last executing test programs: 5m30.484727381s ago: executing program 32 (id=419): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f00000007c0)=0x9, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 4m53.058917559s ago: executing program 33 (id=816): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0145401, &(0x7f0000000100)={{0x3, 0x1, 0x1, 0x0, 0x4000}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x108000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000084e9c4ec"], 0x48) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x0, 0x400, 0x80, 0x3, 0x0, 0x8, 0x8d], 0x100000, 0x80}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000240)={0x3, 0x11, 0x5, 0x5360, 0x7}, 0x10, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) 4m49.057425999s ago: executing program 34 (id=866): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x0, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x800}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r1, 0xf29b}, 0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x40103, 0x0) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0x0, 0xfe, 0xfffffff9, 0x0}) (async) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) (async) r4 = openat(r0, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x117) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xb) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000002c0)='fuseblk\x00', 0x989, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x82, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {r4}}, './file0/file0\x00'}) (async) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) syz_emit_ethernet(0x5a, &(0x7f0000000300)={@local, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@canfd={0xd, {{0x0, 0x0, 0x0, 0x1}, 0x3b, 0x2, 0x0, 0x0, "5b2c6e064d29aeccfa72a6ba7cedba77e6406ed1aef10c195329fb201a9c49a7d0a59100877cfc473647c8308f4de3cabbdf2a6848f1b1966cd5b045af314675"}}}}, 0x0) (async) syz_io_uring_setup(0x4, &(0x7f0000000380)={0x0, 0x4ba9, 0x2, 0x3, 0x337, 0x0, r0}, &(0x7f0000000400), &(0x7f0000000440)) (async) bind$unix(r6, &(0x7f00000000c0)=@abs={0x1}, 0x6e) (async) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev(r5, &(0x7f0000000700)=[{&(0x7f0000000540)="730f5f31ebcc4cb019d5d60c141b029df2636316fd559efaac7fa27db4c62705556f81abfc0c8d885df1940930f8bdaaef173362ebcf9aeefd7c508653aa0c327e8dd8b61d1fc3347e9dd6b188121918338ea3b3fb91467e893ddd9dc9622523441524d7a4aedba75f7457945975fdbfe9743a97c55cb5603b96597532f4abf1aca333c32f4214f0ca2201fac679b5d9f15f1bc3c2ee059333c783111ee632560df4de538c289a313cfb403d48f45147966b87a2b5a3e33e097956307a88cf4cf8a68c33523645edefed5f4901e38a6cb657c2f83899aaaedbc0ccafa790036dda9be0e1ec08c79d896b29c0a607fdcb", 0xf0}, {&(0x7f0000000640)="28af0c8e772f03ee4f013e84e568a1e63719bfd35a4cf16ceab2c6e8ecc07a1ef596e5362aef3fd4419f51e6eab6146b1001cb29db5304894cb4382fb29d0fe14362174912d4f9b14ba6a1fe88b46d474a6c57c2dbd9f039c72da15609ff0a34070c6259a77fbf0bc29da27186c53f61b89be8f2cf596f73d0782e20020bce6241e8dacf2d695c677ee684bfa1120f", 0x8f}, {&(0x7f0000000ac0)="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", 0x1000}], 0x3, 0x19d, 0xffffff81) (async) write$char_usb(r7, &(0x7f0000000180)="942804df7ebbc06aff2962083247dd28ebdc59f1f251e15f0330e8f5ad0c047538522caa20a2fa64637f6ffaee5b8f99dabda1e86c282913698686165802f1972bc0620dad1712eff91b5b535dea4e79099a13405d4346ad49a6d8a77deeb034040dc7458938bc4584bf0477b5f88820176699c2f976b2795439abc6094a5c71aca9f4519b95d265770680e922105f3dbf537e1935b4264c75f2f53dadadf40795707717d698898d0cb9e533cbfa5b76f2db3fd2e51e26b7bc67", 0xba) (async) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000500)={0x2, 0x7, 0x5d, &(0x7f0000000480)=""/93}) 3m52.226655345s ago: executing program 6 (id=1915): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/keycreate\x00', 0x2, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000100)="c4e3c1cff26866b8000000000f23c80f21f86635040010000f23f8f32e656564819cf06c09000f01c466b9800000c00f326635000400000f303664660fc6634a4d2e2e260fc731f20f38f19553ffbaf80c66b8080aae8366efbafc0cec13ed", 0x5f}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m52.047157302s ago: executing program 6 (id=1927): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x80000000003, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x20, 0x6}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f014, 0x20009}) socket$netlink(0x10, 0x3, 0x6586e5a309bfb505) r5 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) close_range(r3, r3, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa0017"], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x84) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x8, 0xa000) ioctl$USBDEVFS_FORBID_SUSPEND(r6, 0x5521) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000f00)=@nat={'nat\x00', 0x670, 0x5, 0x4f0, 0x2c8, 0x1b8, 0xffffffff, 0x0, 0x2c8, 0x458, 0x458, 0xffffffff, 0x458, 0x458, 0x5, 0x0, {[{{@uncond, 0x0, 0x180, 0x1b8, 0x48, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@rand_addr=0x64010102, [0xffffff00, 0xff, 0xffffffff, 0xff000000], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0x0, 0xffffff00, 0xffffff00], @ipv6=@local, [0xff, 0xff, 0xffffffff, 0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff, 0xffffffff, 0xff000000], 0xc9, 0x4, 0x0, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x1800, 0x100}, 0x40, 0x800, 0x4e24, 0x4e24, 0x4e23, 0x4e22}}, @common=@unspec=@helper={{0x48}, {0x0, 'tftp-20000\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x19, @multicast2, @loopback, @icmp_id=0x66, @port=0x4e24}}}}, {{@ip={@broadcast, @remote, 0xff, 0xff, 'nicvf0\x00', 'ipvlan1\x00', {0xff}, {}, 0xc, 0x0, 0x30}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gre0\x00', {0x8, 0x5, 0xfffffffc, 0x8, 0x8, 0x51f2, 0x6dc0}, {0xff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x11, @ipv6=@mcast1, @ipv4=@loopback, @icmp_id=0x64, @port=0x4e23}}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @gre_key}}}, {{@ip={@broadcast, @rand_addr=0x1, 0x0, 0x0, 'nicvf0\x00', 'pim6reg\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0xc0000000, {0x21, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, @gre_key=0x40, @port=0x4e23}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) 3m51.964793779s ago: executing program 6 (id=1929): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x95}, 0x34044880) futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000140), 0x35000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000002780)=""/4096, 0x1000}], 0x1, 0x5b3d2934, 0xfffffff8) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000690030000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r16, {0x4, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 3m50.826171339s ago: executing program 6 (id=1941): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = socket(0x22, 0x2, 0x2) ioctl$IMGETCOUNT(r2, 0x80044944, &(0x7f0000000000)) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) socket(0x22, 0x2, 0x2) (async) ioctl$IMGETCOUNT(r2, 0x80044944, &(0x7f0000000000)) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) (async) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) (async) 3m50.818275685s ago: executing program 6 (id=1943): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = socket(0x10, 0x3, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f00000001c0)={0xdbd3, 0x7, [{0xa}, {0x4}, {0xe, 0x1}, {0xc}, {0x8}, {0xc, 0x1}, {0xb}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x4004) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x3, 'nq\x00', 0x1, 0x4, 0x8}, 0x2c) r7 = socket$kcm(0xa, 0x2, 0x0) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)) 3m50.596366573s ago: executing program 6 (id=1949): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000380)) ioctl$TIOCSBRK(r0, 0x5427) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc40000}, 0x94) (async) r2 = socket$inet6(0xa, 0x3, 0x3c) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) (async) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x8010, 0xffffffffffffffff, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000140)={0x3, 0x692494db}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(0xffffffffffffffff, 0x4068aea3, &(0x7f00000006c0)={0xce, 0x0, r6}) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000740)=@deltaction={0x140, 0x31, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x94, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd177}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x140}}, 0x40840) (rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4000000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10}, 0x94) (async, rerun: 32) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000140), &(0x7f0000000240)=r5}, 0x20) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) r9 = syz_io_uring_setup(0x1a6d, &(0x7f0000000180)={0x0, 0x455b, 0x2, 0x3, 0xcd}, &(0x7f0000000080), &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, r10, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x43, 0x0, 0x0, 0x0, 0x23456}) 3m50.512685456s ago: executing program 35 (id=1949): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000380)) ioctl$TIOCSBRK(r0, 0x5427) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc40000}, 0x94) (async) r2 = socket$inet6(0xa, 0x3, 0x3c) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) (async) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x8010, 0xffffffffffffffff, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000140)={0x3, 0x692494db}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(0xffffffffffffffff, 0x4068aea3, &(0x7f00000006c0)={0xce, 0x0, r6}) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000740)=@deltaction={0x140, 0x31, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x94, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd177}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x140}}, 0x40840) (rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4000000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10}, 0x94) (async, rerun: 32) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000140), &(0x7f0000000240)=r5}, 0x20) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) r9 = syz_io_uring_setup(0x1a6d, &(0x7f0000000180)={0x0, 0x455b, 0x2, 0x3, 0xcd}, &(0x7f0000000080), &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, r10, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x43, 0x0, 0x0, 0x0, 0x23456}) 3m6.645903275s ago: executing program 2 (id=2613): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x10000, 0x0, 0x0, 0x0, 0x8001], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]], '\x00', [{}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x80000001, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {}, {0x8000000, 0x8f96}], '\x00', 0x1000}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={0x3c, r2, 0x801, 0x70bd2a, 0x3, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0000008000"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac08}]}]}, 0x3c}}, 0x8040) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe94, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {0x0, 0x2}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x1}, {}, {}, {0x8, 0x10000000}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0xf49, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffb, 0x0, 0x0, 0x0, 0xa92}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}, 0x1, 0x0, 0x0, 0x40004000}, 0x0) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x3, &(0x7f00000001c0), 0x0) ioctl$TFD_IOC_SET_TICKS(r6, 0x40085400, &(0x7f0000000080)=0x6) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYRES8=r0], 0x20}}, 0x4) 3m6.556239818s ago: executing program 2 (id=2617): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000440)=0x1000, 0x4) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="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", 0xffe3}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @local}}}], 0x20}, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081cd4300000921faff000122a00009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x0, 0x23, 0xa0, {0xa0, 0xc, "82a0b506d18388d96a8860aad541520a4843319eabc3da3490ea5a227cf7ec2cea9a503e5d05b0775fd90119fd6c1a82a53552ac1d979939df30db2e596c69486dd650ef60ec5f4c8fc6dce9541d5fff27832e7ab4f8f940758f968e0adf2e647631969f52696b2633b31446e1f0f933bb5c7ad293068ccd90733cd032b878b9c017c67f7fe76826b4e7be5031d6961dd1809a28eba8d68c148302e435ae"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000140), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000180)={0x9, 0x1a, 0x6, 0x0, "ea87916e3f0300004b1000"}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000001080)="3a53e6ff19acc27dfcd05fbc5da0cca1", 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 3m3.477007005s ago: executing program 2 (id=2646): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) r0 = semget$private(0x0, 0x4000000009, 0x208) semop(r0, &(0x7f00000002c0)=[{0x1, 0x8698, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semop(r0, &(0x7f0000000240)=[{0x2, 0x6, 0x1800}, {0x0, 0x0, 0x800}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) open$dir(&(0x7f0000000280)='./file1\x00', 0x8302, 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000440)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r2, &(0x7f0000000040)='THAWED\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x12005, &(0x7f0000000100)={[{@xino_auto}, {@verity_off}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@verity_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') r3 = socket$inet(0x2, 0x5, 0x0) creat(&(0x7f0000000200)='./file0/file0\x00', 0x8) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010000000e000000040000000000000010200200000000002000000000000000"], 0x24, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000140)=0x4, 0x4) 3m3.327648598s ago: executing program 2 (id=2650): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') setxattr$security_evm(&(0x7f0000000000)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "33ab28b2b4dc66787869c6e9bf0795a8c4419823"}, 0x15, 0x2) socket(0x40000000015, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) fcntl$setstatus(r1, 0x4, 0x42000) (async) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') (async) setxattr$security_evm(&(0x7f0000000000)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "33ab28b2b4dc66787869c6e9bf0795a8c4419823"}, 0x15, 0x2) (async) socket(0x40000000015, 0x5, 0x0) (async) 3m3.326914027s ago: executing program 2 (id=2652): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@newlink={0x70, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r2, 0x0, 0x1c05}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x12) (async) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f00000001c0)={0x0, 0x0, 0x0}) syz_genetlink_get_family_id$devlink(0x0, r1) write$char_usb(r5, &(0x7f0000000040)="e2", 0xff0f) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) (rerun: 64) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r0}) (async) r7 = socket$isdn_base(0x22, 0x2, 0x10) ioctl$IMGETVERSION(r7, 0x80044942, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[0x0], 0x1, r9, r10, 0x94, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x4134, 0xe154, 0x1000, 0x7f, 0x3, 0x4, "fe1d00003413000000000020b42717e47f00"}}) 3m2.807326101s ago: executing program 2 (id=2665): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x0, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x40000, 0x1}) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000002c0)=[@wr_drn={0x68, 0x20, {0x7, 0xb}}, @in_dx={0x69, 0x20, {0x8b40, 0x1}}, @nested_load_code={0x12e, 0x6e, {0x1, "66b8f2008ee0410f0748b81a140000000000000f23c80f21f8350000a0000f23f8410f35660f0d7205f36d0f01cfc74424001e010000c744240287000000ff1c2442dbbc2600800000b805000000b9a15b31fc0f01d9"}}, @uexit={0x0, 0x18, 0x9}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x8, @save_area=0x511, 0x6, 0x9, 0x7}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @ro32=0x440c, 0x1, 0xfffffffffffff8ff, 0x3}}, @wrmsr={0x65, 0x20, {0xa6b, 0xffff}}, @cpuid={0x64, 0x18, {0x80000000, 0x81}}, @set_irq_handler={0xc8, 0x20, {0x82, 0x1}}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host_nat=0x6c08, 0xd82, 0x0, 0x1}}, @wrmsr={0x65, 0x20, {0x20c, 0x3}}, @wrmsr={0x65, 0x20, {0x400}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x8d, 0x2, 0x1, 0x6}}, @wrmsr={0x65, 0x20, {0xaa0, 0x100000001}}, @wr_crn={0x67, 0x20, {0x3, 0x1}}, @out_dx={0x6a, 0x28, {0xb5c5, 0x3, 0xe101}}], 0x2be}) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000180)=@arm64_fp={0x604000000010008c, &(0x7f0000000040)=0x5}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 3m2.686645485s ago: executing program 36 (id=2665): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x0, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x40000, 0x1}) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000002c0)=[@wr_drn={0x68, 0x20, {0x7, 0xb}}, @in_dx={0x69, 0x20, {0x8b40, 0x1}}, @nested_load_code={0x12e, 0x6e, {0x1, "66b8f2008ee0410f0748b81a140000000000000f23c80f21f8350000a0000f23f8410f35660f0d7205f36d0f01cfc74424001e010000c744240287000000ff1c2442dbbc2600800000b805000000b9a15b31fc0f01d9"}}, @uexit={0x0, 0x18, 0x9}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x8, @save_area=0x511, 0x6, 0x9, 0x7}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @ro32=0x440c, 0x1, 0xfffffffffffff8ff, 0x3}}, @wrmsr={0x65, 0x20, {0xa6b, 0xffff}}, @cpuid={0x64, 0x18, {0x80000000, 0x81}}, @set_irq_handler={0xc8, 0x20, {0x82, 0x1}}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host_nat=0x6c08, 0xd82, 0x0, 0x1}}, @wrmsr={0x65, 0x20, {0x20c, 0x3}}, @wrmsr={0x65, 0x20, {0x400}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x8d, 0x2, 0x1, 0x6}}, @wrmsr={0x65, 0x20, {0xaa0, 0x100000001}}, @wr_crn={0x67, 0x20, {0x3, 0x1}}, @out_dx={0x6a, 0x28, {0xb5c5, 0x3, 0xe101}}], 0x2be}) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000180)=@arm64_fp={0x604000000010008c, &(0x7f0000000040)=0x5}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 3m0.968217286s ago: executing program 5 (id=2710): r0 = socket$kcm(0x10, 0x7, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000f9, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x1, @vbi={0x3c0, 0x26, 0x2, 0x42474752, [0x680, 0xe4], [0x7ff, 0xfeedcafe], 0x13a}}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r3, 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f0000000100)="ac", 0x1) recvmmsg$unix(r6, &(0x7f0000000080), 0x4d4, 0x10003, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, 0xffffffffffffffff, 0x26}, 0x10) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3m0.136956509s ago: executing program 5 (id=2726): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'vxcan1\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x20, 0x80, "07ff7dcf7f5c1536ad157d6c8999a2234434ed06061a3fc03f7bcb33edb0880eb1c804f5b83c7958c3f5ed5755e2e942f27aedc3f49b69a6f9089eef2e21ef28749d98964da0fe32925ad17b6e412b24f116adb9dcb37701e900a9462ba1c8aadad5f8ccd4943b824e97eced9e2146f8e8f1f22dc6d834019a39cd3ae3a470b1"}}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt$rose(r0, 