last executing test programs: 59.406345113s ago: executing program 0 (id=105): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) write$binfmt_elf32(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000097700000fe03200001"], 0x3b) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 59.349723371s ago: executing program 0 (id=107): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="587d830e97dfa2f4c80000000000000000000055af4354ef0feb918c40c3ca8d89b54a71e6d66dedb0c658f65ce1a572f61979349b8094a80ca867b0128256af6d9818a58b07f2383646d7b3296137a8959c08064910a4d9dc126fe39aa398f5dcabcb22db"], 0x0}, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000480)={0x0, "b500e2279c2996817bb959eb2b238deda525e1dbdeffafbf2500"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, &(0x7f0000000280)={0x1, 0x8d6c30f34124690b, 0x55f}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x556, 0x240, 0x3f, 0x3f, 0x32, 0x7f, 0x4, 0x0, {}, {}, {0x40000000}, {}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80000001, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) 56.300390588s ago: executing program 0 (id=117): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x12, 0x0, 0x0, @empty}}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1e0800450200580000000000552dfede1414bbffffffff248086dd0000000010000800000006000000000000000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 56.219056336s ago: executing program 0 (id=118): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/raw\x00') pread64(r0, &(0x7f0000000140)=""/4072, 0xfe8, 0x80073) (async) pread64(r0, &(0x7f0000000140)=""/4072, 0xfe8, 0x80073) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e97800000000e1dbdf250a0000000000000008000500", @ANYRES32=r3, @ANYBLOB], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000200)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000001180), r4) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000001180), r4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001140)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000001000000150000000c000c8006000100d43f0000060003000100000050146ea510000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (async) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001140)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000001000000150000000c000c8006000100d43f0000060003000100000050146ea510000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xfffffffe, 0x100, 0x0, 0x1e5}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000140)) (async) r9 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xfffffffe, 0x100, 0x0, 0x1e5}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000980)=@IORING_OP_SEND_ZC={0x2f, 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x4800}) r13 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r13, 0x0, 0xb, 0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f00000003c0)={0x2e, 0x8, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x2, 0xc58, 0x0, 0x0, 0x1000, 0xffffffff, r13, 0x0, 0x40}}}, &(0x7f0000000440)) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000011c0)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x2}, 0x4002}]}, &(0x7f0000000180)=0x10) 56.111238016s ago: executing program 0 (id=120): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x22826, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1b) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r2, 0x4068aea3, &(0x7f0000000000)={0xda, 0x0, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x9) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000280)=@arm64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000080)={0x2, 0x0, [{0x6, 0x3, 0x1, 0x0, @irqchip={0x3ff, 0x4}}, {0x541, 0x4, 0x0, 0x0, @adapter={0x8001, 0x551, 0x8, 0x10, 0x6}}]}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') (async) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYRES8=0x0]) 55.730944609s ago: executing program 0 (id=128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000060a010400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000440000000010800014000000011080003400000005708000240000000030900010073797a30000000000900020073797a32"], 0x8c}}, 0x4) r1 = socket$unix(0x1, 0x5, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r1], 0x48) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r3, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x1) r4 = creat(&(0x7f0000000580)='./file2\x00', 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x45) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r7, 0xffffffffffffffff}, 0x3c) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="240000001a0001000000ff7f000000008094"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000020000000000000000010000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a5007b009500000000000000724b8f188c14536ea23585f206c7a476df6ac7176bb38012051586b9ec94bbe6591c98bf0fb02fe659159d4061d83a38e5e68ad79f3f375ac485f5084b2a7c0b4f90915613f052e0469bb0c2f10c2f50c8a1abee6848d247ba241cd81cacc26a68560d8c03cf3a490800000000000000381cb1bf8a49c01bd6326fb48d7f2de25d2ac595"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={'macvtap0\x00', {0x2, 0x4e24, @private=0xa010102}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80800, 0x0, 0xffffffffffffffff}) openat$cgroup_ro(r10, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x220100, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 55.618573541s ago: executing program 32 (id=128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000060a010400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000440000000010800014000000011080003400000005708000240000000030900010073797a30000000000900020073797a32"], 0x8c}}, 0x4) r1 = socket$unix(0x1, 0x5, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r1], 0x48) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r3, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x1) r4 = creat(&(0x7f0000000580)='./file2\x00', 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x45) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r7, 0xffffffffffffffff}, 0x3c) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="240000001a0001000000ff7f000000008094"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000020000000000000000010000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a5007b009500000000000000724b8f188c14536ea23585f206c7a476df6ac7176bb38012051586b9ec94bbe6591c98bf0fb02fe659159d4061d83a38e5e68ad79f3f375ac485f5084b2a7c0b4f90915613f052e0469bb0c2f10c2f50c8a1abee6848d247ba241cd81cacc26a68560d8c03cf3a490800000000000000381cb1bf8a49c01bd6326fb48d7f2de25d2ac595"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={'macvtap0\x00', {0x2, 0x4e24, @private=0xa010102}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80800, 0x0, 0xffffffffffffffff}) openat$cgroup_ro(r10, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x220100, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 36.157025128s ago: executing program 2 (id=422): r0 = socket$kcm(0x10, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x200040c4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0xfffffffc, 0x1, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb936aa680b652a88ccf56a1b9ca5386103a5ccbe47b7b9aa6d8d7fca2ba00000000b97800001022f987617c318545790d2200", 0x12}, 0x60) sendmmsg(r3, &(0x7f0000006f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004800) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff20, 0x0, 0x0, 0xffffffffffffffff, 0x100}, 0x2040) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xd0cf3936beb54f18}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=@delqdisc={0x88, 0x25, 0x4, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xc}, {0x7, 0x1}, {0x0, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x4}}, @qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x0, "57a62f9135dc75f9652bcf74affff4d1"}}}, @TCA_RATE={0x6, 0x5, {0x97, 0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_RATE={0x6, 0x5, {0x8, 0x40}}, @TCA_RATE={0x6, 0x5, {0xa8, 0x51}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffff7}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xf}, @TCA_STAB={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000085}, 0x40080) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r7 = syz_io_uring_setup(0x36e6, &(0x7f0000000000)={0x0, 0x3a87, 0x2000, 0x0, 0xdf}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x789c, &(0x7f00000000c0)={0x0, 0x690e, 0x4000, 0x1, 0xcf, 0x0, r7}, &(0x7f0000000140), &(0x7f00000007c0), &(0x7f0000000080)) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a3000000000000200012800b0001006d61637365630000100002800c000100fffffffff7ffff0708000500", @ANYRES32=r6, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 36.059988037s ago: executing program 2 (id=423): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x400caed0, &(0x7f0000000100)={0x1, 0xff03, @ioapic={0xffffffff, 0x1, 0x3, 0x80000000, 0x0, [{0xd2, 0x5, 0x0, '\x00', 0x6}, {0x7, 0x9, 0x9f, '\x00', 0xc}, {0x6, 0x2, 0xfc, '\x00', 0xd1}, {0x5, 0x8, 0xfc, '\x00', 0xa}, {0x2, 0x40, 0x7, '\x00', 0x1}, {0x7f, 0x7, 0x9, '\x00', 0x9f}, {0x4, 0x10, 0x1, '\x00', 0x9}, {0x4, 0x6, 0x2, '\x00', 0x10}, {0x2, 0x3, 0x9, '\x00', 0x80}, {0x3, 0x3, 0x6, '\x00', 0x4}, {0x2, 0x8, 0x4, '\x00', 0x9}, {0x0, 0x2, 0x1, '\x00', 0xb4}, {0xeb, 0x10, 0x4, '\x00', 0x6}, {0x6, 0x6, 0x5, '\x00', 0x8}, {0x8d, 0x2, 0x1, '\x00', 0x7}, {0x80, 0x7, 0x6, '\x00', 0x1}, {0xff, 0x4, 0xff, '\x00', 0x6}, {0x0, 0x0, 0x5, '\x00', 0x1}, {0xa, 0x4, 0x2, '\x00', 0x7}, {0x10, 0x1c, 0x4b, '\x00', 0x3}, {0x6, 0x5, 0x9, '\x00', 0x7d}, {0xd, 0xfa, 0x40, '\x00', 0xa}, {0x5, 0x6, 0xb, '\x00', 0x1}, {0x90, 0xc, 0x4, '\x00', 0x4}]}}) (async) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@index_on}, {@lowerdir={'lowerdir', 0x3d, './file2'}}]}) (async) r2 = add_key$keyring(&(0x7f0000002e00), &(0x7f0000002e40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000002e80)=""/4096, 0x1000) chdir(&(0x7f00000003c0)='./bus\x00') (async) mkdir(&(0x7f0000000240)='./file1/file1\x00', 0x0) 35.941228272s ago: executing program 2 (id=424): setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)={0x18, 0x76, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}]}, 0x18}], 0x1}, 0x0) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r3, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92a4", 0x3}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r3, &(0x7f0000000300), 0x18, 0x3b00, 0x0, 0xfffffffffffffdfd) sendto$inet6(r1, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioperm(0x0, 0x2, 0x2) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x7ff, 0x5, 0x800b, 0x81, 0x0, 0x8, 0x800, 0x1, 0x0}, &(0x7f00000004c0)=0x20) sendmsg$inet_sctp(r7, &(0x7f00000005c0)={&(0x7f0000000140)=@in={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="51ebfecd52d767c04708b42341a81db34229a693bf053b659acda9b874a8bd932346dfa79e65d5d78b7bff8ceaa2a6439f3ccc7eb9be9e390c7b2fcf676b5ea7636382bd21c0805c4df06dc8a91f9800d3ac7a2063649eff9c1647f78175f9a2de5b86bd0030014b0664c31f013fa3491da03c41479f12602501fa161c157e81676c668c1f5cbb048805400dd5615b6d43a1c7973e88", 0x96}, {&(0x7f00000002c0)="faa8a49e3ceb74bb4f1e0c80706e6baacbe1a75e50eb27628a93be28b0593a34b3e8d2e9aa5f84d422e1ea44c16c68d4e43934c13f5f5fb2a732c2e601204a85203bc5ae2c72c762736866cfe0d904b94daa242bec4d09ecb2f63fbc461440aa86de71ba69978178541545606ae39aee5cd42ca22569727e2e3a058b2a8deee167ba2e82b0a005cd989c04078fd508e1739c73625d645e6205862fe0fccbc33f1841e9d422b8cdee70c8f7", 0xab}, {&(0x7f0000000380)="342016c205a8c20dad66d95c2db83c60793d0a32a2835bdd3858c6f84ed7de04ddfb17975f03bfa8aa035bcc0eaecfe6b59cc045d6e30cd0ab823eeb092c12b24a9d8d0aeb5a641004004285b5d0f9345e5d97805f772a10a996f7559848e5552e95bbbcf899e89491210717a5e8af090b40e171e75c0a3d0dc706867f3b9d6aaa00ec1ddef7c54a6cf8de95a754c3a08a5442354e17bd90b2de66d49911cba377ad91aeed1e5811d3459bb1e5eb", 0xae}], 0x3, &(0x7f0000000500)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x400, 0x4, 0x9a000000, 0x5, 0xffff, 0xff, 0x374a}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x2, 0x2, 0x4, r8}}, @authinfo={0x18, 0x84, 0x6, {0x4}}], 0x88, 0x4000040}, 0x1) 35.831351709s ago: executing program 2 (id=425): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) r2 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) close(0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64f7386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc500", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x402, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x2b, 0x4, 0x19401804, 0x2, 0x7, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x101042, 0x10d) close(r3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x2, &(0x7f0000000200)=[{0xb, 0x1, 0xc, 0x5}, {0x66e5, 0x5, 0xc, 0x8b1}]}) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6, r5, 0x0}]) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x1, 0x8, 0x7e4, 0x7fff}}, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x10000, 0x5, 0x5, 0xd}}, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x4, 0x5, 0x9}}]}}]}, 0x78}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f00)=@newtfilter={0x30, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24041091}, 0x800) 35.546624765s ago: executing program 2 (id=426): mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r1, &(0x7f0000000180)) write(r0, &(0x7f00000001c0)='/dev/loop0,131072\x00', 0x12) 35.270989611s ago: executing program 2 (id=431): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac3(0x2, 0x102, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x8214, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf0, 0x3, 0x1, 0x8, 0x20, 0x1, {0x8, 0xb, 0x0, 0x2, 0x1, 0x24, 0x30, 0x40}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xa, 0x59, 0x8000}, [@extension_unit={0x11, 0x24, 0xa, 0x2, 0x1, [0x3, 0x3, 0x0]}, @input_terminal={0x14, 0x24, 0x2, 0x4, 0x205, 0x1, 0xa4, 0x4, 0x2, 0x1, 0x3, 0x5}, @cluster_info_segment={0x6, 0x20, 0x2, 0x22, 0x5d}, @selector_unit={0xc, 0x24, 0xc, 0x7, 0x7, "9b01b493b39c74"}, @mixer_unit={0x9, 0x24, 0x5, 0x4, 0x7, "4933b438"}, @power_domain={0xf, 0x24, 0x10, 0x2, 0x0, 0x6, 0x9, "29043e358568"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6, 0x0, 0x6, "2d1f0e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xf7, 0x8, 0x1, {0xa, 0x25, 0x25, 0xffffffff, 0x10, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xb9, 0x4, 0x8, 0xa, ':L?'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0xff, 0x10, 0x8, 0xf7}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x2, 0x81, 0x8, "9c0ac3fd21"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x90, 0x6, 0x3d, {0xa, 0x25, 0x25, 0x3, 0x0, 0x1ff}}}}}}}}]}}, &(0x7f0000002040)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x300, 0x3, 0x0, 0xe7, 0x20, 0x4}, 0xc, &(0x7f0000000800)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x6, 0x3, 0x1ff}]}, 0x9, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x403}}, {0x76, &(0x7f0000000880)=@string={0x76, 0x3, "57268ac70e3a26a3dbc48a57e4a804dc27eda06c221d938a8370ac986ccf187aaea21ff2ba6539e845c05eb6ed0bc2b007eaf0d148a325024be2de651d05b45cff0253cd664ecbb715d1b148b10dba06c663e44b3822f69703eb5fee795d4622fec0dede178beec4a84f09783c9e759752527e96"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x2801}}, {0xb6, &(0x7f0000000940)=@string={0xb6, 0x3, "598059ed40f346add7c5b6a215455257215414f5f513f35b6c292ce22d96bf14abcad945dc46a5bace799651da4681b16d449b58f5ae4d9be4e3efb4f40abcb89be05d2ff77e99ae9f7ce2e4829a6891c9293dbfe11490ca27246660c5f721ad0e942a65cb5a3ea797cce478efa206a6ff75565deb7d9cb48f4516cf3f43058068c77cec4385666eade3fe22beb1d04ff8f5f39bd8629c361575a745c0e15e7240e7712155a4c84d0a917d15a5d4fa86d1c4ef48"}}, {0xf0, &(0x7f0000000a00)=@string={0xf0, 0x3, "e06fc59ceb7373d23fa37631b3c9e923a5d275dd6af82e949a1e6e1e238c4be6cdba49dc26de2dc8ac71a7bb46c764ff6f896262a7e1651ad81af037577f48444a4eaf195741a0f6231eb67c9a6ad5e83d6e764eff38275732a0fb59b6bb2f7c1045b094045ac5e9fbf32f842f6032ae242187bc09d4ca5a9eeff29574997b257b42aace9bfbc4cb52a54976c0d0108c84875feb2b527e21199624e9a00ed3158d278484fc30049b8d275e0d65e039d6261586cc17e0b17050f8aa769a8e3ff5c3d0d7d21f1e4c2b56a672a75a19863c9fbbc5c6634b9e83611346e3baaa6abe251089724302b10fd154525688d2"}}, {0x47, &(0x7f0000001f00)=@string={0x47, 0x3, "bb99c3af7f8be90a3413453403028d69eb5d6400ccb6a45de210609d15ebd7dbc9e439ad5411ebedbb93807432b6b0e84477cf3a85bb24e57d584a3027ab58112e852bba55"}}, {0x1c, &(0x7f0000001f80)=@string={0x1c, 0x3, "da51e7701b21ce31c05b13bcf80daa9c90688e04a8049d2519f1"}}, {0x4, &(0x7f0000001fc0)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000002000)=@lang_id={0x4, 0x3, 0x405}}]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x2}, 0xfd}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0xfe) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001bc0)={'syztnl0\x00', &(0x7f0000001b40)={'ip6_vti0\x00', 0x0, 0x2f, 0xc, 0x0, 0xffffff50, 0x21, @dev={0xfe, 0x80, '\x00', 0x15}, @remote, 0x7800, 0x700, 0x3d6, 0x2}}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001c00)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d00)=@generic={&(0x7f0000001cc0)='./file0\x00', 0x0, 0x8}, 0x18) capget(&(0x7f0000000100)={0x20071026}, &(0x7f0000000240)={0x3, 0x667, 0xbda, 0x4, 0x0, 0x5}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="1e00000007000000000000000004000000800100", @ANYRES32=0x1, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000002000000040000000d00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x8, 0x44, &(0x7f0000000380)=@raw=[@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff6a}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x10}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xc}, @call={0x85, 0x0, 0x0, 0xb3}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], &(0x7f00000005c0)='GPL\x00', 0xff, 0x1000, &(0x7f0000000b40)=""/4096, 0x41100, 0x20, '\x00', r7, @fallback=0xf, r8, 0x8, &(0x7f0000001c40)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000001c80)={0x4, 0xb, 0x4, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000001dc0)=[r9, 0xffffffffffffffff, r10], &(0x7f0000001e00)=[{0x3, 0x2, 0xe, 0x7}, {0x5, 0x3, 0x3, 0x3}], 0x10, 0x101}, 0x94) syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r11 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r11, 0xd01c4813, &(0x7f0000000640)={0x2, 0xffffffff, 0x100000, 0x400000, 0x0, 0x2}) 35.259239168s ago: executing program 33 (id=431): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac3(0x2, 0x102, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x8214, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf0, 0x3, 0x1, 0x8, 0x20, 0x1, {0x8, 0xb, 0x0, 0x2, 0x1, 0x24, 0x30, 0x40}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xa, 0x59, 0x8000}, [@extension_unit={0x11, 0x24, 0xa, 0x2, 0x1, [0x3, 0x3, 0x0]}, @input_terminal={0x14, 0x24, 0x2, 0x4, 0x205, 0x1, 0xa4, 0x4, 0x2, 0x1, 0x3, 0x5}, @cluster_info_segment={0x6, 0x20, 0x2, 0x22, 0x5d}, @selector_unit={0xc, 0x24, 0xc, 0x7, 0x7, "9b01b493b39c74"}, @mixer_unit={0x9, 0x24, 0x5, 0x4, 0x7, "4933b438"}, @power_domain={0xf, 0x24, 0x10, 0x2, 0x0, 0x6, 0x9, "29043e358568"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6, 0x0, 0x6, "2d1f0e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xf7, 0x8, 0x1, {0xa, 0x25, 0x25, 0xffffffff, 0x10, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xb9, 0x4, 0x8, 0xa, ':L?'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0xff, 0x10, 0x8, 0xf7}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x2, 0x81, 0x8, "9c0ac3fd21"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x90, 0x6, 0x3d, {0xa, 0x25, 0x25, 0x3, 0x0, 0x1ff}}}}}}}}]}}, &(0x7f0000002040)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x300, 0x3, 0x0, 0xe7, 0x20, 0x4}, 0xc, &(0x7f0000000800)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x6, 0x3, 0x1ff}]}, 0x9, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x403}}, {0x76, &(0x7f0000000880)=@string={0x76, 0x3, "57268ac70e3a26a3dbc48a57e4a804dc27eda06c221d938a8370ac986ccf187aaea21ff2ba6539e845c05eb6ed0bc2b007eaf0d148a325024be2de651d05b45cff0253cd664ecbb715d1b148b10dba06c663e44b3822f69703eb5fee795d4622fec0dede178beec4a84f09783c9e759752527e96"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x2801}}, {0xb6, &(0x7f0000000940)=@string={0xb6, 0x3, "598059ed40f346add7c5b6a215455257215414f5f513f35b6c292ce22d96bf14abcad945dc46a5bace799651da4681b16d449b58f5ae4d9be4e3efb4f40abcb89be05d2ff77e99ae9f7ce2e4829a6891c9293dbfe11490ca27246660c5f721ad0e942a65cb5a3ea797cce478efa206a6ff75565deb7d9cb48f4516cf3f43058068c77cec4385666eade3fe22beb1d04ff8f5f39bd8629c361575a745c0e15e7240e7712155a4c84d0a917d15a5d4fa86d1c4ef48"}}, {0xf0, &(0x7f0000000a00)=@string={0xf0, 0x3, "e06fc59ceb7373d23fa37631b3c9e923a5d275dd6af82e949a1e6e1e238c4be6cdba49dc26de2dc8ac71a7bb46c764ff6f896262a7e1651ad81af037577f48444a4eaf195741a0f6231eb67c9a6ad5e83d6e764eff38275732a0fb59b6bb2f7c1045b094045ac5e9fbf32f842f6032ae242187bc09d4ca5a9eeff29574997b257b42aace9bfbc4cb52a54976c0d0108c84875feb2b527e21199624e9a00ed3158d278484fc30049b8d275e0d65e039d6261586cc17e0b17050f8aa769a8e3ff5c3d0d7d21f1e4c2b56a672a75a19863c9fbbc5c6634b9e83611346e3baaa6abe251089724302b10fd154525688d2"}}, {0x47, &(0x7f0000001f00)=@string={0x47, 0x3, "bb99c3af7f8be90a3413453403028d69eb5d6400ccb6a45de210609d15ebd7dbc9e439ad5411ebedbb93807432b6b0e84477cf3a85bb24e57d584a3027ab58112e852bba55"}}, {0x1c, &(0x7f0000001f80)=@string={0x1c, 0x3, "da51e7701b21ce31c05b13bcf80daa9c90688e04a8049d2519f1"}}, {0x4, &(0x7f0000001fc0)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000002000)=@lang_id={0x4, 0x3, 0x405}}]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x2}, 0xfd}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0xfe) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001bc0)={'syztnl0\x00', &(0x7f0000001b40)={'ip6_vti0\x00', 0x0, 0x2f, 0xc, 0x0, 0xffffff50, 0x21, @dev={0xfe, 0x80, '\x00', 0x15}, @remote, 0x7800, 0x700, 0x3d6, 0x2}}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001c00)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d00)=@generic={&(0x7f0000001cc0)='./file0\x00', 0x0, 0x8}, 0x18) capget(&(0x7f0000000100)={0x20071026}, &(0x7f0000000240)={0x3, 0x667, 0xbda, 0x4, 0x0, 0x5}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="1e00000007000000000000000004000000800100", @ANYRES32=0x1, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000002000000040000000d00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x8, 0x44, &(0x7f0000000380)=@raw=[@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff6a}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x10}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xc}, @call={0x85, 0x0, 0x0, 0xb3}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], &(0x7f00000005c0)='GPL\x00', 0xff, 0x1000, &(0x7f0000000b40)=""/4096, 0x41100, 0x20, '\x00', r7, @fallback=0xf, r8, 0x8, &(0x7f0000001c40)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000001c80)={0x4, 0xb, 0x4, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000001dc0)=[r9, 0xffffffffffffffff, r10], &(0x7f0000001e00)=[{0x3, 0x2, 0xe, 0x7}, {0x5, 0x3, 0x3, 0x3}], 0x10, 0x101}, 0x94) syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r11 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r11, 0xd01c4813, &(0x7f0000000640)={0x2, 0xffffffff, 0x100000, 0x400000, 0x0, 0x2}) 32.127776043s ago: executing program 4 (id=463): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x500, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100008) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100008) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_wakeup_irq', 0x101a02, 0x0) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_wakeup_irq', 0x101a02, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c) (async) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000680)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xa3, @loopback, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x804) shutdown(r6, 0x1) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x100, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x80000001, 0x830, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x4, 0xfff1}, {0x0, 0xfff1}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@deltaction={0x6c, 0x31, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x58, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x20000001) (async) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@deltaction={0x6c, 0x31, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x58, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x20000001) close(0x3) (async) close(0x3) copy_file_range(r3, &(0x7f0000000000)=0x7, r3, 0x0, 0x8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) (async) r13 = socket$pptp(0x18, 0x1, 0x2) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r13, 0x40109441, &(0x7f00000001c0)={0x3, 0x2, 0x61ad}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x480, 0x0, 0xff}]}) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x480, 0x0, 0xff}]}) 31.880870685s ago: executing program 4 (id=464): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYRES8=0x0], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000200)={0xd, @raw_data="0910d1cdacb161a34e539b8033ab0200e858d0b8265ff08ca886c0543e7c784619384b22caf782c9ed7ade616a716b9b113fd429f1aa3061dc2e34dc7f22d89f01d17ffa2b04e43b48b129b34ae06be13f0d077c51acdc7db67ad673fb7b3174780e677e1e040247fa10ef1071e8aaff14d69ad27fb3eb30c8cb1436832d0dba161e601b6513d3eae8c2ab233bcbaed962c63f09236ccafe66a084007bf82f9b60a9dbab37bb9754024121e9345f56298ef8488e4ffa56a50f0c091c96d7bf00340a9ead71ea98c8"}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x4d50}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'team_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r7, 0x25, 0x0, @void}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r8, 0x8b2a, &(0x7f0000000040)) sendmsg$nl_route(r8, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@getaddr={0x14, 0x16, 0x8, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@loopback, @in6=@loopback, 0x4e21, 0x401, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3c, 0x0, r10}, {0x1ff, 0x0, 0x4, 0x3869, 0x2, 0x6, 0xb98, 0x81}, {0xfffffffffffffff1, 0x9, 0x3, 0x4}, 0x7fff, 0x6e6bb1, 0x2, 0x1, 0x2, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4d6, 0x2b}, 0xa, @in6=@loopback, 0x3507, 0x2, 0x3, 0x8, 0xd7, 0x5, 0x9}}, 0xe8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r9, 0x1, 0x9, &(0x7f00000003c0)=0x246, 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001500)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x3, 0x1, 0x2}}) 30.938860953s ago: executing program 4 (id=479): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x10}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x400002}], 0x1, 0x20000020, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB='!