 701.773345][ T40] audit: type=1326 audit(2000000055.166:62273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.6.8678" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5413b9c629 code=0x0 [ 702.028664][ T3748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3748 comm=syz.6.8678 [ 702.196104][ T3756] loop6: detected capacity change from 0 to 7 [ 702.200502][T32001] Dev loop6: unable to read RDB block 7 [ 702.212858][T32001] loop6: unable to read partition table [ 702.215553][T32001] loop6: partition table beyond EOD, truncated [ 702.220012][ T3756] Dev loop6: unable to read RDB block 7 [ 702.224718][ T3756] loop6: unable to read partition table [ 702.230079][ T3756] loop6: partition table beyond EOD, truncated [ 702.232892][ T3756] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 702.374240][ T3762] netlink: 'syz.2.8682': attribute type 3 has an invalid length. [ 702.656928][ T3776] openvswitch: netlink: Flow key attr not present in new flow. [ 702.809448][ T3784] 9pnet_fd: Insufficient options for proto=fd [ 703.097686][ T831] usb 11-1: new high-speed USB device number 51 using dummy_hcd [ 703.249705][ T3745] cgroup: none used incorrectly [ 703.257845][ T831] usb 11-1: Using ep0 maxpacket: 32 [ 703.261548][ T831] usb 11-1: config index 0 descriptor too short (expected 29220, got 36) [ 703.264317][ T831] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 703.267263][ T831] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 703.270531][ T831] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 703.279068][ T831] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 703.282736][ T831] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 703.287227][ T831] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 703.303628][ T831] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.308066][ T831] usb 11-1: config 0 descriptor?? [ 703.428603][ T40] audit: type=1400 audit(2000000056.723:62274): avc: denied { read } for pid=3795 comm="syz.8.8692" name="file1" dev="tmpfs" ino=2906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 703.437690][ T40] audit: type=1400 audit(2000000056.723:62275): avc: denied { open } for pid=3795 comm="syz.8.8692" path="/533/file1" dev="tmpfs" ino=2906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 703.529341][ T831] usblp 11-1:0.0: usblp0: USB Bidirectional printer dev 51 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 703.534058][ T40] audit: type=1326 audit(2000000056.817:62276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3800 comm="syz.8.8693" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe2ecd9c629 code=0x0 [ 703.536574][ T831] usb 11-1: USB disconnect, device number 51 [ 703.558018][ T831] usblp0: removed [ 703.558219][T32004] udevd[32004]: setting owner of /dev/usb/lp0 to uid=0, gid=7 failed: No such file or directory [ 703.715140][ T3804] tmpfs: Bad value for 'mpol' [ 703.721630][ T3804] SELinux: policydb string length 3171692 does not match expected length 8 [ 703.724770][ T3804] SELinux: failed to load policy [ 703.733297][ T3807] ip6gretap0 speed is unknown, defaulting to 1000 [ 703.739760][ T3806] ip6gretap0 speed is unknown, defaulting to 1000 [ 703.762053][ T3810] overlay: filesystem on ./file0 not supported as upperdir [ 703.823636][ T3815] netlink: 'syz.2.8697': attribute type 39 has an invalid length. [ 703.845383][ T3815] veth0_macvtap: left promiscuous mode [ 704.013454][ T3833] 8021q: adding VLAN 0 to HW filter on device bond6 [ 704.017043][ T5991] usb 11-1: new high-speed USB device number 52 using dummy_hcd [ 704.047681][ T3821] IPv6: Can't replace route, no match found [ 704.121559][ T3832] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 704.151742][ T3832] kvm: pic: level sensitive irq not supported [ 704.152022][ T3832] kvm: pic: non byte read [ 704.157363][ T3832] kvm: pic: level sensitive irq not supported [ 704.157693][ T3832] kvm: pic: non byte read [ 704.161803][ T3832] kvm: pic: level sensitive irq not supported [ 704.162224][ T3832] kvm: pic: non byte read [ 704.171593][ T3832] kvm: pic: level sensitive irq not supported [ 704.171879][ T3832] kvm: pic: non byte read [ 704.175838][ T5991] usb 11-1: Using ep0 maxpacket: 32 [ 704.179897][ T5991] usb 11-1: config index 0 descriptor too short (expected 29220, got 36) [ 704.182870][ T5991] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 704.184383][ T3832] kvm: pic: level sensitive irq not supported [ 704.186270][ T3832] kvm: pic: non byte read [ 704.186461][ T5991] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 704.193195][ T5991] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 704.203929][ T5991] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 704.209596][ T5991] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 704.214164][ T5991] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 704.217564][ T5991] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.224093][ T5991] usb 11-1: config 0 descriptor?? [ 704.419775][ T3848] /dev/nullb0: Can't open blockdev [ 704.442091][ T5991] usblp 11-1:0.0: usblp0: USB Bidirectional printer dev 52 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 704.485211][ T3854] netlink: 'syz.1.8705': attribute type 1 has an invalid length. [ 704.489638][ T3853] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8707'. [ 704.511494][ T3854] 8021q: adding VLAN 0 to HW filter on device bond6 [ 704.524549][ T3854] bond6: (slave geneve3): making interface the new active one [ 704.537606][ T3854] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 704.599538][ T40] audit: type=1400 audit(2000000057.811:62277): avc: denied { map } for pid=3851 comm="syz.2.8707" path="socket:[191528]" dev="sockfs" ino=191528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 704.602457][ T3866] mac80211_hwsim hwsim61 : renamed from wlan1 [ 704.607478][ T40] audit: type=1400 audit(2000000057.811:62278): avc: denied { read } for pid=3851 comm="syz.2.8707" path="socket:[191528]" dev="sockfs" ino=191528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 704.627140][ T3871] netlink: 'syz.1.8711': attribute type 27 has an invalid length. [ 704.657276][ T40] audit: type=1400 audit(2000000057.877:62279): avc: denied { read write } for pid=3782 comm="syz.6.8689" name="lp0" dev="devtmpfs" ino=4323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 704.677664][ T40] audit: type=1400 audit(2000000057.877:62280): avc: denied { open } for pid=3782 comm="syz.6.8689" path="/dev/usb/lp0" dev="devtmpfs" ino=4323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 704.728470][ T3871] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.731959][ T3871] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.834303][ T3871] veth0_to_bond: left allmulticast mode [ 704.888695][ T40] audit: type=1400 audit(2000000058.093:62281): avc: denied { append } for pid=3782 comm="syz.6.8689" name="adsp1" dev="devtmpfs" ino=1326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dhcpd_var_run_t:s0" [ 704.980843][ T3871] xfrm1: left promiscuous mode [ 704.982920][ T3871] xfrm1: left allmulticast mode [ 705.000317][ T3871] vlan2: left promiscuous mode [ 705.002412][ T3871] bond3: left promiscuous mode [ 705.004463][ T3871] bridge1: left promiscuous mode [ 705.007973][ T3871] vlan2: left allmulticast mode [ 705.010145][ T3871] bond3: left allmulticast mode [ 705.012181][ T3871] bridge1: left allmulticast mode [ 705.017917][ T3871] ip6erspan0: left promiscuous mode [ 705.024867][ T3871] geneve2: left promiscuous mode [ 705.028449][ T3871] geneve2: left allmulticast mode [ 705.052594][ T8011] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.064718][ T8011] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 705.068206][ T8011] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.071385][ T8011] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 705.076186][ T8011] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.079613][ T8011] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 705.082089][ T10] usb 11-1: USB disconnect, device number 52 [ 705.083651][ T8011] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.088947][ T8011] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 705.093459][ T10] usblp0: removed [ 705.148963][ T3888] 9p: Bad value for 'wfdno' [ 705.157104][ T3889] sctp: [Deprecated]: syz.8.8715 (pid 3889) Use of struct sctp_assoc_value in delayed_ack socket option. [ 705.157104][ T3889] Use struct sctp_sack_info instead [ 705.162330][ T3888] sctp: [Deprecated]: syz.8.8715 (pid 3888) Use of struct sctp_assoc_value in delayed_ack socket option. [ 705.162330][ T3888] Use struct sctp_sack_info instead [ 705.230315][ T3896] geneve3: entered promiscuous mode [ 705.288762][ T3904] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8720'. [ 705.471101][ T3912] overlayfs: failed to resolve './file0': -2 [ 705.516728][ T3918] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 705.657064][ T40] audit: type=1800 audit(2000000058.815:62282): pid=3928 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.8726" name="file1" dev="tmpfs" ino=2983 res=0 errno=0 [ 705.929843][ T3946] overlayfs: failed to clone upperpath [ 705.968754][ T3945] binder: BINDER_SET_CONTEXT_MGR already set [ 705.970713][ T3945] binder: 3943:3945 ioctl 4018620d 200000000100 returned -16 [ 705.973732][ T3945] binder: BINDER_SET_CONTEXT_MGR already set [ 705.975986][ T3945] binder: 3943:3945 ioctl 4018620d 200000000100 returned -16 [ 705.978432][ T3945] binder: BINDER_SET_CONTEXT_MGR already set [ 705.980379][ T3945] binder: 3943:3945 ioctl 4018620d 200000000100 returned -16 [ 705.982803][ T3945] binder: BINDER_SET_CONTEXT_MGR already set [ 705.984796][ T3945] binder: 3943:3945 ioctl 4018620d 200000000100 returned -16 [ 705.987849][ T3945] binder: BINDER_SET_CONTEXT_MGR already set [ 705.989842][ T3945] binder: 3943:3945 ioctl 4018620d 200000000100 returned -16 [ 705.992280][ T3945] binder: BINDER_SET_CONTEXT_MGR already set [ 705.994223][ T3945] binder: 3943:3945 ioctl 4018620d 200000000100 returned -16 [ 706.000491][ T3945] binder: BINDER_SET_CONTEXT_MGR already set [ 706.002648][ T3945] binder: 3943:3945 ioctl 4018620d 200000000100 returned -16 [ 706.005218][ T3947] binder: 3943:3947 ioctl c0306201 2000000004c0 returned -22 [ 706.007923][ T3947] binder: 3943:3947 ioctl c0306201 2000000004c0 returned -22 [ 706.035756][ T3952] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 706.146123][ T3966] netlink: 48 bytes leftover after parsing attributes in process `syz.8.8740'. [ 706.302432][ T3978] ubi31: attaching mtd0 [ 706.309049][ T3978] ubi31: scanning is finished [ 706.311473][ T3978] ubi31: empty MTD device detected [ 706.327160][ T53] usb 11-1: new high-speed USB device number 53 using dummy_hcd [ 706.348197][ T3983] overlayfs: failed to clone upperpath [ 706.508630][ T53] usb 11-1: Using ep0 maxpacket: 8 [ 706.513673][ T53] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 706.517369][ T53] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 706.520539][ T53] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.523931][ T3978] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 706.526618][ T3978] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 706.527127][ T53] usb 11-1: config 0 descriptor?? [ 706.529668][ T3978] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 706.533804][ T3978] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 706.537166][ T3978] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 706.539517][ T3978] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 706.543228][ T3978] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1758004188 [ 706.547264][ T3978] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 706.550767][ T4000] ubi31: background thread "ubi_bgt31d" started, PID 4000 [ 706.583009][ T4002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8751'. [ 706.590761][ T4004] netlink: 108 bytes leftover after parsing attributes in process `syz.2.8752'. [ 706.605750][ T4005] overlayfs: failed to resolve './file1/file0': -2 [ 706.606245][ T4007] overlayfs: failed to resolve './file1/file0': -2 [ 706.619286][ T4004] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 706.710436][ T4013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8755'. [ 706.765500][ T53] iowarrior 11-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 706.816659][ T4017] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 706.981054][ T53] usb 11-1: USB disconnect, device number 53 [ 706.985941][ T3962] sctp: [Deprecated]: syz.6.8738 (pid 3962) Use of struct sctp_assoc_value in delayed_ack socket option. [ 706.985941][ T3962] Use struct sctp_sack_info instead [ 707.554478][ T4036] netlink: 'syz.1.8765': attribute type 1 has an invalid length. [ 707.556212][ T4038] netlink: 'syz.6.8766': attribute type 10 has an invalid length. [ 707.564055][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 707.564066][ T40] audit: type=1400 audit(2000000060.588:62288): avc: denied { listen } for pid=4035 comm="syz.1.8765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 707.567531][ T4038] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 707.658377][ T40] audit: type=1400 audit(2000000060.682:62289): avc: denied { ioctl } for pid=4033 comm="syz.8.8764" path="socket:[192739]" dev="sockfs" ino=192739 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 707.670211][ T4050] binder: 4043:4050 ioctl c0306201 200000000540 returned -22 [ 707.853955][ T4073] overlayfs: missing 'workdir' [ 707.917349][ T40] audit: type=1400 audit(2000000060.936:62290): avc: denied { write } for pid=4076 comm="syz.1.8778" name="file0" dev="tmpfs" ino=1504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 707.925151][ T40] audit: type=1400 audit(2000000060.936:62291): avc: denied { open } for pid=4076 comm="syz.1.8778" path="/278/file0" dev="tmpfs" ino=1504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 707.927426][ T4077] netlink: 384 bytes leftover after parsing attributes in process `syz.1.8778'. [ 707.933474][ T40] audit: type=1400 audit(2000000060.945:62292): avc: denied { ioctl } for pid=4076 comm="syz.1.8778" path="/278/file0" dev="tmpfs" ino=1504 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 707.994804][ T4080] SELinux: syz.2.8777 (4080) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 708.006329][ T4082] vxlan0: entered promiscuous mode [ 708.008556][ T4082] vxlan0: entered allmulticast mode [ 708.011491][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.015186][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.018636][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.022345][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.411429][ T4098] netlink: 'syz.6.8785': attribute type 1 has an invalid length. [ 708.437611][ T4099] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8783'. [ 708.577501][ T40] audit: type=1400 audit(2000000061.555:62293): avc: denied { execstack } for pid=4102 comm="syz.8.8786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 708.819185][ T4109] syz.6.8788 (4109): drop_caches: 1 [ 708.884276][ T4109] syz.6.8788 (4109): drop_caches: 1 [ 709.763739][ T40] audit: type=1400 audit(2000000062.662:62294): avc: denied { listen } for pid=4138 comm="syz.8.8798" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 709.796056][ T4141] netlink: 9 bytes leftover after parsing attributes in process `syz.8.8799'. [ 709.799231][ T4141] 0: renamed from hsr0 [ 709.802266][ T4141] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 709.805623][ T4141] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 709.808989][ T4141] 0: entered allmulticast mode [ 709.810591][ T4141] hsr_slave_0: entered allmulticast mode [ 709.812531][ T4141] hsr_slave_1: entered allmulticast mode [ 709.815705][ T4141] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 710.060812][ T4160] netlink: 64 bytes leftover after parsing attributes in process `syz.6.8807'. [ 710.065275][ T4160] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 710.236542][ T4172] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 710.430789][ T831] usb 11-1: new high-speed USB device number 54 using dummy_hcd [ 710.597117][ T831] usb 11-1: config 0 has no