0x104, 0x2, &(0x7f0000000300)=0x1, 0x4) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x2000c011) 3m0.065287966s ago: executing program 5 (id=2729): sysinfo(&(0x7f0000000000)=""/229) sysinfo(&(0x7f0000000100)=""/160) sysinfo(&(0x7f00000001c0)=""/227) sysinfo(&(0x7f00000002c0)=""/120) sysinfo(&(0x7f0000000340)=""/111) sysinfo(&(0x7f00000003c0)=""/73) sysinfo(&(0x7f0000000440)=""/23) sysinfo(&(0x7f0000000480)=""/254) sysinfo(&(0x7f0000000580)=""/215) sysinfo(&(0x7f0000000680)=""/189) sysinfo(&(0x7f0000000740)=""/205) sysinfo(&(0x7f0000000840)=""/168) sysinfo(&(0x7f0000000900)=""/23) sysinfo(&(0x7f0000000940)=""/158) sysinfo(&(0x7f0000000a00)=""/188) sysinfo(&(0x7f0000000ac0)=""/231) sysinfo(&(0x7f0000000bc0)=""/221) sysinfo(&(0x7f0000000cc0)=""/229) sysinfo(&(0x7f0000000dc0)=""/180) sysinfo(&(0x7f0000000e80)=""/181) sysinfo(&(0x7f0000000f40)=""/252) sysinfo(&(0x7f0000001040)=""/109) sysinfo(&(0x7f00000010c0)=""/154) sysinfo(&(0x7f0000001180)=""/29) sysinfo(&(0x7f00000011c0)=""/4096) sysinfo(&(0x7f00000021c0)=""/179) sysinfo(&(0x7f0000002280)=""/104) sysinfo(&(0x7f0000002300)=""/121) sysinfo(&(0x7f0000002380)=""/4096) sysinfo(&(0x7f0000003380)=""/93) 2m59.979402326s ago: executing program 5 (id=2733): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0, @ANYBLOB="11022dbd7000ffdbdf252100000009001f00706879310000000005002000000000000c00050002"], 0x34}, 0x1, 0x0, 0x0, 0x4044054}, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, 0x0, 0x0) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) timer_create(0x2, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340), 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3}}}, 0x24}}, 0x0) close_range(r2, r3, 0x0) syz_io_uring_setup(0x5de1, &(0x7f0000000240)={0x0, 0x79af, 0x2, 0x0, 0x26d, 0x0, r2}, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100ffff000000000000b8000000000080000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m59.775383098s ago: executing program 5 (id=2738): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101842) ioctl$NBD_DISCONNECT(r0, 0xab08) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0000000000100000000000001c3dc4be94cf5b8ae713ff3fb93b3f0578f71c65037f90d72b747521fd398e7cd27fe511413d88c80fe0", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="2f00000030200000d926abadcde5461f5d22b164719bcca4b52080592eecd4cd2353448ea48674cd52fbdc9c8d5639", @ANYRES32=r5, @ANYBLOB, @ANYRES16=r1], 0x20) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$I2C(&(0x7f0000000ac0), 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a70000000060a0b0400000000000000000200000244000480400001800b00010074617267657400003000028014000300e1a0b063bae294fe8f45a9b02fdf068408000240000000010d000100434f4e4e4d41524b000000000900010073797a30000000000900020073797a32"], 0x98}}, 0x0) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000b40)={0x1, 0x0, 0x1, &(0x7f0000000b00)={0x0, "5a54f9e02cb612f2ab8371533b1a289255cf9fdfebfb57089d8a86a476506dd5e4"}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000620120004000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth1\x00'}) (async) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x8, 0x1) (async) timer_create(0x7, 0x0, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r12}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) (async) r13 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x20, 0xff, r15}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840) (async) ioctl$sock_inet_SIOCSIFADDR(r13, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 2m59.467727712s ago: executing program 5 (id=2743): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1}, @const={0x0, {0xfbff, 0x8, 0x4, 0x81}}}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20ffa000}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r3, 0x40046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x300}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r4, 0x8b22, &(0x7f00000000c0)) 2m59.392266573s ago: executing program 37 (id=2743): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1}, @const={0x0, {0xfbff, 0x8, 0x4, 0x81}}}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20ffa000}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r3, 0x40046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x300}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r4, 0x8b22, &(0x7f00000000c0)) 2m50.457458123s ago: executing program 8 (id=2918): r0 = socket(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) shutdown(r4, 0x0) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040044}, 0x4010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) sendto$inet6(r8, &(0x7f0000000000)="06385e6e97f99d30e0205459ac", 0xd, 0x0, &(0x7f0000000100)={0xa, 0x4e24, 0x8001, @empty, 0x8}, 0x1c) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f00000000c0)=0xc6d2, 0x4) r9 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r2, 0x500, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {}, @broadcast, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044080}, 0x8000) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0x15) readv(r9, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/90, 0x5a}], 0x1) socket$unix(0x1, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4080, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 2m50.456763362s ago: executing program 8 (id=2919): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@gettaction={0x60, 0x5a, 0x1, 0x0, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x60}}, 0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x513981, 0x488) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000002000/0x4000)=nil) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000200)) 2m50.365718703s ago: executing program 8 (id=2920): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) madvise(&(0x7f0000bdf000/0x9000)=nil, 0x9000, 0xa) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 2m50.293950675s ago: executing program 8 (id=2924): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1040020, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0x4}}]}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x1058, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x5, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xfffd, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x7ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0x7, 0x5, 0xfff, 0x8, 0x3, 0x7f, 0xfff, 0x4, 0x894, 0x9, 0x6, 0x4, 0x100, 0x6, 0x8001, 0x5, 0x2, 0x2, 0x7, 0x7ff, 0x2a651f85, 0x8, 0xee, 0x8f6, 0x1, 0x8, 0xd67, 0x6, 0x8, 0x8, 0x80000001, 0x45c, 0x1, 0x3ff, 0xff5f, 0x1, 0x294, 0x4, 0x7, 0x9, 0x200, 0x7, 0x3, 0x0, 0x4, 0x5, 0x2, 0xfffffffe, 0x80000, 0x2, 0x1fd, 0x9, 0x5, 0xea, 0x1, 0x5, 0xf175, 0xc7, 0x1, 0x1000, 0xfffffde2, 0x800, 0xddf, 0x10, 0xdf1d, 0x6, 0x10, 0x3ff, 0x2, 0x0, 0x1, 0x0, 0x10, 0xbf3b, 0x5, 0x3, 0x4dd, 0x200, 0x4, 0x8, 0x4, 0x6, 0x5, 0x2, 0x5, 0xc, 0x81, 0xb41f, 0x9, 0x6, 0x41, 0x2, 0x9, 0x1, 0x6, 0x51e0, 0x103, 0x4, 0x78, 0x1, 0x3ff, 0x8000, 0x2, 0xda, 0x1, 0x6, 0x0, 0x200000, 0x3, 0x9, 0x5, 0x97, 0x800, 0x3, 0x7, 0x0, 0x0, 0x903, 0xf, 0x100, 0x7, 0x100, 0x1, 0x3, 0x2, 0x200, 0x7ff, 0x1, 0xc54, 0x879, 0x73, 0x81, 0x1000, 0x7e5, 0x583, 0x401, 0x0, 0xe0000000, 0x0, 0x4, 0xd, 0x192d, 0x247, 0x0, 0x985, 0x0, 0xf470, 0xfffffffa, 0x2b7, 0x3, 0x3, 0x8, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0x0, 0xff, 0x3, 0x80000000, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x6, 0x4fb, 0x1, 0x8, 0x200, 0x2, 0x252d5040, 0xda, 0x8, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x3800, 0x3, 0x2, 0x1000, 0x2, 0x0, 0x8, 0x4, 0xfffffff9, 0x100, 0x9, 0x9, 0x8, 0x10, 0x5, 0x9, 0x9, 0x8, 0x6, 0x5, 0x9, 0xa8, 0x5, 0x3, 0x10, 0x3, 0x7, 0x9, 0xf4b6, 0x2, 0x6a, 0x2, 0x3, 0x5, 0x8, 0x40, 0x3b, 0x4800000, 0x800, 0xdae, 0x9, 0x0, 0xfff, 0x9, 0xf, 0x26, 0x1, 0x2, 0x6, 0x6, 0x6, 0x0, 0xffffffff, 0x7, 0xfffffff9, 0xffffffff, 0xfffffff6, 0x10000, 0x3, 0x8000, 0x3231, 0x74e, 0x9, 0x8009, 0x1, 0xe7e1, 0x3db2, 0x375b, 0x9, 0x80]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0x80, 0x4af8, 0x5, 0x1, 0x1, 0x6, 0x7, 0x5, 0x9, 0x0, 0x9, 0x1, 0x5, 0xe, 0x3, 0xff, 0x8, 0x0, 0xfffffe00, 0x9, 0x3, 0x4, 0x9, 0x4, 0x4, 0xf, 0x6, 0x2, 0x4, 0x7, 0x4000, 0xfff, 0xf30a, 0x0, 0x4, 0xf, 0x9, 0x4, 0x7, 0x4961, 0xf, 0x1, 0x7, 0x4, 0x4, 0x0, 0x317, 0x2, 0x0, 0x6, 0x5, 0x40, 0x1, 0xffffffff, 0x847, 0x7d, 0x9, 0xffc00000, 0x613b, 0x7, 0xfffffffa, 0x0, 0x4a4, 0x200, 0xb44, 0x3, 0x9, 0x6, 0x3, 0x0, 0x6c5, 0x2, 0x7fffffff, 0x9, 0x8, 0x1, 0x401, 0x5, 0xfffffffa, 0x6, 0x479d, 0x7, 0xffffffff, 0xa, 0x5, 0x800, 0x8, 0x1, 0x7, 0x5e7b, 0x4, 0x10001, 0x6, 0x4, 0x16ab, 0xffff, 0x40, 0x9, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x8, 0x6, 0x5, 0x6, 0xc, 0x0, 0xa, 0x13b, 0x7fff, 0x9, 0x9132, 0x9, 0x1, 0x9, 0x9, 0xfffffffe, 0x0, 0x8, 0x5, 0x5, 0xe2dd, 0x3fd, 0x80a, 0x1, 0xb, 0xffff0000, 0x80, 0xe, 0x0, 0xa2, 0x400, 0x0, 0x48000000, 0x8, 0x0, 0x4, 0x6, 0x7, 0x80000001, 0x8, 0x97, 0x1, 0xb, 0x3, 0x9, 0x4, 0xb, 0x7fff, 0x100, 0x7ff, 0x100, 0x6, 0x5, 0x1, 0x5, 0x9, 0x400, 0xfd04, 0x3ff, 0xfffffff5, 0x3ff, 0xbfcb, 0x9, 0x1, 0xe329, 0x7, 0xfffffffc, 0x50000000, 0xec, 0x7, 0x1, 0x1000, 0x8000, 0x7, 0x7ffb, 0x3, 0xfffffff9, 0x2, 0x67, 0x1, 0x4, 0xd, 0xff, 0x6, 0x101, 0xcd1a, 0x8, 0x7, 0x5, 0x0, 0x80, 0x1ff, 0x1, 0x1, 0x7, 0xf, 0x1, 0x0, 0xe11, 0x6, 0x3, 0xfffffffc, 0x1ff, 0x1, 0x2, 0x2cae, 0xf3ff, 0x48d, 0x7fff, 0x9, 0x1000, 0xfffffe00, 0x37f4, 0x0, 0x9, 0x2000, 0x5, 0x2, 0xd, 0x6, 0x822, 0x8, 0x0, 0xbec9, 0x9, 0x5, 0x35, 0xc2a, 0x4b, 0xa, 0x80, 0x2000007, 0x1, 0x7, 0x0, 0x12, 0x1c, 0x2, 0x4, 0x8, 0x5704, 0xc975, 0x7, 0x1000, 0x365a8a29, 0x5624, 0x1e9019bc, 0x800, 0xfffffffa]}]}}]}, 0x1058}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) r4 = accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x100000) dup3(r3, r4, 0x0) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0x9362, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0x9362, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000300), 0x4) write$binfmt_elf64(r8, &(0x7f0000000580)=ANY=[], 0x78) recvmmsg(r7, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) 2m50.197046813s ago: executing program 8 (id=2925): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x12, 0x468fe4e8}]}}]}, 0x38}}, 0x4048000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_SEQ_SYNC(r4, 0x5101) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xa}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m49.862765364s ago: executing program 8 (id=2930): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0xfffffffffffffe48, r1, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x0, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x0, 0x3, {[0x8000, 0x8, 0x80c1, 0x1, 0x8, 0x2d, 0x8, 0x6]}}, @NL80211_TXRATE_HT={0x0, 0x2, [{0x7, 0x2}, {0x6, 0xa}, {0x2, 0x5}, {0x1, 0x9}, {0x7, 0x4}, {0x5, 0x2}, {0x1, 0xa}, {0x7, 0x2}, {0x0, 0x3}, {0x0, 0xa}, {0x6, 0x4}, {0x0, 0x3}, {0x7, 0x8}, {0x2, 0xa}, {0x3, 0x3}, {0x0, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x1, 0xa}, {0x4, 0x8}, {0x0, 0x1}, {0x2}, {0x0, 0xa}, {0x7, 0x3}, {0x0, 0x3}, {0x1, 0x9}, {0x6, 0x1}, {0x6, 0xc}, {0x0, 0x4}, {0x2, 0x4}, {0x7, 0x2}, {0x3, 0x2}, {0x3, 0xa}, {0x0, 0x3}, {0x3, 0x3}, {0x1, 0x8}]}]}]}]}, 0x3c}}, 0x24000800) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x40000, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}}) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0xfffffffffffffe48, r1, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x0, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x0, 0x3, {[0x8000, 0x8, 0x80c1, 0x1, 0x8, 0x2d, 0x8, 0x6]}}, @NL80211_TXRATE_HT={0x0, 0x2, [{0x7, 0x2}, {0x6, 0xa}, {0x2, 0x5}, {0x1, 0x9}, {0x7, 0x4}, {0x5, 0x2}, {0x1, 0xa}, {0x7, 0x2}, {0x0, 0x3}, {0x0, 0xa}, {0x6, 0x4}, {0x0, 0x3}, {0x7, 0x8}, {0x2, 0xa}, {0x3, 0x3}, {0x0, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x1, 0xa}, {0x4, 0x8}, {0x0, 0x1}, {0x2}, {0x0, 0xa}, {0x7, 0x3}, {0x0, 0x3}, {0x1, 0x9}, {0x6, 0x1}, {0x6, 0xc}, {0x0, 0x4}, {0x2, 0x4}, {0x7, 0x2}, {0x3, 0x2}, {0x3, 0xa}, {0x0, 0x3}, {0x3, 0x3}, {0x1, 0x8}]}]}]}]}, 0x3c}}, 0x24000800) (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x40000, 0x2) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) (async) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}}) (async) 2m49.788175938s ago: executing program 38 (id=2930): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0xfffffffffffffe48, r1, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x0, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x0, 0x3, {[0x8000, 0x8, 0x80c1, 0x1, 0x8, 0x2d, 0x8, 0x6]}}, @NL80211_TXRATE_HT={0x0, 0x2, [{0x7, 0x2}, {0x6, 0xa}, {0x2, 0x5}, {0x1, 0x9}, {0x7, 0x4}, {0x5, 0x2}, {0x1, 0xa}, {0x7, 0x2}, {0x0, 0x3}, {0x0, 0xa}, {0x6, 0x4}, {0x0, 0x3}, {0x7, 0x8}, {0x2, 0xa}, {0x3, 0x3}, {0x0, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x1, 0xa}, {0x4, 0x8}, {0x0, 0x1}, {0x2}, {0x0, 0xa}, {0x7, 0x3}, {0x0, 0x3}, {0x1, 0x9}, {0x6, 0x1}, {0x6, 0xc}, {0x0, 0x4}, {0x2, 0x4}, {0x7, 0x2}, {0x3, 0x2}, {0x3, 0xa}, {0x0, 0x3}, {0x3, 0x3}, {0x1, 0x8}]}]}]}]}, 0x3c}}, 0x24000800) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x40000, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}}) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0xfffffffffffffe48, r1, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x0, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x0, 0x3, {[0x8000, 0x8, 0x80c1, 0x1, 0x8, 0x2d, 0x8, 0x6]}}, @NL80211_TXRATE_HT={0x0, 0x2, [{0x7, 0x2}, {0x6, 0xa}, {0x2, 0x5}, {0x1, 0x9}, {0x7, 0x4}, {0x5, 0x2}, {0x1, 0xa}, {0x7, 0x2}, {0x0, 0x3}, {0x0, 0xa}, {0x6, 0x4}, {0x0, 0x3}, {0x7, 0x8}, {0x2, 0xa}, {0x3, 0x3}, {0x0, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x1, 0xa}, {0x4, 0x8}, {0x0, 0x1}, {0x2}, {0x0, 0xa}, {0x7, 0x3}, {0x0, 0x3}, {0x1, 0x9}, {0x6, 0x1}, {0x6, 0xc}, {0x0, 0x4}, {0x2, 0x4}, {0x7, 0x2}, {0x3, 0x2}, {0x3, 0xa}, {0x0, 0x3}, {0x3, 0x3}, {0x1, 0x8}]}]}]}]}, 0x3c}}, 0x24000800) (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x40000, 0x2) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) (async) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}}) (async) 2m1.987737573s ago: executing program 3 (id=3576): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) execve(&(0x7f0000000340)='./file0/file1\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1\x00', 0x20400, 0x180) 2m1.925017552s ago: executing program 3 (id=3577): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x9, 0x0, &(0x7f0000000100)) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r2, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r2, &(0x7f0000000040)) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0xe5) 2m1.924734855s ago: executing program 3 (id=3578): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000200), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r1 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x1000) recvfrom(r1, &(0x7f0000000080)=""/134, 0x86, 0x10040, &(0x7f0000000140)=@rc={0x1f, @none, 0x3}, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="601b388f451e6e3db3357c973cdc27df3c094f4960", 0x15}], 0x1}}], 0x1, 0x24000003) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000, 0x6, 0xfffd, 0x0, 0x6, 0x900066}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="14042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$can_raw(r0, &(0x7f00000001c0), 0x10) 2m1.837464971s ago: executing program 3 (id=3579): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000100)={0x34, r0, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x800) connect$llc(r4, &(0x7f0000000b00)={0x1a, 0x207, 0xc, 0x40, 0x7, 0x2, @remote}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r2, @ANYRESHEX=r1, @ANYRESDEC=r5, @ANYRESDEC=r1], 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x488d0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r6 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) recvmsg$inet_nvme(r5, &(0x7f0000000a80)={&(0x7f0000000440)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000600)=""/249, 0xf9}, {&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000540)=""/29, 0x1d}, {&(0x7f0000000700)=""/94, 0x5e}], 0x5, &(0x7f0000000580)=""/54, 0x36}, 0x0) readv(r6, &(0x7f00000001c0)=[{0x0}], 0x1) recvfrom$inet6(r5, &(0x7f0000000080), 0x0, 0x40000040, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @mcast1, 0x5}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)={0x18, 0x76, 0x400, 0x0, 0x25dfdbff, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}]}, 0x18}], 0x1}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x114, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x9}, @generic="af451eaa4dd04de2e12fb6872f58daaee94d978b6b6c6ec5d62cd3fc9d963eb8be68e06dd734565ad8f66aaefaf148a282cca69107f9fd80c62f739f2550b411f8bbfe76eb4ada7c1f4faec5b0cd1740578a09146dc0ec11f1335f76718b2b5ba466e898e70860552d74dc654562c2cdd757672714343c372755f8f103522130735245201c6fc4a7c94d2235590c605779f1cc9c6f1478c9e7a3aa54b043f008666c988f365c2c48fac5e38fc18956f1b7cfce9eed31da7de167518a5286fcf48ec201597a41a187a008004afdadeb5f2595cbf6a058be745cb3f16b4236e2e5539dfb961e1f45a130ef57749794", @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x9e, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x19}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4048815}, 0x850) r9 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x182, 0x51) close_range(r8, r9, 0x0) 2m1.732343116s ago: executing program 3 (id=3580): sysfs$2(0x2, 0x800, 0x0) socket$packet(0x11, 0xa, 0x300) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x5) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x0, 0xffff, 0x0, 0x0, 0x0, "f6a6946c9832508c"}) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000100)="1876d433b8c266f9be2253e7c12fc9ea10343a19c358547a9357a174911e926c57b51eab3d0a4a2297653ac0c62201010000881a8789adddd1ca89ebd8632972a4f65ad1505ed06b6785508eb1dee994d18b084ef189ce72b079ed03ef849c46e3dedf604c01fae7c32f782dd9a45993a0798444d6ba181f2546b88893bf12575b27c1af55a55c55ca8855d5dc89db3e110430d10f429cc423ff64acc9fdb59a76caf809ce3c954f8a9618ebe5c3", 0xae}], 0x1) ioctl$TCSETA(r0, 0x8925, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0xc0049364, &(0x7f0000000180)) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0xc0049364, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) (async) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) (async) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) fcntl$setsig(r3, 0xa, 0x21) (async) fcntl$setsig(r3, 0xa, 0x21) fcntl$setlease(r3, 0x400, 0x1) (async) fcntl$setlease(r3, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') (async) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10000, 0x50600) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r4, &(0x7f0000000040)="19f7ab951d1b8f7eda3d6902b941a196b1ceece4db9d9b3d04c5b762dc18382b0739e869c5bf", &(0x7f0000000080)=""/213}, 0x20) socket$inet6(0xa, 0x80806, 