\x00'], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000102000/0x1000)=nil, 0x1000) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 30.79159065s ago: executing program 4 (id=481): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x9, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x81, 0x1, 0xa000200000a958, 0x2000000008, 0x7e07, 0x4, 0x48cd, 0x80000003, 0xd6f}) 30.728765888s ago: executing program 4 (id=483): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xba}}, 0x10) r3 = syz_open_dev$loop(&(0x7f0000000200), 0x3, 0x182) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000040)) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x40, 0x3, 0x3, 0x3}, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 30.419398325s ago: executing program 4 (id=491): r0 = fsopen(&(0x7f0000000000)='omfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[r4, r3, r3], 0x3}) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000004c0)={r7, 0x0, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000300)={r3, r7, 0x0, 0x3a, 0xc1}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r13) r14 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r15, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a80)=@delqdisc={0x380, 0x25, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x10, 0x6}, {0x5, 0xb}, {0xffe0, 0x2}}, [@TCA_RATE={0x6, 0x5, {0xd, 0x38}}, @qdisc_kind_options=@q_red={{0x8}, {0x344, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x8}, @TCA_RED_STAB={0x104, 0x2, "74b51548674f13696d34508f37123f43bf4f5db7a2bd8b567964d555238e2cc5ea97459352273e3b9ac4b029b814438f4e16eeaf81b29e8e28a5a18b48b69e3e1aadca8dba1807e4bf87c7172d63f80fd3ef325a07240478794c98b801be0db6729d4459e6f2c1332091501ece07be2aba7b9ad2db0093631d11866435743453bebb4befd177274b0491ed88a8c267f66b45f4fd1a13aea9e95ee7614a91ed38ceb15c3e465745cef87c1b745fe8fb860f506e6035fdef9094db4b7f72b9cef373a700263f9004964557054900dc3026c99778ebc8b2994dd58a5c209e1f5f8e64ae52beb3e8801589fbe9ba20fa8767129ad2d9725bea1f8513648ccec75b8d"}, @TCA_RED_PARMS={0x14, 0x1, {0xc, 0x5, 0x9, 0xe, 0x17, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x4}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0xe}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x9}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x380}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r16 = socket$kcm(0x11, 0x3, 0x0) r17 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r17, 0xc0205647, &(0x7f0000000080)={0xf010004, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x16, '\x00', @string=0x0}}) sendmsg$kcm(r16, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r10, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x59}], 0x1}, 0x4011) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) 30.375947056s ago: executing program 34 (id=491): r0 = fsopen(&(0x7f0000000000)='omfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[r4, r3, r3], 0x3}) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000004c0)={r7, 0x0, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000300)={r3, r7, 0x0, 0x3a, 0xc1}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r13) r14 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r15, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a80)=@delqdisc={0x380, 0x25, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x10, 0x6}, {0x5, 0xb}, {0xffe0, 0x2}}, [@TCA_RATE={0x6, 0x5, {0xd, 0x38}}, @qdisc_kind_options=@q_red={{0x8}, {0x344, 0x2, [@TCA_RED_STAB={0x104, 0x2, "6a5da408ff1040fc79bbbe16f83d8a3ed473a25a9778859dd41465217a03619db0d202cb8cd0ca3aebfc4db8877ec742026a9e16c129ec349f3eaddc1aa49091dc89edefbd63eee2e44fa1569a4bdcd8c20decc0b5ff5433d284cb015a343809a66ac8a1f6dd6ffdab4150ba4368a107c54e11464b0944a1a7d1a13d8dd2b5aef91595a8e94fb980840ea636835f9d5fe6298c5949fb935b7d4794e7e13dfde62598fc397f7ca71064bd36ab557844ff73b752d69264bd24e8ac69c95fb59a52594af791d67485bd9e5185ed4d0d39666544b3641c3e1c7afc8dcb3cfdd6c8e10f21cfd1cb5879eb61947c02b1d3fe8b524b40150b0fb7881db978ae239bab3c"}, @TCA_RED_MAX_P={0x8, 0x3, 0x8}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0xc, 0x5, 0x9, 0xe, 0x17, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x4}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0xe}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x9}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x380}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r16 = socket$kcm(0x11, 0x3, 0x0) r17 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r17, 0xc0205647, &(0x7f0000000080)={0xf010004, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x16, '\x00', @string=0x0}}) sendmsg$kcm(r16, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r10, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x59}], 0x1}, 0x4011) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) 10.30828958s ago: executing program 5 (id=745): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'wlc\x00', 0x0, 0x5, 0x72}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x4d, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e26, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 10.302219116s ago: executing program 5 (id=747): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl(r0, 0x3b8e, &(0x7f0000000580)="10") (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x12, r0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0xfdfd, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x2, 0x6, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x8000, 0x4, 0x8000}}) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f00000003c0)={0x5, 0x0, &(0x7f0000ffe000/0x2000)=nil}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r2, 0x3b86, &(0x7f00000002c0)={0x18, r5, 0x6, 0x87a}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff1}, {0x6, 0xc}, {0xffe0, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc084}, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000b31e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b857fb90f60000012cbd7000fbdbdf25de000000d60c00000000000000000001e000000200000000000000010000000000000004000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r11, 0x303, 0x70bd2a, 0x25dfdbff, {0xa}}, 0x14}}, 0x20000024) (async) ioctl(r10, 0x1, &(0x7f0000000840)="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") sendmsg$nl_xfrm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@bridge_getneigh={0x4c, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_WEIGHT={0x8, 0xf, 0x7}, @IFLA_BROADCAST={0xa}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x80000001}, @IFLA_TXQLEN={0x8, 0xd, 0xebf}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x0) 10.274723953s ago: executing program 5 (id=750): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x7}}, @restrict={0xe}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x6, 0x1}, {}, {0x40005}, {0x9, 0x2}]}]}}, 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000001880)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x34}}, 0xc088) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000003000000000000000500000d"], 0x0, 0x4b}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000002c0)={0x0, 0x5a}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='cpuacct.usage_all\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 10.13079701s ago: executing program 5 (id=752): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x1, 0x0, 0x3, 0x2, 0x9}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x1, 0x0, 0x3, 0x2, 0x9}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) ioctl(r1, 0x8b32, &(0x7f0000000040)) (async) ioctl(r1, 0x8b32, &(0x7f0000000040)) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) (async) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @mcast2, 0x7}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @mcast2, 0x7}, 0x1c) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x4}, [@ldst={0x2, 0x3, 0x3, 0x8, 0xa, 0xfffffffffffffffe, 0x1}]}, &(0x7f00000005c0)='GPL\x00'}, 0x94) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x4}, [@ldst={0x2, 0x3, 0x3, 0x8, 0xa, 0xfffffffffffffffe, 0x1}]}, &(0x7f00000005c0)='GPL\x00'}, 0x94) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x53fe0) (async) sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x53fe0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') connect$unix(r6, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendto$inet6(r3, &(0x7f0000001200)="80006466d3805699", 0x8, 0x40d0, &(0x7f0000000000)={0xa, 0x4e22, 0x805, @mcast2, 0x4}, 0x1c) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) (async) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r9, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@map=r10, r10, 0x2f, 0x18, 0x4, @void, @value, @void, @void, r11}, 0x20) getsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000300)={@local}, &(0x7f0000000340)=0x14) (async) getsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000300)={@local, 0x0}, &(0x7f0000000340)=0x14) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@ifindex=r12, r8, 0xa, 0x8, 0x0, @void, @value=r5, @void, @void, r11}, 0x20) write$cgroup_pid(r7, &(0x7f00000000c0), 0x12) 10.129376295s ago: executing program 5 (id=753): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x400c080) socket(0x3, 0x80805, 0xee4) socket$kcm(0xa, 0x2, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x400c080) (async) socket(0x3, 0x80805, 0xee4) (async) 9.848142799s ago: executing program 5 (id=756): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') writev(r0, &(0x7f0000001440)=[{&(0x7f0000000000)="eaacee65bb50a3df0cc4600512f780c552f577beda81f68166ddb7de1318d02fc2c3761ae43de9275d055e74d9b475bfbd49d3f2a1b89d6530f922b9bd60a652317a6afc595c476789d6d68d0beba2a651", 0x51}, {&(0x7f00000000c0)="bd1c51d6dfa8b0de1f4be9ef9738f916b3ef0f91481c339b51e168f100f0a1653256063a18d8d595bfeadc45c9b60e007f0572cf803bdeca7542bd2d725220ecf5a76911f4b7ad79d4dfa02c21a64228f5ad4dcb7fa60b03fc86b69fd5b04a858a52238171249a2452633576ba87e7141074e2445a100a2344f6795be3e211586e26422755cc7c885ae2da0d91280fab0d42b1362bccc73418783e109c7e5e14fa616691ba295400558afce97f07bd250e42d1d448bd7685ec4421ba55cd60bdd57cae48de11ec15afd4f782ba5a2b9ccb6f62800b488bc78065906066dc5cfdc476fc67f304bc5c1d7ad110b87db388811d97f01892ccb2ab5e1f2f4d3d50b0b6f6d55998acc227f584e9acd954ed80257b04b26db7a39c5d709d32c7e66f7dc3ed8a1448bec4f857b73a0bccde38218ceae25422a09401ea9561cbf657ddc9f28cfd79d1018cd2b7015822f7f44d9fe62d453d03a665999203459024d77e7b1b30de6fb5bb06448fda549c27f5202c0f3f1287488039b735a15d8a1796f24f7ad27ccd6eb7265fd87cc68b95061f53a6288d7570cb71fd23d3b3028060a720d41919709699e99b5d7556f88c91ed876c9e8cd7f7670aabde9697cdec3b57c42f418b58fa70bb1e04fd823fe6ff6eb4106309d06d1e14b6f43bdf2d4e353d9162d6806564629d8e4d0d3ad8d63c37cb1a14acd57564d2351436c95e4f141d586dc6efab0cadc4dae43caf09db3ca20b0059d6e11df8b1d51e754a3ba25013c8021cfd6a902496b7b52ea05ff53e0154bbad14e719a7339dadcc76f855a0d1d9d92a50124d455a526191e79246615336253af48750a78e98be59a8a9929e2d0abb380324e5b38485e57cf3ddc91dee316a2bc1268be9575725f8cb548cc85b528216792a5f1e16f8a112e6264025967154eda2fd084c829ca295a938deb5f314fb1039812c1e4546dcc4ffd4a9c3899ccd21e49916a29ce52214152ba8d61777d98f20fdfb918b5d0e140c5254d34f67381285e669059300147d596521f857dcda538b5e9de9a76e98cf4871555ee04bd4130dab312b96b5078c1dd7573451322c81a566ffc96427c0112049660d392b9b3e9b37688232b01e05f705d73cf97788aea2b4f30a0e60a916f80496cdecdf37649c08b31bec171c458f073c523cc5cbb71407ecd60451177edc2e75082852f6711a68a51af706b181c135d09612092dfb938c3412cf831da70681fe801f5386c0eb70dc8950e2f582aebbc3399bb21ef43f0ae550e2ae0f60049833c4e9e83d646b9ccbf41f018d02dddd7d1def89fe526673fe951f399dfab8a12d2b54d942404d3c2892b7d84a225524ac273ea4cdac909a541ce62cbf76b03c21c80227b7eb17687e3549c0fe6c9e23e84722ca3ab4dff49d8f646b7cda09ef6c404cfe0467c8fb2a0ee6cb414bd2c8d1fd7eb564ed83a4441ac7f42a5d84aa6845bbbdd0b9589dce097543bd58de0c84bdd2696d269796a724a037aea144de0445f00ada917f10d307c0039c89444739d35f4fb5b8c9006b50aa3a24571e6543741d56d9778d8a6bbe0c1888e1dc2c4393609619e61c261669f4dc43618a9d7272a1126203ddb184e5e7eef967e2a9d11248216f832b7b957340051196e2a4fac48d575f33dc59b119ed8f7a85585938049ec3128d77b8e1254681927595233fd15415c3f2dab61b8c2ddd9345a44a405b351012456433f0ac179c543eff1f429a59a9cf8ed21c83ab740b248aca3d057d1a853d31167686952dead3e492de497fb977b7dcb2e840202b07012613e7a46055470e3ee9f51a7055c39041207b8c5a9a4bd648869a46e100e9083f882c8180bc954df0b6542f59668457caaa33e0d4240a7bf30d009b3b24b5b5080765d65b21cb5d66ef1cf97b7558d2e4fa9aa51a1e3362c363fb2c0105b1c6422e759a94a649d77fde8c53d0e6cc2aa82a433a7cbffbd4b41d85a9491a13e13a6661d96cea29c105b8d0bb93469104f26b7876bef17f860b8cde97828a5d4ba09d1ff6368a580e743ac92fb56b050e57b4cd61605694352df51cd3d92bf70253ab65ba51da8111577e0ec8eb104a8499c7a3ca5faebbd1fdb640bc408f0d1f03f9c358de4c789e0e98b86c6659836b2823fe02ef6557e9a8cde26aa696bbecb1c110fc3908b7ca1e50b17d6059c901b9c74112f93997885c7a1187d1489fe5e565cca2cbfe67f767e2dab72d0dbf5fb97caaf584a7748064593589781a64f0f5ee937a039f5fbf5ae7ab9000a6a18fbef774a62359263326621a2be046b7a4a4adcc9723cf8321e667a816f3f6300f4bec97ba56527603301cac96c914a42409b5af000ce52c226b4bc5a94a80c9b426186aa7c976c5bb41158bd77b96e21a4939a54cd60da738500cf72f41bcaeb46905e193148c64d09cfea6883bcef3e6eb84f761c2f66f7a51530c85c7b56e588cf01dd85c643d85ee0803f4b0d909b1674398b512811d3efc784cb3fd46a0a301a7f388e635acab7b684ad259f5d409c3825b02a0b378e46061af08b027283181d400e1504fccaaa4d46c3eaa3dec0ea604079c470a4bddec8f6bbe9f6e9ddde504a867fc74cef6ca8366862b38324a2af682271009e5a697dbe0cab762ed4982d43812347b563b714328cbbb07a7c7a3a59cd4fc6a68641c1b7c8a80a4d6f8c41f3926326fa6cba780ae8916ddff7098786e1777eba067b9844b05fc4d6b6fcf3c958325166120306ce601ceff35d2bc8cefc6c895d42baa5d0f064dd468c715e3dec06b09706b9b4c38f935f382f1e3dfa076395e64e3ae2852776e08f99c112ebe7420becb2498d6fd55a0db97a9beeec989c38526433dbec4963b42defb1ce0b957a7920829cadb0fce3e5b914141219e29123f4421e54497003d5f032cbd91e3bb5935e8a5da7d348834a8297cdce78f52bcd1602328b39d574ef5c286d649ce674a02db49942d4cac4ead8ea0d7a85d86b47413dd8f83efcce0afa45b6d28f9718d68f38d737a468661724f9e0b93d0721beb45758c23c088248509618ee4b8960e94f2c4df2ea34dd31f8abc5e91c205259a670dae8237db97d63db8ed426df2beec6c04c0ef0dc320613d615e62b7992284d6bc07dbfce6a76f8ff4c93032121fefc8fa8dc588ef4d04780d75e17b018fee2a57d244622bef6502cede7a99f6c8b06194ff5abe1c8b132d0251c02eca5a4de1376f5e8047d66990bdc12895930088416758c8963f2d1d5d2735c22d8f644eca5835c10a518aec10fb4722b4b2b6760fe01f8cccd3ce3046eeb0b5f3a6b2c9b039f9e702fc3ea300b66cf9c0ebb7fa564e2c2ca74e3158a62ac96effe1e96841d8c1e0e14af2ef519048cb3044bb601f8e45da5649c2b5b868ddc82b9924054d53ef2282f7ad89a4d1730c7520c1e795ea4af9616bc61194af659581ffa15a71df534aec43bc70fd6fc106f9bf79f491329115096314c92067af6f6a7dfba39204e0a0bac4260eabc0369775ec1479c048ff30a6b8ed4f37329966042f7d8754e516094f099424fd3d2dae08ad7036bad2d781ce7909eed69b464c9211e168171b184a60bb69f783fc3fe74453e1bb6d11a3565f4f460b3b4c49b1ef5e28d4b4ebc567cfe41496e5720b13829899d5b966a46dba3f440ddef3dae798ed101a5abe0872043bdbc8cc581c6e2913647ded4810f63ca3d8d54cbea536838371dd3d940df0c2e2900f53c30a83c5a673f1910bb3d1ae1fa5843092b1e6f44383ff8105d2dcda93a8c5e175fac18484ce0caa28d124abb69fd70580b9035e31f2210bbe9de750af6089976af934fdcc027ca3050ca0f63af04a10d5171e8cad338cd120b580e1e912b9258e90a8e0f7e5ee31067e26271b3776adb653070990d75aef4d6bc0b9ca3df6b1c51752fd12c3704c3413ba5722291ee05ccff0b32e48d84469540f5c655046a7c3ddb33e51fd4d6dd80a260e811da659e15ef78067d8b77775eca03c07bed500057d7cc30e4ef1cf42b14e571ce98da35a5386151287c42c8cab0799aaa547dbbc6e74dd619e71af5919c78e8f4f08ca1e184b39836145b45da7903e130c68920ee73bc9840bb244955ca430f000ee37898537132af53e4ac7cdbd22380cb67f77b56599abba93e0a1929fb0a9c4efb4912aed67364d7e45a30fd320e9599f8e727a79ee152b496f38ea4536820807b361d8f915e634435464e5eeeae92941da59a04863480e531b16fa0bc9a49eca210256bb4204fc33422129011dd5a5dc4720c2c827ca786d453946cc2b7fdbd2a6165b99519e6c354fa07f00fd1493278da262c9af2d22d90ad57e5e72712f71ad573248313af590524e79c4eb348fc8678f78d4e394e199ff76a592582a57f508996c81ac4096a3d6e64b0057eb40e7cad1095c3486484196040e7981a2987be221080185bfcab68cc7a47982f886d20509055d9f1b3ece5758b307df841e48b5dcbfd699f259bf9e09fd2c884486e560429d08d0ad00afa5ee3588fd6745eaaa5a5e4d53aac51452e81496db8b719147d0005401ccb43bc7559a4c77f9bea65e33a8fefc5ff369dd7d28ad27c7915ccbbee49e9f89d7c64f0836940d906d5ad48c40958ce6489058eef3d59f72697f401cc3db3f1110a75b1345d4b7bcacaa5c002421fa1aeb842ce321967c8c09733c9f4a5865541b103b5c40763bed5fa4fca5c1ef76e2baf3fabf556047842a54ff3e00123f17282696d074a1e023aa3c7fba968164bbefd0e66b365e5d962108bb20ec69946fb0e3d7eaa0a323800921439ac1bd8a7c5e8daaeb136bdfd1e9403ec0d54752830d388f97eeb2fa9f9edfb3630185c477d3b54443f8f00e9e5a1e4e325982e5e8e328024f58554872d22a40b4c8b21a57712c3c50f6cf32a2af21a619cf3caff11b756d6bb0a3252a943baf601c3ad7621169986fe6d85f836151b4456e7282071137ff3a21599d28b5c9e551f6f8c995c7218e1cc658cc1947edd189f1d940477a2832ea8da37e63611d116b092b128d90564b6ae766bd115c3b1dd779123726635bbc172857198494bdd41598603e99986f74214a2b5f652f3afd9cee24378536d50af4cb1f04e54f4c5756fa42173c4a6b48bfd1927685fff25d4183be4cdd2934092c3862de3868c71f16b93d0801a4008356ea9db8b7a797c4a56371eaad566862294986dc0e4297987008068147135f86085cd9e78a68056f2c38e41aa611d32ce9d5511b659463b8bab305c37c8bba0e4d50af4089599dfb4910fc39639808314ac97772cb1d9142af1a54fb79a7a83d11e5329bacfc9945b4bdbb56163068c14c76c65d7ecc162e741c0864dbc7af41fc66aa9e240e160b8259c6a5c9446d10c3a5c3bf1204f14830d64583065bcc114781692feff4a8ee12bf0af7c6c858ace5b65e5f7cb8ba6fc5d575712a8f41d8e5c4501eaae05f7bb9b338e91660e778abb558bbcdbf03c63d327a0b7f168ec4fdc96b926e658f681b31395428e3a57e8e93894f23305cf381637ed8376155172ac3b4eee7aca4676a6f1e922311e05cc3cd268b175ba43d8595da54a5a05028b889910a076341d59883481daa6ea92ffaa93cfd92c6e7c005ae9c9f0a76f73e634832e83c6e4f83a5244874745f63a4aff174304aab9c37bd069b7997f043f445b5a8495b0c5c5217f76dd808b137402bc4dfd23a8cb0fd473a823329cc74acba3d8565b89c1a4887f701f04804c9ff9951af1c704e4ecad434731e17f680bd0792d7666e33aa0a176c86379f7bc937c1eaa793c42ba4090b4c976c093060c7", 0x1000}, {&(0x7f00000010c0)="e2c1ce6c00de38577d83618e7bfa3e6279d474c6b0", 0x15}, {&(0x7f0000001100)="ceb138ee043e03817103bb918cb81773c285a8487951a148cef38b76fa724644c7e47f2e0f66f4519aab5e4d336c939aa43c931d6c4082dc3982a581ba00caaeb82a938601a7ee2c8bba5258412ba9cc608a7bab44f4d88d775a53ba98cfdb9b846716b769018d20c1fc84242944c4fa79c93e7f2476c5276b50048e66", 0x7d}, {&(0x7f0000001180)="491974e2ba8f4caa2bd7e26f429b2ef148cf00526c3dcb92b78bf2a4cd5b1d79b5ec67373f9c05ab6a3a40fc", 0x2c}, {&(0x7f00000011c0)="552844fcf95e820b58ebf91b55d4fc8dba7e7c0213174f489239750d4a98dbd16dd6b71f27cb877e05a383", 0x2b}, {&(0x7f0000001200)="256c68ffdf47b9db1cf38653905d7158c6c6a2ad9d72f2ad3e591b93aed7fce11ce69c334533a38be2a4dd8787ea7f4809395847121e48b2a902c39475f403c163fd9a7a1d51b990fabad138c39c7a89ba7d3d0b8f3c2c14c6c5", 0x5a}, {&(0x7f0000001280)="66cd1308e205c4347e6b023190a1871ae2203a6d39b4c519110b31b6ffaafa4bbe189673a6b44c76183fa90e5f6afcdce9bcd5ca092fc3680d9545fc8adc43f25877a58cc29d32db1e56aae72bb40f17f56cf8", 0x53}, {&(0x7f0000001300)="4f5bf9d1a587b5d8c2867c1ff5d7768296e91f290bf5cfd6991acdc83c50a33b2424969732e9d8023d312201028bd2cb5f9f3c3b5ca7b4f39459499ffaf845022edddfa6c209c379dde51145089f774a05c6fa136c8130c760afe0538e52934470b11687e49ffcc6c1e0405bb89349facc7a121eac", 0x75}, {&(0x7f0000001380)="d430c82084d81ed7e4370f323ddd91c14dd5d6b5537d7d576f3d93dc5045816832c820ff1a2ee93539f6e7897a7ba14e956367a585d551ea473bf004bfd2dca7159cc066ac4b60608926c3f96641940975fbe09293edeb0765fd071649343871adb5dc4bd0ade7683af4bf92904a572e5e8753e42e1c0ed01342971dfb394e2588a23f8be4392767dac5f88b962cc46437b498af6cc384139fe2e1fa7894b3419314debd4a9fa4d60d1294641de3834630edd5659717ec28a33adbff98c00a", 0xbf}], 0xa) 9.800660509s ago: executing program 35 (id=756): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') writev(r0, &(0x7f0000001440)=[{&(0x7f0000000000)="eaacee65bb50a3df0cc4600512f780c552f577beda81f68166ddb7de1318d02fc2c3761ae43de9275d055e74d9b475bfbd49d3f2a1b89d6530f922b9bd60a652317a6afc595c476789d6d68d0beba2a651", 0x51}, {&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="e2c1ce6c00de38577d83618e7bfa3e6279d474c6b0", 0x15}, {&(0x7f0000001100)="ceb138ee043e03817103bb918cb81773c285a8487951a148cef38b76fa724644c7e47f2e0f66f4519aab5e4d336c939aa43c931d6c4082dc3982a581ba00caaeb82a938601a7ee2c8bba5258412ba9cc608a7bab44f4d88d775a53ba98cfdb9b846716b769018d20c1fc84242944c4fa79c93e7f2476c5276b50048e66", 0x7d}, {&(0x7f0000001180)="491974e2ba8f4caa2bd7e26f429b2ef148cf00526c3dcb92b78bf2a4cd5b1d79b5ec67373f9c05ab6a3a40fc", 0x2c}, {&(0x7f00000011c0)="552844fcf95e820b58ebf91b55d4fc8dba7e7c0213174f489239750d4a98dbd16dd6b71f27cb877e05a383", 0x2b}, {&(0x7f0000001200)="256c68ffdf47b9db1cf38653905d7158c6c6a2ad9d72f2ad3e591b93aed7fce11ce69c334533a38be2a4dd8787ea7f4809395847121e48b2a902c39475f403c163fd9a7a1d51b990fabad138c39c7a89ba7d3d0b8f3c2c14c6c5", 0x5a}, {&(0x7f0000001280)="66cd1308e205c4347e6b023190a1871ae2203a6d39b4c519110b31b6ffaafa4bbe189673a6b44c76183fa90e5f6afcdce9bcd5ca092fc3680d9545fc8adc43f25877a58cc29d32db1e56aae72bb40f17f56cf8", 0x53}, {&(0x7f0000001300)="4f5bf9d1a587b5d8c2867c1ff5d7768296e91f290bf5cfd6991acdc83c50a33b2424969732e9d8023d312201028bd2cb5f9f3c3b5ca7b4f39459499ffaf845022edddfa6c209c379dde51145089f774a05c6fa136c8130c760afe0538e52934470b11687e49ffcc6c1e0405bb89349facc7a121eac", 0x75}, {&(0x7f0000001380)="d430c82084d81ed7e4370f323ddd91c14dd5d6b5537d7d576f3d93dc5045816832c820ff1a2ee93539f6e7897a7ba14e956367a585d551ea473bf004bfd2dca7159cc066ac4b60608926c3f96641940975fbe09293edeb0765fd071649343871adb5dc4bd0ade7683af4bf92904a572e5e8753e42e1c0ed01342971dfb394e2588a23f8be4392767dac5f88b962cc46437b498af6cc384139fe2e1fa7894b3419314debd4a9fa4d60d1294641de3834630edd5659717ec28a33adbff98c00a", 0xbf}], 0xa) 4.929826315s ago: executing program 7 (id=836): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x0, 0x268, 0x300, 0x0, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x10000000}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000400)={{0x2, 0x4e20, @empty}, {0x0, @random="3c21618477a1"}, 0x0, {0x2, 0x4e23, @rand_addr=0x64010101}, 'team_slave_0\x00'}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg/2:0:0:0\x00', 0x101401, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000140)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x1) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0x13) waitid(0x0, r4, 0x0, 0xb, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ftruncate(r5, 0x7ff) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x8, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x33, 0x6}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r13 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x40) ioctl$SG_IO(r13, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380)="939374c94982", 0x0, 0x2, 0x1c, 0xffffffffffffffff, 0x0}) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$NILFS_IOCTL_GET_CPINFO(r7, 0x80186e82, &(0x7f0000000a80)={&(0x7f00000008c0)=[{0x1, 0x0, 0x5, 0xffffffffffffffff, 0x6, 0x9d, 0x1, 0x6}, {0x1, 0x0, 0x6, 0x555, 0xfffffffffffffff9, 0x2, 0x0, 0x806}, {0x3, 0x0, 0x1, 0xffff, 0x0, 0x7, 0x5, 0x8000000000000000}, {0xe7a9702ffc116d5c, 0x0, 0x8000000000000000, 0x0, 0x7, 0x8000000000000000, 0x0, 0x4}, {0x1, 0x0, 0x56a3, 0x2, 0x6, 0x4, 0x79d4, 0xb}, {0x2, 0x0, 0x6, 0xc, 0x8, 0x1, 0x84b, 0x10000}, {0x1, 0x0, 0xfffffffffffffff1, 0x4, 0x0, 0x8, 0x101}], 0x7, 0x38, 0x1, 0x6}) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f00000002c0)=r5) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) 4.860914201s ago: executing program 7 (id=837): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80800) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x0, 0x100, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffff79f}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8051}, 0x20000000) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x4, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x2, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x340420c1) sendmsg$NFT_BATCH(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x54, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e24, @local}, {0x2, 0x4e21, @multicast2}, 0x108, 0x0, 0x0, 0x0, 0xfc30, &(0x7f00000005c0)='sit0\x00', 0x8, 0x8000000000000001, 0xecc}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000002700)={0x10, 0xfffffffffffffffe, r5}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002780)={'veth0_to_bridge\x00', &(0x7f0000002740)=@ethtool_wolinfo={0x5, 0x200, 0x101, "57f5f1d65a64"}}) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000027c0), 0x1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000002800)=@base={0x21, 0x95, 0x44e96608, 0x577, 0x20, 0x1, 0x7, '\x00', r1, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) r10 = fsmount(0xffffffffffffffff, 0x1, 0x78) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002a00)={0x6, 0xa, &(0x7f0000002880)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @map_fd={0x18, 0xa, 0x1, 0x0, r9}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}], &(0x7f0000002900)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x25, r10, 0x8, &(0x7f0000002940)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000002980)={0x3, 0x1, 0xfffff000, 0x7fffffff}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000029c0)=[{0x5, 0x2, 0x0, 0x4}, {0x4, 0x1, 0xc}, {0x4, 0x3, 0x5, 0x9}, {0x1, 0x4, 0x10, 0x7}], 0x10, 0x4}, 0x94) landlock_create_ruleset(&(0x7f0000002ac0)={0x10800, 0x0, 0x3, 0x1138, 0xd, 0x3}, 0x30, 0x1) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000002b40), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000002b80)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r11, &(0x7f0000002c40)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x1c, r12, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40011}, 0x80) syz_open_dev$amidi(&(0x7f0000002c80), 0xee38, 0x643c7b22f659affa) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000002cc0)='./binderfs2/binder-control\x00', 0x0, 0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r11, &(0x7f0000002e00)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d40)={0x54, r12, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x54}}, 0x800) fstat(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f0000002e40), &(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0), 0x2000001, &(0x7f0000002f80)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@version_L}, {@dfltgid={'dfltgid', 0x3d, r7}}, {@version_L}, {}, {@noextend}], [{@uid_gt={'uid>', r6}}, {@fsname={'fsname', 0x3d, '*/\'%'}}, {@fsname={'fsname', 0x3d, 'sip\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@obj_type={'obj_type', 0x3d, '['}}, {@smackfsdef={'smackfsdef', 0x3d, 'sip\x00'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@uid_lt={'uid<', r6}}, {@uid_gt={'uid>', r14}}, {@dont_measure}]}}) sendmsg$IEEE802154_ASSOCIATE_RESP(r11, &(0x7f00000031c0)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003180)={&(0x7f0000003140)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x23}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x300}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004080) 