interfaces? [ 710.600052][ T831] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 710.606442][ T831] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.612970][ T831] usb 11-1: config 0 descriptor?? [ 710.650215][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.656043][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.666121][ T4195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 710.698083][ T5991] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 710.845809][ T831] usb 11-1: USB disconnect, device number 54 [ 710.858719][ T4204] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 711.145288][ T3827] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 711.407992][T23802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 711.415584][T23802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 711.418818][T23802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 711.422557][T23802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 711.425361][T23802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 711.453823][ T4226] ip6gretap0 speed is unknown, defaulting to 1000 [ 711.558050][ T4226] chnl_net:caif_netlink_parms(): no params data found [ 711.592882][ T5991] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 711.617503][ T4226] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.619846][ T4226] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.622206][ T4226] bridge_slave_0: entered allmulticast mode [ 711.625676][ T4226] bridge_slave_0: entered promiscuous mode [ 711.632879][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.635570][ T4226] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.638027][ T4226] bridge_slave_1: entered allmulticast mode [ 711.640735][ T4226] bridge_slave_1: entered promiscuous mode [ 711.683858][ T4226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.688760][ T4226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.704988][ T4226] team0: Port device team_slave_0 added [ 711.708322][ T4226] team0: Port device team_slave_1 added [ 711.723369][ T4226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.725718][ T4226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.734163][ T4226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.738535][ T4226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.740770][ T4226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.752417][ T4226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.798230][ T4226] hsr_slave_0: entered promiscuous mode [ 711.800638][ T4226] hsr_slave_1: entered promiscuous mode [ 711.803441][ T4226] debugfs: 'hsr0' already exists in 'hsr' [ 711.805445][ T4226] Cannot create hsr debugfs directory [ 711.844423][ T4247] loop8: detected capacity change from 0 to 7 [ 711.847387][ C3] blk_print_req_error: 10 callbacks suppressed [ 711.847398][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 711.855263][ C3] buffer_io_error: 10 callbacks suppressed [ 711.855271][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 711.862453][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 711.866615][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 711.874852][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 711.879195][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 711.882855][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 711.886788][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 711.889973][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 711.893633][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 711.896756][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 711.900320][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 711.904286][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 711.907906][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 711.910749][T32001] ldm_validate_partition_table(): Disk read failed. [ 711.913702][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 711.916478][ T4250] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 711.917996][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 711.920957][ T4249] netlink: 64 bytes leftover after parsing attributes in process `syz.6.8836'. [ 711.924174][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 711.929843][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 711.939937][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 711.943767][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 711.955157][T32001] Dev loop8: unable to read RDB block 0 [ 711.957421][T32001] loop8: unable to read partition table [ 711.959379][T32001] loop8: partition table beyond EOD, truncated [ 711.972263][ T4247] ldm_validate_partition_table(): Disk read failed. [ 711.979243][ T4247] Dev loop8: unable to read RDB block 0 [ 711.981603][ T4247] loop8: unable to read partition table [ 711.984001][ T4247] loop8: partition table beyond EOD, truncated [ 711.986310][ T4226] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.986601][ T4247] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 712.038981][ T4255] netlink: 'syz.1.8838': attribute type 1 has an invalid length. [ 712.042231][ T4255] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8838'. [ 712.110581][ T40] audit: type=1400 audit(2000000064.867:62295): avc: denied { mounton } for pid=4257 comm="syz.1.8839" path="mnt:[4026533245]" dev="nsfs" ino=4026533245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 712.133656][ T4226] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.146025][ T4260] netlink: 'syz.1.8840': attribute type 1 has an invalid length. [ 712.281560][ T3836] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 712.285757][ T3836] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 712.289151][ T4267] tipc: Started in network mode [ 712.291098][ T4267] tipc: Node identity ac1414aa, cluster identity 4711 [ 712.294058][ T4267] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 712.297521][ T1343] IPVS: starting estimator thread 0... [ 712.299813][ T4267] tipc: Enabled bearer , priority 10 [ 712.318521][ T4271] binder: 4270:4271 unknown command 0 [ 712.320578][ T4271] binder: 4270:4271 ioctl c0306201 200000000080 returned -22 [ 712.344524][ T4226] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.402776][ T4268] IPVS: using max 46 ests per chain, 110400 per kthread [ 712.434709][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 712.453817][ T4226] netdevsim netdevsim8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.482505][ T40] audit: type=1400 audit(2000000065.214:62296): avc: denied { setopt } for pid=4281 comm="syz.1.8847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 712.583892][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 712.606156][ T4284] program syz.1.8848 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 712.658852][ T4226] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 712.666375][ T4226] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 712.670550][ T4291] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 712.673098][ T4226] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 712.673597][ T4291] IPv6: NLM_F_CREATE should be set when creating new route [ 712.685904][ T4226] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 712.727474][ T4299] syzkaller0: entered promiscuous mode [ 712.729311][ T4299] syzkaller0: entered allmulticast mode [ 712.733131][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 712.784695][ T4226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.799577][ T4226] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.806680][ T3836] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.809016][ T3836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 712.817020][ T3836] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.819416][ T3836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 712.882315][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 712.939468][ T4315] /dev/nullb0: Can't open blockdev [ 712.998224][ T4226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.031713][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 