0x280) r5 = socket(0xa, 0x2, 0x32) sendmsg$tipc(r5, &(0x7f0000000200)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0x0) 2m1.569435943s ago: executing program 3 (id=3582): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r1, 0x1, 0x70bd25, 0xfffffffd, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r3, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0xe6, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="000ffe00e000030000000000000000000000000008"], 0x38}}, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$VHOST_SET_VRING_ERR(r8, 0x4008af22, &(0x7f0000000140)={0x1, r11}) fchmodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xfffffe99) 1m45.551708584s ago: executing program 39 (id=3582): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r1, 0x1, 0x70bd25, 0xfffffffd, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r3, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0xe6, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="000ffe00e000030000000000000000000000000008"], 0x38}}, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$VHOST_SET_VRING_ERR(r8, 0x4008af22, &(0x7f0000000140)={0x1, r11}) fchmodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xfffffe99) 36.810901375s ago: executing program 1 (id=4771): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/diskstats\x00', 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="277a9ab13f593012bad1975bd01ef31fdae4ab160b5990497942a40acf1f91eadb51b23e9bc8958caa7928e714a0421f0f875b4c7ab1cf5e5f56c257d99044a914f6c49c9551866be86ee23398f182baa386cab38362a5f03a9b96210ee81f4a4d81f413863d0800b5070a01f024d16dc5b8bd791b564c3b6f191aa4b6f7d1ab20", 0x81) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x802, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d3030303030303030304a71e7a0fea6d94db3292130303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@random={'user.', '\x00'}) syz_fuse_handle_req(r3, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000f00)={&(0x7f0000000080)={0x50, 0x0, 0x200000000000, {0x7, 0x29, 0x7, 0xa110000, 0xc9f, 0xfff, 0xd, 0x8, 0x0, 0x0, 0x10, 0x400}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000006400)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000200)={0x50, 0xffffffffffffffda, 0xffff, {0x7, 0x29, 0x7, 0x1021900, 0x5c9, 0x1, 0x8001, 0x5, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) socket(0x10, 0x80002, 0x0) sendfile(r0, r1, 0x0, 0x3fffff) 36.724831166s ago: executing program 1 (id=4772): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/diskstats\x00', 0x0, 0x0) socket(0x10, 0x80002, 0x0) sendfile(r0, r1, 0x0, 0x3fffff) (fail_nth: 11) 36.577042095s ago: executing program 1 (id=4773): r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x10002, 0x258100) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f007, 0x9}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0xf, 0x400000000000, 0x25, 0x7, 0x8, r3, 0x0, 0x0, 0x40000000000e7, 0x0, 0x2, r3}]) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="10005bd5881704fd2e7f24f6d81ee8bebb22b5de30609485100e00e76d3f543769df2539fa4dc656fa16c54c70c1962fa28bca4b3dd3f7674334ece7898eac0128", @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf256800000008000300", @ANYRES32=r6, @ANYBLOB="1600c700a5020803f8040006000129081fec03e196260000"], 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c00000000201010200000000000000000300000108000340000000041c0010800800024000000007080003400000000808000240000000030c001980"], 0xc0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x5}) 36.308695041s ago: executing program 1 (id=4775): r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) getpeername$llc(r0, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000200)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x0, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}}, 0x24) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) write$P9_RLERRORu(r7, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRES32=r8], 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r7, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="000000000a00020000000000000000000800090002"], 0x30}}, 0x0) r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setreuid(0xee01, 0xee01) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8b15, &(0x7f0000000000)={'wlan1\x00'}) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x8001, 0x6, 0xfffffffd, 0x0, 0x0, 0xcc7, 0x8, 0xa, 0xa, 0x100, 0x7, 0x0, 0x7, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x4000002, 0xf27, 0xffff, 0x7, 0x8, 0x4, 0x6, 0x4, 0x10000, 0xfffffff8]}) 36.213106361s ago: executing program 1 (id=4776): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f00000002c0)={0xc, r2}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002"]) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x40502) r4 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000040)=0x6, 0x0) r6 = fsmount(r4, 0x0, 0xa) fchdir(r6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x1, 0x4}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400400, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a0b0400000000000000000200000018000480140001800a0001007265646972000000040002800900010073797a30000000000900020073797a3200"], 0x6c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0xc0}}, 0x0) close_range(r3, r3, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000000)) 36.147858101s ago: executing program 1 (id=4777): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000f40)=0x1, 0x4) sendmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a40)="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", 0x5c1}], 0x1}, 0x48010) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) (async) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x84000) ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f0000000180)) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0xfff) syz_emit_ethernet(0x56, &(0x7f0000000900)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6e8, 0xfffffffc}]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000900)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6e8, 0xfffffffc}]}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x72741c28702e4a66, 0x0, 0x0, 0x3ff, {[@timestamp={0x8, 0xa, 0x8, 0x5}]}}}}}}}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) 20.114434084s ago: executing program 40 (id=4777): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000f40)=0x1, 0x4) sendmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a40)="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", 0x5c1}], 0x1}, 0x48010) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) (async) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x84000) ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f0000000180)) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0xfff) syz_emit_ethernet(0x56, &(0x7f0000000900)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6e8, 0xfffffffc}]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000900)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6e8, 0xfffffffc}]}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x72741c28702e4a66, 0x0, 0x0, 0x3ff, {[@timestamp={0x8, 0xa, 0x8, 0x5}]}}}}}}}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) 3.014602548s ago: executing program 4 (id=5196): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x1, 0x0}, 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) bpf$MAP_LOOKUP_BATCH(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x10000}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r2, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10, r1}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f00000001c0)={'tunl0\x00', r2, 0x80, 0x8, 0x9, 0x4e, {{0x1e, 0x4, 0x2, 0x16, 0x78, 0x64, 0x0, 0x4, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0x60, 0x3, 0x5, [{@multicast2, 0x200}]}, @cipso={0x86, 0x8, 0x0, [{0x2, 0x2}]}, @lsrr={0x83, 0x2b, 0x1d, [@local, @empty, @loopback, @remote, @private=0xa010100, @remote, @loopback, @rand_addr=0x64010100, @private=0xa010100, @rand_addr=0x64010101]}, @lsrr={0x83, 0x17, 0x62, [@remote, @empty, @multicast1, @local, @rand_addr=0x64010101]}, @end, @timestamp_addr={0x44, 0xc, 0xcf, 0x1, 0x0, [{@remote, 0x1}]}]}}}}}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)={0x2b0, r4, 0x20, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r2}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r2}, {0x90, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x51}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2, 0x6, 0x9, 0x3}, {0x2, 0x2, 0xf3, 0xa2}, {0x0, 0x2, 0xa, 0xa9}, {0xff, 0x5, 0x2, 0x3ff}]}}}]}}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x12}, 0x40014) 2.522717655s ago: executing program 4 (id=5198): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) (async) acct(&(0x7f00000001c0)='./file0\x00') r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x0, 0x5b7a, 0x800}], 0x2) semop(r0, &(0x7f00000001c0)=[{0x1, 0xbbdd, 0x1000}], 0x1) (async, rerun: 32) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (rerun: 32) dup2(r1, r1) 2.522385246s ago: executing program 0 (id=5199): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd40, 0x1200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) socket$nl_route(0x10, 0x3, 0x0) 2.436440475s ago: executing program 0 (id=5200): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x92581, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f00000000c0)={0x0, 0x1, [0x7, 0x4, 0x9, 0x8d13a0e, 0x5, 0x2]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000180)={'aio_iiro_16\x00', [0x8001, 0x2, 0x4, 0x0, 0xd, 0xcc7, 0x10001, 0x800004, 0xa, 0xff, 0x2, 0x1, 0x8, 0x1100004, 0x1, 0xa, 0x8, 0x1a449, 0x43, 0x40000003, 0xc, 0x2, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x8, 0x8, 0x4, 0xc]}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x8}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x5}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r7, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) r8 = socket$pppl2tp(0x18, 0x1, 0x1) lseek(r8, 0xffff, 0x4) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x92581, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f00000000c0)={0x0, 0x1, [0x7, 0x4, 0x9, 0x8d13a0e, 0x5, 0x2]}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000180)={'aio_iiro_16\x00', [0x8001, 0x2, 0x4, 0x0, 0xd, 0xcc7, 0x10001, 0x800004, 0xa, 0xff, 0x2, 0x1, 0x8, 0x1100004, 0x1, 0xa, 0x8, 0x1a449, 0x43, 0x40000003, 0xc, 0x2, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x8, 0x8, 0x4, 0xc]}) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x8}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x5}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r7, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) lseek(r8, 0xffff, 0x4) (async) 2.435182195s ago: executing program 4 (id=5202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e8000000000000000000000000000a28000000000a0101000000005e1affd502000000090001007337af8bc74f3a2c35fe5a14910f797a300000000008000241000000032c000000030a01030000e6ff00000000020000000900010073797a3000010000090003007379650bb29ada60d072c202cd5670fe845369f3b3f93eb3e278193df53efe6742873360df0fc75c148c11a47bf14616cf47db908c5e85080000000000000070970c6e27e827b8902e6010"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async, rerun: 64) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x40, 0x0, 0x0, 0x0, 0x51}}, 0x50) (async, rerun: 64) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xe, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24c01, 0x0) dup3(r4, r2, 0x0) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x78, r5, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5001000010001304000000000c000000fe80000000000000000000000000009d20010000000000000000000000000000000000004e2400000a00002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1e00010000000000000000000000000000001032000000640101020000000000000000000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000800000000020000fbff09ffffffffff00000000000000000800000000000000cc000000000000000500000000000000f6000000000000000000000000000000000000000200010100000000000000005f001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000040"], 0x150}, 0x1, 0x0, 0x0, 0x400}, 0x4000) 2.309396648s ago: executing program 4 (id=5203): prctl$PR_SVE_SET_VL(0x32, 0x32dbb) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x6, @remote, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="da", 0x1}], 0x1}}], 0x1, 0xc0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, 0x0, &(0x7f0000001b00)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x6, 0x1, 0x401, 0x1, r2}, 0x10) 2.309043586s ago: executing program 0 (id=5204): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x35}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.308781016s ago: executing program 4 (id=5205): set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) set_mempolicy(0x1, &(0x7f0000000100)=0x2, 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) r4 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0xfffffffd}, 0x24}}, 0x0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x15}, 0x2000000}], 0x2, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0x7}, 0x1c) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x9, 0x0, 0x7}, 0xc) 2.223969586s ago: executing program 0 (id=5206): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000080)) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x12b001) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000140)={"524ebce3", 0x3, 0x5, 0x81, 0x3, 0x16dc, "0d0767fcf850456f2290e729cf77f1", "2eb4fea5", "44b4dd9e", "ad2e21d3", ["d4150c57d062e240fbe214a9", "850f3d04d42a166156600360", "82621ecad17be13010ccc10d", "6631cbd8c92f5461e2ea90f9"]}) (async) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f00000003c0)={0x0, 0xfffffffffffffffe, 0x5, 0x6, 0xe30, 0x7fffffff, "c2a0da871813beebb98f6cd3d5e10363", 0x0, 0xfb, 0x9, 0xc, 0x0, 0x0, 0xfc}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'wg0\x00', {0x2, 0x4e22, @private=0xa010102}}) 2.175556764s ago: executing program 4 (id=5207): r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) (async) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x3, 0x0, 0x0, 0x0}) (async) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x3, 0x0, 0x0, 0x0}) socket$isdn_base(0x22, 0x2, 0x10) (async) r3 = socket$isdn_base(0x22, 0x2, 0x10) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000005f00)) (async) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000005f00)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r5) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r5) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0107000000000000000052"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r7, r4, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000100)=ANY=[@ANYRESOCT=r7], 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9071, 0xffffffffffffffff, 0x0) syz_usb_connect$printer(0x4, 0x0, 0x0, 0x0) (async) syz_usb_connect$printer(0x4, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x10) syz_usb_connect$uac1(0x0, 0xdf, &(0x7f0000000140)=ANY=[], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r8, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r9, 0x1}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r8, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r9, 0x1}, 0x1c}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000001940)={@val={0x1c, 0xf5}, @val={0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, @x25={0x3, 0x6, 0xf1}}, 0x11) (async) write$tun(r10, &(0x7f0000001940)={@val={0x1c, 0xf5}, @val={0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, @x25={0x3, 0x6, 0xf1}}, 0x11) getdents64(r0, &(0x7f0000001ec0)=""/142, 0x8e) 2.17438134s ago: executing program 0 (id=5209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xffffff81}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c071}, 0x4008080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 598.841583ms ago: executing program 9 (id=5235): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="2e1b00003e000511c0ff0300006394090124fc602f6e35400400010313d77a03017dab8e6086cc422c80c450745bf32bc5aa1b62ad729944994710d7c98f0e86bcceb141d0b79200ffbe07c1c007ca0fda5f089ae696239e5439544677839f4268d8dee3fb7a4ce62758ecb9bb28f050e271c71735026696f45da75104e78139a80f38d46669bcc374eda87b07d45c1c7e7b6a2be2918e8c0eafc2efe4e058d3f712822d9da9e43529bde1aeaac1c18f7fdca72fc4a52222a79d42fd99", 0xbd}], 0x1, 0x0, 0x0, 0x39c}, 0x48851) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast}, {@in=@private, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x8, {0x0, 0x0, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0x154}}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="130300005500911fdabcf8b30771a54a07"], 0xfe33) 598.239667ms ago: executing program 9 (id=5236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000d0000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073797a30"], 0xc0}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0xa, 0x1, 0x7c5e}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10, 0x0, r1}, 0x94) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) (async) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x122, @loopback}, 0x20) syz_emit_ethernet(0x13a, &(0x7f0000000580)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x6, 0x6, "32dc65", 0x104, 0x3a, 0x1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7, {0x6, 0x6, "d484c3", 0x1, 0x87, 0x1, @loopback, @dev={0xfe, 0x80, '\x00', 0x33}, [], "bd94ff6e005fe832957d3bf2c376dce627e557bcb4545102c619bcda4588a35d42f551681e5b394276ecbfb486ace741e66ab348cbc3eef0c7ff9ecbb8c7426b90cf4b0073f2f16699cc92f57a79a996234b7d1a6395f5c7462cac8b610c4dc53201dad81e8aee526863115d306827372b3563f69345d8b273fe42322a184ffc1b37f66d0caef3193fc5ba2a8bf0b7ccb0ac19d1ff7a15ba04d6743164c5b63f350bb3318043655a91a702d38fe4690e32cf9a83583f4882b93201eaedc14975eb744a38f3f371da877c4747e5cd1ff318e64813"}}}}}}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000380)={0x0, 0x3, 0x3, 0x7fff, 0xfe, "0062ba7d82000000160000000000f738096304"}) (async) r4 = syz_open_pts(r3, 0x80) dup3(r4, r3, 0x80000) (async, rerun: 32) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async, rerun: 32) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async, rerun: 32) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="001226bd70000400df258c0000002800038000000108000500ac140200"/40], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x2c0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x290, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb], 0x0, [0x8, 0x4, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x400, 0x0, 