4.860472977s ago: executing program 7 (id=838): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000500), &(0x7f00000002c0)=0x4) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$nfc_llcp_NFC_LLCP_RW(r7, 0x118, 0x0, &(0x7f00000003c0)=0x7, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) socket$inet(0x2, 0x2, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000340)={0x0, 0x100}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000440)={r10, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}}, 0x5425, 0x5, 0x6, 0x1, 0xa2, 0xa20a, 0x1}, 0x9c) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r11, &(0x7f0000000000)="114353012008ba000000375186dd", 0xe, 0x4008015, &(0x7f00000000c0)={0x11, 0x18, r12, 0x1, 0x7}, 0x14) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000040)={0x0, {0x2, 0x8000}}) ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) 3.435156891s ago: executing program 1 (id=856): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, 0x0) 3.18270013s ago: executing program 1 (id=859): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="ffff01"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000540)={&(0x7f0000000040), 0xc, &(0x7f0000000500)={&(0x7f0000001640)=ANY=[@ANYBLOB="2c040000", @ANYRES16=r1, @ANYBLOB="000326bd7000fcdbdf258800000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x42c}, 0x1, 0x0, 0x0, 0x4008010}, 0x808d) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000600)={@empty, 0x0}, &(0x7f0000000640)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'gre0\x00', &(0x7f0000000680)={'gretap0\x00', 0x0, 0x10, 0x1, 0xfffffff8, 0xf0fe, {{0x1f, 0x4, 0x0, 0x2, 0x7c, 0x68, 0x0, 0xc4, 0x2f, 0x0, @loopback, @multicast2, {[@lsrr={0x83, 0xf, 0x15, [@private=0xa010100, @private=0xa010100, @loopback]}, @cipso={0x86, 0x3c, 0x3, [{0x0, 0xa, "cd6cdade7a09659e"}, {0x5, 0xe, "5a46630ce45e116b95922b48"}, {0x7, 0xf, "59993973cf14ff7e3cdba40c46"}, {0x4, 0xf, "0a0c5b01f03000948ac09c7732"}]}, @rr={0x7, 0xf, 0x38, [@dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0x4c, 0x3, 0x2, [{@loopback, 0x1}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f00000007c0)=[0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0], 0x0, 0x6b, &(0x7f0000000840)=[{}], 0x8, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x6f, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b00)={'ip6_vti0\x00', &(0x7f0000000a80)={'syztnl2\x00', 0x0, 0x4, 0x6, 0x54, 0x4, 0x1, @loopback, @mcast2, 0x700, 0x0, 0xf, 0xa0a}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000b40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000b80)=[0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0], 0x0, 0xaa, &(0x7f0000000c00)=[{}], 0x8, 0x10, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0xa0, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000e80)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001180)={0xffffffffffffffff, 0xe0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x80, &(0x7f0000000f80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000fc0), &(0x7f0000001000), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000001040)}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f00000011c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001200)=0x14) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r11) sendmsg$BATADV_CMD_SET_HARDIF(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r14, 0x1, 0x70bd26, 0x25dddbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4c010) r15 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r16, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r16, {0x0, 0xffe6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x884}, 0x40) r17 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000012c0)={0xffffffffffffffff, 0x58, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000001600)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000015c0)={&(0x7f0000001300)={0x2b0, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8b9f03c82a05c52e}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x1, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x800}, 0x8000001) r20 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r20, 0x8982, &(0x7f0000000000)={0x8, 'netdevsim0\x00', {'lo\x00'}, 0x3}) 3.009598416s ago: executing program 1 (id=863): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x4}, 0x8) shutdown(r0, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0xf, 0x803, 0x800) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000440)={'wg0\x00', 0x600}) (async) listen(0xffffffffffffffff, 0xfffffffe) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x41814) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x40, 0x7ff, 0x1, 0x9, 0x9, 0xd, 0xff, {0x0, @in6={{0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3}}, 0x2, 0x80000001, 0x1, 0x987e, 0x5}}, &(0x7f00000000c0)=0xb0) (async, rerun: 64) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f00000002c0), &(0x7f00000003c0)=0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r8, 0x9}, &(0x7f0000000180)=0x8) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59500000000000000000a911f47", @ANYRES32=r7, @ANYBLOB="140002"], 0x34}}, 0x0) 2.36189688s ago: executing program 7 (id=866): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000500)="f05331a4", 0xfef7, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='my_sys\x00', 0x84001, 0x0) write(r3, &(0x7f0000000800)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000a00)='1', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.316799903s ago: executing program 1 (id=869): r0 = add_key$keyring(&(0x7f000000fa80), &(0x7f000000fac0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f000000fb00), &(0x7f000000fb40)={'syz', 0x1}, &(0x7f000000fb80)="37480ccb54", 0x5, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000400000851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000066000000ffffff80180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) keyctl$search(0xa, r1, &(0x7f000000fc00)='encrypted\x00', &(0x7f000000fc40)={'syz', 0x3}, 0xfffffffffffffffa) 1.261991012s ago: executing program 6 (id=871): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000219000000007f00000000000000f30258b9f5a0040000000000"], 0x0, 0x2e, 0x0, 0x1}, 0x28) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto(r0, &(0x7f0000000240)="70273a155a118f6acc3ee91d5fc1a6e5dc7b46132f2a0631bf80f378f4cdab13cde8b99bc06ff6796e7c13ccd6f2d01493f1f7783dfeab66228ef15931d4e2bdb718b93af6f2508b0b9048e3b000e54fb89cbab9986fd3c595ea3cf1477d996f54dba0b68479101947a18cec927cbe0bb53100eb94df9c3674291b218e8b08aea1dac0814a4ced9c68451c336fc82b241d62d970f007a435d393a5985b9151d269cd6e8654709088", 0xa8, 0x8000, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x2, @private2, 0x5, 0x2}, 0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r1, 0xfffff789) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder-control\x00', 0x0, 0x0) r2 = accept(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003d40)=ANY=[@ANYBLOB="343600003a00290200000000fadbdf2502"], 0x3634}}, 0x8000) sendmsg$inet(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000ac0)='S', 0x1}], 0x1}, 0x4) sendmsg$inet(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="8a", 0x1}], 0x1}, 0x480c0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x2a, &(0x7f0000000100)=r6, 0x4) recvmmsg(r6, &(0x7f0000003080)=[{{&(0x7f0000000400)=@nl, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000480)=""/35, 0x23}, {&(0x7f0000000640)=""/233, 0xe9}, {&(0x7f0000000840)=""/222, 0xde}, {&(0x7f0000000980)=""/45, 0x2d}, {&(0x7f00000009c0)=""/253, 0xfd}, {&(0x7f0000000b00)=""/162, 0xa2}], 0x6, &(0x7f0000000cc0)=""/100, 0x64}, 0x6972}, {{&(0x7f0000000d40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000dc0)=""/76, 0x4c}, {&(0x7f0000000e40)=""/17, 0x11}], 0x2, &(0x7f0000000ec0)=""/60, 0x3c}, 0x9}, {{&(0x7f0000000f00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000f80)=""/254, 0xfe}], 0x1, &(0x7f00000010c0)}, 0x5}, {{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, &(0x7f0000002500)=""/40, 0x28}, 0xc}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000002540)=""/84, 0x54}, {&(0x7f00000025c0)=""/125, 0x7d}, {&(0x7f0000002640)=""/20, 0x14}, {&(0x7f0000002680)=""/137, 0x89}, {&(0x7f0000002740)=""/136, 0x88}, {&(0x7f0000002800)=""/92, 0x5c}, {&(0x7f0000002880)=""/228, 0xe4}], 0x7, &(0x7f0000002a00)=""/38, 0x26}, 0x4}, {{&(0x7f0000002a40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002ac0)=""/229, 0xe5}, {&(0x7f0000002bc0)=""/120, 0x78}, {&(0x7f0000002c40)=""/74, 0x4a}, {&(0x7f0000002cc0)=""/41, 0x29}, {&(0x7f0000002d00)=""/29, 0x1d}, {&(0x7f0000002d40)=""/20, 0x14}, {&(0x7f0000002d80)=""/174, 0xae}, {&(0x7f0000002e40)=""/147, 0x93}, {&(0x7f0000002f00)=""/138, 0x8a}], 0x9}, 0x6}], 0x6, 0x40000140, &(0x7f0000003200)) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x9, 0x8, 0xfffffffd, 0x0, 0xd0, 0x6, 0x2}, 0x9c) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x1f, &(0x7f0000000180)=[{&(0x7f0000000540)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_delrule={0x34, 0x21, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x14, 0x14, 0x4e, 0xd, 0x0, 0x0, 0x8, 0x10001}, [@FRA_DST={0x8, 0x1, @local}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010100}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 1.2613798s ago: executing program 1 (id=872): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x8000, 0x405f, 0x71b, 0xf69b, {{0x14, 0x4, 0x3, 0x2, 0x50, 0x65, 0x0, 0x7f, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@noop, @lsrr={0x83, 0x2b, 0xc2, [@rand_addr=0x64010102, @multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @empty, @dev={0xac, 0x14, 0x14, 0x3a}, @local, @broadcast]}, @generic={0x7, 0x10, "e3f7ade46d1e15a7bdc62c8f809c"}]}}}}}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_getaddrlabel={0x74, 0x4a, 0x400, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x10, 0x0, r1, 0xd349}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @private2}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x80) r2 = io_uring_setup(0x20ea, &(0x7f0000000200)={0x0, 0x2560, 0x4, 0x0, 0x229}) syz_ublk_setup_io_uring(0x7727, &(0x7f0000000280)={0x0, 0x5c3f, 0x200, 0x3, 0xe8, 0x0, r2}, &(0x7f0000000300), &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_ublk_setup_io_uring(0x28ce, &(0x7f00000003c0)={0x0, 0x1709, 0x80300, 0x1, 0x70}, &(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f00000004c0)) r5 = syz_io_uring_complete(r4, r3) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000500), &(0x7f0000000540)=0x30) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000580)=r5, 0x4) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', r1, r5, 0x0, 0x4, 0x2}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x0, '\x00', r1, r5, 0x0, 0x3, 0x5}, 0x50) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f00000008c0)={0x14, &(0x7f00000006c0)={0x40, 0x7, 0xc8, {0xc8, 0x22, "ae87f4c4c19696e2b8f220c4915709d79299ff6c0346a093bda4bac4c3a2be29c28facfb48b36e3bc38ee47e6443ff1f4deb8323bfd0f9b51c04a911f9b14f394325cddddc60766a32f00dd27772322ad6771476f8d637d3258c3f81642949d4439d0240f882664718686e18dee30ae3ec0d36e7e7c9de16ca334e6e65f36771fa67cc09a7fdea107e46ce00ec443ac528b4002e39d953393ff494541a28b1a95eabe5aa1fa05f2a19d29e36900ea584e46d77ad65860ebe5a51e700a12d0ccb5c4f13bc1caa"}}, &(0x7f00000007c0)={0x0, 0x3, 0xd3, @string={0xd3, 0x3, "872aa0f894aaddeb485ea42e8f373815aa06f3ff3f0aa88177c5474dee622ba6799b6dd256bd7917ffd7b0badb45c078f4015b8b7ed575a90c702fbf86a637bfbf1d5f0614a2728effbba9c734463daeb25fd7c7d1c0791cfb30849819e20f5b2895196b6ba81ed6fd2354d1486694bf2f350ac1118bce11d26125db64ddbb785e414ad908e1b3a8d9f1df7c18f79bd8f7163a7b0c9c00fc8a886adc50d6c09763d95ba23cac868bdd862b0c8a03f083007cb37d6733075e8c22ccd37c6e05c0b177bde8919a76e6bc8fc675640a6af8d5"}}}, &(0x7f0000000b00)={0x34, &(0x7f0000000900)={0x20, 0xa, 0x8f, "778eaf859b33ec6628201fbd00ae0fd7cd303f24437006c98894741a84defe347d986419f0f8dae7d6209889176f5f405ac3febe4b9bf1d6697a6423262219770cc29e2297231c3019be56aa196e87794a323081f66e482087717ff8ee4d4697b6e1081c0ead397455f34e33364134881c90f6fe3e743c3449d287936432f95d68f3e0549e2ff473272a4fcaa2126b"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000a40)={0xc0, 0xa1, 0x4, 0x7}, &(0x7f0000000a80)={0x40, 0xa0, 0x4, 0x2}, &(0x7f0000000ac0)={0xc0, 0xa2, 0x2f, "3c669180979e42cd7b02f00758888fd677696f88c1340b1860694f20120ea59c6dffd028fd99f591855b06988464cb"}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r6}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r6}, &(0x7f0000000c00), &(0x7f0000000c40)=r5}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000cc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, r5, 0x1, 0x3}, 0x50) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d80), r5) sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, r7, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x404c880}, 0x2004c840) getpeername$packet(r5, &(0x7f0000000e80)={0x11, 0x0, 0x0}, &(0x7f0000000ec0)=0x14) io_uring_enter(r5, 0x36e8, 0xec7b, 0x0, &(0x7f0000000f00)={[0x2]}, 0x8) r9 = syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000f40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r9, &(0x7f00000010c0)={0x14, &(0x7f0000000f80)={0x20, 0x23, 0xe0, {0xe0, 0x30, "ed0174d70dd24e7b0b1bfd1546ef45adad4bb7fb4662c2a0965a64718d9247107409aef23463bb4012fc6927706f8e0bd833589ee48e8370a697b16412fd0acb2ac9d99cbce677fabfa7aae83582dea5181b548a58a406af2c44db490b505be404e02430e4d0732e03c1e0a9209b276818116accce620633e7a9889483b5574edb6b75f4113590f7700e545c4b4909069f0bbfc8142ba54220491892054b514c5ac4241c09d4a027daa215f1201ae4d6858e5b66f88bd7d6335044cda4699744301970659a1f5d710b64fbb211624096d38010bdb7bfed471972800ef1b0"}}, &(0x7f0000001080)={0x0, 0x3, 0x32, @string={0x32, 0x3, "f4f52c52dd8db638d6ca1b0cdbd8c22c27fa67605dc55eae56c9b1cd64ce2a41a3965f73bcd11636711ff4132088e392"}}}, &(0x7f0000001240)={0x2c, &(0x7f0000001100)={0x20, 0x31, 0x3a, "7dc63226e289de956ce912908febaeca01f521c5ac972ab16bc964bdea8d75c0b32c4b950e2bf38174ca31141c259a357e6a72d19095b5e77149"}, &(0x7f0000001140)={0x0, 0xa, 0x1, 0xca}, &(0x7f0000001180)={0x0, 0x8, 0x1}, &(0x7f00000011c0)={0xc0, 0x5, 0x6, "4ac54948f68d"}, &(0x7f0000001200)}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000001280)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2eaf}) r10 = syz_usb_connect$uac1(0x2, 0x9d, &(0x7f00000012c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x763, 0x2003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x1, 0xb0, 0x80, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff, 0x13}, [@mixer_unit={0x9, 0x24, 0x4, 0x3, 0x6, "7ad20c69"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x4, 0x2, 0x6, 0x9}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xc, 0x1, 0x0, 0xf0, "a3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xff, 0x1d, 0xf, {0x7, 0x25, 0x1, 0xc, 0x2, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x6, 0x6, 0x80, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0x4, 0x7, {0x7, 0x25, 0x1, 0x4, 0x1, 0xfffc}}}}}}}}]}}, &(0x7f0000001500)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x250, 0x7, 0x76, 0x2, 0x40, 0x7}, 0x8, &(0x7f00000013c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0xee, &(0x7f0000001400)=@string={0xee, 0x3, "65711fec9ec6ef57df182229ab136e003b120d4bc42982ecc6505b2d6227c36a547de0f48c561f07f724579eb8ee65e44aff05a4e3adaf1addcb3279e712ceb760f1cdfd20c23e1fe9e434cf1e2695a822b37da9396737f2a27515bd45983391cc9c8c20ee212119a3dda57e2cc04981ca8b0cea304f3a30d611eeeb0c02f09fe080726c7b1c6417e70dd692761cb21b222cdb19b829aefdf156d4e8007e0e985838a1f256d1f1f4bd2b9af0ba5c74c17b52eb0a4b135e9d6bc9ec75930eb1f19978ef482fe7f30219a4496e317cf288549a0140bd8bd75bb22100d52e9d9ae82c35495673a6c17614cf446c"}}]}) syz_usb_control_io$uac1(r10, &(0x7f0000001600)={0x14, &(0x7f0000001540)={0x40, 0x22, 0x78, {0x78, 0x23, "3044118b372130403d54fcca1d1ff7b9c00ebdaabbe535e7bc7c8d42285065fce99044b1d37e02d479d9abe716d73ebf3fbaf7d49e28b5b90dd0f06efa2976c1c0df1d6f183ee736fa3d13010cbecd3833648d403f380872c132122ec0d40e1ba0c70c4cdb7fc30d1c1d810174364dc84328de3c728a"}}, &(0x7f00000015c0)={0x0, 0x3, 0x3a, @string={0x3a, 0x3, "306003eda0fcf42b2325af94aa2246993bcd5b77a319c9dad855e45d4041242ead575c01449d4fa7ab4b5f79253dc7abb71095455ffa6658"}}}, &(0x7f0000001840)={0x44, &(0x7f0000001640)={0x0, 0xf, 0x10, "c1041a5320faaea86a5fce9f16001d19"}, &(0x7f0000001680)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000016c0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000001700)={0x20, 0x81, 0x2, "e8e6"}, &(0x7f0000001740)={0x20, 0x82, 0x2, "13e2"}, &(0x7f0000001780)={0x20, 0x83, 0x3, "ba1f86"}, &(0x7f00000017c0)={0x20, 0x84, 0x3, "56da4d"}, &(0x7f0000001800)={0x20, 0x85, 0x3, 'mn+'}}) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$cgroup_type(r5, &(0x7f00000018c0), 0x9) getsockname(r11, &(0x7f0000001900)=@alg, &(0x7f0000001980)=0x80) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001c80)={r5, 0x20, &(0x7f0000001c40)={&(0x7f0000001b80)=""/38, 0x26, 0x0, &(0x7f0000001bc0)=""/81, 0x51}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x20, 0xa, &(0x7f00000019c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000001a40)='GPL\x00', 0x9, 0xad, &(0x7f0000001a80)=""/173, 0x41000, 0x62, '\x00', r8, @netfilter=0x2d, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001b40)={0x0, 0x10, 0xff, 0x4}, 0x10, r12, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000001cc0)=[{0x5, 0x2, 0x2, 0x9}, {0x4, 0x3, 0x9, 0x6}, {0x3, 0x5, 0xa, 0x1}, {0x3, 0x5, 0x4, 0x5}], 0x10, 0x7}, 0x94) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000001fc0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001e00)={0x148, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x44, 0x1, "5781d8011e8b82eca0aae8bafae0dfe868cd7358c8388b91235ff80cdea41893e4cf98e0b1f7c21e72a2cf03756fe7c5f8c0d52e9cdd0d05b905ddafb5d6d2fb"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xe8, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}}, {0xd8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xd2, 0x2, "4682b65ec9351585898a636873cd1a98faf3c31aff18707932c49a0d0426174a9efc7a1155712b3b0b374d9feb9621895722e0efb8127c2bcc9c6442d53b632055291a199fc31ddec9f3f797d7110ad1f8fce2cab3eaa4e5eaa93ff8fa9b3d5ef7264706df45ebbac24cd5f8b681465ed6420ca876c8af88449b27a1f93488ce5c5ee3c12a84f26b752c0dbc0fbf9ec88c291224b3175f301fa8afb7f08b2d588c2f13d4036329c87e3d88b5a66f8f64ec35e080c1c57fe3bba2717f0fdd51a3398095e7d9ded7b10818a8af3421"}}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1.251912276s ago: executing program 7 (id=873): r0 = landlock_create_ruleset(&(0x7f0000000000)={0xc000, 0x8, 0x0, 0x20c8, 0x8, 0x1}, 0x30, 0x2) (async, rerun: 64) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60) (rerun: 64) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000100)={0x800, r1}, 0x0) (async, rerun: 32) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x8) (rerun: 32) sendmmsg$sock(r1, &(0x7f0000000a80)=[{{&(0x7f0000000140)=@rc={0x1f, @none, 0x8}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="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", 0xfa}, {&(0x7f00000002c0)="c2cd4284146c6a8ad9dc19718e91684532bb65f5c74449eb39ee5c4acf271c38e4c856a38eec2917419450ed6a918f8c68bcfc0269a835098dae120cf93164989c430bf5425bf05d4eb72a0578bbd1ca90ca2761f739eb454ec702cd7ba817df9ae81a017bed1e4768a37cb229e1a0271a9aaee8f447ab07cb15d059486ee855ac017d8c9d9e2548ee1778d81a39a52d15aaddfc6e95feef4f784679223302eba1f15f0888311af97770e93c859d04a799818fff05b001c10c85bbed674a93af8a357e", 0xc3}, {&(0x7f00000003c0)="71bd3b1f4e4186c78961d1813523763fb8a35ab7712e49bcee12194cf2c0972b38a4378bbdcebe5ed5", 0x29}, {&(0x7f0000000400)="efc2908e227d6e6c4a1c9955c6742d", 0xf}, {&(0x7f0000000440)="c0e30bf359bab28c53f26fc2c68c3eba41a37f3c78d832bb76f7830be58e99f233b05db57356b0bf9aa7365319c95d8dc73fa915db2872b23acf0a00740a364e41fd4f5e516cb1b55a35e5f2138a46e2104f1737f7a9d9234fb7fc64168bcf92d5b3c9b21b5d220df1235505dfdfe1a636b2ff0da7749e4ab6f2b0a24d008cb9998340d0756dec831f5131150447dfbee688b0bf3892384da6c01de6717f163ab7a3837986a9491e85a217d4fca64bb2", 0xb0}, {&(0x7f0000000500)="af1eabaf8cf5707f0f4f8c7893777b4c37f55d6dd5849f4917912e414a7ad7aa8d0f26a456a1f5e3347d27704f2d3744642c3cbc3b00c07fe51f8be9d8bee6afc960a41170f21c74dea7fec26a654a19a299b8ed926d02ceb568a8196b565d84", 0x60}, {&(0x7f0000000580)="db4598765f6faa5b37f32dc5c92d720c209da0c423de3fa113cb8f23960e4a33c23b97178a90be31790a727f6d5ca5358ff744e08b763e31fd94bd794e2573c7db290b12f9a7c0560f5b4e7ad9f014101b68b4b8fd2e20", 0x57}], 0x7, &(0x7f0000000680)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x78}}, {{&(0x7f0000000700)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000780)="7e8879e6b584eacd590f3d211ad6e5ff766398b108788aadb099e00e74a3e9d2408977c5c69c81b2bd16a7c69f0d93c9539b5dd86d96979aaafd756ddb2282184cc6b6b5436cf4f6190ebbdee99f2098a487febf8f4622f8de5b24dfe52c2794dc73b5de6f03ab21d77f947209d9e0263a49e1960df6c30e5f37fec71b660c262754a654dc00b159eae73e4b95c81bc03f2398610c22d730f0df7eae33e56823e4e43b69598fd63c2b3262abf6c7c8cd9a0801809a6d7a969fadf30a9894fddbc8ef51294c0b55b90022e2be78", 0xcd}, {&(0x7f0000000880)="e026532f1c7bd5bf34fe1051feceb652c846cc925f37c4e2bcb96eb44834d412595137429a6c6175042cc449b03c75a56914ab9cd8e546f323959845f4b02cde39303ed31b9b76fd58a0f14d70310edda84f86e86904dda039802bb6c13e55042f639768e91ca261919ebdde789f1a3b3df1e514ca1e39e59a36b60ef01bf2f885394ad5077582f93df8cda166995e592bddd4a580ac2c9478f596dc8368a5ad3e26913a8086d7", 0xa7}, {&(0x7f0000000940)="3183bf6a89fed1e9d6d7078d06139ad8cb7543689e018395292af3251843882c32b9", 0x22}], 0x3, &(0x7f00000009c0)=[@mark={{0x14, 0x1, 0x24, 0x743db12e}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xd9c3}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x7f}}], 0xa8}}], 0x2, 0x4880) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000b00)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000d00)={{r2, 0x80000001, 0xfffffffffffff2a5, 0x8, 0x6, 0x9, 0x8, 0x688d, 0x2, 0x1, 0x4, 0xffffffffffffffff, 0x8, 0x7fff, 0x400}}) (async) close(0xffffffffffffffff) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001f80)=@bpf_ext={0x1c, 0xd, &(0x7f0000001d00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x9}, [@generic={0x67, 0x6, 0x3, 0x2, 0x1}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ldst={0x3, 0x2, 0x3, 0xa, 0x0, 0xfffffffffffffffc, 0x8}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}]}, &(0x7f0000001d80)='syzkaller\x00', 0x8, 0x7d, &(0x7f0000001dc0)=""/125, 0x0, 0x86aaf00c926291ba, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001e40)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001e80)={0x3, 0x4, 0x5, 0x7a5}, 0x10, 0x2a8e8, 0xffffffffffffffff, 0x5, &(0x7f0000001ec0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000001f00)=[{0x2, 0x3, 0xe}, {0x5, 0x5, 0xe, 0x8}, {0x1, 0x2, 0x9, 0x7}, {0x0, 0x1, 0x5, 0x6}, {0x4, 0x4, 0x3, 0xa}], 0x10, 0xf}, 0x94) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000002040), 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000002080)={r4, r5}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002380)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3a52, '\x00', 0x0, r5, 0x3, 0x5, 0x5}, 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002480)={0x6, 0x1a, &(0x7f00000020c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7}, @ldst={0x1, 0x1, 0x2, 0x4, 0xa, 0xfffffffffffffff4, 0xfffffffffffffff4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0xb5}, @map_val={0x18, 0x5, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x9}]}, &(0x7f00000021c0)='GPL\x00', 0x2, 0xc2, &(0x7f0000002200)=""/194, 0x41000, 0x1, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000002300)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000002340)={0x4, 0x7, 0x1ff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002400)=[r5, r6, r5], &(0x7f0000002440)=[{0x2, 0x3, 0x5, 0x2}], 0x10, 0x8000}, 0x94) (async) read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0x2020) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000045c0)=@generic={&(0x7f0000004580)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000004740)={r8, &(0x7f0000004600)="fc61a25eedd685dbee6435ca8c535fce6a5afb3dcd4e556efa7e71d07324553da7bf714a10722412d15df3efb0a805b153bcd6938e992414a05c8fd36dd62886573d0257408b9a39a14d9ce73f14f36d7a4337a8040fd09c01d67fab3a33c273e69dd01fe3e890b19a715d47a6daa3e895caf29aaea022afbf1e0d68a0641adeb87fb9e91b282430891105ed406cfd8b4ce700902af3216d3aa6916518c8f834932653a968663c289d15d39efefbb2c3cadc411f9ec6f3dfb6b000d22cd1d32a40c225d486", &(0x7f0000004700)=@udp6=r5, 0x1}, 0x20) (async) close$fd_v4l2_buffer(r5) (async) ioctl$TIOCGPTPEER(r5, 0x5441, 0x6) r9 = syz_open_dev$evdev(&(0x7f0000004780), 0x0, 0x40800) ioctl$EVIOCSABS2F(r9, 0x401845ef, &(0x7f00000047c0)={0x8, 0x613e, 0x80000000, 0x8, 0x2000000, 0x33}) ioctl$BTRFS_IOC_SEND(r7, 0x40489426, &(0x7f0000004840)={{r6}, 0x4, &(0x7f0000004800)=[0x7, 0x1, 0x1, 0x1], 0x0, 0x2, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000004900)={&(0x7f00000048c0)=[0x0, 0x0], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$KVM_GET_API_VERSION(r10, 0xae00, 0x0) (async, rerun: 32) readv(r9, &(0x7f0000005b80)=[{&(0x7f0000004940)=""/210, 0xd2}, {&(0x7f0000004a40)=""/4096, 0x1000}, {&(0x7f0000005a40)=""/42, 0x2a}, {&(0x7f0000005a80)=""/141, 0x8d}, {&(0x7f0000005b40)=""/32, 0x20}], 0x5) (async, rerun: 32) r11 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000005c00), 0x80000, 0x0) (async, rerun: 32) r12 = openat$cgroup_subtree(r10, &(0x7f0000005c40), 0x2, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000005d00)={0x0, 0x2, 0x1}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r11, 0x50009418, &(0x7f0000006100)={{r12}, r3, 0x18, @inherit={0x60, &(0x7f0000005c80)={0x0, 0x3, 0xfffffffffffffffd, 0x80, {0x15, 0x7ff, 0x6, 0xc095, 0x8}, [0x6, 0x0, 0x5]}}, @devid=r13}) ioctl$XFS_IOC_FSGEOMETRY_V4(r7, 0x8070587c, &(0x7f0000007100)) readv(r0, &(0x7f0000007540)=[{&(0x7f0000007180)=""/244, 0xf4}, {&(0x7f0000007280)=""/244, 0xf4}, {&(0x7f0000007380)=""/66, 0x42}, {&(0x7f0000007400)=""/194, 0xc2}, {&(0x7f0000007500)}], 0x5) 1.150642655s ago: executing program 7 (id=874): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0xd}, &(0x7f0000000180)=0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000000000), 0x4) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000080)) syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040a41520900001010203010902270001010080fa0904000003ff000000070581024000000705020240000007058402400000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x4, r7}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0xc0086202, &(0x7f0000000540)=0x1) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x1, 0x470bd2a, 0x25dfd402, {0x0, 0x0, 0x0, r6, 0x6e494, 0x16ac1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5}]}}}]}, 