713.141305][ T4226] veth0_vlan: entered promiscuous mode [ 713.146869][ T4226] veth1_vlan: entered promiscuous mode [ 713.166165][ T4226] veth0_macvtap: entered promiscuous mode [ 713.172929][ T4226] veth1_macvtap: entered promiscuous mode [ 713.182439][ T4226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 713.188509][ T4226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 713.195436][ T3827] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.198716][ T3827] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.202286][ T3827] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.205206][ T3827] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.255490][ T8012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.258356][ T8012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.275579][ T3827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.278243][ T3827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.371537][ T40] audit: type=1400 audit(2000000066.039:62297): avc: denied { listen } for pid=4335 comm="syz.8.8830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 713.383587][T24368] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 713.437896][ T4339] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.8860'. [ 713.479798][ T1343] tipc: Node number set to 2886997162 [ 713.639506][T30876] Bluetooth: hci3: command tx timeout [ 713.761792][ T40] audit: type=1400 audit(2000000066.415:62298): avc: denied { append } for pid=4354 comm="syz.2.8867" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 713.830118][ T4358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8867'. [ 713.958762][ T40] audit: type=1400 audit(2000000066.593:62299): avc: denied { shutdown } for pid=4363 comm="syz.1.8870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 714.134854][ T4382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8875'. [ 714.154219][ T40] audit: type=1400 audit(2000000066.781:62300): avc: denied { module_load } for pid=4383 comm="syz.1.8876" path="/307/bus" dev="tmpfs" ino=1669 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 714.154540][ T4384] Invalid ELF header magic: != ELF [ 714.179690][ T4376] SELinux: failed to load policy [ 714.244750][ T4389] bridge_slave_1: default FDB implementation only supports local addresses [ 714.253644][ T4389] overlayfs: failed lookup in lower (newroot/74, name='file0', err=-40): overlapping layers [ 714.262432][ T4393] autofs4:pid:4393:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 714.267956][ T40] audit: type=1400 audit(2000000066.884:62301): avc: denied { write } for pid=4392 comm="syz.8.8881" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 714.369089][ T4404] syz_tun: entered allmulticast mode [ 714.372640][ T4404] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 714.408774][ T40] audit: type=1400 audit(2000000067.025:62302): avc: denied { mount } for pid=4385 comm="syz.1.8877" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 714.411111][ T4386] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 714.423500][ T4407] netlink: 'syz.2.8884': attribute type 1 has an invalid length. [ 714.430328][ T4409] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8885'. [ 714.434227][ T4409] sctp: [Deprecated]: syz.6.8885 (pid 4409) Use of struct sctp_assoc_value in delayed_ack socket option. [ 714.434227][ T4409] Use struct sctp_sack_info instead [ 714.494501][ T4418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8887'. [ 714.594648][ T40] audit: type=1400 audit(2000000067.193:62303): avc: denied { listen } for pid=4427 comm="syz.8.8891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 714.601001][ T40] audit: type=1400 audit(2000000067.193:62304): avc: denied { accept } for pid=4427 comm="syz.8.8891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 714.844247][ T3828] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 714.848872][ T3828] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.932289][ T4446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8898'. [ 714.972042][ T3828] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 714.975230][ T3828] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.074746][ T40] audit: type=1400 audit(2000000067.644:62305): avc: denied { unmount } for pid=31826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 715.101533][ T40] audit: type=1400 audit(2000000067.672:62306): avc: denied { map } for pid=4454 comm="syz.8.8899" path="socket:[195336]" dev="sockfs" ino=195336 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 715.125887][ T4458] xt_cgroup: invalid path, errno=-2 [ 715.159230][ T3828] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.165512][ T3828] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.202708][ T4467] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 715.205475][ T4467] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 715.231038][ T4467] vhci_hcd vhci_hcd.0: Device attached [ 715.236226][ T4467] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(10) [ 715.238879][ T4467] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 715.246484][ T4467] vhci_hcd vhci_hcd.0: Device attached [ 715.265336][ T3828] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.269621][ T3828] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.279191][ T4476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8903'. [ 715.289174][ T4474] vhci_hcd: connection closed [ 715.293883][ T4470] vhci_hcd: connection closed [ 715.297380][ T8011] vhci_hcd vhci_hcd.8: stop threads [ 715.301421][ T8011] vhci_hcd vhci_hcd.8: release socket [ 715.305478][ T8011] vhci_hcd vhci_hcd.8: disconnect device [ 715.316164][ T8011] vhci_hcd vhci_hcd.8: stop threads [ 715.318246][ T8011] vhci_hcd vhci_hcd.8: release socket [ 715.320446][ T8011] vhci_hcd vhci_hcd.8: disconnect device [ 715.443198][ T3828] bridge_slave_1: left allmulticast mode [ 715.445409][ T3828] bridge_slave_1: left promiscuous mode [ 715.447916][ T3828] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.466787][ T3828] bridge_slave_0: left allmulticast mode [ 715.468647][ T3828] bridge_slave_0: left promiscuous mode [ 715.470649][ T3828] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.500071][ T4496] __nla_validate_parse: 1 callbacks suppressed [ 715.500084][ T4496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8906'. [ 715.500535][ T4497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8906'. [ 715.544188][ T4499] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 715.546547][ T4499] PKCS7: Only support pkcs7_signedData type [ 715.589707][ C3] net_ratelimit: 9 callbacks suppressed [ 715.589725][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 715.640832][ T4506] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8908'. [ 715.653881][ T4506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8908'. [ 715.681068][ T3828] dvmrp0 (unregistering): left allmulticast mode [ 715.689087][ T3828] bond3 (unregistering): (slave geneve2): Releasing active interface [ 715.845525][T30876] Bluetooth: hci3: command tx timeout [ 715.924665][ T3828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.929724][ T3828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.933774][ T3828] bond0 (unregistering): Released all slaves [ 715.939131][ T3828] bond1 (unregistering): Released all slaves [ 715.950850][ T3828] bond2 (unregistering): Released all slaves [ 715.962853][ T3828] bond3 (unregistering): Released all slaves [ 716.064632][ T4533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8917'. [ 716.243066][ T4549] netlink: 76 bytes leftover after parsing attributes in process `syz.6.8921'. [ 716.268048][ T4552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 716.658191][ T4583] mkiss: ax0: crc mode is auto. [ 716.675802][ T3828] hsr_slave_0: left promiscuous mode [ 716.680615][ T3828] hsr_slave_1: left promiscuous mode [ 716.702417][ T3828] veth1_macvtap: left promiscuous mode [ 716.704341][ T3828] veth1_vlan: left promiscuous mode [ 716.706110][ T3828] veth0_vlan: left promiscuous mode [ 716.708791][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 