0x1], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x94, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7f}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xc10}]}, {0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xb}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2b76}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x8}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x9}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x190, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xa5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffffffff}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x57}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x400}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xc}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7fffffff}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x10}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcc}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3ff}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}]}, {0x44, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xb3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xde}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xd}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}]}, {0x44, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xbc}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x589}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x81}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}]}]}]}}]}, 0x2c0}}, 0x8000) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (rerun: 32) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) 595.648177ms ago: executing program 9 (id=5237): r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r2, 0x0, 0x0}, 0x10) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async, rerun: 64) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (rerun: 64) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000002d80)='./file1/file0\x00', 0x40000, 0x120) (rerun: 64) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) (async) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 470.534338ms ago: executing program 9 (id=5238): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) acct(&(0x7f0000000080)='./file0\x00') ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) 352.418052ms ago: executing program 9 (id=5239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x84}}, 0x8005) 352.119841ms ago: executing program 9 (id=5240): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000003000128009000100697069700000000020000280040013"], 0x50}}, 0x0) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000040)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0xc0011023) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000180)=0x1000) ppoll(&(0x7f0000000040)=[{r6, 0x20}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r6, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0xfeffff, 0x640, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 224.451044ms ago: executing program 0 (id=5241): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 222.658954ms ago: executing program 7 (id=5242): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x80000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0xc0844123, &(0x7f0000000000)) bind$tipc(r0, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x100002}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x0, 0xf5}, 0x10) 149.291783ms ago: executing program 7 (id=5243): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) (async) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) (async) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000003c0)=0x5, 0x4) (async, rerun: 32) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x5, 0xa, 0xa}], 0x10, 0x7ff}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r4, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) (async, rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async, rerun: 64) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000005200210900000000000000001c"], 0x24}}, 0x4000) 148.837623ms ago: executing program 7 (id=5244): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r0, 0x4112, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r0, 0x40044104, &(0x7f0000000040)=0x3) mmap$snddsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x2010, r0, 0xb000) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000080)={0x2, 0x8ea1, 0x7fff, 0x200}, 0x10) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f00000000c0)=0xfe, 0x4) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x35}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x88000) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000002c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x80, &(0x7f0000000680)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x31, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x1, 0x1, 0x6, 0x880, r0, 0x3ff, '\x00', r2, r0, 0x0, 0x0, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0x1d, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x10, 0xac, &(0x7f0000000440)=""/172, 0x41000, 0x1, '\x00', r2, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0xa, 0x9, 0xfffffffa}, 0x10, r4, r0, 0x8, &(0x7f0000000940)=[r0, r0, r5], &(0x7f0000000980)=[{0x3, 0x2, 0x8, 0x4}, {0x0, 0x2, 0xb, 0xa}, {0x0, 0x1, 0x6, 0xc}, {0x5, 0x4, 0x5, 0xa}, {0x1, 0x3, 0xf, 0xa}, {0x3, 0x5, 0x8, 0x7}, {0x4, 0x4, 0xb, 0x5}, {0x3, 0x5, 0x8, 0x5}]}, 0x94) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000ac0)) ioctl$I2C_PEC(r0, 0x708, 0x6) sendmsg$nl_route(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)=@RTM_DELMDB={0x38, 0x55, 0x200, 0x70bd29, 0x25dfdbfc, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x4, {@ip4=@multicast2, 0x800}}}]}, 0x38}}, 0x4000) chroot(&(0x7f0000000c00)='./file0\x00') prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000c40)) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000c80)=0x6) r7 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) read(r7, &(0x7f0000000cc0)=""/28, 0x1c) read(r5, &(0x7f0000000d00)=""/146, 0x92) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ec0)={@map=r0, 0x34, 0x1, 0x4, &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000e00)=[0x0], &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e80)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000f00)={@cgroup=r0, r0, 0x7, 0x14, 0x0, @void, @value=r6, @void, @void, r8}, 0x20) socket(0x2a, 0x1, 0x5) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000f40)=0xf, &(0x7f0000000f80)=0x1) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000fc0)) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000001000), &(0x7f0000001040)=0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000010c0)={r6, 0xffffffffffffffff, 0x35, 0x0, @void}, 0x10) 83.288285ms ago: executing program 7 (id=5245): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x40440d0}, 0x24048800) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000200)={0x232d6a3c, 0x3, "b45ef0f8c4b4f33f12c5fcae79f63b9349aabec7f8d076fadef3c42aeadda94615d278a7828f554dfb33eaa9097e7d8526d9aecebb372a4ecf0d642474b5847b9ba9dd83e73367407c2db571a6b3c5b36857ae1e6f4a6990aaa7840a7c1e8ebcb0db4924591c38819aa8735bf2b7a61ec6333f60d3139b7a143241e29f4cd36cc2260a9ba946f131f2877b22e85283db769ab6a52ad590cbf74ad968b1b2f37bbaae9fb1ebcee2844e930961e4a41fe5888c24779448187ed082df383d410940021eec095e1a903e2da7e0a429275be2402dfaf09cdb6c6d0ea82d2b556dcb4e4e1d25a82bf1b640083c2e6353a7c99dbeee1abb559772de27ad3b0fde7d2d09"}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 82.349535ms ago: executing program 7 (id=5246): r0 = socket$kcm(0x10, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac009000400a084e08b04000200000000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 0s ago: executing program 7 (id=5247): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80000000, 'syz0\x00'}, 0x105, 0x0, 0x1, 0x0, 0x0, 0xe3, 'syz1\x00', 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read(r0, &(0x7f0000000200)=""/193, 0xc1) kernel console output (not intermixed with test programs): .748:97713): avc: denied { ioctl } for pid=21185 comm="syz.7.4444" path="socket:[108680]" dev="sockfs" ino=108680 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 355.338862][T21198] tmpfs: Unknown parameter 'usrquota_inod' [ 355.344790][T21198] ceph: No source [ 355.420456][ T7558] usb 14-1: USB disconnect, device number 30 [ 355.439396][T21204] lo: Caught tx_queue_len zero misconfig [ 355.441577][T21201] __nla_validate_parse: 2 callbacks suppressed [ 355.441588][T21201] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4448'. [ 355.457600][T21201] geneve2: entered allmulticast mode [ 355.648717][T21208] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4451'. [ 355.682510][ T5942] Bluetooth: to_multiplier 54284 > 3200 [ 355.725637][T21214] tipc: Enabled bearer , priority 0 [ 355.728377][T21214] syzkaller0: entered promiscuous mode [ 355.730839][T21214] syzkaller0: entered allmulticast mode [ 355.745920][T21214] tipc: Resetting bearer [ 355.762850][T21213] tipc: Resetting bearer [ 355.774299][T21213] tipc: Disabling bearer [ 356.005804][T21218] gfs2: error -5 reading superblock [ 356.019945][T21220] netlink: 212304 bytes leftover after parsing attributes in process `syz.9.4455'. [ 356.024546][T21220] openvswitch: netlink: Message has 6 unknown bytes. [ 356.114003][T21222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4456'. [ 356.380992][T21243] netdevsim netdevsim0 ªªªªªª: renamed from netdevsim0 (while UP) [ 356.512872][T21251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.520421][T21251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.531706][T21256] tmpfs: User quota inode hardlimit too large. [ 356.618296][ T5942] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 356.690968][T21275] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4472'. [ 356.950346][ T5942] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 356.952870][ T5942] Bluetooth: Wrong link type (-22) [ 356.954806][ T5942] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 356.958119][ T5942] Bluetooth: Wrong link type (-22) [ 357.434339][T21300] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4480'. [ 357.526751][T21306] delete_channel: no stack [ 357.728510][T21327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4489'. [ 357.767404][T21327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4489'. [ 357.864340][T21337] netlink: 'syz.9.4492': attribute type 10 has an invalid length. [ 357.884434][T21337] .`: (slave dummy0): Releasing backup interface [ 357.889578][T21337] team0: Device dummy0 is already a lower device of the team interface [ 357.895412][T21337] netlink: 'syz.9.4492': attribute type 10 has an invalid length. [ 357.907833][T19687] bridge0: port 3(team0) entered disabled state [ 357.911747][ T5942] Bluetooth: hci0: command tx timeout [ 357.990227][T21347] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 358.004987][T21347] team0: Device gtp0 is up. Set it down before adding it as a team port [ 358.224382][T21365] overlayfs: missing 'lowerdir' [ 358.365583][T21375] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.368729][T21375] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.436969][T21375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.444613][T21375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.566791][T21375] geneve2: left allmulticast mode [ 358.568823][T19687] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.571758][T19687] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.576533][T19687] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.579534][T19687] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.623341][T21378] bridge1: entered allmulticast mode [ 358.884854][ T34] usb 12-1: new high-speed USB device number 25 using dummy_hcd [ 359.060050][ T34] usb 12-1: Using ep0 maxpacket: 8 [ 359.063878][ T34] usb 12-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 359.068056][ T34] usb 12-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.072601][ T34] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 359.075876][ T34] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.082407][ T34] usbtmc 12-1:16.0: bulk endpoints not found [ 359.199474][T21402] Failed to get privilege flags for destination (handle=0x2:0x2) [ 359.302656][T21400] sd 0:0:0:0: PR command failed: 1026 [ 359.305094][T21400] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 359.307566][T21400] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 359.531504][ T5942] Bluetooth: hci4: unexpected event for opcode 0x169a [ 359.665682][T21433] devpts: Bad value for 'max' [ 359.667758][T21433] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4524'. [ 359.688281][ T7558] usb 14-1: new high-speed USB device number 31 using dummy_hcd [ 359.698124][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 359.725437][T21437] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4525'. [ 359.836244][T21443] tipc: Enabled bearer , priority 0 [ 359.839845][T21443] syzkaller0: entered promiscuous mode [ 359.842365][T21443] syzkaller0: entered allmulticast mode [ 359.846374][ T40] kauditd_printk_skb: 62 callbacks suppressed [ 359.846385][ T40] audit: type=1400 audit(2000000043.040:97776): avc: denied { remount } for pid=21444 comm="syz.0.4529" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 359.847389][T21446] binder: Bad value for 'stats' [ 359.848704][ T7558] usb 14-1: Using ep0 maxpacket: 8 [ 359.861854][ T7558] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 359.864724][ T7558] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 359.872658][T21443] tipc: Resetting bearer [ 359.876387][T21442] tipc: Resetting bearer [ 359.876741][ T7558] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 359.883256][ T7558] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 359.886699][ T7558] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.891736][ T7558] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 359.894849][ T7558] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.900434][T21442] tipc: Disabling bearer [ 360.034244][T21458] binder: 21456:21458 ioctl c0306201 200000000300 returned -22 [ 360.039364][ T40] audit: type=1400 audit(2000000043.218:97777): avc: denied { read } for pid=21456 comm="syz.0.4534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 360.047299][T21458] ptrace attach of "/syz-executor exec"[18942] was attempted by "/syz-executor exec"[21458] [ 360.110365][ T40] audit: type=1400 audit(2000000043.292:97778): avc: denied { getopt } for pid=21456 comm="syz.0.4534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 360.532085][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 360.703002][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 360.707287][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.711868][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 360.713947][T21470] usbtmc 14-1:16.0: simple usb_control_msg failed -32 [ 360.720527][ T24] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 360.724781][ T24] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 360.728383][ T24] usb 5-1: Product: syz [ 360.730340][ T24] usb 5-1: Manufacturer: syz [ 360.732419][ T24] usb 5-1: SerialNumber: syz [ 360.736871][ T24] usb 5-1: config 0 descriptor?? [ 361.175567][ T34] usb 5-1: USB disconnect, device number 12 [ 361.755978][T21476] __nla_validate_parse: 1 callbacks suppressed [ 361.755990][T21476] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4537'. [ 361.770396][ T40] audit: type=1400 audit(2000000044.826:97779): avc: denied { create } for pid=21475 comm="syz.0.4537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 361.807125][T21482] tipc: Enabling not permitted [ 361.809662][T21482] tipc: Enabling of bearer rejected, failed to enable media [ 361.836355][ T34] usb 12-1: USB disconnect, device number 25 [ 361.849706][ T40] audit: type=1400 audit(2000000044.919:97780): avc: denied { setopt } for pid=21483 comm="syz.0.4539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 361.859870][ T40] audit: type=1400 audit(2000000044.929:97781): avc: denied { read } for pid=21483 comm="syz.0.4539" laddr=172.20.20.10 lport=37053 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 361.893083][ T40] audit: type=1400 audit(2000000044.957:97782): avc: denied { mount } for pid=21485 comm="syz.7.4540" name="/" dev="configfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 361.913860][ T40] audit: type=1400 audit(2000000044.966:97783): avc: denied { search } for pid=21485 comm="syz.7.4540" name="/" dev="configfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 361.924570][ T40] audit: type=1400 audit(2000000044.966:97784): avc: denied { search } for pid=21485 comm="syz.7.4540" name="/" dev="configfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 361.933118][ T40] audit: type=1400 audit(2000000044.966:97785): avc: denied { read open } for pid=21485 comm="syz.7.4540" path="/" dev="configfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 362.064332][T21498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.338473][T21528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4553'. [ 362.343241][T21526] xfrm0 speed is unknown, defaulting to 1000 [ 362.452482][T21537] usb usb8: usbfs: process 21537 (syz.1.4556) did not claim interface 0 before use [ 362.466952][T21537] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 362.514105][T21544] 9pnet_virtio: no channels available for device syz [ 362.557595][ T6019] usb 14-1: USB disconnect, device number 31 [ 362.591106][T21548] fuse: Invalid rootmode [ 362.592968][T21547] fuse: Invalid rootmode [ 362.595570][T21547] netlink: 124 bytes leftover after parsing attributes in process `syz.9.4558'. [ 362.635065][T21550] tipc: Enabled bearer , priority 0 [ 362.637895][T21550] syzkaller0: entered promiscuous mode [ 362.640223][T21550] syzkaller0: entered allmulticast mode [ 362.656380][T21550] tipc: Resetting bearer [ 362.660931][T21549] tipc: Resetting bearer [ 362.673235][T21549] tipc: Disabling bearer [ 363.133936][T21561] FAT-fs (nullb0): bogus number of reserved sectors [ 363.136245][T21561] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 363.169342][T21569] Malformed UNC in devname [ 363.169342][T21569] [ 363.172655][T21569] CIFS: VFS: Malformed UNC in devname [ 363.182082][T21568] mkiss: ax0: crc mode is auto. [ 363.422086][T21579] tipc: Enabled bearer , priority 0 [ 363.428160][T21579] syzkaller0: entered promiscuous mode [ 363.431164][T21579] syzkaller0: entered allmulticast mode [ 363.467781][T21579] tipc: Resetting bearer [ 363.471079][T21578] tipc: Resetting bearer [ 363.486515][T21578] tipc: Disabling bearer [ 363.595357][T21592] qnx6: unable to set blocksize [ 363.794219][T21600] xfrm0 speed is unknown, defaulting to 1000 [ 364.010209][T21604] netlink: 'syz.7.4576': attribute type 1 has an invalid length. [ 364.042086][T21604] bond1: entered promiscuous mode [ 364.044784][T21604] 8021q: adding VLAN 0 to HW filter on device bond1 [ 364.051514][T21604] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4576'. [ 364.054803][T21604] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4576'. [ 364.075406][T21607] binder: 21606:21607 ioctl 4018620d 0 returned -22 [ 364.118186][T21608] bond1: (slave bridge2): making interface the new