0x44}}, 0x200088c2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r10, 0x4b2f, 0x7f) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/class/firmware/af9005.fw/loading\x00', 0x1, 0x0) write(r11, &(0x7f0000000e00)='-1', 0x2) close(r11) write$selinux_context(r3, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 540.849406ms ago: executing program 3 (id=881): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x6416, &(0x7f0000000000)={0x0, 0x1b3d, 0x10000, 0x3, 0x1db}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_setup(0xb99, &(0x7f0000000140)={0x0, 0xa35b, 0x4, 0x2, 0x1b1, 0x0, r1}) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) 388.90105ms ago: executing program 6 (id=882): creat(&(0x7f0000000000)='file0\x00', 0x1ff) mkdir(&(0x7f0000000100)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001080)='./file0\x00', 0x0, 0x1001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x0, 0x3}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) chmod(&(0x7f0000000080)='file0\x00', 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) write(r0, &(0x7f0000000f00)='file0', 0x5) creat(&(0x7f0000000000)='file0\x00', 0x1ff) (async) mkdir(&(0x7f0000000100)='my_configfs\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) (async) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001080)='./file0\x00', 0x0, 0x1001, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000e00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x1, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) landlock_create_ruleset(&(0x7f00000000c0)={0x0, 0x3}, 0x30, 0x0) (async) landlock_restrict_self(r1, 0x0) (async) chmod(&(0x7f0000000080)='file0\x00', 0x100) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) write(r0, &(0x7f0000000f00)='file0', 0x5) (async) 330.417684ms ago: executing program 6 (id=883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000002900)=ANY=[@ANYBLOB="043e0612a2"], 0x9) sendmmsg$unix(r2, &(0x7f0000006180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000062c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x30, 0xc000}}], 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4000010) close_range(r1, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x1a, 0x0, &(0x7f0000000080)) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x9, 0xe}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x67}]}}]}, 0x3c}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x9, 0xe}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) 330.192807ms ago: executing program 3 (id=884): r0 = socket$kcm(0x10, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) 281.034334ms ago: executing program 1 (id=885): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) listen(0xffffffffffffffff, 0x5) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000000c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_procfs(r1, &(0x7f0000000140)='net/icmp\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x608003) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000890}, 0x4000000) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000004b40)='./binderfs/binder-control\x00', 0x802, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x2c400, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r5, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x73}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008010}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, 0x0}, 0x94) 278.753436ms ago: executing program 3 (id=886): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESHEX=r0], 0x1c}, 0x1, 0x0, 0x0, 0x10000084}, 0x84) 208.039899ms ago: executing program 3 (id=887): ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x1, 0x5, 0x4, 0x4000, 0x8001, {0x0, 0x2710}, {0x3, 0xc, 0x2, 0xbd, 0x7, 0xb7, "7c2879e1"}, 0x9, 0x4, {0xffffffffffffffff}, 0x80000000}) pwrite64(r0, &(0x7f0000000080)="3c5f6455ca7d26e39607de6a8ca6ab6f9599581054e835c2faf9b250b4e52edc69d614cd16e0473fe43c527039b854e5a77f355dcfb7850ce91b50735331d202f16084008238c1d0a9b5e3b7b0c20423dda140", 0x53, 0x3) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r1, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) 200.754739ms ago: executing program 6 (id=888): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$FIONCLEX(r0, 0x5450) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x4}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffff7, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 199.951627ms ago: executing program 6 (id=889): pipe(&(0x7f00000000c0)={0xffffffffffffffff}) (async) ioprio_set$uid(0x3, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) (async) io_setup(0xabf02b6, &(0x7f0000000080)=0x0) io_destroy(r2) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r4, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@ipv4_newnexthop={0x24, 0x68, 0x109, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8, 0x10}]}, 0x24}}, 0x0) (async) preadv(0xffffffffffffffff, 0x0, 0x0, 0x94, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df250200", @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x240400c0}, 0x80c0) (async) r9 = openat$cgroup_type(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r9, &(0x7f0000000280), 0x9) (async) shutdown(r3, 0x1) (async) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) (async) syz_io_uring_setup(0x2671, &(0x7f0000000180)={0x0, 0x1, 0x10000, 0x0, 0x2000032e}, 0x0, 0x0, &(0x7f0000000000)) 118.798164ms ago: executing program 3 (id=890): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x49cf75490397e68f) recvmsg$unix(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x41) sendmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="ba24cda669f1", 0x6}, {&(0x7f0000000100)="4725005ac54dc6f4a4cda394d3747ed1199802b3fb", 0x15}], 0x2, 0x0, 0x0, 0x42890}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8905, &(0x7f0000000340)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000001080)={0x8, 0x10001, 0x4, {0xd, @win={{0x7, 0xdc, 0x9}, 0x7, 0x9, 0x0, 0x5, 0x0, 0x6}}, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000005000000a30c0395"]) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 117.473498ms ago: executing program 3 (id=891): r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b13200007039a0705d15b"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x1418, &(0x7f00000003c0)={0x0, 0x2303, 0x0, 0x0, 0x237}, &(0x7f0000002740)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)) memfd_create(&(0x7f0000000340)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0\xaa\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba6#\xd2\f\x8a\x83\x15\xf6\x04*\x9c\x02\x1b\xd8\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xdf\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\x06\x00\x00\x00~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\x81J\x1ds\x95\x92\xc7\x00\xfe\xff\xff\xff\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\x96\x8f\xeb7\xeew]\xe2jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8\x04\x00\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3{l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwX\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9h\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfb\xda\xa1_\x82~\xdcY\x7f\xdc\xb5e\xcd\x14D\x05|\xae9\xa9\x16\xfen\xe6\x0f\t\xaf\xea6\x00|\xac9\x1a\x0f\xe2\t\xa7e\x8fp\xe2\x99\x811\xb4B\x84\xf46\xf9b\xa43\xf7\xd4\xe7\xdf\x88\xb0c0\x1d\x9a&\x1e\xb6E0tHI\x7f\xb9/kk|5 M\x9c{\xe6,\xa9@U\xab\xa7\xe5`\xd9\xed\xbc\x86RG`\xf2Y\x06\x99;\xb6\xbbH\x00\x00\x00\x00\x00', 0x4) (async) syz_emit_ethernet(0x200000, 0x0, 0x0) (async) syz_io_uring_complete(r1, r2) 0s ago: executing program 6 (id=892): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x1) (async) creat(&(0x7f0000000000)='./file0\x00', 0x1) (async) r1 = creat(&(0x7f0000000580)='./file2\x00', 0x0) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) r3 = fsmount(r2, 0x0, 0x0) (rerun: 64) fchdir(r3) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, 0x0, 0x0) (async, rerun: 64) r5 = fanotify_init(0xf00, 0x0) (rerun: 64) fanotify_mark(r5, 0x105, 0x40009975, r1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x45) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2) (async) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) (async) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) (async, rerun: 64) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) (rerun: 64) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="08f64fd5250200b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x40000) (async) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r11, r10}, 0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x51006}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}]]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r7, &(0x7f0000000b80)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) (async) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) kernel console output (not intermixed with test programs): /0x250 [ 66.295582][ T6492] ? __pfx_ksys_read+0x10/0x10 [ 66.295603][ T6492] do_syscall_64+0x115/0x870 [ 66.295616][ T6492] ? clear_bhb_loop+0x40/0x90 [ 66.295630][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.295642][ T6492] RIP: 0033:0x7f6d6355e84e [ 66.295652][ T6492] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 66.295662][ T6492] RSP: 002b:00007f6d64542fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.295674][ T6492] RAX: ffffffffffffffda RBX: 00007f6d645436c0 RCX: 00007f6d6355e84e [ 66.295680][ T6492] RDX: 000000000000000f RSI: 00007f6d645430a0 RDI: 0000000000000004 [ 66.295687][ T6492] RBP: 00007f6d64543090 R08: 0000000000000000 R09: 0000000000000000 [ 66.295693][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.295699][ T6492] R13: 00007f6d63826038 R14: 00007f6d63825fa0 R15: 00007ffd314b1008 [ 66.295712][ T6492] [ 66.331725][ T6318] veth0_vlan: entered promiscuous mode [ 66.380383][ T6318] veth1_vlan: entered promiscuous mode [ 66.397550][ T6318] veth0_macvtap: entered promiscuous mode [ 66.411727][ T6318] veth1_macvtap: entered promiscuous mode [ 66.424264][ T6318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.431899][ T6318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.478078][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.481095][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.513784][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.517311][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.542270][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.545751][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.548453][ T5814] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.552588][ T5814] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.603121][ T6508] netlink: 40 bytes leftover after parsing attributes in process `syz.4.136'. [ 66.608921][ T6508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.136'. [ 66.710188][ T50] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 66.788409][ T61] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 66.862030][ T6520] xt_hashlimit: size too large, truncated to 1048576 [ 66.872677][ T50] usb 7-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 66.875793][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.879009][ T50] usb 7-1: Product: 祳z [ 66.880458][ T50] usb 7-1: Manufacturer: 祳z [ 66.882080][ T50] usb 7-1: SerialNumber: 祳z [ 66.888346][ T50] etas_es58x 7-1:1.0: Starting 祳z 祳z (Serial Number 祳z) [ 66.970496][ T61] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.981750][ T61] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 66.984754][ T61] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 66.987351][ T61] usb 6-1: Product: syz [ 66.989571][ T61] usb 6-1: Manufacturer: syz [ 66.991200][ T61] usb 6-1: SerialNumber: syz [ 67.208963][ T61] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 67.246028][ T6540] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 67.251348][ T6540] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 67.308350][ T6544] netlink: 16 bytes leftover after parsing attributes in process `syz.3.174'. [ 67.313541][ T42] kauditd_printk_skb: 1836 callbacks suppressed [ 67.313553][ T42] audit: type=1400 audit(1785474911.054:31588): avc: denied { connect } for pid=6543 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 67.315110][ T6544] sysfs: Unknown parameter ' ' [ 67.326499][ T42] audit: type=1400 audit(1785474911.064:31589): avc: denied { read } for pid=6543 comm="syz.3.174" name="mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 67.338334][ T42] audit: type=1400 audit(1785474911.064:31590): avc: denied { open } for pid=6543 comm="syz.3.174" path="/dev/input/mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 67.388609][ T42] audit: type=1400 audit(1785474911.134:31591): avc: denied { read } for pid=6543 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 67.407822][ T42] audit: type=1400 audit(1785474911.144:31592): avc: denied { read write } for pid=6505 comm="syz.1.168" name="lp0" dev="devtmpfs" ino=2934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 67.416418][ T42] audit: type=1400 audit(1785474911.154:31593): avc: denied { open } for pid=6505 comm="syz.1.168" path="/dev/usb/lp0" dev="devtmpfs" ino=2934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 67.436291][ T42] audit: type=1400 audit(1785474911.174:31594): avc: denied { mounton } for pid=6546 comm="syz.3.176" path="/38/file0" dev="tmpfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.455448][ T42] audit: type=1400 audit(1785474911.194:31595): avc: denied { create } for pid=6548 comm="syz.4.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 67.472598][ T61] usb 6-1: USB disconnect, device number 6 [ 67.483542][ T61] usblp0: removed [ 67.556612][ T6562] netlink: 92 bytes leftover after parsing attributes in process `syz.3.178'. [ 67.559671][ T6562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.178'. [ 67.564102][ T6562] netlink: 92 bytes leftover after parsing attributes in process `syz.3.178'. [ 67.566923][ T6562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.178'. [ 67.570609][ T6562] netlink: 92 bytes leftover after parsing attributes in process `syz.3.178'. [ 67.573839][ T6562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.178'. [ 67.576810][ T6562] netlink: 92 bytes leftover after parsing attributes in process `syz.3.178'. [ 68.091127][ T50] etas_es58x 7-1:1.0: could not retrieve the product info string [ 68.130651][ T6570] ip6gretap1: entered promiscuous mode [ 68.132555][ T6570] ip6gretap1: entered allmulticast mode [ 68.155154][ T50] usb 7-1: USB disconnect, device number 6 [ 68.161055][ T50] etas_es58x 7-1:1.0: Disconnecting 祳z 祳z [ 68.290584][ T42] audit: type=1400 audit(1785474912.034:31596): avc: denied { write } for pid=6577 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.307521][ T6576] openvswitch: netlink: Missing key (keys=40, expected=100) [ 68.367794][ T42] audit: type=1400 audit(1785474912.104:31597): avc: denied { write } for pid=6584 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.565868][ T6595] mmap: syz.1.183 (6595) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 68.776618][ T6600] ipvlan2: entered allmulticast mode [ 68.778643][ T6600] batadv_slave_1: entered allmulticast mode [ 68.784069][ T6600] batman_adv: batadv0: Adding interface: ipvlan2 [ 68.786665][ T6600] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.798392][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.802605][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.806633][ T6600] batman_adv: batadv0: Interface activated: ipvlan2 [ 68.821058][ T6601] openvswitch: netlink: Flow actions attr not present in new flow. [ 68.827830][ T50] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 68.883211][ T6609] macvtap1: entered promiscuous mode [ 68.885031][ T6609] macvtap1: entered allmulticast mode [ 68.900165][ T6611] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 68.987839][ T50] usb 6-1: Using ep0 maxpacket: 16 [ 68.992234][ T50] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 68.995138][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.997615][ T50] usb 6-1: Product: syz [ 68.999104][ T50] usb 6-1: Manufacturer: syz [ 69.000577][ T50] usb 6-1: SerialNumber: syz [ 69.004439][ T50] usb 6-1: config 0 descriptor?? [ 69.008313][ T50] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 69.011256][ T50] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 69.615659][ T50] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 69.661231][ T6632] kvm: user requested TSC rate below hardware speed [ 69.664015][ T6632] kvm: vcpu 0: requested 5792 ns lapic timer period limited to 200000 ns [ 69.666664][ T6632] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3538623789 (113235961248 ns) > initial count (200000 ns). Using initial count to start timer. [ 69.764327][ T6643] key id 000004d2 not found [ 69.829786][ T6649] warning: `syz.3.201' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.005474][ T6669] netlink: 'syz.2.208': attribute type 10 has an invalid length. [ 70.031099][ T50] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 70.033591][ T6669] team0 (unregistering): Port device team_slave_0 removed [ 70.034273][ T50] em28xx 6-1:0.0: board has no eeprom [ 70.042536][ T6669] team0 (unregistering): Port device team_slave_1 removed [ 70.097785][ T50] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 70.100602][ T50] em28xx 6-1:0.0: dvb set to bulk mode. [ 70.102717][ T5842] em28xx 6-1:0.0: Binding DVB extension [ 70.118552][ T50] usb 6-1: USB disconnect, device number 7 [ 70.124621][ T50] em28xx 6-1:0.0: Disconnecting em28xx [ 70.159072][ T5842] em28xx 6-1:0.0: Registering input extension [ 70.163444][ T50] em28xx 6-1:0.0: Closing input extension [ 70.175658][ T6682] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 70.180862][ T6682] SELinux: failed to load policy [ 70.186623][ T6682] openvswitch: netlink: IP tunnel dst address not specified [ 70.194685][ T6682] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 70.195380][ T50] em28xx 6-1:0.0: Freeing device [ 70.278412][ T6696] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 70.284423][ T6696] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 70.495048][ T6711] program syz.3.222 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.597335][ T6723] 8021q: VLANs not supported on sit0 [ 70.621006][ T6727] devpts: Bad value for 'max' [ 70.676261][ T6737] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 70.897428][ T6754] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6754 comm=syz.2.236 [ 71.180296][ T6781] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 71.182536][ T6781] SELinux: failed to load policy [ 71.239846][ T6785] overlayfs: failed to resolve './file1': -2 [ 71.258887][ T5890] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 71.263263][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.266934][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.407879][ T5890] usb 8-1: device descriptor read/64, error -71 [ 71.422468][ T6796] udc dummy_udc.0: failed to start g1: -19 [ 71.433936][ T6796] UDC core: g1: couldn't find an available UDC or it's busy [ 71.477797][ T5843] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 71.608907][ T6806] netlink: 'syz.1.254': attribute type 10 has an invalid length. [ 71.613411][ T6806] netlink: 'syz.1.254': attribute type 10 has an invalid length. [ 71.638530][ T5843] usb 7-1: Using ep0 maxpacket: 8 [ 71.643816][ T5843] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 71.647428][ T5843] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 71.653712][ T5843] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 71.658828][ T5843] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.659128][ T5890] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 71.663133][ T5843] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 71.669680][ T5843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.704314][ T6813] 0: reclassify loop, rule prio 0, protocol 03 [ 71.748517][ T6816] __nla_validate_parse: 8 callbacks suppressed [ 71.748535][ T6816] netlink: 216 bytes leftover after parsing attributes in process `syz.1.257'. [ 71.807829][ T5890] usb 8-1: device descriptor read/64, error -71 [ 71.895276][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.259'. [ 71.899083][ T6824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.259'. [ 71.900249][ T5843] usb 7-1: GET_CAPABILITIES returned 0 [ 71.902715][ T6824] netlink: 'syz.4.259': attribute type 12 has an invalid length. [ 71.905955][ T5843] usbtmc 7-1:16.0: can't read capabilities [ 71.912340][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.259'. [ 71.914949][ T6824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.259'. [ 71.918078][ T6824] netlink: 'syz.4.259': attribute type 12 has an invalid length. [ 71.928139][ T5890] usb usb8-port1: attempt power cycle [ 71.928215][ T5814] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.933163][ T5814] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.936689][ T5814] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.940350][ T5814] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.956565][ T6826] netlink: 36 bytes leftover after parsing attributes in process `syz.4.260'. [ 72.180437][ T5843] usb 7-1: USB disconnect, device number 7 [ 72.278830][ T6837] dummy0: entered allmulticast mode [ 72.297913][ T5890] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 72.322532][ T5890] usb 8-1: device descriptor read/8, error -71 [ 72.577915][ T5890] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 72.598811][ T5890] usb 8-1: device descriptor read/8, error -71 [ 72.708083][ T5890] usb usb8-port1: unable to enumerate USB device [ 72.846428][ T42] kauditd_printk_skb: 52 callbacks suppressed [ 72.846446][ T42] audit: type=1400 audit(1785474916.584:31650): avc: denied { ioctl } for pid=6855 comm="syz.1.269" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 72.859415][ T42] audit: type=1400 audit(1785474916.604:31651): avc: denied { accept } for pid=6853 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.866220][ T42] audit: type=1400 audit(1785474916.604:31652): avc: denied { write } for pid=6853 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.872951][ T42] audit: type=1400 audit(1785474916.604:31653): avc: denied { read } for pid=6853 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.951795][ T6854] pci_bus 0000:01: busn_res: [bus 01] is released [ 73.045485][ T42] audit: type=1400 audit(1785474916.784:31654): avc: denied { write } for pid=6860 comm="syz.2.271" name="functions" dev="configfs" ino=10027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.057776][ T42] audit: type=1400 audit(1785474916.784:31655): avc: denied { remove_name } for pid=6860 comm="syz.2.271" name="uac1.usb0" dev="configfs" ino=8130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.065379][ T42] audit: type=1400 audit(1785474916.784:31656): avc: denied { rmdir } for pid=6860 comm="syz.2.271" name="uac1.usb0" dev="configfs" ino=8130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.143780][ T42] audit: type=1400 audit(1785474916.884:31657): avc: denied { kexec_image_load } for pid=6859 comm="syz.1.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 73.448167][ T6877] loop4: detected capacity change from 0 to 2640 [ 73.456683][ T6877] Buffer I/O error on dev loop4, logical block 0, async page read [ 73.459796][ T6877] Buffer I/O error on dev loop4, logical block 0, async page read [ 73.463022][ T6877] Buffer I/O error on dev loop4, logical block 0, async page read [ 73.465462][ T6877] Buffer I/O error on dev loop4, logical block 0, async page read [ 73.468185][ T6877] Buffer I/O error on dev loop4, logical block 0, async page read [ 73.470538][ T6877] Buffer I/O error on dev loop4, logical block 0, async page read [ 73.472987][ T6877] Buffer I/O error on dev loop4, logical block 0, async page read [ 73.475522][ T6877] Buffer I/O error on dev loop4, logical block 0, async page read [ 73.478091][ T6877] ldm_validate_partition_table(): Disk read failed. [ 73.480144][ T6877] Buffer I/O error on dev loop4, logical block 0, async page read [ 73.482547][ T6877] Buffer I/O error on dev loop4, logical block 0, async page read [ 73.485013][ T6877] Dev loop4: unable to read RDB block 0 [ 73.486959][ T6877] loop4: unable to read partition table [ 73.489129][ T6877] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 73.551025][ T42] audit: type=1400 audit(1785474917.294:31658): avc: denied { create } for pid=6882 comm="syz.4.