716.725802][ T4596] netlink: 92 bytes leftover after parsing attributes in process `syz.1.8934'. [ 716.909721][ T3828] team0 (unregistering): Port device team_slave_0 removed [ 716.973351][ T4590] netlink: 108 bytes leftover after parsing attributes in process `syz.2.8933'. [ 716.976902][ T4602] macvlan0: entered allmulticast mode [ 717.033266][ T4604] pim6reg: entered allmulticast mode [ 717.036516][ T4605] macvlan0 (unregistering): left allmulticast mode [ 717.039296][ C2] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 717.242487][ T4626] IPv6: Can't replace route, no match found [ 717.251379][ T4626] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 717.640673][ T4634] (syz.1.8942,4634,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 717.806586][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 718.012890][ T3828] bridge_slave_1: left allmulticast mode [ 718.014790][ T3828] bridge_slave_1: left promiscuous mode [ 718.016673][ T3828] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.063427][T30876] Bluetooth: hci3: command tx timeout [ 718.073824][ T10] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 718.219164][ T4656] input: syz0 as /devices/virtual/input/input110 [ 718.240478][ T3828] gretap0 (unregistering): left promiscuous mode [ 718.297241][ T3828] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 718.308365][ T3828] bridge0 (unregistering): left promiscuous mode [ 718.310501][ T3828] bridge0 (unregistering): left allmulticast mode [ 718.542486][ T3828] bond0 (unregistering): left promiscuous mode [ 718.544570][ T3828] bond_slave_0: left promiscuous mode [ 718.546443][ T3828] bond_slave_1: left promiscuous mode [ 718.548264][ T3828] mac80211_hwsim hwsim61 : left promiscuous mode [ 718.567019][ T3828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.570777][ T3828] bond_slave_0: left allmulticast mode [ 718.580704][ T3828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.585087][ T3828] bond_slave_1: left allmulticast mode [ 718.591152][ T3828] bond0 (unregistering): (slave ): Releasing backup interface [ 718.595827][ T3828] mac80211_hwsim hwsim61 : left allmulticast mode [ 718.598923][ T3828] bond0 (unregistering): Released all slaves [ 718.607571][ T3828] bond1 (unregistering): Released all slaves [ 718.617090][ T3828] bond2 (unregistering): Released all slaves [ 718.624211][ T3828] bond3 (unregistering): Released all slaves [ 718.631991][ T3828] bond4 (unregistering): Released all slaves [ 718.645674][ T3828] bond5 (unregistering): (slave veth7): Releasing active interface [ 718.661928][ T3828] bond5 (unregistering): Released all slaves [ 718.680638][ T3828] bond6 (unregistering): (slave veth15): Releasing active interface [ 718.684550][ T3828] bond6 (unregistering): Released all slaves [ 718.821155][ T3828] tipc: Left network mode [ 718.916715][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 718.969570][ T3828] IPVS: stopping master sync thread 4172 ... [ 718.988822][ T4670] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8951'. [ 719.184093][ T4680] bond7: option xmit_hash_policy: invalid value (6) [ 719.190532][ T4680] bond7 (unregistering): Released all slaves [ 719.229290][ T4682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8954'. [ 719.248628][ T3828] hsr_slave_0: left promiscuous mode [ 719.258366][ T3828] hsr_slave_1: left promiscuous mode [ 719.268814][ T3828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 719.271208][ T3828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 719.274024][ T3828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 719.276381][ T3828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.282488][ T3828] veth1_macvtap: left promiscuous mode [ 719.284322][ T3828] veth0_macvtap: left promiscuous mode [ 719.286121][ T3828] veth1_vlan: left promiscuous mode [ 719.287857][ T3828] veth0_vlan: left promiscuous mode [ 719.307546][ T4684] nbd: must specify a device to reconfigure [ 719.373523][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 719.373535][ T40] audit: type=1400 audit(2000000071.678:62314): avc: denied { mounton } for pid=4685 comm="syz.8.8956" path="/20/file0" dev="tmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 719.525162][ T3828] team0 (unregistering): Port device team_slave_1 removed [ 719.532376][ T3828] team0 (unregistering): Port device team_slave_0 removed [ 719.801418][ T40] audit: type=1400 audit(2000000072.081:62315): avc: denied { execmod } for pid=4695 comm="syz.6.8960" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=196189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 720.034316][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 720.062559][ T40] audit: type=1400 audit(2000000072.325:62316): avc: denied { map } for pid=4710 comm="syz.6.8966" path="/98/file0/cgroup.kill" dev="9p" ino=72614219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 720.211095][ T4715] SET target dimension over the limit! [ 720.212995][ T4715] SET target dimension over the limit! [ 720.216744][ T4714] mkiss: ax0: crc mode is auto. [ 720.245301][ T3828] IPVS: stop unused estimator thread 0... [ 720.279430][T30876] Bluetooth: hci3: command tx timeout [ 720.563720][ T4738] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4738 comm=syz.8.8973 [ 720.567897][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 720.656200][ T4744] syzkaller0: entered promiscuous mode [ 720.658060][ T4744] syzkaller0: entered allmulticast mode [ 720.693879][ T40] audit: type=1326 audit(2000000072.916:62317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.2.8977" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8130f9c629 code=0x0 [ 720.701743][ T4744] tipc: Started in network mode [ 720.703393][ T4744] tipc: Node identity 020d82156e41, cluster identity 4711 [ 720.712942][ T4744] tipc: Enabled bearer , priority 0 [ 720.722094][ T4743] tipc: Resetting bearer [ 720.748670][ T4743] tipc: Disabling bearer [ 720.756313][ T40] audit: type=1400 audit(2000000072.973:62318): avc: denied { mounton } for pid=4752 comm="syz.2.8977" path="/proc/955/task/957/net/netfilter" dev="proc" ino=4026532958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 720.784259][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.786738][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.788942][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.791418][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.793635][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.795800][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.798022][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.800394][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.802830][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.805226][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.808199][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.810668][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.813010][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.815658][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.818377][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.820619][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.823538][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.826115][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.828904][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.831726][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.835323][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.841353][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.855553][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.858779][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.861831][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.864871][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.868108][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.871281][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.874515][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.878960][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.882166][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