active one [ 364.121288][T21608] bridge2: entered promiscuous mode [ 364.124478][T21608] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 364.148493][T21609] binder: 21606:21609 unknown command 0 [ 364.150930][T21609] binder: 21606:21609 ioctl c0306201 200000000080 returned -22 [ 364.233327][T21614] netlink: 'syz.7.4580': attribute type 1 has an invalid length. [ 364.236142][T21614] netlink: 'syz.7.4580': attribute type 1 has an invalid length. [ 364.270046][T21616] netlink: 'syz.9.4578': attribute type 21 has an invalid length. [ 364.279241][T21616] netlink: 'syz.9.4578': attribute type 21 has an invalid length. [ 364.282527][T21616] netlink: 'syz.9.4578': attribute type 21 has an invalid length. [ 364.287303][T21616] netlink: 'syz.9.4578': attribute type 21 has an invalid length. [ 364.290784][T21616] netlink: 'syz.9.4578': attribute type 21 has an invalid length. [ 364.293773][T21616] netlink: 'syz.9.4578': attribute type 21 has an invalid length. [ 364.297239][T21616] netlink: 'syz.9.4578': attribute type 21 has an invalid length. [ 364.464107][T21629] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4584'. [ 364.545671][T21641] tipc: Enabling of bearer rejected, failed to enable media [ 364.702937][T21653] kernel profiling enabled (shift: 6) [ 364.758411][T21660] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 364.777352][T21663] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4593'. [ 364.814029][T21665] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 364.826187][T21665] XFS (nullb0): Invalid superblock magic number [ 364.923372][T21687] overlayfs: overlapping lowerdir path [ 365.010735][T21694] pimreg: entered allmulticast mode [ 365.035748][T21696] 9pnet_fd: Insufficient options for proto=fd [ 365.154898][T21709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4605'. [ 365.214623][T21714] Cannot find del_set index 4 as target [ 365.485913][ T5343] pmem0: [POWERTEC] [ 365.516272][T21738] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 365.722204][ T40] kauditd_printk_skb: 42 callbacks suppressed [ 365.722221][ T40] audit: type=1400 audit(2000000048.538:97828): avc: denied { write } for pid=21743 comm="syz.9.4614" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 365.738947][ T40] audit: type=1400 audit(2000000048.557:97829): avc: denied { open } for pid=21743 comm="syz.9.4614" path="/454/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 365.797832][T21753] tipc: Enabling of bearer rejected, failed to enable media [ 365.868785][ T40] audit: type=1400 audit(2000000048.669:97830): avc: denied { write } for pid=21742 comm="syz.0.4613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 365.876593][T21670] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 365.916444][ T24] IPVS: starting estimator thread 0... [ 365.923364][ T40] audit: type=1400 audit(2000000048.734:97831): avc: denied { getopt } for pid=21762 comm="syz.7.4619" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 365.965988][ T40] audit: type=1400 audit(2000000048.772:97832): avc: denied { connect } for pid=21768 comm="syz.7.4621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 365.979423][ T40] audit: type=1400 audit(2000000048.781:97833): avc: denied { setopt } for pid=21763 comm="syz.9.4620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 365.979726][T21766] ubi: mtd0 is already attached to ubi0 [ 366.030076][T21765] IPVS: using max 43 ests per chain, 103200 per kthread [ 366.034071][T21744] /dev/sr0: Can't open blockdev [ 366.110664][ T40] audit: type=1400 audit(2000000048.903:97834): avc: denied { map } for pid=21791 comm="syz.7.4628" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 366.186578][ T40] audit: type=1400 audit(2000000048.968:97835): avc: denied { create } for pid=21794 comm="syz.9.4629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 366.187203][T21795] SELinux: unknown common [ 366.196298][T21795] SELinux: failed to load policy [ 366.207010][ T40] audit: type=1400 audit(2000000048.968:97836): avc: denied { bind } for pid=21794 comm="syz.9.4629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 366.245504][T21805] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4632'. [ 366.249073][ T40] audit: type=1400 audit(2000000049.034:97837): avc: denied { ioctl } for pid=21803 comm="syz.1.4632" path="socket:[110076]" dev="sockfs" ino=110076 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 366.394346][T21825] EXT4-fs (nbd1): unable to read superblock [ 366.941645][T21865] netlink: 212 bytes leftover after parsing attributes in process `syz.0.4647'. [ 366.972292][T21868] nvme_fabrics: unknown parameter or missing value 'ELF9û' in ctrl creation request [ 366.976289][T21868] tmpfs: Bad value for 'mpol' [ 367.055973][ T5942] Bluetooth: hci0: command 0x0c20 tx timeout [ 367.376468][T21882] Malformed UNC in devname [ 367.376468][T21882] [ 367.379585][T21882] CIFS: VFS: Malformed UNC in devname [ 367.510923][T21889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4655'. [ 367.675839][ T7558] usb 14-1: new high-speed USB device number 32 using dummy_hcd [ 367.815227][T21895] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4657'. [ 367.847237][ T7558] usb 14-1: Using ep0 maxpacket: 8 [ 367.851726][ T7558] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 367.856544][ T7558] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 367.867024][ T7558] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 367.876052][ T7558] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 367.882647][ T7558] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 367.889631][ T7558] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 367.899068][ T7558] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 367.905647][ T7558] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.943439][ T5942] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 368.136220][ T7558] usb 14-1: usb_control_msg returned -32 [ 368.138616][ T7558] usbtmc 14-1:16.0: can't read capabilities [ 368.190609][T21910] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4662'. [ 368.266026][T21915] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4661'. [ 368.608284][T21863] Set syz1 is full, maxelem 65536 reached [ 368.749639][T21930] netlink: 27 bytes leftover after parsing attributes in process `syz.1.4668'. [ 368.771304][T21930] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 368.773524][T21930] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 368.777305][T21930] vhci_hcd vhci_hcd.0: Device attached [ 368.780249][T21932] usbip_core: unknown command [ 368.781939][T21932] vhci_hcd: unknown pdu 52865 [ 368.783917][T21932] usbip_core: unknown command [ 368.786170][T15783] vhci_hcd: stop threads [ 368.787695][T15783] vhci_hcd: release socket [ 368.789498][T15783] vhci_hcd: disconnect device [ 369.268982][T21936] usbtmc 14-1:16.0: CHECK_CLEAR_STATUS returned 7 [ 369.290870][ T5942] Bluetooth: hci0: command 0x0c20 tx timeout [ 369.491862][T21946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.495268][T21946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.523250][T21949] 9pnet_fd: Insufficient options for proto=fd [ 369.661132][ T24] hid_parser_main: 5 callbacks suppressed [ 369.661146][ T24] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 369.665936][T21955] sg_write: data in/out 466142316/176 bytes for SCSI command 0x68-- guessing data in; [ 369.665936][T21955] program syz.1.4674 not setting count and/or reply_len properly [ 369.669185][ T24] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 369.674686][ T24] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 369.680335][ T24] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 369.684039][ T24] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 369.688073][ T24] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 369.690545][ T24] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 369.693111][ T24] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 369.695761][ T24] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 369.699301][ T24] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 369.705163][ T24] hid-generic 0000:0000:0000.0013: hidraw1: HID v0.03 Device [syz1] on syz1 [ 369.885465][T21968] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4679'. [ 369.933990][T21966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4678'. [ 369.937773][T21966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4678'. [ 369.940953][T21966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4678'. [ 370.038704][T21979] netlink: 202 bytes leftover after parsing attributes in process `syz.1.4682'. [ 370.045380][T21979] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.051316][ T24] hid-generic 0005:00B6:0009.0014: hidraw1: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 370.467263][ T24] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 370.566036][T21985] batman_adv: batadv0: Adding interface: vlan0 [ 370.568193][T21985] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.577543][T21985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.581225][T21985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.584508][T21985] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 370.627578][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 370.631711][ T24] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 370.634511][ T24] usb 6-1: config 0 has no interface number 0 [ 370.654985][ T24] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 370.658935][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.662835][ T24] usb 6-1: Product: syz [ 370.664707][ T24] usb 6-1: Manufacturer: syz [ 370.666759][ T24] usb 6-1: SerialNumber: syz [ 370.683481][ T24] usb 6-1: config 0 descriptor?? [ 370.686449][ T49] usb 14-1: USB disconnect, device number 32 [ 370.687731][T21987] nbd: illegal input index 1879048192 [ 370.700821][ T24] smsc95xx v2.0.0 [ 370.952554][T22000] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3851450944 (3851450944 ns) > initial count (1115526657 ns). Using initial count to start timer. [ 370.972301][T22000] kvm: pic: single mode not supported [ 370.972652][T22000] kvm: pic: non byte read [ 370.978239][T22000] kvm: pic: non byte read [ 370.981684][T22000] kvm: pic: non byte read [ 371.051275][T22003] validate_nla: 58 callbacks suppressed [ 371.051288][T22003] netlink: 'syz.0.4690': attribute type 2 has an invalid length. [ 371.056017][ T49] usb 14-1: new low-speed USB device number 33 using dummy_hcd [ 371.130041][T22008] netlink: 'syz.7.4691': attribute type 4 has an invalid length. [ 371.134639][T22009] netlink: 'syz.7.4691': attribute type 4 has an invalid length. [ 371.156984][ T24] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 371.163527][ T24] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 371.168697][ T24] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 371.173451][ T24] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 371.182920][ T24] usb 6-1: USB disconnect, device number 49 [ 371.234459][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 371.234475][ T40] audit: type=1400 audit(2000000053.690:97866): avc: denied { write } for pid=22015 comm="syz.7.4693" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 371.247780][ T49] usb 14-1: Invalid ep0 maxpacket: 64 [ 371.397569][ T49] usb 14-1: new low-speed USB device number 34 using dummy_hcd [ 371.474401][ T40] audit: type=1400 audit(2000000053.924:97867): avc: denied { ioctl } for pid=22024 comm="syz.7.4696" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 371.482650][ T40] audit: type=1400 audit(2000000053.924:97868): avc: denied { ioctl } for pid=22026 comm="syz.0.4697" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 371.543655][ T40] audit: type=1400 audit(2000000053.980:97869): avc: denied { write } for pid=22028 comm="syz.0.4698" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 371.558668][ T49] usb 14-1: Invalid ep0 maxpacket: 64 [ 371.560736][ T49] usb usb14-port1: attempt power cycle [ 371.647555][T22033] ubi: mtd0 is already attached to ubi0 [ 371.650999][T22033] team0: No ports can be present during mode change [ 371.693730][ T40] audit: type=1400 audit(2000000054.121:97870): avc: denied { unmount } for pid=20582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 371.724681][T22040] IPv6: NLM_F_CREATE should be specified when creating new route [ 371.728416][T22042] netlink: 'syz.0.4703': attribute type 11 has an invalid length. [ 371.731473][ T40] audit: type=1400 audit(2000000054.158:97871): avc: denied { read } for pid=22036 comm="syz.1.4704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 371.788381][T22049] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 371.821525][ T40] audit: type=1400 audit(2000000054.242:97872): avc: denied { write } for pid=22045 comm="syz.7.4705" path="socket:[110425]" dev="sockfs" ino=110425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 371.883381][ T40] audit: type=1400 audit(2000000054.298:97873): avc: denied { ioctl } for pid=22062 comm="syz.7.4709" path="cgroup:[4026533688]" dev="nsfs" ino=4026533688 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 371.911084][ T40] audit: type=1400 audit(2000000054.326:97874): avc: denied { read } for pid=22069 comm="syz.1.4711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 371.920180][ T40] audit: type=1400 audit(2000000054.326:97875): avc: denied { ioctl } for pid=22069 comm="syz.1.4711" path="socket:[112617]" dev="sockfs" ino=112617 ioctlcmd=0x9410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 371.922992][ T5939] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 371.932026][ T49] usb 14-1: new low-speed USB device number 35 using dummy_hcd [ 371.963426][T22075] netlink: 'syz.1.4713': attribute type 1 has an invalid length. [ 371.968213][ T49] usb 14-1: Invalid ep0 maxpacket: 64 [ 371.985172][T22075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9953 sclass=netlink_route_socket pid=22075 comm=syz.1.4713 [ 372.066059][T22075] bond9 (unregistering): Released all slaves [ 372.124366][ T49] usb 14-1: new low-speed USB device number 36 using dummy_hcd [ 372.146628][ T49] usb 14-1: Invalid ep0 maxpacket: 64 [ 372.149507][ T49] usb usb14-port1: unable to enumerate USB device [ 372.201247][T22080] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 372.245422][T22087] vim2m vim2m.0: vidioc_s_fmt queue busy [ 372.250347][T22089] vim2m vim2m.0: vidioc_s_fmt queue busy [ 372.310823][T22096] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 372.313762][T22096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.245312][T22104] __nla_validate_parse: 9 callbacks suppressed [ 373.245323][T22104] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4721'. [ 373.253009][T22104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37921 sclass=netlink_route_socket pid=22104 comm=syz.7.4721 [ 373.339323][T22117] bond9: Removing last ns target with arp_interval on [ 373.354512][T22116] bond10: Removing last ns target with arp_interval on [ 373.368419][T22126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.451951][T22129] sd 0:0:0:0: PR command failed: 1026 [ 373.454124][T22129] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 373.456978][T22129] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 373.578726][T22138] netlink: 'syz.1.4730': attribute type 1 has an invalid length. [ 373.611491][T22138] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4730'. [ 373.646060][T22138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=265 sclass=netlink_route_socket pid=22138 comm=syz.1.4730 [ 373.651131][T22138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4730'. [ 373.652179][T22147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4732'. [ 373.654870][T22138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4730'. [ 373.663177][T22138] bond11 (unregistering): Released all slaves [ 373.813146][T22152] FAULT_INJECTION: forcing a failure. [ 373.813146][T22152] name failslab, interval 1, probability 0, space 0, times 0 [ 373.818118][T22152] CPU: 0 UID: 0 PID: 22152 Comm: syz.0.4733 Not tainted syzkaller #0 PREEMPT(full) [ 373.818135][T22152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 373.818142][T22152] Call Trace: [ 373.818146][T22152] [ 373.818151][T22152] dump_stack_lvl+0x16c/0x1f0 [ 373.818183][T22152] should_fail_ex+0x512/0x640 [ 373.818206][T22152] ? __kmalloc_noprof+0xca/0x870 [ 373.818222][T22152] should_failslab+0xc2/0x120 [ 373.818235][T22152] __kmalloc_noprof+0xdd/0x870 [ 373.818250][T22152] ? iter_file_splice_write+0x1cc/0x12b0 [ 373.818267][T22152] ? iter_file_splice_write+0x1cc/0x12b0 [ 373.818280][T22152] iter_file_splice_write+0x1cc/0x12b0 [ 373.818296][T22152] ? kfree+0x29e/0x710 [ 373.818309][T22152] ? copy_splice_read+0x897/0xc20 [ 373.818324][T22152] ? copy_splice_read+0x897/0xc20 [ 373.818336][T22152] ? copy_splice_read+0x89c/0xc20 [ 373.818349][T22152] ? __pfx_iter_file_splice_write+0x10/0x10 [ 373.818364][T22152] ? __lock_acquire+0x433/0x22f0 [ 373.818379][T22152] ? __pfx_copy_splice_read+0x10/0x10 [ 373.818399][T22152] ? __pfx_iter_file_splice_write+0x10/0x10 [ 373.818414][T22152] direct_splice_actor+0x192/0x6c0 [ 373.818430][T22152] splice_direct_to_actor+0x345/0xa30 [ 373.818444][T22152] ? __pfx_direct_splice_actor+0x10/0x10 [ 373.818460][T22152] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 373.818473][T22152] ? get_pid_task+0xfc/0x250 [ 373.818489][T22152] do_splice_direct+0x174/0x240 [ 373.818503][T22152] ? __pfx_do_splice_direct+0x10/0x10 [ 373.818516][T22152] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 373.818532][T22152] ? rw_verify_area+0xcf/0x6c0 [ 373.818550][T22152] do_sendfile+0xb06/0xe50 [ 373.818564][T22152] ? __pfx_do_sendfile+0x10/0x10 [ 373.818574][T22152] ? __fget_files+0x20e/0x3c0 [ 373.818605][T22152] __x64_sys_sendfile64+0x1d8/0x220 [ 373.818619][T22152] ? ksys_write+0x1ac/0x250 [ 373.818630][T22152] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 373.818653][T22152] do_syscall_64+0xcd/0xf80 [ 373.818665][T22152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.818676][T22152] RIP: 0033:0x7fdb7bd8f7c9 [ 373.818685][T22152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.818696][T22152] RSP: 002b:00007fdb79ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 373.818707][T22152] RAX: ffffffffffffffda RBX: 00007fdb7bfe5fa0 RCX: 00007fdb7bd8f7c9 [ 373.818714][T22152] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 373.818720][T22152] RBP: 00007fdb79ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 373.818726][T22152] R10: 00000000003fffff R11: 0000000000000246 R12: 0000000000000001 [ 373.818733][T22152] R13: 00007fdb7bfe6038 R14: 00007fdb7bfe5fa0 R15: 00007ffcc318ffd8 [ 373.818748][T22152] [ 373.915466][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.001001][T22162] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4737'. [ 374.004876][T22163] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4737'. [ 374.046979][T22173] CIFS mount error: No usable UNC path provided in