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 73.680221][ T6901] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 73.691943][ T6896] bond1 (unregistering): Released all slaves [ 73.885376][ T6919] binder: 6917:6919 ioctl c018620c 2000000005c0 returned -1 [ 73.889435][ T6918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.972780][ T6918] netlink: 28 bytes leftover after parsing attributes in process `syz.4.288'. [ 73.978681][ T42] audit: type=1400 audit(1785474917.724:31659): avc: denied { ioctl } for pid=6916 comm="syz.4.288" path="/dev/input/mice" dev="devtmpfs" ino=940 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 74.018991][ T56] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 74.067645][ T6934] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 74.073285][ T6934] netlink: 4376 bytes leftover after parsing attributes in process `syz.1.292'. [ 74.076833][ T6934] netlink: 4376 bytes leftover after parsing attributes in process `syz.1.292'. [ 74.118213][ T6938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6938 comm=syz.1.293 [ 74.126501][ T6938] fuse: Unknown parameter 'rootmode' [ 74.129436][ T6938] netlink: 'syz.1.293': attribute type 1 has an invalid length. [ 74.147308][ T6941] syzkaller0: entered promiscuous mode [ 74.152414][ T6938] netlink: 44 bytes leftover after parsing attributes in process `syz.1.293'. [ 74.155343][ T6941] syzkaller0: entered allmulticast mode [ 74.164348][ T6941] tipc: Started in network mode [ 74.166193][ T6941] tipc: Node identity 8ee8f5eeb7f7, cluster identity 4711 [ 74.170482][ T6941] tipc: Enabled bearer , priority 0 [ 74.175391][ T6940] tipc: Resetting bearer [ 74.196338][ T6940] tipc: Disabling bearer [ 74.232127][ T6951] libceph: resolve '4' (ret=-3): failed [ 74.294901][ T6954] netlink: 'syz.3.300': attribute type 1 has an invalid length. [ 74.323288][ T6954] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.338335][ T6954] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 74.349595][ T6954] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 74.431847][ T6962] sctp: [Deprecated]: syz.3.302 (pid 6962) Use of struct sctp_assoc_value in delayed_ack socket option. [ 74.431847][ T6962] Use struct sctp_sack_info instead [ 74.433333][ T5814] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 74.569816][ T6358] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 74.635345][ T6970] netlink: 'syz.2.304': attribute type 1 has an invalid length. [ 74.648941][ T6970] bond1: entered promiscuous mode [ 74.650846][ T6970] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.657487][ T6970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=6970 comm=syz.2.304 [ 74.661765][ T6970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=6970 comm=syz.2.304 [ 74.665937][ T6970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=6970 comm=syz.2.304 [ 74.669999][ T6970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=6970 comm=syz.2.304 [ 74.673854][ T6970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=6970 comm=syz.2.304 [ 74.677921][ T6970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=6970 comm=syz.2.304 [ 74.681810][ T6970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=6970 comm=syz.2.304 [ 74.689250][ T6970] ipvlan2: entered allmulticast mode [ 74.690948][ T6970] bond1: entered allmulticast mode [ 74.704229][ T6970] bond1: (slave bridge1): making interface the new active one [ 74.706631][ T6970] bridge1: entered promiscuous mode [ 74.708584][ T6970] bridge1: entered allmulticast mode [ 74.711279][ T6970] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 75.217902][ T56] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 75.355240][ T6998] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2525402522 (323251522816 ns) > initial count (185678303104 ns). Using initial count to start timer. [ 75.397941][ T56] usb 7-1: Using ep0 maxpacket: 8 [ 75.400854][ T56] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 75.403480][ T56] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 75.406553][ T56] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 75.409841][ T56] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 75.413002][ T56] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.416636][ T56] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 75.420066][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.487840][ T5890] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 75.636083][ T7017] netlink: 'syz.4.316': attribute type 11 has an invalid length. [ 75.639667][ T5890] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 75.642960][ T5890] usb 8-1: config 0 has no interface number 0 [ 75.642964][ T56] usb 7-1: usb_control_msg returned -32 [ 75.642987][ T56] usbtmc 7-1:16.0: can't read capabilities [ 75.645418][ T5890] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 75.654168][ T5890] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 75.660733][ T5890] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 75.665569][ T5890] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.670827][ T5890] usb 8-1: config 0 descriptor?? [ 75.676466][ T6989] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 75.679948][ T7019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.698284][ T5890] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 75.887387][ T5890] usb 8-1: USB disconnect, device number 9 [ 75.940820][ T7034] overlayfs: empty lowerdir [ 75.991799][ T7035] usbtmc 7-1:16.0: stb usb_control_msg returned -32 [ 75.997260][ T6980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.001086][ T6980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.007021][ T5843] usb 7-1: USB disconnect, device number 8 [ 76.067510][ T7037] fuseblk: Unknown parameter 'rootmode311445014324157P0565' [ 76.072186][ T7037] loop4: detected capacity change from 0 to 1 [ 76.080959][ T7037] Dev loop4: unable to read RDB block 1 [ 76.082868][ T7037] loop4: unable to read partition table [ 76.084883][ T7037] loop4: partition table beyond EOD, truncated [ 76.086965][ T7037] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 76.142616][ T7041] overlayfs: failed to resolve './bus/file0': -2 [ 76.270374][ T7048] team0 (unregistering): Port device team_slave_0 removed [ 76.274562][ T7048] team0 (unregistering): Port device team_slave_1 removed [ 76.435089][ T7059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7059 comm=syz.4.330 [ 76.497189][ T7070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.697595][ T7084] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7084 comm=syz.4.338 [ 76.749647][ T7084] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.753906][ T7084] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.886644][ T7096] Invalid ELF header type: 0 != 1 [ 76.929225][ T7101] __nla_validate_parse: 4 callbacks suppressed [ 76.929239][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.343'. [ 76.935603][ T7101] netlink: 20 bytes leftover after parsing attributes in process `syz.1.343'. [ 76.967389][ T7093] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.972552][ T7093] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.993310][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.343'. [ 76.996548][ T7101] netlink: 20 bytes leftover after parsing attributes in process `syz.1.343'. [ 77.010004][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.019509][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.023693][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.032777][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.064684][ T5740] Bluetooth: hci3: unexpected event for opcode 0x200c [ 77.070870][ T7118] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 77.074452][ T7093] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.080825][ T7093] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.148874][ T7115] 0: reclassify loop, rule prio 0, protocol 03 [ 77.199915][ T7093] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.203577][ T7093] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.263350][ T7130] ======================================================= [ 77.263350][ T7130] WARNING: The mand mount option has been deprecated and [ 77.263350][ T7130] and is ignored by this kernel. Remove the mand [ 77.263350][ T7130] option from the mount to silence this warning. [ 77.263350][ T7130] ======================================================= [ 77.343944][ T986] hid-generic 99A1:E260D13B:624ADF33.0005: unknown main item tag 0x0 [ 77.346697][ T986] hid-generic 99A1:E260D13B:624ADF33.0005: unknown main item tag 0x0 [ 77.349733][ T986] hid-generic 99A1:E260D13B:624ADF33.0005: unknown main item tag 0x0 [ 77.352684][ T986] hid-generic 99A1:E260D13B:624ADF33.0005: unknown main item tag 0x0 [ 77.355152][ T986] hid-generic 99A1:E260D13B:624ADF33.0005: unknown main item tag 0x0 [ 77.358694][ T986] hid-generic 99A1:E260D13B:624ADF33.0005: unknown main item tag 0x0 [ 77.361301][ T986] hid-generic 99A1:E260D13B:624ADF33.0005: unknown main item tag 0x0 [ 77.363915][ T986] hid-generic 99A1:E260D13B:624ADF33.0005: unknown main item tag 0x0 [ 77.367484][ T986] hid-generic 99A1:E260D13B:624ADF33.0005: unknown main item tag 0x0 [ 77.370295][ T986] hid-generic 99A1:E260D13B:624ADF33.0005: unknown main item tag 0x0 [ 77.380982][ T7141] bridge_slave_0: left allmulticast mode [ 77.382891][ T7141] bridge_slave_0: left promiscuous mode [ 77.385919][ T7141] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.391999][ T7141] bridge_slave_1: left allmulticast mode [ 77.393809][ T7141] bridge_slave_1: left promiscuous mode [ 77.397028][ T986] hid-generic 99A1:E260D13B:624ADF33.0005: hidraw1: HID v306f9c.17 Device [] on 9OR) K8S2c93;mmf$[g~ [ 77.398565][ T7141] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.415606][ T7141] bond0: (slave bond_slave_0): Releasing backup interface [ 77.428236][ T7141] bond0: (slave bond_slave_1): Releasing backup interface [ 77.433834][ T7141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.436142][ T7141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.441443][ T7141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.443788][ T7141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.448438][ T7149] fido_id[7149]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 77.449588][ T7141] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 77.543487][ T7160] netlink: 16 bytes leftover after parsing attributes in process `syz.3.355'. [ 77.547844][ T6358] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.550821][ T6358] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.554213][ T6358] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.559267][ T6358] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.578006][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.580614][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.586085][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.587924][ T7168] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 77.589258][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.591024][ T7168] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 77.597396][ T7168] vhci_hcd vhci_hcd.0: Device attached [ 77.676249][ T7169] vhci_hcd: connection closed [ 77.683714][ T6358] vhci_hcd vhci_hcd.4: stop threads [ 77.689303][ T6358] vhci_hcd vhci_hcd.4: release socket [ 77.691712][ T6358] vhci_hcd vhci_hcd.4: disconnect device [ 77.855231][ T42] kauditd_printk_skb: 41 callbacks suppressed [ 77.855245][ T42] audit: type=1400 audit(1785474921.594:31701): avc: denied { write } for pid=7188 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.901529][ T42] audit: type=1400 audit(1785474921.644:31702): avc: denied { write } for pid=7193 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.936160][ T42] audit: type=1400 audit(1785474921.674:31703): avc: denied { read write } for pid=7195 comm="syz.3.359" name="uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.948450][ T42] audit: type=1400 audit(1785474921.674:31704): avc: denied { open } for pid=7195 comm="syz.3.359" path="/dev/uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.967816][ T42] audit: type=1400 audit(1785474921.704:31705): avc: denied { ioctl } for pid=7195 comm="syz.3.359" path="/dev/uinput" dev="devtmpfs" ino=944 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.977030][ T7197] input: syz1 as /devices/virtual/input/input7 [ 77.984246][ T42] audit: type=1400 audit(1785474921.724:31706): avc: denied { read } for pid=5131 comm="acpid" name="js0" dev="devtmpfs" ino=2979 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.999387][ T42] audit: type=1400 audit(1785474921.724:31707): avc: denied { open } for pid=5131 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2979 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.011707][ T42] audit: type=1400 audit(1785474921.724:31708): avc: denied { ioctl } for pid=5131 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2979 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.092175][ T7219] veth0: entered promiscuous mode [ 78.097335][ T7217] veth0: left promiscuous mode [ 78.224650][ T42] audit: type=1400 audit(1785474921.964:31709): avc: denied { ioctl } for pid=7236 comm="syz.4.364" path="socket:[18697]" dev="sockfs" ino=18697 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 78.401133][ T7233] netlink: 168 bytes leftover after parsing attributes in process `syz.2.363'. [ 78.447872][ T5740] Bluetooth: hci0: command tx timeout [ 78.467898][ T986] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 78.473856][ T7248] pim6reg1: entered promiscuous mode [ 78.475607][ T7248] pim6reg1: entered allmulticast mode [ 78.537245][ T42] audit: type=1400 audit(1785474922.274:31710): avc: denied { write } for pid=7250 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.617178][ T7255] netlink: 156 bytes leftover after parsing attributes in process `syz.3.366'. [ 78.635390][ T986] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.646073][ T986] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.653563][ T986] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.659152][ T986] usb 9-1: Product: syz [ 78.660892][ T986] usb 9-1: Manufacturer: syz [ 78.667992][ T986] usb 9-1: SerialNumber: syz [ 78.891260][ T7237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.891928][ T986] cdc_ether 9-1:1.0: skipping garbage [ 78.896316][ T7265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.368'. [ 78.900389][ T7237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.903881][ T986] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 78.921721][ T7265] 8021q: adding VLAN 0 to HW filter on device bond2 [ 78.924975][ T986] usb 9-1: USB disconnect, device number 2 [ 78.950994][ T7265] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 79.150874][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'. [ 79.153811][ T7273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.371'. [ 79.156815][ T7273] netlink: 'syz.2.371': attribute type 18 has an invalid length. [ 79.257775][ T986] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 79.358602][ T7288] team_slave_0: entered promiscuous mode [ 79.360596][ T7288] team_slave_0: left promiscuous mode [ 79.397764][ T986] usb 9-1: device descriptor read/64, error -71 [ 79.493944][ T7293] input: syz0 as /devices/virtual/input/input8 [ 79.565868][ T7295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.569563][ T7295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.574348][ T7295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.576689][ T7295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.628125][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 79.657809][ T986] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 79.779991][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.784687][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.784703][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.784726][ T9] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.784738][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.786630][ T9] usb 8-1: config 0 descriptor?? [ 79.801445][ T986] usb 9-1: device descriptor read/64, error -71 [ 79.909456][ T986] usb usb9-port1: attempt power cycle [ 80.241661][ T9] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 80.257827][ T986] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 80.288600][ T986] usb 9-1: device descriptor read/8, error -71 [ 80.431214][ T7311] use of bytesused == 0 is deprecated and will be removed in the future, [ 80.434064][ T7311] use the actual size instead. [ 80.528021][ T5740] Bluetooth: hci0: command tx timeout [ 80.663882][ T50] usb 8-1: USB disconnect, device number 10 [ 81.057803][ T986] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 81.080664][ T986] usb 9-1: device descriptor read/8, error -71 [ 81.188054][ T986] usb usb9-port1: unable to enumerate USB device [ 81.363543][ T7360] netlink: 'syz.2.395': attribute type 4 has an invalid length. [ 81.374813][ T7360] netlink: 'syz.2.395': attribute type 4 has an invalid length. [ 81.498270][ T3271] cfg80211: failed to load regulatory.db [ 81.516913][ T50] IPVS: starting estimator thread 0... [ 81.617951][ T7376] IPVS: using max 44 ests per chain, 105600 per kthread [ 81.753896][ T7417] netlink: 'syz.4.409': attribute type 39 has an invalid length. [ 81.761279][ T7409] 0: reclassify loop, rule prio 0, protocol 03 [ 82.019606][ T7430] loop5: detected capacity change from 0 to 7 [ 82.026597][ T7430] loop5: p3 p4 [ 82.029024][ T7430] loop5: partition table partially beyond EOD, truncated [ 82.093777][ T5920] udevd[5920]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 82.095875][ T5749] udevd[5749]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 82.205450][ T7448] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 82.213083][ T7449] iommufd_mock iommufd_mock1: Adding to iommu group 9 [ 82.218461][ T50] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 82.304265][ T7460] libceph: resolve '0' (ret=-3): failed [ 82.324337][ T7462] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 82.371053][ T50] usb 8-1: not running at top speed; connect to a high speed hub [ 82.372611][ T7465] overlayfs: failed to resolve './file2': -2 [ 82.375699][ T50] usb 8-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 82.378993][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 82.381660][ T50] usb 8-1: Product: syz [ 82.383010][ T50] usb 8-1: Manufacturer: syz [ 82.393440][ T50] usb 8-1: USB2VGA dongle found at address 11 [ 82.398172][ T50] usb 8-1: Allocated 8 output buffers [ 82.399949][ T50] usb 8-1: Not attached to USB 2.0 hub, deferring init [ 82.410180][ T7469] coredump: 401(syz.1.421): Core dump to core aborted: cannot preserve file permissions [ 82.607861][ T5740] Bluetooth: hci0: command tx timeout [ 82.645980][ T7476] usb 8-1: Device not attached to USB 2.0 hub [ 83.057380][ T7484] __nla_validate_parse: 8 callbacks suppressed [ 83.057395][ T7484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.429'. [ 83.137569][ T5740] Bluetooth: hci0: Malformed Event: 0x13 [ 83.139296][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 83.139307][ T42] audit: type=1400 audit(1785474926.884:31737): avc: denied { watch } for pid=7485 comm="syz.4.430" path="/71/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 83.251093][ T7491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48662 sclass=netlink_route_socket pid=7491 comm=syz.4.433 [ 83.299895][ T5752] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.303909][ T5752] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.307656][ T5752] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.311535][ T5752] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.314301][ T5752] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.352736][ T7499] usb 8-1: USB disconnect, device number 11 [ 83.388222][ T7499] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 83.509593][ T50] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 83.692410][ T50] usb 9-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00 [ 83.697953][ T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.733608][ T7494] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.736033][ T7494] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.738713][ T7494] bridge_slave_0: entered allmulticast mode [ 83.741548][ T7494] bridge_slave_0: entered promiscuous mode [ 83.744974][ T7494] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.747289][ T7494] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.750039][ T7494] bridge_slave_1: entered allmulticast mode [ 83.752855][ T7494] bridge_slave_1: entered promiscuous mode [ 83.772169][ T7494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.777440][ T7494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.790032][ T50] msi2500 9-1:1.0: Registered as swradio24 [ 83.792373][ T50] msi2500 9-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 83.806524][ T7494] team0: Port device team_slave_0 added [ 83.811508][ T7494] team0: Port device team_slave_1 added [ 83.826258][ T7494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.828631][ T7494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.836623][ T7494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.841224][ T7494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.843402][ T7494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.851718][ T7494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.877992][ T7494] hsr_slave_0: entered promiscuous mode [ 83.880317][ T7494] hsr_slave_1: entered promiscuous mode [ 83.882562][ T7494] debugfs: 'hsr0' already exists in 'hsr' [ 83.884379][ T7494] Cannot create hsr debugfs directory [ 83.959456][ T5843] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 83.975862][ T7523] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 84.013760][ T7494] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.019147][ T7494] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.022838][ T7494] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 84.028308][ T7494] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.032199][ T7494] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 84.038083][ T7494] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.042021][ T7494] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 84.048080][ T7494] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.070819][ T7494] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.073777][ T7494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.076415][ T7494] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.079348][ T7494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.125497][ T5843] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 84.135660][ T7494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.138508][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 84.141751][ T5843] usb 6-1: Product: syz [ 84.143388][ T5843] usb 6-1: Manufacturer: syz [ 84.145046][ T5843] usb 6-1: SerialNumber: syz [ 84.152364][ T5843] usb 6-1: config 0 descriptor?? [ 84.155935][ T7215] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.156992][ T5843] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 84.162291][ T5843] dvb-usb: bulk message failed: -22 (2/0) [ 84.162389][ T7215] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.168725][ T5843] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 84.173518][ T5843] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 84.176799][ T5843] usb 6-1: media controller created [ 84.181970][ T7494] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.188701][ T5843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 84.189253][ T7215] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.194743][ T7215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.202134][ T7215] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.204544][ T7215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.357011][ T7519] cxusb: i2c rd: len=80 is too big! [ 84.357011][ T7519] [ 84.367384][ T42] audit: type=1400 audit(1785474928.104:31738): avc: denied { write } for pid=7518 comm="syz.1.437" name="instances" dev="tracefs" ino=4866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 84.376657][ T42] audit: type=1400 audit(1785474928.104:31739): avc: denied { add_name } for pid=7518 comm="syz.1.437" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 84.386689][ T42] audit: type=1400 audit(1785474928.114:31740): avc: denied { create } for pid=7518 comm="syz.1.437" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 84.460880][ T7494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.591960][ T5843] cxusb: set interface failed [ 84.593743][ T5843] dvb-usb: bulk message failed: -22 (1/0) [ 84.620847][ T5843] DVB: Unable to find symbol mt352_attach() [ 84.621798][ T7494] veth0_vlan: entered promiscuous mode [ 84.623413][ T5843] dvb-usb: bulk message failed: -22 (5/0) [ 84.628008][ T5843] zl10353_read_register: readreg error (reg=127, ret==-121) [ 84.630831][ T5843] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 84.631669][ T7494] veth1_vlan: entered promiscuous mode [ 84.652345][ T7494] veth0_macvtap: entered promiscuous mode [ 84.656744][ T7494] veth1_macvtap: entered promiscuous mode [ 84.671818][ T7494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.679688][ T7494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.688381][ T5843] rc_core: IR keymap rc-dvico-mce not found [ 84.690879][ T5843] Registered IR keymap rc-empty [ 84.693711][ T5843] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 84.700577][ T5843] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input9 [ 84.712087][ T5843] dvb-usb: schedule remote query interval to 100 msecs. [ 84.714968][ T5843] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 84.725260][ T5843] usb 6-1: USB disconnect, device number 8 [ 84.750783][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.760398][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.765100][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.774395][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.799199][ T7222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.802485][ T7222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.806012][ T5843] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 84.822537][ T7218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.825859][ T7218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.840274][ T42] audit: type=1400 audit(1785474928.584:31741): avc: denied { mounton } for pid=7494 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 84.914283][ T50] usb 9-1: USB disconnect, device number 7 [ 85.127855][ T850] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 85.134845][ T42] audit: type=1400 audit(1785474928.874:31742): avc: denied { bpf } for pid=7554 comm="syz.3.440" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.142411][ T42] audit: type=1400 audit(1785474928.874:31743): avc: denied { perfmon } for pid=7554 comm="syz.3.440" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.275155][ T7567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7567 comm=syz.3.443 [ 85.297821][ T850] usb 10-1: Using ep0 maxpacket: 32 [ 85.305216][ T850] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 85.311477][ T7570] XFS (loop1): SB validate failed with error -5. [ 85.312235][ T850] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 85.317411][ T850] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 85.321835][ T850] usb 10-1: Product: syz [ 85.323855][ T850] usb 10-1: Manufacturer: syz [ 85.325866][ T850] usb 10-1: SerialNumber: syz [ 85.349682][ T850] usb 10-1: config 0 descriptor?? [ 85.355595][ T7551] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 85.407953][ T5740] Bluetooth: hci2: command tx timeout [ 85.481247][ T7587] netlink: 'syz.1.448': attribute type 1 has an invalid length. [ 85.485913][ T7587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.448'. [ 85.490209][ T7587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.448'. [ 85.523208][ T7589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.449'. [ 85.596748][ T42] audit: type=1400 audit(1785474929.334:31744): avc: denied { name_bind } for pid=7592 comm="syz.3.451" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 85.839395][ T42] audit: type=1400 audit(1785474929.584:31745): avc: denied { connect } for pid=7602 comm="syz.1.