.885350][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.889082][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.892287][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.895120][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.897463][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.899826][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.902315][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.904683][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.907038][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.909512][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.911904][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.914281][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.916603][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.919065][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.921772][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.924477][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.926825][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.929267][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.932008][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.934397][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.936722][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.939083][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.941560][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.944940][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.947305][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.949654][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.952312][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.954693][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.957012][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.959254][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.961682][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.964054][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.966425][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 720.968923][ T4758] kAFS: Can only specify source 'none' with -o dyn [ 721.055388][ T4762] gfs2: Unknown parameter 'discardj' [ 721.132106][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 721.212643][ T4780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4780 comm=syz.6.8984 [ 721.444677][ T4794] __nla_validate_parse: 4 callbacks suppressed [ 721.444689][ T4794] netlink: 56 bytes leftover after parsing attributes in process `syz.8.8987'. [ 721.473616][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 721.549892][ T4804] netlink: 'syz.1.8991': attribute type 1 has an invalid length. [ 721.561936][ T4804] 8021q: adding VLAN 0 to HW filter on device bond7 [ 721.716452][ T40] audit: type=1400 audit(2000000073.873:62319): avc: denied { connect } for pid=4819 comm="syz.1.8995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 721.731140][ T40] audit: type=1400 audit(2000000073.883:62320): avc: denied { read } for pid=4819 comm="syz.1.8995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 721.755121][ T4822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8996'. [ 721.768640][ T4822] bond8: entered promiscuous mode [ 721.771270][ T4822] 8021q: adding VLAN 0 to HW filter on device bond8 [ 721.790382][ T4822] 8021q: adding VLAN 0 to HW filter on device bond8 [ 721.793790][ T4822] bond8: (slave sit1): The slave device specified does not support setting the MAC address [ 721.798064][ T4822] bond8: (slave sit1): Error -95 calling set_mac_address [ 721.804358][ T29] usb 11-1: new high-speed USB device number 55 using dummy_hcd [ 721.971137][ T4831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.975057][ T4831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.986204][ T29] usb 11-1: config 0 has no interfaces? [ 721.988058][ T29] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 721.990909][ T29] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.994794][ T29] usb 11-1: config 0 descriptor?? [ 722.173533][ T40] audit: type=1400 audit(2000000074.305:62321): avc: denied { read } for pid=4842 comm="syz.2.9001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 722.240622][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 722.291125][ T4850] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 722.388135][T22543] usb 11-1: USB disconnect, device number 55 [ 722.818638][ T4868] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 722.820770][ T4868] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 722.827103][ T4868] vhci_hcd vhci_hcd.0: Device attached [ 722.831719][ T4869] vhci_hcd: cannot find a urb of seqnum 5 max seqnum 0 [ 722.834187][ T3828] vhci_hcd vhci_hcd.8: stop threads [ 722.836509][ T3828] vhci_hcd vhci_hcd.8: release socket [ 722.836529][ T3828] vhci_hcd vhci_hcd.8: disconnect device [ 722.861694][ C2] IPv4: Oversized IP packet from 172.20.20.24 [ 722.896233][ T4872] Cannot find del_set index 4 as target [ 722.899528][ T40] audit: type=1400 audit(2000000074.980:62322): avc: denied { map } for pid=4871 comm="syz.2.9011" path="/339/file0" dev="tmpfs" ino=1896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 722.902853][ T4872] xt_hashlimit: size too large, truncated to 1048576 [ 722.957205][ T4874] vxfs: unable to read disk superblock at 1 [ 722.959298][ T4874] vxfs: unable to read disk superblock at 8 [ 722.961285][ T4874] vxfs: can't find superblock. [ 723.103289][ T4878] 0xfffffffffffffffd-0x000000020000 : "" [ 723.105820][ T4878] mtd: partition "" is out of reach -- disabled [ 723.113236][ T4878] ftl_cs: FTL header not found. [ 723.247849][ T4886] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 723.302058][ T40] audit: type=1400 audit(2000000075.365:62323): avc: denied { name_bind 0x1000000 } for pid=4889 comm="syz.2.9016" path="socket:[197069]" dev="sockfs" ino=197069 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 723.349199][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 723.487824][ T4901] Bluetooth: MGMT ver 1.23 [ 723.695120][ T4907] random: crng reseeded on system resumption [ 723.740595][ T4911] tipc: Cannot configure node identity twice [ 723.745411][ T4911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=4911 comm=syz.8.9024 [ 723.775915][ T4915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38686 sclass=netlink_route_socket pid=4915 comm=syz.8.9025 [ 723.780058][ T4915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38686 sclass=netlink_route_socket pid=4915 comm=syz.8.9025 [ 723.784231][ T4915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38686 sclass=netlink_route_socket pid=4915 comm=syz.8.9025 [ 723.789333][ T4915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38686 sclass=netlink_route_socket pid=4915 comm=syz.8.9025 [ 723.793367][ T4915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38686 sclass=netlink_route_socket pid=4915 comm=syz.8.9025 [ 723.797556][ T4915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38686 sclass=netlink_route_socket pid=4915 comm=syz.8.9025 [ 723.801854][ T4915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38686 sclass=netlink_route_socket pid=4915 comm=syz.8.9025 [ 724.031920][ T4924] block nbd8: NBD_DISCONNECT [ 724.040874][ T4924] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9029'. [ 724.102732][ T4926] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9031'. [ 724.225019][ T4928] ip6gretap0 speed is unknown, defaulting to 1000 [ 724.313318][ T4938] ALSA: seq fatal error: cannot create timer (-19) [ 724.325277][ T4941] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9034'. [ 724.380363][T30876] Bluetooth: hci3: hcon ffff888059264000 sent 1 < count 7 [ 724.468414][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 724.508596][ T4953] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9035'. [ 724.616185][ T4962] ip6gretap0 speed is unknown, defaulting to 1000 [ 724.628200][ T4960] ip6gretap0 speed is unknown, defaulting to 1000 [ 724.722275][ T4970] netlink: 'syz.8.9042': attribute type 20 has an invalid length. [ 724.853443][ T4981] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9048'. [ 