device string! [ 374.046979][T22173] [ 374.050800][T22173] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 374.149176][T22191] FAULT_INJECTION: forcing a failure. [ 374.149176][T22191] name failslab, interval 1, probability 0, space 0, times 0 [ 374.154744][T22191] CPU: 2 UID: 0 PID: 22191 Comm: syz.7.4744 Not tainted syzkaller #0 PREEMPT(full) [ 374.154761][T22191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 374.154769][T22191] Call Trace: [ 374.154773][T22191] [ 374.154778][T22191] dump_stack_lvl+0x16c/0x1f0 [ 374.154793][T22191] should_fail_ex+0x512/0x640 [ 374.154810][T22191] ? __kvmalloc_node_noprof+0x12e/0x9b0 [ 374.154829][T22191] should_failslab+0xc2/0x120 [ 374.154842][T22191] __kvmalloc_node_noprof+0x141/0x9b0 [ 374.154858][T22191] ? security_capable+0x7e/0x260 [ 374.154872][T22191] ? proc_sys_call_handler+0x286/0x570 [ 374.154885][T22191] ? ns_capable_noaudit+0xda/0x110 [ 374.154904][T22191] ? proc_sys_call_handler+0x286/0x570 [ 374.154916][T22191] proc_sys_call_handler+0x286/0x570 [ 374.154930][T22191] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 374.154944][T22191] ? splice_from_pipe_next+0x1f7/0x5d0 [ 374.154966][T22191] iter_file_splice_write+0xa24/0x12b0 [ 374.154988][T22191] ? copy_splice_read+0x89c/0xc20 [ 374.155000][T22191] ? __pfx_iter_file_splice_write+0x10/0x10 [ 374.155017][T22191] ? __pfx_copy_splice_read+0x10/0x10 [ 374.155038][T22191] ? __pfx_iter_file_splice_write+0x10/0x10 [ 374.155053][T22191] direct_splice_actor+0x192/0x6c0 [ 374.155069][T22191] splice_direct_to_actor+0x345/0xa30 [ 374.155084][T22191] ? __pfx_direct_splice_actor+0x10/0x10 [ 374.155100][T22191] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 374.155113][T22191] ? get_pid_task+0xfc/0x250 [ 374.155129][T22191] do_splice_direct+0x174/0x240 [ 374.155143][T22191] ? __pfx_do_splice_direct+0x10/0x10 [ 374.155157][T22191] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 374.155172][T22191] ? rw_verify_area+0xcf/0x6c0 [ 374.155191][T22191] do_sendfile+0xb06/0xe50 [ 374.155204][T22191] ? __pfx_do_sendfile+0x10/0x10 [ 374.155215][T22191] ? __fget_files+0x20e/0x3c0 [ 374.155232][T22191] __x64_sys_sendfile64+0x1d8/0x220 [ 374.155246][T22191] ? ksys_write+0x1ac/0x250 [ 374.155257][T22191] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 374.155275][T22191] do_syscall_64+0xcd/0xf80 [ 374.155288][T22191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.155299][T22191] RIP: 0033:0x7f5b3b98f7c9 [ 374.155309][T22191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.155320][T22191] RSP: 002b:00007f5b3c8af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 374.155331][T22191] RAX: ffffffffffffffda RBX: 00007f5b3bbe5fa0 RCX: 00007f5b3b98f7c9 [ 374.155338][T22191] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 374.155344][T22191] RBP: 00007f5b3c8af090 R08: 0000000000000000 R09: 0000000000000000 [ 374.155351][T22191] R10: 00000000003fffff R11: 0000000000000246 R12: 0000000000000001 [ 374.155357][T22191] R13: 00007f5b3bbe6038 R14: 00007f5b3bbe5fa0 R15: 00007fff38136828 [ 374.155372][T22191] [ 374.352499][T22198] kvm: kvm [22197]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001e) [ 374.567047][T22214] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4751'. [ 374.571665][T22213] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.4751'. [ 374.635434][T22219] netlink: 'syz.9.4753': attribute type 10 has an invalid length. [ 374.649169][T22219] .`: (slave dummy0): Enslaving as an active interface with an up link [ 374.655158][T15796] bridge0: port 3(team0) entered blocking state [ 374.657587][T15796] bridge0: port 3(team0) entered forwarding state [ 375.129120][T22252] CIFS mount error: No usable UNC path provided in device string! [ 375.129120][T22252] [ 375.133540][T22252] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 375.176352][T22254] fuse: Bad value for 'fd' [ 375.279656][T22258] xt_hashlimit: max too large, truncated to 1048576 [ 375.282741][T22258] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 375.393525][T22261] lo: entered allmulticast mode [ 375.672220][T22274] fuse: Bad value for 'rootmode' [ 375.687985][T22275] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4769'. [ 375.724500][T22277] FAULT_INJECTION: forcing a failure. [ 375.724500][T22277] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 375.732659][T22277] CPU: 3 UID: 0 PID: 22277 Comm: syz.1.4772 Not tainted syzkaller #0 PREEMPT(full) [ 375.732685][T22277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 375.732696][T22277] Call Trace: [ 375.732702][T22277] [ 375.732709][T22277] dump_stack_lvl+0x16c/0x1f0 [ 375.732732][T22277] should_fail_ex+0x512/0x640 [ 375.732758][T22277] should_fail_alloc_page+0xe7/0x130 [ 375.732780][T22277] prepare_alloc_pages+0x3c2/0x610 [ 375.732804][T22277] __alloc_frozen_pages_noprof+0x18b/0x2440 [ 375.732832][T22277] ? stack_trace_save+0x8e/0xc0 [ 375.732852][T22277] ? __pfx_stack_trace_save+0x10/0x10 [ 375.732868][T22277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.732885][T22277] ? stack_depot_save_flags+0x29/0x9b0 [ 375.732915][T22277] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 375.732959][T22277] ? kasan_save_stack+0x33/0x60 [ 375.732976][T22277] ? __kasan_kmalloc+0xaa/0xb0 [ 375.732989][T22277] ? copy_splice_read+0x1a8/0xc20 [ 375.733008][T22277] ? do_splice_read+0x285/0x370 [ 375.733026][T22277] ? splice_direct_to_actor+0x2a1/0xa30 [ 375.733045][T22277] ? do_splice_direct+0x174/0x240 [ 375.733064][T22277] ? do_sendfile+0xb06/0xe50 [ 375.733079][T22277] ? __x64_sys_sendfile64+0x1d8/0x220 [ 375.733098][T22277] ? do_syscall_64+0xcd/0xf80 [ 375.733130][T22277] alloc_pages_bulk_noprof+0x77b/0x1010 [ 375.733163][T22277] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 375.733195][T22277] ? copy_splice_read+0x1a8/0xc20 [ 375.733219][T22277] copy_splice_read+0x1e1/0xc20 [ 375.733244][T22277] ? __pfx_copy_splice_read+0x10/0x10 [ 375.733272][T22277] ? find_held_lock+0x2b/0x80 [ 375.733293][T22277] ? __pfx_copy_splice_read+0x10/0x10 [ 375.733313][T22277] do_splice_read+0x285/0x370 [ 375.733335][T22277] splice_direct_to_actor+0x2a1/0xa30 [ 375.733356][T22277] ? __pfx_direct_splice_actor+0x10/0x10 [ 375.733381][T22277] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 375.733401][T22277] ? get_pid_task+0xfc/0x250 [ 375.733427][T22277] do_splice_direct+0x174/0x240 [ 375.733447][T22277] ? __pfx_do_splice_direct+0x10/0x10 [ 375.733466][T22277] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 375.733491][T22277] ? rw_verify_area+0xcf/0x6c0 [ 375.733519][T22277] do_sendfile+0xb06/0xe50 [ 375.733540][T22277] ? __pfx_do_sendfile+0x10/0x10 [ 375.733558][T22277] ? __fget_files+0x20e/0x3c0 [ 375.733581][T22277] __x64_sys_sendfile64+0x1d8/0x220 [ 375.733602][T22277] ? ksys_write+0x1ac/0x250 [ 375.733620][T22277] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 375.733668][T22277] do_syscall_64+0xcd/0xf80 [ 375.733689][T22277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.733705][T22277] RIP: 0033:0x7fa39378f7c9 [ 375.733718][T22277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.733735][T22277] RSP: 002b:00007fa394646038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 375.733754][T22277] RAX: ffffffffffffffda RBX: 00007fa3939e5fa0 RCX: 00007fa39378f7c9 [ 375.733766][T22277] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 375.733776][T22277] RBP: 00007fa394646090 R08: 0000000000000000 R09: 0000000000000000 [ 375.733786][T22277] R10: 00000000003fffff R11: 0000000000000246 R12: 0000000000000002 [ 375.733797][T22277] R13: 00007fa3939e6038 R14: 00007fa3939e5fa0 R15: 00007ffdc26365d8 [ 375.733822][T22277] [ 376.247775][T22287] kernel read not supported for file /blkio.bfq.io_wait_time_recursive (pid: 22287 comm: syz.1.4776) [ 376.311006][T22289] 9pnet: Unknown protocol version 9p2000.u½è5Ðý›OÔ‹ƒTÄë5éð­qÓ [ 376.531615][T22311] FAULT_INJECTION: forcing a failure. [ 376.531615][T22311] name failslab, interval 1, probability 0, space 0, times 0 [ 376.537367][T22311] CPU: 0 UID: 0 PID: 22311 Comm: syz.0.4781 Not tainted syzkaller #0 PREEMPT(full) [ 376.537385][T22311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 376.537392][T22311] Call Trace: [ 376.537397][T22311] [ 376.537402][T22311] dump_stack_lvl+0x16c/0x1f0 [ 376.537418][T22311] should_fail_ex+0x512/0x640 [ 376.537435][T22311] ? __kmalloc_cache_noprof+0x5f/0x770 [ 376.537451][T22311] should_failslab+0xc2/0x120 [ 376.537464][T22311] __kmalloc_cache_noprof+0x72/0x770 [ 376.537479][T22311] ? disk_seqf_start+0x68/0x180 [ 376.537495][T22311] ? disk_seqf_start+0x68/0x180 [ 376.537507][T22311] disk_seqf_start+0x68/0x180 [ 376.537520][T22311] seq_read_iter+0x2c1/0x12d0 [ 376.537539][T22311] proc_reg_read_iter+0x220/0x310 [ 376.537553][T22311] copy_splice_read+0x618/0xc20 [ 376.537570][T22311] ? __pfx_copy_splice_read+0x10/0x10 [ 376.537587][T22311] ? find_held_lock+0x2b/0x80 [ 376.537601][T22311] ? __pfx_copy_splice_read+0x10/0x10 [ 376.537613][T22311] do_splice_read+0x285/0x370 [ 376.537630][T22311] splice_direct_to_actor+0x2a1/0xa30 [ 376.537673][T22311] ? __pfx_direct_splice_actor+0x10/0x10 [ 376.537694][T22311] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 376.537706][T22311] ? get_pid_task+0xfc/0x250 [ 376.537723][T22311] do_splice_direct+0x174/0x240 [ 376.537737][T22311] ? __pfx_do_splice_direct+0x10/0x10 [ 376.537750][T22311] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 376.537766][T22311] ? rw_verify_area+0xcf/0x6c0 [ 376.537785][T22311] do_sendfile+0xb06/0xe50 [ 376.537798][T22311] ? __pfx_do_sendfile+0x10/0x10 [ 376.537809][T22311] ? __fget_files+0x20e/0x3c0 [ 376.537826][T22311] __x64_sys_sendfile64+0x1d8/0x220 [ 376.537839][T22311] ? ksys_write+0x1ac/0x250 [ 376.537850][T22311] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 376.537874][T22311] do_syscall_64+0xcd/0xf80 [ 376.537886][T22311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.537898][T22311] RIP: 0033:0x7fdb7bd8f7c9 [ 376.537907][T22311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.537918][T22311] RSP: 002b:00007fdb79ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 376.537929][T22311] RAX: ffffffffffffffda RBX: 00007fdb7bfe5fa0 RCX: 00007fdb7bd8f7c9 [ 376.537937][T22311] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 376.537943][T22311] RBP: 00007fdb79ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 376.537949][T22311] R10: 00000000003fffff R11: 0000000000000246 R12: 0000000000000002 [ 376.537956][T22311] R13: 00007fdb7bfe6038 R14: 00007fdb7bfe5fa0 R15: 00007ffcc318ffd8 [ 376.537971][T22311] [ 376.654334][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.692446][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 376.692458][ T40] audit: type=1400 audit(2000000058.797:97897): avc: denied { override_creds } for pid=22314 comm="syz.0.4783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 376.781462][ T40] audit: type=1400 audit(2000000058.881:97898): avc: denied { setopt } for pid=22321 comm="syz.7.4785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 376.797021][T22322] netlink: 'syz.7.4785': attribute type 10 has an invalid length. [ 376.800642][T22322] team0: entered promiscuous mode [ 376.802901][T22322] team_slave_0: entered promiscuous mode [ 376.805535][T22322] team_slave_1: entered promiscuous mode [ 376.809792][T22322] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.812960][T22322] bridge0: port 3(team0) entered blocking state [ 376.817118][T22322] bridge0: port 3(team0) entered disabled state [ 376.828394][T22322] team0: entered allmulticast mode [ 376.831019][T22322] team_slave_0: entered allmulticast mode [ 376.833463][T22322] team_slave_1: entered allmulticast mode [ 376.844443][ T40] audit: type=1400 audit(2000000058.937:97899): avc: denied { setopt } for pid=22319 comm="syz.0.4784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 376.897377][ T40] audit: type=1400 audit(2000000058.994:97900): avc: denied { append } for pid=22319 comm="syz.0.4784" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 376.903784][T22323] program syz.0.4784 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 376.908150][T22335] netlink: 'syz.7.4788': attribute type 10 has an invalid length. [ 376.916819][T22335] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 376.925895][T22323] ata1.00: invalid command format 0 [ 377.028220][T22342] dlm: no locking on control device [ 377.107496][T22349] bond0: Removing last ns target with arp_interval on [ 377.216779][ T40] audit: type=1400 audit(2000000059.293:97901): avc: denied { read } for pid=22358 comm="syz.7.4795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 377.238189][T22363] overlayfs: failed to resolve './bus': -2 [ 377.343187][ T40] audit: type=1400 audit(2000000059.396:97902): avc: denied { relabelfrom } for pid=22377 comm="syz.7.4799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 377.361121][ T40] audit: type=1400 audit(2000000059.414:97903): avc: denied { relabelto } for pid=22377 comm="syz.7.4799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 377.379291][T22384] overlayfs: failed to get inode (-116) [ 377.381451][T22384] overlayfs: failed to get inode (-116) [ 377.383766][T22384] overlayfs: failed to get inode (-116) [ 377.386014][T22384] overlayfs: failed to get inode (-116) [ 377.407416][T22384] xfrm0 speed is unknown, defaulting to 1000 [ 377.443331][T22384] overlayfs: failed to get inode (-116) [ 377.445604][T22384] overlayfs: failed to get inode (-116) [ 377.447889][T22384] overlayfs: failed to get inode (-116) [ 377.456411][T22384] overlayfs: failed to get inode (-116) [ 377.458662][T22384] overlayfs: failed to get inode (-116) [ 377.460964][T22384] overlayfs: failed to get inode (-116) [ 377.711055][ T40] audit: type=1400 audit(2000000059.751:97904): avc: denied { setopt } for pid=22389 comm="syz.7.4804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 377.799570][ T40] audit: type=1400 audit(2000000059.826:97905): avc: denied { connect } for pid=22402 comm="syz.0.4807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 377.866617][ T40] audit: type=1400 audit(2000000059.901:97906): avc: denied { accept } for pid=22406 comm="syz.0.4808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 378.142898][T22428] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 378.510228][T22439] gfs2: error -5 reading superblock [ 378.675147][T22459] __nla_validate_parse: 9 callbacks suppressed [ 378.675163][T22459] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4824'. [ 378.886071][T22488] x_tables: duplicate underflow at hook 1 [ 378.977317][T22497] random: crng reseeded on system resumption [ 378.986829][T22497] netlink: 'syz.7.4836': attribute type 13 has an invalid length. [ 378.990000][T22497] netlink: 'syz.7.4836': attribute type 17 has an invalid length. [ 379.377465][T22523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4844'. [ 379.674412][ T24] usb 12-1: new high-speed USB device number 26 using dummy_hcd [ 379.755302][T22541] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4849'. [ 379.784860][T22541] kvm: apic: phys broadcast and lowest prio [ 379.790310][ T7558] delete_channel: no stack [ 379.833330][ T24] usb 12-1: Using ep0 maxpacket: 8 [ 379.839271][ T24] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 379.842900][ T24] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 379.847606][ T24] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 379.851860][ T24] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 379.856082][ T24] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 379.861334][ T24] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 379.865459][ T24] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.056561][T22550] random: crng reseeded on system resumption [ 380.092153][ T24] usb 12-1: usb_control_msg returned -32 [ 380.094729][ T24] usbtmc 12-1:16.0: can't read capabilities [ 380.295771][T22560] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.4854'. [ 380.336630][T22562] netlink: 'syz.9.4855': attribute type 21 has an invalid length. [ 380.340104][T22562] IPv6: NLM_F_CREATE should be specified when creating new route [ 380.479326][T22570] usbtmc 12-1:16.0: INITIATE_CLEAR returned 0 [ 380.696168][T15410] usb 12-1: USB disconnect, device number 26 [ 380.752606][ T7558] usb 14-1: new high-speed USB device number 37 using dummy_hcd [ 380.923926][ T7558] usb 14-1: Using ep0 maxpacket: 32 [ 380.928131][ T7558] usb 14-1: config index 0 descriptor too short (expected 57883, got 27) [ 380.931032][ T7558] usb 14-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 380.936072][ T7558] usb 14-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 380.939076][ T7558] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.941861][ T7558] usb 14-1: Product: syz [ 380.943315][ T7558] usb 14-1: Manufacturer: syz [ 380.945100][ T7558] usb 14-1: SerialNumber: syz [ 380.948648][ T7558] usb 14-1: config 0 descriptor?? [ 381.171274][ T5936] usb 14-1: USB disconnect, device number 37 [ 381.345076][T22578] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4859'. [ 381.360356][T22578] team_slave_1 (unregistering): left promiscuous mode [ 381.363815][T22578] team_slave_1 (unregistering): left allmulticast mode [ 381.367309][T22578] team0: Port device team_slave_1 removed [ 381.642769][T22597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4865'. [ 381.907283][ T6008] usb 12-1: new high-speed USB device number 27 using dummy_hcd [ 382.081068][ T6008] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 382.084784][ T6008] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 382.088323][ T6008] usb 12-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 382.094642][ T6008] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 382.097918][ T6008] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.100803][ T6008] usb 12-1: Product: syz [ 382.102306][ T6008] usb 12-1: Manufacturer: syz [ 382.103967][ T6008] usb 12-1: SerialNumber: syz [ 382.110952][ T6008] hub 12-1:1.0: bad descriptor, ignoring hub [ 382.114133][ T6008] hub 12-1:1.0: probe with driver hub failed with error -5 [ 382.174696][ T9330] usb 14-1: new high-speed USB device number 38 using dummy_hcd [ 382.240168][T22626] syzkaller1: entered promiscuous mode [ 382.242192][T22626] syzkaller1: entered allmulticast mode [ 382.309572][T22627] fuse: Bad value for 'fd' [ 382.309659][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 382.309671][ T40] audit: type=1400 audit(2000000064.054:97931): avc: denied { mounton } for pid=22624 comm="syz.0.4876" path="/309/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 382.325182][ T6008] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 382.346509][ T9330] usb 14-1: too many configurations: 9, using maximum allowed: 8 [ 382.349888][ T9330] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 382.352762][ T9330] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 382.357253][ T9330] usb 14-1: config 0 interface 0 has no altsetting 0 [ 382.361314][ T9330] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 