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.856725][ T42] audit: type=1400 audit(1785474929.594:31746): avc: denied { write } for pid=7602 comm="syz.1.454" name="functions" dev="configfs" ino=10027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 85.940494][ T7610] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 86.091224][ T7624] dns_resolver: Unsupported content type (234) [ 86.125732][ T7630] --map-set only usable from mangle table [ 86.360846][ T50] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 86.507798][ T50] usb 6-1: Using ep0 maxpacket: 8 [ 86.510747][ T50] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 86.513295][ T50] usb 6-1: config 0 has no interface number 0 [ 86.516022][ T50] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 32, changing to 9 [ 86.519535][ T50] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 25858, setting to 1024 [ 86.523063][ T50] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 86.526235][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.531968][ T50] usb 6-1: config 0 descriptor?? [ 86.534832][ T7627] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 86.543499][ T50] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 86.746465][ T7627] IPVS: set_ctl: invalid protocol: 46 172.30.4.2:20001 [ 86.750464][ T850] usb 6-1: USB disconnect, device number 9 [ 86.752103][ T50] usb 10-1: USB disconnect, device number 2 [ 86.988896][ T7645] IPVS: set_ctl: invalid protocol: 50 172.20.20.14:20000 [ 86.994881][ T7645] x_tables: duplicate underflow at hook 2 [ 87.161923][ T5814] bond1: (slave dummy0): link status up again after 0 ms [ 87.174636][ T7655] netlink: 'syz.3.467': attribute type 1 has an invalid length. [ 87.177945][ T13] bond1: (slave gretap1): link status up again after 0 ms [ 87.180677][ T13] bond1: (slave dummy0): link status up again after 0 ms [ 87.185778][ T7655] bond2: (slave veth0_to_bond): Releasing backup interface [ 87.203761][ T13] bond1: (slave gretap1): link status up again after 0 ms [ 87.207856][ T13] bond1: (slave dummy0): link status up again after 0 ms [ 87.210085][ T13] bond1: (slave gretap1): failed to get link speed/duplex [ 87.212983][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 87.218816][ T7657] xfs: Unknown parameter 'oecoveCr' [ 87.245269][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.469'. [ 87.246208][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.469'. [ 87.311309][ T7662] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=88 sclass=netlink_xfrm_socket pid=7662 comm=syz.3.470 [ 87.321752][ T7666] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 87.338069][ T13] bond1: (slave gretap1): failed to get link speed/duplex [ 87.352274][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 87.367583][ T7674] loop5: detected capacity change from 0 to 6 [ 87.374190][ T7674] loop5: [POWERTEC] p1 p2 p3 [ 87.376336][ T7674] loop5: p1 start 2738982409 is beyond EOD, truncated [ 87.379557][ T7674] loop5: p2 start 3318134482 is beyond EOD, truncated [ 87.383397][ T7674] loop5: p3 start 3832978868 is beyond EOD, truncated [ 87.435651][ T7677] bond0: (slave sit0): refused to change device type [ 87.467831][ T13] bond1: (slave gretap1): failed to get link speed/duplex [ 87.489096][ T5740] Bluetooth: hci2: command tx timeout [ 87.498255][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.478'. [ 87.516509][ T7682] ipvlan0: entered promiscuous mode [ 87.521096][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.478'. [ 87.521487][ T7682] ipvlan0: entered allmulticast mode [ 87.526617][ T7682] veth0_vlan: entered allmulticast mode [ 87.563347][ T9] libceph: mon0 (1)[c::]:6789 socket error on write [ 87.578590][ T7672] ceph: No mds server is up or the cluster is laggy [ 87.587881][ T3271] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 87.626239][ T7695] gadgetfs: bound to dummy_udc driver [ 87.710345][ T7701] netlink: 152 bytes leftover after parsing attributes in process `syz.3.482'. [ 87.762666][ T7706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.484'. [ 87.888058][ T5740] Bluetooth: hci3: command 0x0419 tx timeout [ 87.889699][ T7712] netlink: 'syz.1.487': attribute type 1 has an invalid length. [ 88.014379][ T5814] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.027889][ T5814] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.118669][ T5814] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.122477][ T5814] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.125813][ T7729] __nla_validate_parse: 1 callbacks suppressed [ 88.125826][ T7729] netlink: 28 bytes leftover after parsing attributes in process `syz.5.493'. [ 88.162759][ T5752] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.175572][ T5752] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.180637][ T5752] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.184350][ T5752] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.186887][ T5752] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.221791][ T5814] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.236246][ T5814] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.347327][ T7741] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 88.354965][ T5814] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.359173][ T5814] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.359767][ T7741] SELinux: failed to load policy [ 88.444051][ T7745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.496'. [ 88.468374][ T7745] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 88.472930][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 88.472941][ T42] audit: type=1400 audit(1785474932.214:31756): avc: denied { map } for pid=7744 comm="syz.1.496" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 88.485550][ T42] audit: type=1400 audit(1785474932.224:31757): avc: denied { execute } for pid=7744 comm="syz.1.496" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 88.549505][ T7751] xt_ipcomp: unknown flags 1D [ 88.746604][ T42] audit: type=1400 audit(1785474932.484:31758): avc: denied { write } for pid=7775 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.770417][ T5814] bridge_slave_1: left allmulticast mode [ 88.772992][ T5814] bridge_slave_1: left promiscuous mode [ 88.776935][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.783674][ T5814] bridge_slave_0: left allmulticast mode [ 88.786506][ T5814] bridge_slave_0: left promiscuous mode [ 88.788639][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.955626][ T5814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.959064][ T42] audit: type=1400 audit(1785474932.694:31759): avc: denied { write } for pid=7780 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.972237][ T5814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.976976][ T5814] bond0 (unregistering): Released all slaves [ 88.985980][ T5814] bond1 (unregistering): Released all slaves [ 89.003641][ T7730] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.006424][ T7730] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.010521][ T7730] bridge_slave_0: entered allmulticast mode [ 89.014118][ T7730] bridge_slave_0: entered promiscuous mode [ 89.018205][ T7730] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.020901][ T7730] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.023766][ T7730] bridge_slave_1: entered allmulticast mode [ 89.027280][ T7730] bridge_slave_1: entered promiscuous mode [ 89.045088][ T5448] 8021q: adding VLAN 0 to HW filter on device eth6 [ 89.089271][ T7730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.096921][ T7730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.125954][ T7730] team0: Port device team_slave_0 added [ 89.129467][ T7730] team0: Port device team_slave_1 added [ 89.192772][ T7730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.195600][ T7730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.206377][ T7730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.212341][ T7730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.215238][ T7730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.226185][ T7730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.226755][ T7789] "syz.5.503" (7789) uses obsolete ecb(arc4) skcipher [ 89.286144][ T42] audit: type=1400 audit(1785474933.024:31760): avc: denied { write } for pid=7795 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.293761][ T7730] hsr_slave_0: entered promiscuous mode [ 89.299782][ T7730] hsr_slave_1: entered promiscuous mode [ 89.302066][ T7730] debugfs: 'hsr0' already exists in 'hsr' [ 89.303912][ T7730] Cannot create hsr debugfs directory [ 89.351532][ T42] audit: type=1400 audit(1785474933.094:31761): avc: denied { write } for pid=7798 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.375955][ T7794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7794 comm=syz.5.503 [ 89.381386][ T7794] fuse: Unknown parameter '' [ 89.384103][ T7794] overlayfs: overlapping lowerdir path [ 89.387091][ T5814] hsr_slave_0: left promiscuous mode [ 89.389840][ T5814] hsr_slave_1: left promiscuous mode [ 89.392128][ T5814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.394682][ T5814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.401617][ T5814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.404359][ T5814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.407577][ T5814] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 89.410398][ T5814] batman_adv: batadv0: Removing interface: ipvlan2 [ 89.419119][ T5814] veth1_macvtap: left promiscuous mode [ 89.421313][ T5814] veth0_macvtap: left promiscuous mode [ 89.423898][ T5814] veth1_vlan: left promiscuous mode [ 89.426057][ T5814] veth0_vlan: left promiscuous mode [ 89.567925][ T5740] Bluetooth: hci2: command tx timeout [ 89.584681][ T7807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.506'. [ 89.694145][ T5448] 8021q: adding VLAN 0 to HW filter on device eth7 [ 89.805288][ T42] audit: type=1400 audit(1785474933.544:31762): avc: denied { write } for pid=7810 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.819202][ T7730] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 89.829124][ T7730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.833059][ T7730] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 89.846783][ T7730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.859148][ T7730] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 89.867210][ T7730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.870979][ T7730] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 89.876370][ T7730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.886548][ T42] audit: type=1400 audit(1785474933.624:31763): avc: denied { write } for pid=7813 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.942944][ T5448] 8021q: adding VLAN 0 to HW filter on device eth8 [ 89.956039][ T7730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.976329][ T7730] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.987226][ T7222] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.990248][ T7222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.003781][ T7222] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.006850][ T7222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.061138][ T42] audit: type=1400 audit(1785474933.804:31764): avc: denied { write } for pid=7822 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.105840][ T42] audit: type=1400 audit(1785474933.844:31765): avc: denied { write } for pid=7827 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.156136][ T5448] 8021q: adding VLAN 0 to HW filter on device eth9 [ 90.218026][ T5740] Bluetooth: hci0: command tx timeout [ 90.253139][ T7730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.445371][ T7730] veth0_vlan: entered promiscuous mode [ 90.456537][ T7730] veth1_vlan: entered promiscuous mode [ 90.481921][ T7730] veth0_macvtap: entered promiscuous mode [ 90.489332][ T7730] veth1_macvtap: entered promiscuous mode [ 90.503687][ T7730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.522944][ T7730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.588180][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.591873][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.596037][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.599616][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.624668][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.631971][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.650386][ T7222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.653805][ T7222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.805371][ T7867] netlink: 12 bytes leftover after parsing attributes in process `syz.6.511'. [ 90.830689][ T7867] vxcan3: entered promiscuous mode [ 90.959576][ T7875] dvmrp0: entered allmulticast mode [ 91.044378][ T7880] netlink: 'syz.1.515': attribute type 1 has an invalid length. [ 91.054701][ T7881] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 91.087222][ T7880] 8021q: adding VLAN 0 to HW filter on device bond4 [ 91.099849][ T7880] bond4 (unregistering): Released all slaves [ 91.146732][ T7881] netlink: 'syz.1.515': attribute type 1 has an invalid length. [ 91.184211][ T7892] 9p: Unknown Cache mode or invalid value fscache-aversion=9p2000.u [ 91.253412][ T7894] xt_hl: Unknown TTL match mode: 255 [ 91.256939][ T7894] netlink: 20 bytes leftover after parsing attributes in process `syz.6.519'. [ 91.393308][ T7906] ./sys/bus/nd/drivers/nd_pmem/unbind: Can't lookup blockdev [ 91.508779][ T7923] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 91.512721][ T7923] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock [ 91.516982][ T7923] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 91.520212][ T7923] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock [ 91.647937][ T5740] Bluetooth: hci2: command tx timeout [ 91.654654][ T7930] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 91.664184][ T7930] NILFS (nullb0): couldn't find nilfs on the device [ 92.060830][ T850] hid-generic 0362:07FF:7FFFFFFF.0007: item fetching failed at offset 0/1 [ 92.065373][ T850] hid-generic 0362:07FF:7FFFFFFF.0007: probe with driver hid-generic failed with error -22 [ 92.228363][ T13] net_ratelimit: 62 callbacks suppressed [ 92.228377][ T13] bond1: (slave gretap1): failed to get link speed/duplex [ 92.232775][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 92.263742][ T7970] netlink: 'syz.1.543': attribute type 10 has an invalid length. [ 92.270635][ T7970] syz_tun: entered promiscuous mode [ 92.281442][ T7970] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 92.288064][ T5740] Bluetooth: hci0: command tx timeout [ 92.292528][ T7970] syzkaller0: entered promiscuous mode [ 92.294934][ T7970] syzkaller0: entered allmulticast mode [ 92.301507][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.543'. [ 92.305733][ T7970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7970 comm=syz.1.543 [ 92.347994][ T5814] bond1: (slave gretap1): failed to get link speed/duplex [ 92.351060][ T5814] bond1: (slave dummy0): failed to get link speed/duplex [ 92.445770][ T7988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.467876][ T13] bond1: (slave gretap1): failed to get link speed/duplex [ 92.470162][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 92.513272][ T5740] Bluetooth: hci2: unexpected subevent 0x19 length: 30 > 28 [ 92.521455][ T5740] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 92.577869][ T13] bond1: (slave gretap1): failed to get link speed/duplex [ 92.580847][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 92.689851][ T13] bond1: (slave gretap1): failed to get link speed/duplex [ 92.714590][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.552'. [ 92.717483][ T8001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.552'. [ 92.720531][ T8001] netlink: 'syz.1.552': attribute type 7 has an invalid length. [ 93.475557][ T8017] netlink: 1053 bytes leftover after parsing attributes in process `syz.5.557'. [ 93.576991][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 93.577012][ T42] audit: type=1400 audit(1785474937.314:31775): avc: denied { write } for pid=8018 comm="syz.5.558" name="functions" dev="configfs" ino=10027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 93.587467][ T8019] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 93.590319][ T42] audit: type=1400 audit(1785474937.324:31776): avc: denied { write } for pid=8018 comm="syz.5.558" name="functions" dev="configfs" ino=10027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 93.615305][ T8019] netlink: 20 bytes leftover after parsing attributes in process `syz.5.558'. [ 93.639123][ T42] audit: type=1400 audit(1785474937.384:31777): avc: denied { read } for pid=8018 comm="syz.5.558" name="mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 93.657413][ T42] audit: type=1400 audit(1785474937.384:31778): avc: denied { open } for pid=8018 comm="syz.5.558" path="/dev/mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 93.667814][ T42] audit: type=1400 audit(1785474937.384:31779): avc: denied { ioctl } for pid=8018 comm="syz.5.558" path="/dev/mtd0" dev="devtmpfs" ino=716 ioctlcmd=0x4d12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 93.685798][ T42] audit: type=1400 audit(1785474937.424:31780): avc: denied { append } for pid=8023 comm="syz.1.560" name="001" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 94.007896][ T5890] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 94.161371][ T5890] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 94.164644][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.167259][ T5890] usb 6-1: Product: syz [ 94.168700][ T5890] usb 6-1: Manufacturer: syz [ 94.170217][ T5890] usb 6-1: SerialNumber: syz [ 94.195606][ T986] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 94.377878][ T5752] Bluetooth: hci0: command tx timeout [ 94.409599][ T5890] usb 6-1: USB disconnect, device number 10 [ 94.965093][ T7205] Bluetooth: hci4: Frame reassembly failed (-84) [ 95.247902][ T986] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 95.250948][ T986] ath9k_htc: Failed to initialize the device [ 95.256965][ T5890] usb 6-1: ath9k_htc: USB layer deinitialized [ 95.547798][ T5890] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 95.702712][ T5890] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 95.706690][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.710211][ T5890] usb 6-1: Product: syz [ 95.711990][ T5890] usb 6-1: Manufacturer: syz [ 95.714038][ T5890] usb 6-1: SerialNumber: syz [ 96.404611][ T8046] Bluetooth: MGMT ver 1.23 [ 96.447889][ T5740] Bluetooth: hci0: command tx timeout [ 96.453651][ T8051] tipc: Enabled bearer , priority 0 [ 96.534089][ T8058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3025 sclass=netlink_route_socket pid=8058 comm=syz.3.569 [ 96.633804][ T42] audit: type=1400 audit(1785474940.374:31781): avc: denied { lock } for pid=8064 comm="syz.3.572" path="socket:[23331]" dev="sockfs" ino=23331 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 96.680222][ T42] audit: type=1400 audit(1785474940.424:31782): avc: denied { append } for pid=8066 comm="syz.3.573" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 96.715301][ T8067] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 96.845254][ T42] audit: type=1400 audit(1785474940.584:31783): avc: denied { create } for pid=8076 comm="syz.3.577" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 96.853814][ T42] audit: type=1400 audit(1785474940.584:31784): avc: denied { map } for pid=8076 comm="syz.3.577" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24015 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 97.007827][ T5752] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 97.008219][ T5740] Bluetooth: hci4: command 0x1003 tx timeout [ 97.060323][ T986] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 97.209190][ T986] usb 10-1: Using ep0 maxpacket: 16 [ 97.215063][ T986] usb 10-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 97.218162][ T986] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.220781][ T986] usb 10-1: Product: syz [ 97.222228][ T986] usb 10-1: Manufacturer: syz [ 97.223952][ T986] usb 10-1: SerialNumber: syz [ 97.227682][ T986] usb 10-1: config 0 descriptor?? [ 97.268251][ T5814] net_ratelimit: 81 callbacks suppressed [ 97.268269][ T5814] bond1: (slave gretap1): failed to get link speed/duplex [ 97.276505][ T5814] bond1: (slave dummy0): failed to get link speed/duplex [ 97.294063][ T8100] netlink: 40 bytes leftover after parsing attributes in process `syz.6.581'. [ 97.388128][ T13] bond1: (slave gretap1): failed to get link speed/duplex [ 97.390884][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 97.497801][ T13] bond1: (slave gretap1): failed to get link speed/duplex [ 97.504352][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 97.570693][ T10] tipc: Node number set to 958395886 [ 97.617970][ T13] bond1: (slave gretap1): failed to get link speed/duplex [ 97.620379][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 97.636850][ T8077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.642879][ T8077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.646831][ T986] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 97.657388][ T986] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 97.661305][ T986] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 97.664218][ T986] usb 10-1: media controller created [ 97.674680][ T986] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.727928][ T13] bond1: (slave gretap1): failed to get link speed/duplex [ 97.730880][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 97.944999][ T5841] usb 6-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 97.951300][ T10] usb 6-1: USB disconnect, device number 11 [ 97.964474][ T10] usb 6-1: ath9k_htc: USB layer deinitialized [ 98.005016][ T8139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=8139 comm=syz.6.591 [ 98.204673][ T8147] netlink: 'syz.6.593': attribute type 4 has an invalid length. [ 98.219367][ T986] zl10353_read_register: readreg error (reg=127, ret==0) [ 98.219606][ T8077] dtv5100: wlen = 1d, aborting. [ 98.222457][ T986] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 98.222483][ T986] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 98.251459][ T986] usb 10-1: USB disconnect, device number 3 [ 98.272808][ T986] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 98.458438][ T34] usb 11-1: new low-speed USB device number 2 using dummy_hcd [ 98.609754][ T34] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.614227][ T34] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 98.619206][ T34] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 98.623870][ T34] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 98.627663][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.635176][ T8149] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 98.640811][ T34] hub 11-1:1.0: bad descriptor, ignoring hub [ 98.643406][ T34] hub 11-1:1.0: probe with driver hub failed with error -5 [ 98.646868][ T34] cdc_wdm 11-1:1.0: skipping garbage [ 98.649253][ T34] cdc_wdm 11-1:1.0: skipping garbage [ 98.667087][ T34] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 98.669826][ T34] cdc_wdm 11-1:1.0: Unknown control protocol [ 98.674482][ T8151] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 98.676696][ T8151] PKCS7: Only support pkcs7_signedData type [ 98.727089][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.595'. [ 98.798981][ T8161] netlink: 16 bytes leftover after parsing attributes in process `syz.5.597'. [ 98.842238][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 98.842257][ T42] audit: type=1400 audit(1785474942.584:31792): avc: denied { read write } for pid=8146 comm="syz.6.593" name="cdc-wdm0" dev="devtmpfs" ino=3050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 98.873535][ T42] audit: type=1400 audit(1785474942.584:31793): avc: denied { open } for pid=8146 comm="syz.6.593" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 98.995044][ T42] audit: type=1400 audit(1785474942.734:31794): avc: denied { read } for pid=8168 comm="syz.5.599" dev="nsfs" ino=4026533173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 99.003759][ T42] audit: type=1400 audit(1785474942.734:31795): avc: denied { open } for pid=8168 comm="syz.5.599" path="net:[4026533173]" dev="nsfs" ino=4026533173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 99.008670][ T3271] usb 11-1: USB disconnect, device number 2 [ 99.126011][ T42] audit: type=1400 audit(1785474942.864:31796): avc: denied { write } for pid=8172 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.171855][ T42] audit: type=1400 audit(1785474942.914:31797): avc: denied { write } for pid=8177 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.206657][ T5448] veth0_vlan: left promiscuous mode [ 99.226784][ T34] veth0_vlan: entered promiscuous mode [ 99.258381][ T42] audit: type=1400 audit(1785474943.004:31798): avc: denied { write } for pid=8180 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.303333][ T42] audit: type=1400 audit(1785474943.044:31799): avc: denied { write } for pid=8183 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.317811][ T5843] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 99.393038][ T42] audit: type=1400 audit(1785474943.134:31800): avc: denied { write } for pid=8185 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.454881][ T42] audit: type=1400 audit(1785474943.194:31801): avc: denied { write } for pid=8188 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.479933][ T5843] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 99.483404][ T5843] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 99.488159][ T5843] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.493131][ T5843] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 99.498130][ T5843] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 99.504005][ T5843] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 99.507345][ T5843] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 99.518893][ T5843] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.523836][ T5843] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 99.528567][ T5843] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 99.534354][ T5843] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 99.537755][ T5843] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 99.542438][ T5843] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.547526][ T5843] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 99.552687][ T5843] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 99.561580][ T5843] usb 10-1: string descriptor 0 read error: -22 [ 99.565139][ T5843] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 99.568839][ T5843] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.140721][ T8208] bond4: entered promiscuous mode [ 100.142735][ T8208] 8021q: adding VLAN 0 to HW filter on device bond4 [ 100.334919][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 100.383419][ T8215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 100.522080][ T8240] tmpfs: Unknown parameter 'vujW Q>MVs]"D' [ 100.563663][ T8238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.608'. [ 100.577250][ T8243] clocksource: Switched to clocksource acpi_pm [ 100.584820][ T8244] clocksource: Switched to clocksource tsc [ 100.734094][ T8248] netlink: 