724.893657][ T4981] 8021q: adding VLAN 0 to HW filter on device bond1 [ 724.929843][ T4981] tmpfs: Bad value for 'mpol' [ 725.019571][ T5001] tmpfs: Bad value for 'mpol' [ 725.146558][ T5016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9057'. [ 725.352978][ T1343] usb 13-1: new high-speed USB device number 30 using dummy_hcd [ 725.481892][ T5031] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 725.512884][ T1343] usb 13-1: Using ep0 maxpacket: 32 [ 725.516477][ T1343] usb 13-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 725.519924][ T1343] usb 13-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 725.523745][ T1343] usb 13-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 725.527641][ T1343] usb 13-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 725.536235][ T1343] usb 13-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 725.539251][ T1343] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.541889][ T1343] usb 13-1: Product: syz [ 725.543344][ T1343] usb 13-1: Manufacturer: syz [ 725.545196][ T1343] usb 13-1: SerialNumber: syz [ 725.551045][ C3] imon 13-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 725.557334][ T1343] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/input/input111 [ 725.576830][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 725.763859][ T5036] hfs: can't find a HFS filesystem on dev sr0 [ 725.779391][ T1343] imon 13-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 725.782056][ T1343] (id 0x00) [ 725.824521][ T1343] rc_core: IR keymap rc-imon-pad not found [ 725.826651][ T1343] Registered IR keymap rc-empty [ 725.828307][ T1343] imon 13-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 725.831792][ T1343] imon 13-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 725.859414][ T5042] /dev/nullb0: Can't open blockdev [ 725.875718][ T5044] trusted_key: encrypted_key: hex blob is missing [ 725.900399][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 725.900411][ T40] audit: type=1400 audit(2000000077.804:62325): avc: denied { accept } for pid=5047 comm="syz.2.9068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 725.900482][ T5046] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9067'. [ 725.963558][ T5050] sctp: [Deprecated]: syz.2.9070 (pid 5050) Use of struct sctp_assoc_value in delayed_ack socket option. [ 725.963558][ T5050] Use struct sctp_sack_info instead [ 726.005517][ T1343] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0 [ 726.009745][ T1343] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0/input112 [ 726.015325][ T1343] imon 13-1:155.0: iMON device (15c2:ffdc, intf0) on usb<13:30> initialized [ 726.338222][ T5011] imon:send_packet: packet tx failed (-71) [ 726.338499][ T1343] usb 13-1: USB disconnect, device number 30 [ 726.354859][ T5011] imon:vfd_write: send packet #0 failed [ 726.471602][ T5064] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 726.480362][ T5064] netlink: 'syz.2.9072': attribute type 1 has an invalid length. [ 726.483483][ T5064] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9072'. [ 726.589681][ C2] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 726.674649][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 726.880947][ T5070] binder: 5069:5070 ioctl 400c620e 200000000100 returned -22 [ 726.950833][ T5075] 9pnet_virtio: no channels available for device syz [ 727.136434][ T5078] program syz.6.9077 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 727.189209][ T5083] netlink: 'syz.6.9078': attribute type 1 has an invalid length. [ 727.206729][ T5083] 8021q: adding VLAN 0 to HW filter on device bond2 [ 727.244672][ T5083] bond2: (slave veth3): Enslaving as an active interface with a down link [ 727.399423][ T5067] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 727.402452][ T5067] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 727.409726][ T5067] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 727.414080][ T5067] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 727.416847][ T5067] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 727.421520][ T5067] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 727.489471][ T5092] netlink: 'syz.2.9081': attribute type 1 has an invalid length. [ 727.508770][ T5092] 8021q: adding VLAN 0 to HW filter on device bond7 [ 727.615351][ T40] audit: type=1400 audit(2000000079.409:62326): avc: denied { module_load } for pid=5102 comm="syz.2.9084" path="/sys/kernel/hardlockup_count" dev="sysfs" ino=70959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 727.656019][ T5105] __nla_validate_parse: 67 callbacks suppressed [ 727.656062][ T5105] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9083'. [ 727.752553][ T5110] binder: 5109:5110 ioctl c0306201 200000000640 returned -22 [ 727.780035][ T5118] SELinux: syz.6.9087 (5118) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 727.793963][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 727.843750][ T5120] bond8: ARP target 4.0.0.0 is already present [ 727.845797][ T5120] bond8: option arp_ip_target: invalid value (4) [ 727.849945][ T5120] bond8 (unregistering): Released all slaves [ 728.257354][ T5131] comedi: No check for data length of config insn id 72 is implemented [ 728.260838][ T5131] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 728.264922][ T5131] comedi: Assuming n=73 is correct [ 728.268038][ T40] audit: type=1400 audit(2000000080.028:62327): avc: denied { map } for pid=5130 comm="syz.2.9090" path="socket:[199505]" dev="sockfs" ino=199505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 728.635148][ T5140] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 728.704527][ T40] audit: type=1400 audit(2000000080.431:62328): avc: denied { bind } for pid=5141 comm="syz.1.9095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 728.806716][T30876] Bluetooth: hci2: command 0x0c1a tx timeout [ 728.891792][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 728.902281][ T5148] ip6gretap0 speed is unknown, defaulting to 1000 [ 728.938919][ T5153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9096'. [ 729.346843][ T5179] netlink: 104 bytes leftover after parsing attributes in process `syz.8.9102'. [ 729.426235][ T1114] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 729.429116][ T1114] ata1: failed to read log page 10h (errno=-5) [ 729.574361][T30876] Bluetooth: hci3: command 0x0c1a tx timeout [ 729.580994][ T5193] --map-set only usable from mangle table [ 729.707028][ T5204] syzkaller1: entered allmulticast mode [ 730.000288][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 730.270045][ T5243] overlay: filesystem on ./file0 not supported as upperdir [ 730.318404][ T5246] [ 730.319294][ T5246] ====================================================== [ 730.321703][ T5246] WARNING: possible circular locking dependency detected [ 730.323957][ T5246] syzkaller #0 Tainted: G L [ 730.326180][ T5246] ------------------------------------------------------ [ 730.328456][ T5246] syz.8.9118/5246 is trying to acquire lock: [ 730.330460][ T5246] ffff88803da08cd8 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: lookup_slow+0x42/0x70 [ 730.333833][ T5246] [ 730.333833][ T5246] but task is already holding lock: [ 730.336264][ T5246] ffff8880513e3088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 730.339428][ T5246] [ 730.339428][ T5246] which lock already depends on the new lock. [ 730.339428][ T5246] [ 730.342976][ T5246] [ 730.342976][ T5246] the existing dependency chain (in reverse order) is: [ 730.345975][ T5246] [ 730.345975][ T5246] -> #4 (&of->mutex){+.+.}-{4:4}: [ 730.348442][ T5246] __mutex_lock+0x1a2/0x1b90 [ 730.350266][ T5246] kernfs_seq_start+0x4f/0x2a0 [ 730.352110][ T5246] seq_read_iter+0x2c1/0x1270 [ 730.353896][ T5246] kernfs_fop_read_iter+0x46c/0x610 [ 730.355781][ T5246] copy_splice_read+0x4ba/0xb90 [ 730.357586][ T5246] do_splice_read+0x285/0x370 [ 730.359322][ T5246] splice_direct_to_actor+0x2a1/0xa30 [ 730.361304][ T5246] do_splice_direct+0x174/0x240 [ 730.363122][ T5246] do_sendfile+0xadc/0xe20 [ 730.364822][ T5246] __x64_sys_sendfile64+0x1d8/0x220 [ 730.366741][ T5246] do_syscall_64+0x106/0xf80 [ 730.368467][ T5246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.370819][ T5246] [ 730.370819][ T5246] -> #3 (&p->lock){+.+.}-{4:4}: [ 730.373342][ T5246] __mutex_lock+0x1a2/0x1b90 [ 730.375262][ T5246] seq_read_iter+0xe1/0x1270 [ 730.377054][ T5246] proc_reg_read_iter+0x220/0x310 [ 730.378963][ T5246] copy_splice_read+0x4ba/0xb90 [ 730.380798][ T5246] do_splice_read+0x285/0x370 [ 730.382582][ T5246] splice_file_to_pipe+0x82/0x120 [ 730.384430][ T5246] do_sendfile+0x366/0xe20 [ 730.386137][ T5246] __x64_sys_sendfile64+0x1d8/0x220 [ 730.388094][ T5246] do_syscall_64+0x106/0xf80 [ 730.389878][ T5246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.392044][ T5246] [ 730.392044][ T5246] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 730.394621][ T5246] __mutex_lock+0x1a2/0x1b90 [ 730.396335][ T5246] pipe_lock+0x69/0x80 [ 730.397908][ T5246] iter_file_splice_write+0x1fd/0x10a0 [ 730.399886][ T5246] do_splice+0x109c/0x1fd0 [ 730.401457][ T5246] __do_splice+0x237/0x370 [ 730.403070][ T5246] __x64_sys_splice+0x187/0x250 [ 730.404892][ T5246] do_syscall_64+0x106/0xf80 [ 730.406658][ T5246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.408855][ T5246] [ 730.408855][ T5246] -> #1 (sb_writers#6){.+.+}-{0:0}: [ 730.411374][ T5246] mnt_want_write+0x6f/0x450 [ 730.413144][ T5246] ovl_lookup_layers+0x2260/0x2ac0 [ 730.415102][ T5246] ovl_lookup+0x4a8/0x6b0 [ 730.416767][ T5246] __lookup_slow+0x251/0x460 [ 730.418516][ T5246] lookup_slow+0x50/0x70 [ 730.420133][ T5246] link_path_walk+0x1377/0x1cc0 [ 730.421967][ T5246] path_lookupat+0x74/0xc40 [ 730.423724][ T5246] filename_lookup+0x202/0x590 [ 730.425573][ T5246] vfs_statx+0xff/0x3f0 [ 730.427364][ T5246] __do_sys_newlstat+0xaa/0x130 [ 730.429176][ T5246] do_syscall_64+0x106/0xf80 [ 730.431002][ T5246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.433183][ T5246] [ 730.433183][ T5246] -> #0 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 730.436127][ T5246] __lock_acquire+0x14b8/0x2630 [ 730.438161][ T5246] lock_acquire+0x1cf/0x380 [ 730.439883][ T5246] down_read+0x99/0x460 [ 730.441503][ T5246] lookup_slow+0x42/0x70 [ 730.443133][ T5246] path_lookupat+0x5e8/0xc40 [ 730.444923][ T5246] filename_lookup+0x202/0x590 [ 730.446861][ T5246] kern_path+0x37/0x50 [ 730.448492][ T5246] lookup_bdev+0xd8/0x280 [ 730.450208][ T5246] resume_store+0x1d6/0x460 [ 730.451917][ T5246] kobj_attr_store+0x58/0x80 [ 730.453686][ T5246] sysfs_kf_write+0xf2/0x150 [ 730.455416][ T5246] kernfs_fop_write_iter+0x3e0/0x5f0 [ 730.457540][ T5246] vfs_write+0x6ac/0x1070 [ 730.459433][ T5246] ksys_write+0x12a/0x250 [ 730.461531][ T5246] do_syscall_64+0x106/0xf80 [ 730.463450][ T5246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.465684][ T5246] [ 730.465684][ T5246] other info that might help us debug this: [ 730.465684][ T5246] [ 730.469169][ T5246] Chain exists of: [ 730.469169][ T5246] &ovl_i_mutex_dir_key[depth] --> &p->lock --> &of->mutex [ 730.469169][ T5246] [ 730.473405][ T5246] Possible unsafe locking scenario: [ 730.473405][ T5246] [ 730.475834][ T5246] CPU0 CPU1 [ 730.477595][ T5246] ---- ---- [ 730.479460][ T5246] lock(&of->mutex); [ 730.480984][ T5246] lock(&p->lock); [ 730.483160][ T5246] lock(&of->mutex); [ 730.485434][ T5246] rlock(&ovl_i_mutex_dir_key[depth]); [ 730.487276][ T5246] [ 730.487276][ T5246] *** DEADLOCK *** [ 730.487276][ T5246] [ 730.490045][ T5246] 4 locks held by syz.8.9118/5246: [ 730.491799][ T5246] #0: ffff88803f61c2b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 730.494858][ T5246] #1: ffff88802e054420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 730.497794][ T5246] #2: ffff8880513e3088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 730.501055][ T5246] #3: ffff88801c301f08 (kn->active#71){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 730.504488][ T5246] [ 730.504488][ T5246] stack backtrace: [ 730.506523][ T5246] CPU: 0 UID: 0 PID: 5246 Comm: syz.8.9118 Tainted: G L syzkaller #0 PREEMPT(full) [ 730.506540][ T5246] Tainted: [L]=SOFTLOCKUP [ 730.506545][ T5246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 730.506553][ T5246] Call Trace: [ 730.506559][ T5246] [ 730.506566][ T5246] dump_stack_lvl+0x100/0x190 [ 730.506616][ T5246] print_circular_bug.cold+0x178/0x1c7 [ 730.506660][ T5246] check_noncircular+0x146/0x160 [ 730.506680][ T5246] __lock_acquire+0x14b8/0x2630 [ 730.506701][ T5246] lock_acquire+0x1cf/0x380 [ 730.506720][ T5246] ? lookup_slow+0x42/0x70 [ 730.506739][ T5246] ? __pfx___might_resched+0x10/0x10 [ 730.506759][ T5246] ? try_to_unlazy+0x296/0x910 [ 730.506781][ T5246] down_read+0x99/0x460 [ 730.506803][ T5246] ? lookup_slow+0x42/0x70 [ 730.506819][ T5246] ? __pfx_down_read+0x10/0x10 [ 730.506833][ T5246] lookup_slow+0x42/0x70 [ 730.506847][ T5246] path_lookupat+0x5e8/0xc40 [ 730.506864][ T5246] filename_lookup+0x202/0x590 [ 730.506882][ T5246] ? __pfx_filename_lookup+0x10/0x10 [ 730.506906][ T5246] ? __asan_memcpy+0x3c/0x60 [ 730.506920][ T5246] ? do_getname_kernel+0x1be/0x250 [ 730.506932][ T5246] kern_path+0x37/0x50 [ 730.506947][ T5246] lookup_bdev+0xd8/0x280 [ 730.506962][ T5246] ? __pfx_lookup_bdev+0x10/0x10 [ 730.506982][ T5246] ? __asan_memcpy+0x3c/0x60 [ 730.506995][ T5246] resume_store+0x1d6/0x460 [ 730.507008][ T5246] ? __pfx_resume_store+0x10/0x10 [ 730.507022][ T5246] ? find_held_lock+0x2b/0x80 [ 730.507036][ T5246] ? sysfs_file_kobj+0xe4/0x290 [ 730.507051][ T5246] ? sysfs_file_kobj+0xe4/0x290 [ 730.507064][ T5246] ? __pfx_resume_store+0x10/0x10 [ 730.507077][ T5246] kobj_attr_store+0x58/0x80 [ 730.507088][ T5246] ? __pfx_kobj_attr_store+0x10/0x10 [ 730.507100][ T5246] sysfs_kf_write+0xf2/0x150 [ 730.507114][ T5246] kernfs_fop_write_iter+0x3e0/0x5f0 [ 730.507125][ T5246] ? __pfx_sysfs_kf_write+0x10/0x10 [ 730.507139][ T5246] vfs_write+0x6ac/0x1070 [ 730.507154][ T5246] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 730.507167][ T5246] ? __pfx_vfs_write+0x10/0x10 [ 730.507186][ T5246] ksys_write+0x12a/0x250 [ 730.507200][ T5246] ? __pfx_ksys_write+0x10/0x10 [ 730.507217][ T5246] do_syscall_64+0x106/0xf80 [ 730.507228][ T5246] ? clear_bhb_loop+0x40/0x90 [ 730.507240][ T5246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.507252][ T5246] RIP: 0033:0x7f931bd9c629 [ 730.507263][ T5246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.507276][ T5246] RSP: 002b:00007f931ccde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 730.507323][ T5246] RAX: ffffffffffffffda RBX: 00007f931c015fa0 RCX: 00007f931bd9c629 [ 730.507335][ T5246] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003 [ 730.507346][ T5246] RBP: 00007f931be32b39 R08: 0000000000000000 R09: 0000000000000000 [ 730.507358][ T5246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.507368][ T5246] R13: 00007f931c016038 R14: 00007f931c015fa0 R15: 00007fff968fbef8 [ 730.507380][ T5246] [ 730.611666][ T5246] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 730.614945][ T5246] PM: Image not found (code -6) [ 731.023460][T30876] Bluetooth: hci2: command 0x0c1a tx timeout [ 731.119333][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 731.791045][T30876] Bluetooth: hci3: command 0x0c1a tx timeout [ 732.227832][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 733.251094][T30876] Bluetooth: hci2: command 0x0c1a tx timeout [ 733.336363][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 734.007796][T30876] Bluetooth: hci3: command 0x0c1a tx timeout [ 734.434403][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 734.776475][ C2] ata1: illegal qc_active transition (00000000->00080000) [ 735.119937][ T1114] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 735.123897][ T1114] ata1.00: configured for UDMA/100 [ 735.542783][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 736.661837][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 737.759707][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 738.868259][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 739.976833][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available