'syz.3.611': attribute type 4 has an invalid length. [ 101.485486][ T8273] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.717466][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.619'. [ 101.720529][ T8282] netlink: 20 bytes leftover after parsing attributes in process `syz.3.619'. [ 102.318055][ T13] net_ratelimit: 78 callbacks suppressed [ 102.318071][ T13] bond1: (slave gretap1): failed to get link speed/duplex [ 102.323239][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 102.364263][ T8339] openvswitch: netlink: IP tunnel dst address not specified [ 102.373976][ T8339] 0x000000000000-0x000000020000 : "" [ 102.384707][ T8339] ftl_cs: FTL header not found. [ 102.420415][ T8147] cdc_wdm 11-1:1.0: Error autopm - -16 [ 102.442200][ T13] bond1: (slave gretap1): failed to get link speed/duplex [ 102.443514][ T5843] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 102.444863][ T8170] cdc_wdm 11-1:1.0: Error autopm - -16 [ 102.449295][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 102.461256][ T5843] usb 10-1: USB disconnect, device number 4 [ 102.567888][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 102.575343][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 102.688034][ T13] bond1: (slave gretap1): failed to get link speed/duplex [ 102.688614][ T8369] netlink: 'syz.6.633': attribute type 20 has an invalid length. [ 102.691087][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 102.697241][ T8368] netlink: 'syz.6.633': attribute type 20 has an invalid length. [ 102.797147][ T8372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.819223][ T13] bond1: (slave gretap1): failed to get link speed/duplex [ 102.867519][ T8384] xt_hashlimit: size too large, truncated to 1048576 [ 102.867674][ T8387] Bluetooth: MGMT ver 1.23 [ 102.876973][ T8388] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.636'. [ 102.881626][ T8388] netlink: 24 bytes leftover after parsing attributes in process `syz.1.636'. [ 102.964293][ T8392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=8392 comm=syz.3.639 [ 103.691840][ T8430] netlink: 'syz.1.649': attribute type 1 has an invalid length. [ 103.728081][ T8430] 8021q: adding VLAN 0 to HW filter on device bond5 [ 103.772437][ T8433] binder: BINDER_SET_CONTEXT_MGR already set [ 103.775789][ T8433] binder: 8432:8433 ioctl 4018620d 200000000100 returned -16 [ 103.781151][ T8433] netlink: 20 bytes leftover after parsing attributes in process `syz.1.650'. [ 103.819201][ T8435] IPVS: Unknown mcast interface: vcan0 [ 104.190494][ T8457] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 104.195409][ T42] kauditd_printk_skb: 67 callbacks suppressed [ 104.195426][ T42] audit: type=1400 audit(1785474947.939:31869): avc: denied { relabelto } for pid=8456 comm="syz.5.660" name="38" dev="tmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 104.213219][ T42] audit: type=1400 audit(1785474947.959:31870): avc: denied { associate } for pid=8456 comm="syz.5.660" name="38" dev="tmpfs" ino=223 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dlm_control_device_t:s0" [ 104.218122][ T8457] syzkaller1: entered promiscuous mode [ 104.227171][ T8457] syzkaller1: entered allmulticast mode [ 104.243634][ T8457] nfs: Unknown parameter 'Bcl' [ 104.243916][ T8457] nfs: Unknown parameter 'Bcl' [ 104.244830][ T42] audit: type=1400 audit(1785474947.989:31871): avc: denied { mounton } for pid=8456 comm="syz.5.660" path="/38" dev="tmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 104.374001][ T42] audit: type=1400 audit(1785474948.119:31872): avc: denied { write } for pid=7494 comm="syz-executor" name="38" dev="tmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 104.393810][ T42] audit: type=1400 audit(1785474948.119:31873): avc: denied { remove_name } for pid=7494 comm="syz-executor" name="binderfs" dev="tmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 104.410598][ T42] audit: type=1400 audit(1785474948.119:31874): avc: denied { write } for pid=7494 comm="syz-executor" name="38" dev="tmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 104.423010][ T42] audit: type=1400 audit(1785474948.119:31875): avc: denied { write } for pid=7494 comm="syz-executor" name="38" dev="tmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 104.434644][ T42] audit: type=1400 audit(1785474948.119:31876): avc: denied { write } for pid=7494 comm="syz-executor" name="38" dev="tmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 104.444852][ T42] audit: type=1400 audit(1785474948.119:31877): avc: denied { rmdir } for pid=7494 comm="syz-executor" name="38" dev="tmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 104.454189][ T42] audit: type=1400 audit(1785474948.149:31878): avc: denied { bind } for pid=8470 comm="syz.5.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 104.616158][ T8485] misc userio: No port type given on /dev/userio [ 104.711280][ T8495] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20004 [ 104.758499][ T8505] program syz.5.673 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.778308][ T8505] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 105.116351][ T5752] Bluetooth: hci3: unexpected event for opcode 0x2007 [ 105.153904][ T8551] input: syz0 as /devices/virtual/input/input11 [ 105.224452][ T8566] dlm: no local IP address has been set [ 105.227649][ T8566] dlm: cannot start dlm midcomms -107 [ 105.248056][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.6.689'. [ 105.262497][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.6.689'. [ 105.274387][ T8569] netlink: 32 bytes leftover after parsing attributes in process `syz.3.690'. [ 105.290112][ T8569] netlink: 'syz.3.690': attribute type 11 has an invalid length. [ 105.337930][ T5814] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.343607][ T5814] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.347887][ T5814] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.378365][ T12] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.413780][ T8582] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4252604744 (544333407232 ns) > initial count (412347679616 ns). Using initial count to start timer. [ 105.442850][ T8582] syz_tun: entered promiscuous mode [ 105.449386][ T8582] SELinux: security policydb version 18 (MLS) not backwards compatible [ 105.453058][ T8582] SELinux: failed to load policy [ 105.545541][ T8593] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 105.590873][ T8595] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 106.077321][ T8625] syzkaller0: entered promiscuous mode [ 106.079604][ T8625] syzkaller0: entered allmulticast mode [ 106.333018][ T8638] netlink: 64 bytes leftover after parsing attributes in process `syz.5.703'. [ 106.370509][ T8660] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 106.374169][ T8660] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 106.379491][ T8660] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 106.383641][ T8660] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 106.477565][ T8663] clocksource: Switched to clocksource hpet [ 106.481766][ T8663] clocksource: Switched to clocksource acpi_pm [ 106.485030][ T8663] clocksource: Switched to clocksource kvm-clock [ 106.609046][ T5752] Bluetooth: hci2: command tx timeout [ 106.766182][ T8678] xt_cluster: node mask cannot exceed total number of nodes [ 107.013286][ T8682] netlink: 76 bytes leftover after parsing attributes in process `syz.5.718'. [ 107.049185][ T29] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 107.208537][ T29] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 107.214727][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 107.224166][ T29] usb 6-1: Product: syz [ 107.225713][ T29] usb 6-1: Manufacturer: syz [ 107.236007][ T29] usb 6-1: SerialNumber: syz [ 107.255146][ T29] usb 6-1: config 0 descriptor?? [ 107.261713][ T29] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 107.264193][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 107.273366][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 107.277145][ T29] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 107.280962][ T29] usb 6-1: media controller created [ 107.288815][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.408540][ T13] net_ratelimit: 80 callbacks suppressed [ 107.408600][ T13] bond1: (slave gretap1): failed to get link speed/duplex [ 107.414991][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 107.467053][ T8680] cxusb: i2c rd: len=80 is too big! [ 107.467053][ T8680] [ 107.485555][ T29] cxusb: set interface failed [ 107.489304][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 107.515335][ T29] DVB: Unable to find symbol mt352_attach() [ 107.517491][ T29] dvb-usb: bulk message failed: -22 (5/0) [ 107.520532][ T29] zl10353_read_register: readreg error (reg=127, ret==-121) [ 107.523326][ T29] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 107.580703][ T29] rc_core: IR keymap rc-dvico-mce not found [ 107.583180][ T29] Registered IR keymap rc-empty [ 107.620860][ T29] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 107.629856][ T29] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input12 [ 107.657627][ T29] dvb-usb: schedule remote query interval to 100 msecs. [ 107.665486][ T29] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 107.700880][ T29] usb 6-1: USB disconnect, device number 12 [ 107.834834][ T8726] syz.3.732 (8726) used greatest stack depth: 19120 bytes left [ 107.854157][ T8728] bond2: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 107.856754][ T8728] bond2: entered allmulticast mode [ 107.880871][ T29] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 107.897969][ T5786] bond1: (slave gretap1): failed to get link speed/duplex [ 107.900607][ T5786] bond1: (slave dummy0): failed to get link speed/duplex [ 107.921989][ T8752] sit0: entered promiscuous mode [ 107.927731][ T8752] netlink: 'syz.6.736': attribute type 1 has an invalid length. [ 107.931473][ T8752] netlink: 1 bytes leftover after parsing attributes in process `syz.6.736'. [ 108.017962][ T5786] bond1: (slave gretap1): failed to get link speed/duplex [ 108.023255][ T5786] bond1: (slave dummy0): failed to get link speed/duplex [ 108.109962][ T5841] IPVS: starting estimator thread 0... [ 108.138391][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 108.141194][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 108.186941][ T8793] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 108.197994][ T8780] IPVS: using max 43 ests per chain, 103200 per kthread [ 108.248038][ T5786] bond1: (slave gretap1): failed to get link speed/duplex [ 108.250409][ T5786] bond1: (slave dummy0): failed to get link speed/duplex [ 108.289195][ T8796] kvm: Disabled LAPIC found during irq injection [ 108.462026][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.754'. [ 108.465843][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.754'. [ 108.497976][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.500960][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.504280][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.507219][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.516124][ T8806] netlink: 20 bytes leftover after parsing attributes in process `syz.3.755'. [ 108.649393][ T8806] netlink: 'syz.3.755': attribute type 29 has an invalid length. [ 108.743378][ T5740] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.748298][ T5740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.752847][ T5740] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.763147][ T5740] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.766556][ T5740] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.028858][ T8829] iso9660: Unknown parameter 'norecovery' [ 109.064246][ T8825] netlink: 'syz.3.760': attribute type 21 has an invalid length. [ 109.168453][ T8829] fuse: Bad value for 'user_id' [ 109.172682][ T8829] fuse: Bad value for 'user_id' [ 109.214879][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 109.214897][ T42] audit: type=1400 audit(1785474952.961:31900): avc: denied { name_bind } for pid=8844 comm="syz.3.765" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 109.289814][ T8851] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 109.300389][ T8851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8851 comm=syz.3.767 [ 109.307121][ T42] audit: type=1400 audit(1785474953.051:31901): avc: denied { mount } for pid=8852 comm="syz.1.768" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 109.312554][ T8854] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 109.333274][ T42] audit: type=1400 audit(1785474953.081:31902): avc: denied { mounton } for pid=8850 comm="syz.3.767" path="/195/file0" dev="9p" ino=78395379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.342937][ T8851] overlayfs: failed to resolve './file2': -2 [ 109.354655][ T42] audit: type=1400 audit(1785474953.101:31903): avc: denied { write } for pid=8850 comm="syz.3.767" name="/" dev="9p" ino=78395379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.385635][ T8810] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.389269][ T8810] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.392595][ T8810] bridge_slave_0: entered allmulticast mode [ 109.396785][ T8810] bridge_slave_0: entered promiscuous mode [ 109.405893][ T8851] overlay: ./file0 is not a directory [ 109.409022][ T42] audit: type=1400 audit(1785474953.151:31904): avc: denied { mounton } for pid=8850 comm="syz.3.767" path="/195/file0/file0" dev="9p" ino=78395387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 109.418944][ T8810] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.422035][ T8810] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.425262][ T8810] bridge_slave_1: entered allmulticast mode [ 109.431905][ T8810] bridge_slave_1: entered promiscuous mode [ 109.461347][ T8810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.468578][ T8810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.495443][ T8810] team0: Port device team_slave_0 added [ 109.500451][ T8810] team0: Port device team_slave_1 added [ 109.528119][ T8810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.531100][ T8810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.542493][ T8810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.548951][ T8810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.551857][ T8810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.562596][ T8810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.609594][ T8810] hsr_slave_0: entered promiscuous mode [ 109.612784][ T8810] hsr_slave_1: entered promiscuous mode [ 109.615500][ T8810] debugfs: 'hsr0' already exists in 'hsr' [ 109.617341][ T8810] Cannot create hsr debugfs directory [ 109.711068][ T42] audit: type=1400 audit(1785474953.461:31905): avc: denied { mounton } for pid=8861 comm="syz.3.770" path="/196/proc_dir" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 109.712953][ T8862] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 109.794799][ T8865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8865 comm=syz.3.771 [ 109.824656][ T8810] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 109.842649][ T8810] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.850800][ T8810] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 109.856668][ T8810] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.860692][ T8810] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 109.867619][ T8810] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.873831][ T8810] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 109.882744][ T8810] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.898865][ T8810] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.901630][ T8810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.904384][ T8810] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.906580][ T8810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.935984][ T8874] scsi_nl_rcv_msg: discarding partial skb [ 109.962266][ T8810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.968842][ T7205] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.971697][ T7205] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.981461][ T8810] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.991949][ T7222] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.995119][ T7222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.005283][ T7222] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.008457][ T7222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.018071][ T42] audit: type=1400 audit(1785474953.771:31906): avc: denied { write } for pid=8876 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.097328][ T42] audit: type=1400 audit(1785474953.841:31907): avc: denied { write } for pid=8880 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.197178][ T42] audit: type=1400 audit(1785474953.941:31908): avc: denied { write } for pid=8890 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.267889][ T42] audit: type=1400 audit(1785474954.011:31909): avc: denied { write } for pid=8897 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.336042][ T8810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.475340][ T8810] veth0_vlan: entered promiscuous mode [ 110.484072][ T8810] veth1_vlan: entered promiscuous mode [ 110.516524][ T8810] veth0_macvtap: entered promiscuous mode [ 110.521790][ T8810] veth1_macvtap: entered promiscuous mode [ 110.534525][ T8810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.543288][ T8810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.578930][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.584187][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.590530][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.611810][ T5786] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.668478][ T7222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.677240][ T7222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.753114][ T7222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.755968][ T7222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.858855][ T5752] Bluetooth: hci2: command tx timeout [ 110.871710][ T8952] kvm: user requested TSC rate below hardware speed [ 110.882300][ T8952] kvm: vcpu 4: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 110.992016][ T8962] netlink: 48 bytes leftover after parsing attributes in process `syz.3.780'. [ 111.029442][ T8969] program syz.3.782 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.034367][ T8969] netlink: 'syz.3.782': attribute type 2 has an invalid length. [ 111.050116][ T8969] loop5: detected capacity change from 0 to 7 [ 111.056643][ T8969] Dev loop5: unable to read RDB block 7 [ 111.060528][ T8969] loop5: AHDI p1 p2 p3 [ 111.062290][ T8969] loop5: partition table partially beyond EOD, truncated [ 111.065210][ T8969] loop5: p1 start 1601398130 is beyond EOD, truncated [ 111.067740][ T8969] loop5: p2 start 1702059890 is beyond EOD, truncated [ 111.412650][ T8985] netlink: 48 bytes leftover after parsing attributes in process `syz.1.786'. [ 111.446230][ T8987] netlink: 44 bytes leftover after parsing attributes in process `syz.1.787'. [ 111.458684][ T8987] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.708429][ T9010] overlay: filesystem on ./file0 not supported as upperdir [ 111.722753][ T9016] CUSE: info not properly terminated [ 111.792592][ T9029] netlink: 'syz.7.794': attribute type 8 has an invalid length. [ 111.799477][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.7.794'. [ 111.822901][ T9031] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 111.828139][ T9031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.799'. [ 111.835575][ T9031] befs: (nbd1): unable to read superblock [ 111.904407][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.800'. [ 112.003508][ T9061] sg_write: data in/out 63016/14 bytes for SCSI command 0x0-- guessing data in; [ 112.003508][ T9061] program syz.3.806 not setting count and/or reply_len properly [ 112.070438][ T9069] netlink: 16 bytes leftover after parsing attributes in process `syz.3.810'. [ 112.095122][ T9071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=9071 comm=syz.6.811 [ 112.177196][ T9076] netlink: 'syz.3.813': attribute type 322 has an invalid length. [ 112.330039][ T9065] netlink: 11396 bytes leftover after parsing attributes in process `syz.1.808'. [ 112.448429][ T8744] net_ratelimit: 56 callbacks suppressed [ 112.448456][ T8744] bond1: (slave gretap1): failed to get link speed/duplex [ 112.453204][ T8744] bond1: (slave dummy0): failed to get link speed/duplex [ 112.568046][ T5786] bond1: (slave gretap1): failed to get link speed/duplex [ 112.574984][ T5786] bond1: (slave dummy0): failed to get link speed/duplex [ 112.619182][ T9100] netlink: 20 bytes leftover after parsing attributes in process `syz.7.820'. [ 112.689063][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 112.691960][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 112.696852][ T9113] FAT-fs (nbd7): unable to read boot sector [ 112.726415][ T9113] netlink: 8 bytes leftover after parsing attributes in process `syz.7.823'. [ 112.730098][ T9113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=9113 comm=syz.7.823 [ 112.799030][ T5786] bond1: (slave gretap1): failed to get link speed/duplex [ 112.802007][ T5786] bond1: (slave dummy0): failed to get link speed/duplex [ 112.934462][ T9128] netlink: 'syz.1.827': attribute type 3 has an invalid length. [ 112.939843][ T5752] Bluetooth: hci2: command tx timeout [ 112.962721][ T9117] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.965353][ T9117] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.049293][ T9117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.063300][ T9117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.218139][ T8744] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.228184][ T8744] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.231655][ T8744] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.234771][ T8744] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.238393][ T8744] bond1: (slave gretap1): failed to get link speed/duplex [ 113.241391][ T8744] bond1: (slave dummy0): failed to get link speed/duplex [ 113.266391][ T9147] x_tables: duplicate underflow at hook 1 [ 113.269702][ T9144] bond1: entered promiscuous mode [ 113.499333][ T9165] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 113.525984][ T9165] tun0: tun_chr_ioctl cmd 1074025675 [ 113.529571][ T9165] tun0: persist enabled [ 113.597984][ T9157] bridge_slave_0: left allmulticast mode [ 113.599964][ T9157] bridge_slave_0: left promiscuous mode [ 113.601914][ T9157] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.607042][ T9157] bridge_slave_1: left allmulticast mode [ 113.610039][ T9157] bridge_slave_1: left promiscuous mode [ 113.611941][ T9157] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.617647][ T9157] bond0: (slave bond_slave_0): Releasing backup interface [ 113.636498][ T9157] bond0: (slave bond_slave_1): Releasing backup interface [ 113.643999][ T9157] team0: Port device team_slave_0 removed [ 113.648628][ T9157] team0: Port device team_slave_1 removed [ 113.651066][ T9157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.653381][ T9157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.656519][ T9157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.659597][ T9157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.671981][ T9163] team0: Mode changed to "loadbalance" [ 114.047006][ T9183] netlink: 'syz.3.841': attribute type 29 has an invalid length. [ 114.353423][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 114.353437][ T42] audit: type=1400 audit(1785474958.101:31942): avc: denied { name_bind } for pid=9196 comm="syz.3.847" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 114.486582][ T9212] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 114.567479][ T9214] netlink: 'syz.3.849': attribute type 7 has an invalid length. [ 114.626198][ T9217] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 114.630464][ T9217] overlayfs: failed to set xattr on upper [ 114.633243][ T9217] overlayfs: ...falling back to redirect_dir=nofollow. [ 114.635495][ T9217] overlayfs: ...falling back to metacopy=off. [ 114.637463][ T9217] overlayfs: ...falling back to index=off. [ 114.639899][ T9217] overlayfs: ...falling back to uuid=null. [ 114.647995][ T9217] : renamed from vlan0 (while UP) [ 114.955098][ T9231] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 114.966071][ T9231] pci 0000:00:04.0: PCI bridge to [bus 01] [ 114.969816][ T9231] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 114.973592][ T9231] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 114.977421][ T9231] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3807ffffffff 64bit pref] [ 114.981412][ T9231] pci 0000:00:04.0: enabling Extended Tags [ 115.002362][ T9231] pci 0000:00:04.0: Adding to iommu group 4 [ 115.010758][ T9236] netlink: 'syz.3.854': attribute type 30 has an invalid length. [ 115.019658][ T5752] Bluetooth: hci2: command tx timeout [ 115.045683][ T9238] macsec1: entered promiscuous mode [ 115.048221][ T9238] macsec1: entered allmulticast mode [ 115.059425][ T9231] pci 0000:00:04.0: PCI bridge to [bus 01] [ 115.063413][ T9239] netlink: 'syz.3.854': attribute type 30 has an invalid length. [ 115.064605][ T9231] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 115.074319][ T9231] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 115.079278][ T9231] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff]: assigned [ 115.082643][ T9231] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref]: assigned [ 115.086025][ T9231] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 115.089281][ T9231] pci 0000:00:04.0: PCI bridge to [bus 01] [ 115.091321][ T9231] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 115.095478][ T9231] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 115.100327][ T9231] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref] [ 115.143444][ T9231] pcieport 0000:00:04.0: PCI INT A: failed to register GSI [ 115.146015][ T9231] pcieport 0000:00:04.0: probe with driver pcieport failed with error -16 [ 115.162466][ T9238] nbd1: detected capacity change from 0 to 63 [ 115.167889][ T9241] block nbd1: NBD_DISCONNECT [ 115.173666][ T9241] block nbd1: Disconnected due to user request. [ 115.177538][ T9241] block nbd1: shutting down sockets [ 115.187384][ T1309] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.192025][ T1309] buffer_io_error: 11 callbacks suppressed [ 115.192034][ T1309] Buffer I/O error on dev nbd1, logical block 0, async page read [ 115.197312][ T1309] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 115.200473][ T1309] Buffer I/O error on dev nbd1, logical block 1, async page read [ 115.202948][ T1309] Buffer I/O error on dev nbd1, logical block 2, async page read [ 115.205200][ T1309] Buffer I/O error on dev nbd1, logical block 3, async page read [ 115.241141][ T5110] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 115.256287][ T5110] Buffer I/O error on dev nbd1, logical block 0, async page read [ 115.265022][ T5110] Buffer I/O error on dev nbd1, logical block 1, async page read [ 115.267473][ T5110] Buffer I/O error on dev nbd1, logical block 2, async page read [ 115.272575][ T5110] Buffer I/O error on dev nbd1, logical block 3, async page read [ 115.275733][ T1309] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.279487][ T1309] Buffer I/O error on dev nbd1, logical block 0, async page read [ 115.282554][ T1309] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.288234][ T1309] Buffer I/O error on dev nbd1, logical block 1, async page read [ 115.290826][ T1309] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.293912][ T1309] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.297198][ T1308] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 115.301696][ T1308] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 115.307373][ T1308] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 115.314412][ T5749] ldm_validate_partition_table(): Disk read failed. [ 115.318127][ T5749] Dev nbd1: unable to read RDB block 0 [ 115.326493][ T5749] nbd1: unable to read partition table [ 115.335516][ T5749] ldm_validate_partition_table(): Disk read failed. [ 115.340195][ T5749] Dev nbd1: unable to read RDB block 0 [ 115.343752][ T5749] nbd1: unable to read partition table [ 115.346111][ T42] audit: type=1400 audit(1785474959.091:31943): avc: denied { create } for pid=9255 comm="syz.3.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 115.357931][ T42] audit: type=1400 audit(1785474959.091:31944): avc: denied { write } for pid=9255 comm="syz.3.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 115.462558][ T9269] usb usb1: usbfs: process 9269 (syz.3.862) did not claim interface 0 before use [ 115.521607][ T42] audit: type=1326 audit(1785474959.271:31945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9275 comm="syz.3.864" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3fc7b9e019 code=0x0 [ 116.186466][ T9286] pci 0000:00:04.0: PCI bridge to [bus 01] [ 116.188713][ T9286] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 116.194029][ T9286] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 116.199364][ T9286] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref] [ 116.207606][ T9286] netlink: 'syz.7.866': attribute type 30 has an invalid length. [ 116.259800][ T9290] netlink: 'syz.7.866': attribute type 30 has an invalid length. [ 117.088026][ T5752] Bluetooth: hci2: command tx timeout [ 117.146246][ T9294] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 117.233295][ T42] audit: type=1400 audit(1785474960.981:31946): avc: denied { setopt } for pid=9297 comm="syz.6.871" lport=54964 faddr=::ffff:172.30.0.7 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 117.286789][ T9309] netlink: 'syz.6.871': attribute type 21 has an invalid length. [ 117.290143][ T9309] __nla_validate_parse: 8 callbacks suppressed [ 117.290158][ T9309] netlink: 156 bytes leftover after parsing attributes in process `syz.6.871'. [ 117.347264][ T66] block nbd3: Receive control failed (result -32) [ 117.359134][ T9306] block nbd3: shutting down sockets [ 117.447976][ T9131] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 117.497966][ T12] net_ratelimit: 45 callbacks suppressed [ 117.497992][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 117.503634][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 117.518854][ T9] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 117.524788][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.877'. [ 117.527683][ T9319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.877'. [ 117.571186][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.877'. [ 117.574916][ T9319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.877'. [ 117.602677][ T9300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.608357][ T9300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.608886][ T5814] bond1: (slave gretap1): failed to get link speed/duplex [ 117.614063][ T5814] bond1: (slave dummy0): failed to get link speed/duplex [ 117.618249][ T9131] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 117.621372][ T9131] usb 6-1: can't read configurations, error -71 [ 117.673308][ T9] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 117.678214][ T9] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 117.681377][ T9] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 117.686530][ T9] usb 12-1: New USB device found, idVendor=15a4, idProduct=9020, bcdDevice= 1.00 [ 117.689592][ T9] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.692145][ T9] usb 12-1: Product: syz [ 117.693491][ T9] usb 12-1: Manufacturer: syz [ 117.695070][ T9] usb 12-1: SerialNumber: syz [ 117.702795][ T9308] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 117.708037][ T9308] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 117.710703][ T9308] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 117.714918][ T9] af9005: boot packet bulk message failed: -71 (252/0) [ 117.717166][ T9] dvb-usb: found a 'Afatech DVB-T USB1.1 stick' in cold state, will try to load a firmware [ 117.723693][ T9] usb 12-1: Direct firmware load for af9005.fw failed with error -2 [ 117.729397][ T42] audit: type=1400 audit(1785474961.471:31947): avc: denied { firmware_load } for pid=9 comm="kworker/0:0" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 117.729764][ T9] usb 12-1: Falling back to sysfs fallback for: af9005.fw [ 117.738037][ T5814] bond1: (slave gretap1): failed to get link speed/duplex [ 117.743360][ T5814] bond1: (slave dummy0): failed to get link speed/duplex [ 117.847954][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 117.850553][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 117.888291][ T42] audit: type=1400 audit(1785474961.631:31948): avc: denied { read } for pid=9328 comm="syz.3.881" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 117.895530][ T42] audit: type=1400 audit(1785474961.641:31949): avc: denied { open } for pid=9328 comm="syz.3.881" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 117.958148][ T5814] bond1: (slave gretap1): failed to get link speed/duplex [ 117.960487][ T5814] bond1: (slave dummy0): failed to get link speed/duplex [ 118.053556][ T42] audit: type=1400 audit(1785474961.801:31950): avc: denied { setattr } for pid=9333 comm="syz.6.882" name="nbd6" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.062111][ T42] audit: type=1400 audit(1785474961.811:31951): avc: denied { mounton } for pid=9333 comm="syz.6.882" path="/81/file0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.118090][ T9339] netlink: 4 bytes leftover after parsing attributes in process `syz.6.883'. [ 118.123924][ T9339] netlink: 4 bytes leftover after parsing attributes in process `syz.6.883'. [ 118.153077][ T9342] netlink: 'syz.3.884': attribute type 2 has an invalid length. [ 118.155906][ T9342] netlink: 132 bytes leftover after parsing attributes in process `syz.3.884'. [ 118.324244][ T9357] program syz.3.890 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.505797][ T9361] [ 118.506850][ T9361] ====================================================== [ 118.509646][ T9361] WARNING: possible circular locking dependency detected [ 118.512387][ T9361] syzkaller #0 Tainted: G L [ 118.514887][ T9361] ------------------------------------------------------ [ 118.517628][ T9361] syz.6.892/9361 is trying to acquire lock: [ 118.519960][ T9361] ffff888028143bc0 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkcg_deactivate_policy+0x167/0x600 [ 118.523988][ T9361] [ 118.523988][ T9361] but task is already holding lock: [ 118.526793][ T9361] ffff8880595a68b8 (&eq->sysfs_lock){+.+.}-{4:4}, at: elevator_exit+0x88/0xf0 [ 118.530301][ T9361] [ 118.530301][ T9361] which lock already depends on the new lock. [ 118.530301][ T9361] [ 118.534309][ T9361] [ 118.534309][ T9361] the existing dependency chain (in reverse order) is: [ 118.537864][ T9361] [ 118.537864][ T9361] -> #5 (&eq->sysfs_lock){+.+.}-{4:4}: [ 118.540535][ T9361] lock_acquire+0x1b9/0x370 [ 118.542544][ T9361] __mutex_lock+0x1a4/0x1bd0 [ 118.544647][ T9361] elevator_exit+0x88/0xf0 [ 118.546601][ T9361] elevator_switch+0x3a7/0x7e0 [ 118.548640][ T9361] elevator_change+0x352/0x530 [ 118.550683][ T9361] elevator_set_none+0x92/0xf0 [ 118.552705][ T9361] blk_unregister_queue+0x178/0x310 [ 118.554882][ T9361] __del_gendisk+0x2e3/0xb20 [ 118.556891][ T9361] del_gendisk+0x10e/0x1b0 [ 118.558835][ T9361] loop_control_ioctl+0x4f8/0x620 [ 118.561036][ T9361] __x64_sys_ioctl+0x18e/0x210 [ 118.563141][ T9361] do_syscall_64+0x115/0x870 [ 118.565098][ T9361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.567622][ T9361] [ 118.567622][ T9361] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 118.570728][ T9361] lock_acquire+0x1b9/0x370 [ 118.572737][ T9361] __mutex_lock+0x1a4/0x1bd0 [ 118.574785][ T9361] elevator_change+0x1bc/0x530 [ 118.576805][ T9361] elv_iosched_store+0x3be/0x460 [ 118.578989][ T9361] queue_attr_store+0x25f/0x2f0 [ 118.581145][ T9361] sysfs_kf_write+0xf2/0x150 [ 118.583230][ T9361] kernfs_fop_write_iter+0x3e0/0x5f0 [ 118.585567][ T9361] vfs_write+0x6ac/0x1050 [ 118.587517][ T9361] ksys_write+0x12a/0x250 [ 118.589483][ T9361] do_syscall_64+0x115/0x870 [ 118.591510][ T9361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.594027][ T9361] [ 118.594027][ T9361] -> #3 (&q->q_usage_counter(io)#17){++++}-{0:0}: [ 118.597465][ T9361] lock_acquire+0x1b9/0x370 [ 118.599484][ T9361] blk_alloc_queue+0x610/0x790 [ 118.601620][ T9361] blk_mq_alloc_queue+0x174/0x290 [ 118.603837][ T9361] __blk_mq_alloc_disk+0x29/0x120 [ 118.606034][ T9361] loop_add+0x498/0xb60 [ 118.607944][ T9361] loop_init+0x1d3/0x200 [ 118.609944][ T9361] do_one_initcall+0x11d/0x700 [ 118.612078][ T9361] kernel_init_freeable+0x6ea/0x7b0 [ 118.614348][ T9361] kernel_init+0x1f/0x1e0 [ 118.616298][ T9361] ret_from_fork+0x72b/0xd50 [ 118.618372][ T9361] ret_from_fork_asm+0x1a/0x30 [ 118.620487][ T9361] [ 118.620487][ T9361] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 118.623335][ T9361] lock_acquire+0x1b9/0x370 [ 118.625346][ T9361] fs_reclaim_acquire+0xc4/0x100 [ 118.627515][ T9361] prepare_alloc_pages+0x166/0x5f0 [ 118.629734][ T9361] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 118.632239][ T9361] __alloc_pages_noprof+0xb/0x110 [ 118.634066][ T9361] pcpu_populate_chunk+0x118/0x990 [ 118.636031][ T9361] pcpu_alloc_noprof+0x881/0x1ca0 [ 118.638246][ T9361] iommu_dma_init_fq+0x1da/0x7e0 [ 118.640301][ T9361] iommu_setup_dma_ops+0x11df/0x1620 [ 118.642213][ T9361] bus_iommu_probe+0x264/0x550 [ 118.644313][ T9361] iommu_device_register+0x1af/0x280 [ 118.646479][ T9361] intel_iommu_init+0x2020/0x2990 [ 118.648227][ T9361] pci_iommu_init+0x3c/0x80 [ 118.650214][ T9361] do_one_initcall+0x11d/0x700 [ 118.652308][ T9361] kernel_init_freeable+0x6ea/0x7b0 [ 118.654146][ T9361] kernel_init+0x1f/0x1e0 [ 118.655865][ T9361] ret_from_fork+0x72b/0xd50 [ 118.657938][ T9361] ret_from_fork_asm+0x1a/0x30 [ 118.659940][ T9361] [ 118.659940][ T9361] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 118.662335][ T9361] lock_acquire+0x1b9/0x370 [ 118.664345][ T9361] __mutex_lock+0x1a4/0x1bd0 [ 118.666396][ T9361] pcpu_alloc_noprof+0xe87/0x1ca0 [ 118.668258][ T9361] percpu_ref_init+0x37/0x3f0 [ 118.670083][ T9361] blkg_alloc+0xf0/0xf80 [ 118.671992][ T9361] blkg_conf_prep+0x46e/0xf10 [ 118.674045][ T9361] tg_set_conf.isra.0+0x1ed/0x500 [ 118.675807][ T9361] cgroup_file_write+0x1e6/0x8a0 [ 118.677777][ T9361] kernfs_fop_write_iter+0x3e0/0x5f0 [ 118.680092][ T9361] vfs_write+0x6ac/0x1050 [ 118.681813][ T9361] ksys_write+0x12a/0x250 [ 118.683382][ T9361] do_syscall_64+0x115/0x870 [ 118.685374][ T9361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.687431][ T9361] [ 118.687431][ T9361] -> #0 (&q->blkcg_mutex){+.+.}-{4:4}: [ 118.689766][ T9361] check_prev_add+0xeb/0xe60 [ 118.691577][ T9361] __lock_acquire+0x136c/0x1a40 [ 118.693710][ T9361] lock_acquire+0x1b9/0x370 [ 118.695737][ T9361] __mutex_lock+0x1a4/0x1bd0 [ 118.697809][ T9361] blkcg_deactivate_policy+0x167/0x600 [ 118.700170][ T9361] bfq_exit_queue+0x29d/0x430 [ 118.702121][ T9361] blk_mq_exit_sched+0x20e/0x4e0 [ 118.703926][ T9361] elevator_exit+0x93/0xf0 [ 118.705906][ T9361] elevator_switch+0x3a7/0x7e0 [ 118.708011][ T9361] elevator_change+0x352/0x530 [ 118.710155][ T9361] elevator_set_none+0x92/0xf0 [ 118.712335][ T9361] blk_unregister_queue+0x178/0x310 [ 118.714671][ T9361] __del_gendisk+0x2e3/0xb20 [ 118.716700][ T9361] del_gendisk+0x10e/0x1b0 [ 118.718703][ T9361] loop_control_ioctl+0x4f8/0x620 [ 118.720892][ T9361] __x64_sys_ioctl+0x18e/0x210 [ 118.722969][ T9361] do_syscall_64+0x115/0x870 [ 118.724949][ T9361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.727536][ T9361] [ 118.727536][ T9361] other info that might help us debug this: [ 118.727536][ T9361] [ 118.731682][ T9361] Chain exists of: [ 118.731682][ T9361] &q->blkcg_mutex --> &q->elevator_lock --> &eq->sysfs_lock [ 118.731682][ T9361] [ 118.736770][ T9361] Possible unsafe locking scenario: [ 118.736770][ T9361] [ 118.739588][ T9361] CPU0 CPU1 [ 118.741517][ T9361] ---- ---- [ 118.743158][ T9361] lock(&eq->sysfs_lock); [ 118.744493][ T9361] lock(&q->elevator_lock); [ 118.746609][ T9361] lock(&eq->sysfs_lock); [ 118.749003][ T9361] lock(&q->blkcg_mutex); [ 118.750627][ T9361] [ 118.750627][ T9361] *** DEADLOCK *** [ 118.750627][ T9361] [ 118.753223][ T9361] 3 locks held by syz.6.892/9361: [ 118.754802][ T9361] #0: ffff88802818b3a0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0x106/0x1b0 [ 118.757944][ T9361] #1: ffff888028143d68 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1bc/0x530 [ 118.761025][ T9361] #2: ffff8880595a68b8 (&eq->sysfs_lock){+.+.}-{4:4}, at: elevator_exit+0x88/0xf0 [ 118.763919][ T9361] [ 118.763919][ T9361] stack backtrace: [ 118.765789][ T9361] CPU: 1 UID: 0 PID: 9361 Comm: syz.6.892 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.765805][ T9361] Tainted: [L]=SOFTLOCKUP [ 118.765809][ T9361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.765816][ T9361] Call Trace: [ 118.765827][ T9361] [ 118.765832][ T9361] dump_stack_lvl+0x100/0x190 [ 118.765847][ T9361] print_circular_bug.cold+0x178/0x1c7 [ 118.765867][ T9361] check_noncircular+0x146/0x160 [ 118.765883][ T9361] check_prev_add+0xeb/0xe60 [ 118.765896][ T9361] __lock_acquire+0x136c/0x1a40 [ 118.765912][ T9361] lock_acquire+0x1b9/0x370 [ 118.765925][ T9361] ? blkcg_deactivate_policy+0x167/0x600 [ 118.765942][ T9361] ? __pfx___might_resched+0x10/0x10 [ 118.765957][ T9361] __mutex_lock+0x1a4/0x1bd0 [ 118.765972][ T9361] ? blkcg_deactivate_policy+0x167/0x600 [ 118.765987][ T9361] ? blkcg_deactivate_policy+0x167/0x600 [ 118.766002][ T9361] ? mark_held_locks+0x40/0x70 [ 118.766015][ T9361] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 118.766027][ T9361] ? __pfx___mutex_lock+0x10/0x10 [ 118.766039][ T9361] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 118.766050][ T9361] ? percpu_ref_is_zero+0xe7/0x150 [ 118.766064][ T9361] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 118.766083][ T9361] ? __blk_freeze_queue_start+0xd2/0x460 [ 118.766110][ T9361] ? blkcg_deactivate_policy+0x167/0x600 [ 118.766131][ T9361] blkcg_deactivate_policy+0x167/0x600 [ 118.766155][ T9361] bfq_exit_queue+0x29d/0x430 [ 118.766172][ T9361] ? __pfx_bfq_exit_queue+0x10/0x10 [ 118.766187][ T9361] blk_mq_exit_sched+0x20e/0x4e0 [ 118.766212][ T9361] elevator_exit+0x93/0xf0 [ 118.766231][ T9361] elevator_switch+0x3a7/0x7e0 [ 118.766251][ T9361] elevator_change+0x352/0x530 [ 118.766272][ T9361] elevator_set_none+0x92/0xf0 [ 118.766293][ T9361] ? __pfx_elevator_set_none+0x10/0x10 [ 118.766313][ T9361] ? kobject_put+0xb9/0x640 [ 118.766336][ T9361] blk_unregister_queue+0x178/0x310 [ 118.766356][ T9361] __del_gendisk+0x2e3/0xb20 [ 118.766380][ T9361] ? del_gendisk+0xb9/0x1b0 [ 118.766395][ T9361] ? __pfx___del_gendisk+0x10/0x10 [ 118.766413][ T9361] ? up_write+0x2e5/0x5c0 [ 118.766437][ T9361] del_gendisk+0x10e/0x1b0 [ 118.766453][ T9361] loop_control_ioctl+0x4f8/0x620 [ 118.766480][ T9361] ? __pfx_loop_control_ioctl+0x10/0x10 [ 118.766496][ T9361] ? selinux_file_ioctl+0x13b/0x290 [ 118.766530][ T9361] ? selinux_file_ioctl+0xb6/0x290 [ 118.766550][ T9361] ? __pfx_loop_control_ioctl+0x10/0x10 [ 118.766562][ T9361] __x64_sys_ioctl+0x18e/0x210 [ 118.766581][ T9361] do_syscall_64+0x115/0x870 [ 118.766593][ T9361] ? clear_bhb_loop+0x40/0x90 [ 118.766606][ T9361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.766618][ T9361] RIP: 0033:0x7f846a59e019 [ 118.766629][ T9361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.766640][ T9361] RSP: 002b:00007f846b463028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.766652][ T9361] RAX: ffffffffffffffda RBX: 00007f846a825fa0 RCX: 00007f846a59e019 [ 118.766659][ T9361] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000049 [ 118.766666][ T9361] RBP: 00007f846a63500c R08: 0000000000000000 R09: 0000000000000000 [ 118.766673][ T9361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.766679][ T9361] R13: 00007f846a826038 R14: 00007f846a825fa0 R15: 00007fff134b4408 [ 118.766689][ T9361] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 119.321918][ T9344] bond0: (slave syz_tun): Releasing backup interface [ 119.695752][ T5814] bridge_slave_1: left allmulticast mode [ 119.698285][ T5814] bridge_slave_1: left promiscuous mode [ 119.700661][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.704563][ T5814] bridge_slave_0: left allmulticast mode [ 119.706870][ T5814] bridge_slave_0: left promiscuous mode [ 119.709320][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.760753][ T5814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.764493][ T5814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.767683][ T5814] bond0 (unregistering): Released all slaves [ 119.815584][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 119.815597][ T42] audit: type=1400 audit(1785474963.561:31957): avc: denied { write } for pid=9366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.863999][ T42] audit: type=1400 audit(1785474963.611:31958): avc: denied { write } for pid=9369 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.885968][ T5448] 8021q: adding VLAN 0 to HW filter on device eth10 [ 119.943537][ T42] audit: type=1400 audit(1785474963.691:31959): avc: denied { write } for pid=9372 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.989062][ T42] audit: type=1400 audit(1785474963.741:31960): avc: denied { write } for pid=9375 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.011552][ T5448] 8021q: adding VLAN 0 to HW filter on device eth11 [ 120.050991][ T5814] hsr_slave_0: left promiscuous mode [ 120.053522][ T5814] hsr_slave_1: left promiscuous mode [ 120.055400][ T5814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.058570][ T5814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.072580][ T42] audit: type=1400 audit(1785474963.821:31961): avc: denied { write } for pid=9378 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.108962][ T42] audit: type=1400 audit(1785474963.851:31962): avc: denied { write } for pid=9381 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.116638][ T5814] team0 (unregistering): Port device team_slave_1 removed [ 120.122531][ T5814] team0 (unregistering): Port device team_slave_0 removed [ 120.154660][ T5448] 8021q: adding VLAN 0 to HW filter on device eth12 [ 120.206395][ T42] audit: type=1400 audit(1785474963.951:31963): avc: denied { write } for pid=9384 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.239411][ T42] audit: type=1400 audit(1785474963.981:31964): avc: denied { write } for pid=9387 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.264494][ T5448] 8021q: adding VLAN 0 to HW filter on device eth13 [ 120.562426][ T5814] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.566006][ T5814] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.631649][ T5814] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.635112][ T5814] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.694070][ T5814] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.697513][ T5814] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.771238][ T5814] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.774373][ T5814] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.862527][ T5814] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.865625][ T5814] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.921662][ T5814] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.924208][ T42] audit: type=1400 audit(1785474964.671:31965): avc: denied { write } for pid=9395 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.925827][ T5814] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.964795][ T42] audit: type=1400 audit(1785474964.711:31966): avc: denied { write } for pid=9398 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.997026][ T5814] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.001418][ T5814] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.008081][ T5448] 8021q: adding VLAN 0 to HW filter on device eth14 [ 121.066571][ T5814] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.070895][ T5814] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.142092][ T5448] 8021q: adding VLAN 0 to HW filter on device eth15 [ 121.167064][ T5814] bridge_slave_1: left allmulticast mode [ 121.170242][ T5814] bridge_slave_1: left promiscuous mode [ 121.172458][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.176073][ T5814] bridge_slave_0: left allmulticast mode [ 121.178360][ T5814] bridge_slave_0: left promiscuous mode [ 121.180591][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.186329][ T5814] dvmrp0: left allmulticast mode [ 121.282169][ T5814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.286568][ T5814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.293220][ T5814] bond0 (unregistering): Released all slaves [ 121.297071][ T5814] bond1 (unregistering): Released all slaves [ 121.302131][ T5814] bond2 (unregistering): Released all slaves [ 121.306990][ T5814] bond3 (unregistering): Released all slaves [ 121.322722][ T5814] bond4 (unregistering): Released all slaves [ 121.329246][ T5814] bond5 (unregistering): Released all slaves [ 121.362345][ T5814] bond0 (unregistering): Released all slaves [ 121.367463][ T5814] bond1 (unregistering): Released all slaves [ 121.488429][ T5448] 8021q: adding VLAN 0 to HW filter on device eth16 [ 121.500935][ T5814] IPVS: stopping backup sync thread 6737 ... [ 121.633737][ T5448] 8021q: adding VLAN 0 to HW filter on device eth17 [ 121.764916][ T5448] 8021q: adding VLAN 0 to HW filter on device eth18 [ 121.807154][ T5814] hsr_slave_0: left promiscuous mode [ 121.810397][ T5814] hsr_slave_1: left promiscuous mode [ 121.815581][ T5814] hsr_slave_0: left promiscuous mode [ 121.818479][ T5814] hsr_slave_1: left promiscuous mode [ 121.825765][ T5814] veth1_macvtap: left promiscuous mode [ 121.828369][ T5814] veth0_macvtap: left promiscuous mode [ 121.830810][ T5814] veth0_vlan: left promiscuous mode [ 121.833795][ T5814] veth1_macvtap: left promiscuous mode [ 121.835537][ T5814] veth0_macvtap: left promiscuous mode [ 121.837339][ T5814] veth1_vlan: left promiscuous mode [ 121.839258][ T5814] veth0_vlan: left promiscuous mode [ 121.910659][ T5827] SELinux: failure in sel_netif_sid_slow(), invalid network interface (51) [ 121.927075][ T5814] team0 (unregistering): Port device team_slave_1 removed [ 121.938977][ T5814] team0 (unregistering): Port device team_slave_0 removed [ 122.076408][ T5448] 8021q: adding VLAN 0 to HW filter on device eth19 [ 122.202563][ T5448] 8021q: adding VLAN 0 to HW filter on device eth20 [ 122.322028][ T5448] 8021q: adding VLAN 0 to HW filter on device eth21 [ 122.544254][ T5814] IPVS: stop unused estimator thread 0... [ 122.567912][ T5786] net_ratelimit: 68 callbacks suppressed [ 122.567929][ T5786] bond1: (slave gretap1): failed to get link speed/duplex [ 122.572046][ T5786] bond1: (slave dummy0): failed to get link speed/duplex [ 122.642434][ T5814] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.646327][ T5814] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.677998][ T5786] bond1: (slave gretap1): failed to get link speed/duplex [ 122.680364][ T5786] bond1: (slave dummy0): failed to get link speed/duplex [ 122.711533][ T5814] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.714796][ T5814] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.773929][ T5814] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.778828][ T5814] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.788018][ T5786] bond1: (slave gretap1): failed to get link speed/duplex [ 122.791068][ T5786] bond1: (slave dummy0): failed to get link speed/duplex [ 122.852820][ T5814] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.857039][ T5814] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.898376][ T5786] bond1: (slave gretap1): failed to get link speed/duplex [ 122.901499][ T5786] bond1: (slave dummy0): failed to get link speed/duplex [ 122.982245][ T5814] bond1 (unregistering): (slave gretap1): Removing an active aggregator [ 122.984898][ T5814] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 122.988484][ T5814] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 122.990983][ T5814] bond1 (unregistering): (slave gretap1): the permanent HWaddr of slave - 42:ad:aa:e9:12:1f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 123.017344][ T5814] bond0 (unregistering): Released all slaves [ 123.023959][ T5814] bond1 (unregistering): (slave dummy0): Removing an active aggregator [ 123.026648][ T5814] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 123.030608][ T5814] bond1 (unregistering): Released all slaves [ 123.035715][ T5814] bond2 (unregistering): Released all slaves [ 123.105245][ T5814] tipc: Disabling bearer [ 123.112945][ T5814] tipc: Left network mode [ 123.165978][ T5448] 8021q: adding VLAN 0 to HW filter on device eth22 [ 123.292299][ T5448] 8021q: adding VLAN 0 to HW filter on device eth23 [ 123.358633][ T5814] hsr_slave_0: left promiscuous mode [ 123.360776][ T5814] hsr_slave_1: left promiscuous mode [ 123.363564][ T5814] veth1_macvtap: left promiscuous mode [ 123.365378][ T5814] veth0_macvtap: left promiscuous mode [ 123.367180][ T5814] veth1_vlan: left promiscuous mode [ 123.369221][ T5814] veth0_vlan: left promiscuous mode [ 123.464217][ T5448] 8021q: adding VLAN 0 to HW filter on device eth24 [ 123.590199][ T5448] 8021q: adding VLAN 0 to HW filter on device eth25