382.365645][ T9330] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 382.373016][ T9330] usb 14-1: config 0 interface 0 has no altsetting 0 [ 382.376730][ T9330] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 382.381352][ T9330] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 382.386035][ T9330] usb 14-1: config 0 interface 0 has no altsetting 0 [ 382.390256][ T9330] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 382.393554][ T9330] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 382.397204][ T9330] usb 14-1: config 0 interface 0 has no altsetting 0 [ 382.401534][ T9330] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 382.405094][ T9330] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 382.409615][ T9330] usb 14-1: config 0 interface 0 has no altsetting 0 [ 382.413632][ T9330] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 382.417339][ T9330] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 382.422128][ T9330] usb 14-1: config 0 interface 0 has no altsetting 0 [ 382.425677][ T9330] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 382.428718][ T9330] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 382.433440][ T9330] usb 14-1: config 0 interface 0 has no altsetting 0 [ 382.437768][ T9330] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 382.441528][ T9330] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 382.445392][ T9330] usb 14-1: config 0 interface 0 has no altsetting 0 [ 382.450768][ T9330] usb 14-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 382.454998][ T9330] usb 14-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 382.459263][ T9330] usb 14-1: Product: syz [ 382.460767][ T9330] usb 14-1: Manufacturer: syz [ 382.462467][ T9330] usb 14-1: SerialNumber: syz [ 382.467509][ T9330] usb 14-1: config 0 descriptor?? [ 382.475298][ T9330] yurex 14-1:0.0: USB YUREX device now attached to Yurex #1 [ 382.539097][ T40] audit: type=1400 audit(2000000064.269:97932): avc: denied { read write } for pid=22594 comm="syz.7.4864" name="lp0" dev="devtmpfs" ino=3693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 382.548173][ T40] audit: type=1400 audit(2000000064.269:97933): avc: denied { open } for pid=22594 comm="syz.7.4864" path="/dev/usb/lp0" dev="devtmpfs" ino=3693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 382.666905][ T49] usb 12-1: USB disconnect, device number 27 [ 382.670489][ T49] usblp0: removed [ 382.689104][T22610] team0: No ports can be present during mode change [ 382.700585][ T24] usb 14-1: USB disconnect, device number 38 [ 382.707310][ T24] yurex 14-1:0.0: USB YUREX #1 now disconnected [ 383.117348][ T40] audit: type=1400 audit(2000000064.811:97934): avc: denied { lock } for pid=22630 comm="syz.0.4877" path="socket:[115986]" dev="sockfs" ino=115986 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 383.126473][T22631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4877'. [ 383.223357][T22636] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4879'. [ 383.331639][T22642] bond2: entered promiscuous mode [ 383.334447][T22642] 8021q: adding VLAN 0 to HW filter on device bond2 [ 383.359664][T22642] bond0: (slave syz_tun): Releasing backup interface [ 383.372445][T22642] team0: left allmulticast mode [ 383.378410][T22642] team_slave_0: left allmulticast mode [ 383.381467][T22642] bridge0: port 3(team0) entered disabled state [ 383.389222][T22642] bond0: (slave batadv0): Releasing backup interface [ 383.392006][T22642] bridge_slave_0: left allmulticast mode [ 383.395389][T22642] bridge_slave_0: left promiscuous mode [ 383.397410][T22642] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.401214][T22642] bridge_slave_1: left allmulticast mode [ 383.403061][T22642] bridge_slave_1: left promiscuous mode [ 383.406397][T22642] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.411721][T22642] bond0: (slave bond_slave_0): Releasing backup interface [ 383.416823][T22642] bond0: (slave bond_slave_1): Releasing backup interface [ 383.420082][T22642] team_slave_0: left promiscuous mode [ 383.422744][T22642] team0: Port device team_slave_0 removed [ 383.424896][T22642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.428970][T22642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.432319][T22642] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 383.518109][ T40] audit: type=1400 audit(2000000065.176:97935): avc: denied { firmware_load } for pid=22633 comm="syz.0.4878" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 383.542238][T22655] program syz.7.4884 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 383.545617][T22655] ata1.00: invalid transfer count 0 [ 383.550966][T22655] ip6gretap1: entered promiscuous mode [ 383.552924][T22655] ip6gretap1: entered allmulticast mode [ 383.625562][T22660] syzkaller0: entered promiscuous mode [ 383.627988][T22660] syzkaller0: entered allmulticast mode [ 383.784349][T22667] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4888'. [ 383.789494][ T40] audit: type=1400 audit(2000000065.438:97936): avc: denied { getopt } for pid=22666 comm="syz.0.4888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 384.056291][ T5936] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 384.216660][ T5936] usb 5-1: Using ep0 maxpacket: 32 [ 384.220897][ T5936] usb 5-1: config 0 has an invalid interface number: 247 but max is 0 [ 384.224765][ T5936] usb 5-1: config 0 has no interface number 0 [ 384.226948][ T5936] usb 5-1: config 0 interface 247 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 384.230552][ T5936] usb 5-1: config 0 interface 247 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 384.235257][ T5936] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 384.239380][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 384.242958][ T5936] usb 5-1: Product: syz [ 384.244987][ T5936] usb 5-1: Manufacturer: syz [ 384.250508][ T5936] usb 5-1: config 0 descriptor?? [ 384.480565][T22677] F2FS-fs (nbd9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 384.484639][T22677] F2FS-fs (nbd9): Can't find valid F2FS filesystem in 1th superblock [ 384.488140][T22677] F2FS-fs (nbd9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 384.492223][T22677] F2FS-fs (nbd9): Can't find valid F2FS filesystem in 2th superblock [ 384.494241][ T6008] usb 5-1: USB disconnect, device number 13 [ 385.060450][T22691] xfrm0 speed is unknown, defaulting to 1000 [ 385.128302][T22700] netlink: 'syz.0.4898': attribute type 2 has an invalid length. [ 385.131409][T22700] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4898'. [ 385.134675][T22701] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 385.173659][ T40] audit: type=1400 audit(2000000066.729:97937): avc: denied { associate } for pid=22695 comm="syz.7.4897" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 385.183806][ T40] audit: type=1400 audit(2000000066.729:97938): avc: denied { append } for pid=22695 comm="syz.7.4897" name="pfkey" dev="proc" ino=4026534613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 385.195137][ T40] audit: type=1400 audit(2000000066.747:97939): avc: denied { ioctl } for pid=22708 comm="syz.9.4901" path="socket:[117979]" dev="sockfs" ino=117979 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 385.289459][T22711] netlink: 292 bytes leftover after parsing attributes in process `syz.0.4902'. [ 385.446450][ T6008] usb 14-1: new full-speed USB device number 39 using dummy_hcd [ 385.586088][T22724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4906'. [ 385.613706][ T6008] usb 14-1: not running at top speed; connect to a high speed hub [ 385.618538][ T6008] usb 14-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 385.623425][ T6008] usb 14-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 385.631584][ T6008] usb 14-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 385.635955][ T6008] usb 14-1: config 1 interface 0 has no altsetting 0 [ 385.643820][ T6008] usb 14-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.40 [ 385.647791][ T6008] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.651879][ T6008] usb 14-1: Product: syz [ 385.654305][ T6008] usb 14-1: Manufacturer: á Œ [ 385.656432][ T6008] usb 14-1: SerialNumber: syz [ 385.666435][T22709] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 385.669740][T22709] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 385.778504][ T40] audit: type=1400 audit(2000000067.299:97940): avc: denied { bind } for pid=22731 comm="syz.0.4909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 385.862343][T22740] bridge_slave_0: left allmulticast mode [ 385.872492][T22740] bridge_slave_0: left promiscuous mode [ 385.876887][T22740] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.885130][T22740] bridge_slave_1: left allmulticast mode [ 385.887909][T22740] bridge_slave_1: left promiscuous mode [ 385.890726][T22740] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.898058][T22740] bond0: (slave bond_slave_0): Releasing backup interface [ 385.901610][T22740] bond_slave_0: left allmulticast mode [ 385.908129][T22740] bond0: (slave bond_slave_1): Releasing backup interface [ 385.915210][T22740] bond_slave_1: left allmulticast mode [ 385.919717][T22740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.922523][T22740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.931955][T22740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.935361][T22740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.941720][T22740] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 386.111884][ T6008] usbhid 14-1:1.0: can't add hid device: -71 [ 386.114061][ T6008] usbhid 14-1:1.0: probe with driver usbhid failed with error -71 [ 386.117958][ T6008] usb 14-1: USB disconnect, device number 39 [ 386.277222][T22757] syzkaller0: entered promiscuous mode [ 386.279136][T22757] syzkaller0: entered allmulticast mode [ 386.814614][T22779] option changes via remount are deprecated (pid=22777 comm=syz.7.4921) [ 387.043343][T22785] syzkaller0: entered promiscuous mode [ 387.046030][T22785] syzkaller0: entered allmulticast mode [ 387.266782][T22800] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4928'. [ 387.269821][T22800] netlink: 'syz.7.4928': attribute type 1 has an invalid length. [ 387.272386][T22800] nbd: error processing sock list [ 387.320216][T22805] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 387.673523][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 387.673566][ T40] audit: type=1400 audit(2000000069.067:97946): avc: denied { append } for pid=22816 comm="syz.7.4932" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 387.783965][T22825] netlink: 'syz.9.4934': attribute type 4 has an invalid length. [ 387.786697][T22825] netlink: 'syz.9.4934': attribute type 4 has an invalid length. [ 387.790688][T22825] netlink: 'syz.9.4934': attribute type 4 has an invalid length. [ 387.793378][T22825] netlink: 'syz.9.4934': attribute type 4 has an invalid length. [ 387.796153][T22825] netlink: 'syz.9.4934': attribute type 4 has an invalid length. [ 387.798990][T22825] netlink: 'syz.9.4934': attribute type 4 has an invalid length. [ 387.801679][T22825] netlink: 'syz.9.4934': attribute type 4 has an invalid length. [ 387.804347][T22825] netlink: 'syz.9.4934': attribute type 4 has an invalid length. [ 387.840838][T22828] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4935'. [ 388.184888][ T40] audit: type=1400 audit(2000000069.553:97947): avc: denied { write } for pid=22842 comm="syz.0.4940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 388.353259][T22850] delete_channel: no stack [ 388.488645][T22860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4944'. [ 388.547397][ T40] audit: type=1400 audit(2000000069.890:97948): avc: denied { read } for pid=22864 comm="syz.7.4946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 388.551962][T22862] 8021q: adding VLAN 0 to HW filter on device bond5 [ 388.556597][T22865] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4946'. [ 388.563792][ T40] audit: type=1400 audit(2000000069.899:97949): avc: denied { map } for pid=22861 comm="syz.0.4945" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 388.602574][T22867] afs: Unknown parameter 'dynVìbuû–B¾­•#æâel²î¢Ÿ”õ»G<äU•ÅsMr`' [ 388.606040][T22867] overlayfs: failed to resolve '/Ÿ˜®W)çæžR¨èàž’ W ?ctHfséöd”üµÙœGê€X$Õ›â’òndynVìbuû–B¾­•#æâel²î¢Ÿ”õ»G<äU•ÅsMr`': -2 [ 388.652826][ T40] audit: type=1400 audit(2000000069.983:97950): avc: denied { map } for pid=22871 comm="syz.7.4949" path="socket:[118258]" dev="sockfs" ino=118258 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 388.742019][T22879] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd0": -EINTR [ 388.826894][ T40] audit: type=1400 audit(2000000070.152:97951): avc: denied { connect } for pid=22883 comm="syz.0.4952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 388.846272][ T40] audit: type=1400 audit(2000000070.152:97952): avc: denied { ioctl } for pid=22883 comm="syz.0.4952" path="socket:[118341]" dev="sockfs" ino=118341 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 388.868404][T22886] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4953'. [ 388.871905][T22886] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4953'. [ 388.923263][T22894] ubi: mtd0 is already attached to ubi0 [ 389.014031][T22904] syzkaller0: entered promiscuous mode [ 389.015997][T22904] syzkaller0: entered allmulticast mode [ 389.038166][T22899] openvswitch: netlink: Geneve option length err (len 260, max 255). [ 389.044151][ T40] audit: type=1400 audit(2000000070.348:97953): avc: denied { getopt } for pid=22898 comm="syz.9.4957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 389.099545][T22909] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4959'. [ 389.550920][ T40] audit: type=1326 audit(2000000070.816:97954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22928 comm="syz.7.4967" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3b98f7c9 code=0x7ffc0000 [ 389.560922][ T40] audit: type=1326 audit(2000000070.816:97955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22928 comm="syz.7.4967" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3b98f7c9 code=0x7ffc0000 [ 389.635252][T22931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=22931 comm=syz.9.4964 [ 389.734023][T22936] syzkaller0: entered promiscuous mode [ 389.736471][T22936] syzkaller0: entered allmulticast mode [ 389.812081][ T5939] Bluetooth: hci3: unexpected event for opcode 0x0809 [ 389.819897][ T24] usb 12-1: new high-speed USB device number 28 using dummy_hcd [ 389.980278][ T24] usb 12-1: Using ep0 maxpacket: 32 [ 389.985645][ T24] usb 12-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 389.990449][ T24] usb 12-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 389.995531][ T24] usb 12-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8448, setting to 1024 [ 390.000428][ T24] usb 12-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 390.012065][ T24] usb 12-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 390.016160][ T24] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.019699][ T24] usb 12-1: Product: syz [ 390.021658][ T24] usb 12-1: Manufacturer: syz [ 390.023937][ T24] usb 12-1: SerialNumber: syz [ 390.032635][ C2] imon 12-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 390.039811][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/input/input66 [ 390.065222][ T49] usb 14-1: new high-speed USB device number 40 using dummy_hcd [ 390.236214][ T49] usb 14-1: Using ep0 maxpacket: 16 [ 390.239689][ T49] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 7 [ 390.243332][ T49] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 9272, setting to 1024 [ 390.250817][ T49] usb 14-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 390.253907][ T49] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.256572][ T49] usb 14-1: Product: syz [ 390.258088][ T49] usb 14-1: Manufacturer: syz [ 390.259686][ T49] usb 14-1: SerialNumber: syz [ 390.262863][ T49] usb 14-1: config 0 descriptor?? [ 390.268236][ T24] imon 12-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 390.271344][ T49] hub 14-1:0.0: bad descriptor, ignoring hub [ 390.273433][ T49] hub 14-1:0.0: probe with driver hub failed with error -5 [ 390.275899][ T24] (id 0x00) [ 390.279217][ T49] input: syz syz as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/input/input68 [ 390.332469][ T24] rc_core: IR keymap rc-imon-pad not found [ 390.334750][ T24] Registered IR keymap rc-empty [ 390.336471][ T24] imon 12-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 390.339955][ T24] imon 12-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 390.493719][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0 [ 390.504992][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0/input67 [ 390.513283][ T24] imon 12-1:155.0: iMON device (15c2:ffdc, intf0) on usb<12:28> initialized [ 390.680850][T22929] imon:vfd_write: invalid payload size [ 390.732757][ T49] usb 12-1: USB disconnect, device number 28 [ 390.818409][T22946] lo speed is unknown, defaulting to 1000 [ 390.823194][T22946] lo speed is unknown, defaulting to 1000 [ 390.826775][T22946] lo speed is unknown, defaulting to 1000 [ 390.906585][T22946] infiniband syz1: set active [ 390.909864][ T5936] lo speed is unknown, defaulting to 1000 [ 390.909880][T22946] infiniband syz1: added lo [ 390.949330][T22946] RDS/IB: syz1: added [ 390.951834][T22946] smc: adding ib device syz1 with port count 1 [ 390.955101][T22946] smc: ib device syz1 port 1 has no pnetid [ 390.961104][ T5936] lo speed is unknown, defaulting to 1000 [ 390.968360][T22946] lo speed is unknown, defaulting to 1000 [ 391.066805][T22946] lo speed is unknown, defaulting to 1000 [ 391.166043][T22946] lo speed is unknown, defaulting to 1000 [ 391.293657][T22946] lo speed is unknown, defaulting to 1000 [ 391.362473][T22952] QAT: Invalid ioctl -2144835806 [ 391.409347][T22955] openvswitch: netlink: IP tunnel dst address not specified [ 391.427926][T22946] lo speed is unknown, defaulting to 1000 [ 391.452706][T22957] netfs: Couldn't get user pages (rc=-14) [ 391.525732][T22946] lo speed is unknown, defaulting to 1000 [ 391.623063][T22946] lo speed is unknown, defaulting to 1000 [ 391.683001][T22966] efs: device does not support 512 byte blocks [ 391.685638][T22966] device does not support 512 byte blocks [ 391.685638][T22966] [ 391.731472][T22946] lo speed is unknown, defaulting to 1000 [ 391.753152][T22968] syzkaller0: entered promiscuous mode [ 391.759684][T22968] syzkaller0: entered allmulticast mode [ 392.050476][T22986] __nla_validate_parse: 2 callbacks suppressed [ 392.050487][T22986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4985'. [ 392.057604][T22986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4985'. [ 392.060565][T22986] validate_nla: 27 callbacks suppressed [ 392.060574][T22986] netlink: 'syz.0.4985': attribute type 11 has an invalid length. [ 392.065771][T22986] netlink: 'syz.0.4985': attribute type 7 has an invalid length. [ 392.145910][T23000] hfsplus: unable to find HFS+ superblock [ 392.178618][ T5939] Bluetooth: hci3: unexpected event for opcode 0x041c [ 392.408755][T22267] lo: left allmulticast mode [ 392.505914][T23008] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 392.552268][T15778] bridge_slave_0: left allmulticast mode [ 392.556867][T15778] bridge_slave_0: left promiscuous mode [ 392.558823][T15778] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.565159][ T5942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 392.574276][ T5942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 392.581155][ T5942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 392.585325][ T5942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 392.588620][ T5942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 392.955144][T15778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.961359][T15778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.967421][T15778] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 392.978183][T15778] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 392.984294][T15778] bond0 (unregistering): Released all slaves [ 392.990815][T15778] bond1 (unregistering): Released all slaves [ 392.997442][T15778] bond2 (unregistering): Released all slaves [ 393.024741][T23010] lo speed is unknown, defaulting to 1000 [ 393.090533][T15778] tipc: Disabling bearer [ 393.102900][T15778] tipc: Left network mode [ 393.120015][ T40] kauditd_printk_skb: 117 callbacks suppressed [ 393.120032][ T40] audit: type=1400 audit(2000000074.164:98073): avc: denied { getopt } for pid=23012 comm="syz.0.4993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 393.248431][ T40] audit: type=1400 audit(2000000074.276:98074): avc: denied { append } for pid=23027 comm="syz.0.4999" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 393.302083][T23032] syzkaller0: entered promiscuous mode [ 393.315688][T23032] syzkaller0: entered allmulticast mode [ 393.348734][T23010] chnl_net:caif_netlink_parms(): no params data found [ 393.355800][ T40] audit: type=1400 audit(2000000074.379:98075): avc: denied { node_bind } for pid=23037 comm="syz.0.5002" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 393.452573][ T5939] Bluetooth: hci0: unexpected event for opcode 0x080f [ 393.456417][T23050] overlayfs: missing 'lowerdir' [ 393.463911][T15778] hsr_slave_0: left promiscuous mode [ 393.466314][T15778] hsr_slave_1: left promiscuous mode [ 393.468628][T15778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.471127][T15778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.474054][T15778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.476638][T15778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.493282][T23055] netlink: 'syz.7.5007': attribute type 1 has an invalid length. [ 393.500857][T15778] veth1_macvtap: left promiscuous mode [ 393.502756][T15778] veth0_macvtap: left promiscuous mode [ 393.504879][T15778] veth1_vlan: left promiscuous mode [ 393.506752][T15778] veth0_vlan: left promiscuous mode [ 393.609257][T23057] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5007'. [ 393.994699][T15778] team0 (unregistering): Port device team_slave_1 removed [ 394.030326][T15778] team0 (unregistering): Port device team_slave_0 removed [ 394.315132][T15410] usb 14-1: USB disconnect, device number 40 [ 394.393376][T23056] bond4: (slave gretap1): making interface the new active one [ 394.397128][T23056] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 394.405420][T23057] bond4 (unregistering): (slave gretap1): Releasing active interface [ 394.414989][T23057] bond4 (unregistering): Released all slaves [ 394.439373][T23010] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.442356][T23010] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.445230][T23010] bridge_slave_0: entered allmulticast mode [ 394.448084][T23010] bridge_slave_0: entered promiscuous mode [ 394.456120][T23010] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.458989][T23010] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.461627][T23010] bridge_slave_1: entered allmulticast mode [ 394.466874][T23010] bridge_slave_1: entered promiscuous mode [ 394.489255][T23010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.501070][T23010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.525823][T23010] team0: Port device team_slave_0 added [ 394.530919][T23010] team0: Port device team_slave_1 added [ 394.557762][T23010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.560852][T23010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.570359][T23010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.576495][ T40] audit: type=1400 audit(2000000075.520:98076): avc: denied { ioctl } for pid=23064 comm="syz.7.5010" path="socket:[116694]" dev="sockfs" ino=116694 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 394.577922][T23010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.590916][T23010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.599725][ T40] audit: type=1400 audit(2000000075.548:98077): avc: denied { ioctl } for pid=23064 comm="syz.7.5010" path="socket:[117592]" dev="sockfs" ino=117592 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 394.612021][T23010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.624402][ T40] audit: type=1400 audit(2000000075.548:98078): avc: denied { write } for pid=23064 comm="syz.7.5010" path="socket:[116694]" dev="sockfs" ino=116694 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 394.634884][ T40] audit: type=1400 audit(2000000075.576:98079): avc: denied { mounton } for pid=23070 comm="syz.7.5012" path="/proc/534/cgroup" dev="proc" ino=117601 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 394.642754][T23010] hsr_slave_0: entered promiscuous mode [ 394.645873][ T40] audit: type=1400 audit(2000000075.576:98080): avc: denied { remount } for pid=23070 comm="syz.7.5012" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 394.647919][T23010] hsr_slave_1: entered promiscuous mode [ 394.661356][T23010] debugfs: 'hsr0' already exists in 'hsr' [ 394.664053][T23010] Cannot create hsr debugfs directory [ 394.728198][T23069] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5011'. [ 394.763029][T23071] lo speed is unknown, defaulting to 1000 [ 394.769606][ T5939] Bluetooth: hci1: command tx timeout [ 394.786027][T23079] sp0: Synchronizing with TNC [ 394.799595][T23079] [U] è [ 394.974942][T23090] Invalid source name [ 394.976912][T23090] UBIFS error (pid: 23090): cannot open "/dev/sg0", error -22 [ 394.978846][T23091] Invalid source name [ 394.983144][T23091] UBIFS error (pid: 23091): cannot open "/dev/sg0", error -22 [ 395.034022][ T40] audit: type=1400 audit(2000000075.951:98081): avc: denied { bind } for pid=23092 comm="syz.7.5017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 395.043248][ T40] audit: type=1400 audit(2000000075.951:98082): avc: denied { listen } for pid=23092 comm="syz.7.5017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 395.223377][T23097] netlink: 348 bytes leftover after parsing attributes in process `syz.0.5018'. [ 395.366370][T23010] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 395.374529][T23010] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 395.378948][T23010] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 395.383680][T23010] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 395.408141][T23010] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.411075][T23010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.434973][T23105] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5019'. [ 395.458330][T23105] bond2: option primary_reselect: invalid value (133) [ 395.465616][T23105] bond2 (unregistering): Released all slaves [ 395.490076][T23010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.501582][T19693] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.517412][T23010] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.529495][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.531908][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.540048][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.544016][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.704706][T23010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.871049][T15410] usb 14-1: new high-speed USB device number 41 using dummy_hcd [ 395.887824][T23010] veth0_vlan: entered promiscuous mode [ 395.895299][T23010] veth1_vlan: entered promiscuous mode [ 395.914825][T23010] veth0_macvtap: entered promiscuous mode [ 395.918879][T23010] veth1_macvtap: entered promiscuous mode [ 395.927628][T23010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.932184][T23010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.940283][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.943183][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.947688][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.950828][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.959060][T23121] SELinux: failed to load policy [ 395.992171][T19683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.997902][T19683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.012493][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.015789][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.056332][T15410] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 396.059985][T15410] usb 14-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 396.064828][T15410] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 396.068612][T15410] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 396.072343][T15410] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 396.080494][T15410] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 396.083685][T15410] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 396.088688][T23131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5023'. [ 396.093186][T15410] usb 14-1: Product: syz [ 396.094883][T15410] usb 14-1: Manufacturer: syz [ 396.099435][T23133] misc userio: No port type given on /dev/userio [ 396.106099][T15410] cdc_wdm 14-1:1.0: skipping garbage [ 396.108351][T15410] cdc_wdm 14-1:1.0: skipping garbage [ 396.117328][T15410] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 396.119011][T23133] ubi: mtd0 is already attached to ubi0 [ 396.119397][T15410] cdc_wdm 14-1:1.0: Unknown control protocol [ 396.128701][T23133] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 396.146591][T23134] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 396.150392][T23134] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 396.155116][T23134] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 396.228623][T23138] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 396.358248][T23144] binder: 23143:23144 ioctl 3ba0 200000000040 returned -22 [ 396.406764][T15410] usb 14-1: USB disconnect, device number 41 [ 396.416264][T23146] syzkaller0: entered promiscuous mode [ 396.421245][T23146] syzkaller0: entered allmulticast mode [ 396.492938][T23148] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5030'. [ 396.497887][T23150] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 396.532900][T23155] netlink: 'syz.7.5032': attribute type 17 has an invalid length. [ 396.536469][T23155] netlink: 5 bytes leftover after parsing attributes in process `syz.7.5032'. [ 396.539653][T23155] macvtap0: entered allmulticast mode [ 396.541630][T23155] veth0_macvtap: entered allmulticast mode [ 396.545525][T23155] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 396.572593][T23155] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5032'. [ 396.597767][T23160] binder: BINDER_SET_CONTEXT_MGR already set [ 396.600554][T23160] binder: 23158:23160 ioctl 4018620d 2000000000c0 returned -16 [ 396.799979][T23187] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 396.900151][T23195] team0: Device is already in use. [ 396.929374][T15410] usb 12-1: new high-speed USB device number 29 using dummy_hcd [ 396.993406][ T5939] Bluetooth: hci1: command tx timeout [ 397.084802][T23206] program syz.9.5047 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 397.089845][T23206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.093222][T23206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.101810][T15410] usb 12-1: Using ep0 maxpacket: 16 [ 397.107837][T15410] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 397.112747][T15410] usb 12-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 397.116118][T15410] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.119189][T15410] usb 12-1: Product: syz [ 397.120591][T15410] usb 12-1: Manufacturer: syz [ 397.122668][T15410] usb 12-1: SerialNumber: syz [ 397.125523][T15410] usb 12-1: config 0 descriptor?? [ 397.131392][T15410] em28xx 12-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 397.134862][T15410] em28xx 12-1:0.0: DVB interface 0 found: bulk [ 397.320454][T23220] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 397.367631][ T6077] usb 14-1: new low-speed USB device number 42 using dummy_hcd [ 397.370544][T23223] nbd: must specify at least one socket [ 397.475518][T23230] __nla_validate_parse: 2 callbacks suppressed [ 397.475533][T23230] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5053'. [ 397.482256][T23230] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5053'. [ 397.540564][ T6077] usb 14-1: config 0 has an invalid interface number: 55 but max is 0 [ 397.544217][ T6077] usb 14-1: config 0 has no interface number 0 [ 397.547003][ T6077] usb 14-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 397.552041][ T6077] usb 14-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 397.556607][ T6077] usb 14-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 397.561844][ T6077] usb 14-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 397.566894][ T6077] usb 14-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 397.581405][ T6077] usb 14-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 397.587188][ T6077] usb 14-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 397.591234][ T6077] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.597707][ T6077] usb 14-1: config 0 descriptor?? [ 397.600799][T23207] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 397.604192][T23207] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 397.610109][ T6077] ldusb 14-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 397.777613][T15410] em28xx 12-1:0.0: unknown em28xx chip ID (0) [ 397.829807][ T7558] usb 14-1: USB disconnect, device number 42 [ 397.840802][ T7558] ldusb 14-1:0.55: LD USB Device #0 now disconnected [ 398.215153][T15410] em28xx 12-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 398.220197][T15410] em28xx 12-1:0.0: board has no eeprom [ 398.283143][T23236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5055'. [ 398.289492][ T843] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 398.291135][T23173] em28xx 12-1:0.0: write to i2c device at 0xfffe failed with unknown error (status=1) [ 398.460912][ T843] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 398.463653][ T843] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 398.466845][ T843] usb 5-1: config 0 interface 0 has no altsetting 0 [ 398.476537][ T843] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 398.479600][ T843] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 398.482270][ T843] usb 5-1: Product: syz [ 398.483687][ T843] usb 5-1: Manufacturer: syz [ 398.485240][ T843] usb 5-1: SerialNumber: syz [ 398.488058][ T843] usb 5-1: config 0 descriptor?? [ 398.491255][ T843] hub 5-1:0.0: bad descriptor, ignoring hub [ 398.493232][ T843] hub 5-1:0.0: probe with driver hub failed with error -5 [ 398.496972][ T843] usb 5-1: selecting invalid altsetting 0 [ 398.516888][T23238] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5056'. [ 398.563469][T23243] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5057'. [ 398.565366][ T6019] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 398.670645][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 398.670657][ T40] audit: type=1400 audit(2000000079.346:98096): avc: denied { write } for pid=23251 comm="syz.9.5060" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 398.714719][ T6019] usb 9-1: device descriptor read/64, error -71 [ 398.739668][ T40] audit: type=1400 audit(2000000079.421:98097): avc: denied { view } for pid=23255 comm="syz.9.5062" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 398.779053][T15410] em28xx 12-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 398.782465][T15410] em28xx 12-1:0.0: dvb set to bulk mode. [ 398.785671][ T7558] em28xx 12-1:0.0: Binding DVB extension [ 398.862486][T23263] binder: 23262:23263 unknown command 2082112775 [ 398.864743][T23263] binder: 23262:23263 ioctl c0306201 200000000080 returned -22 [ 398.914864][ T24] usb 12-1: USB disconnect, device number 29 [ 398.917531][ T24] em28xx 12-1:0.0: Disconnecting em28xx [ 398.951669][ T7558] em28xx 12-1:0.0: Registering input extension [ 398.952782][ T5939] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 398.956780][ T24] em28xx 12-1:0.0: Closing input extension [ 398.963621][ T40] audit: type=1400 audit(2000000079.626:98098): avc: denied { module_load } for pid=23265 comm="syz.9.5065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 398.963767][T23266] Invalid ELF header type: 3 != 1 [ 398.971449][ T6019] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 398.971927][T23267] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5065'. [ 398.972026][T23267] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5065'. [ 398.974437][ T24] em28xx 12-1:0.0: Freeing device [ 399.121222][ T6019] usb 9-1: device descriptor read/64, error -71 [ 399.132115][T23233] usb 5-1: reset high-speed USB device number 14 using dummy_hcd [ 399.217283][ T5939] Bluetooth: hci1: command tx timeout [ 399.239181][ T6019] usb usb9-port1: attempt power cycle [ 399.485577][T23290] QAT: Device 2 not found [ 399.543724][T23233] usb 5-1: failed to restore interface 0 altsetting 251 (error=-71) [ 399.550424][ T49] usb 5-1: USB disconnect, device number 14 [ 399.624184][ T6019] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 399.656384][ T6019] usb 9-1: device descriptor read/8, error -71 [ 399.912265][ T6019] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 399.944980][ T6019] usb 9-1: device descriptor read/8, error -71 [ 400.062064][ T6019] usb usb9-port1: unable to enumerate USB device [ 400.196156][T23294] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5072'. [ 400.271871][T23300] binder: 23299:23300 ioctl c0306201 200000000080 returned -14 [ 400.277611][T23300] binder: 23299:23300 ioctl c0481273 2000000002c0 returned -22 [ 400.282349][T23300] binder: 23299:23300 ioctl 1263 200000000240 returned -22 [ 400.390287][ T40] audit: type=1400 audit(2000000080.964:98099): avc: denied { transfer } for pid=23299 comm="syz.9.5074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 400.471609][T23324] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5082'. [ 400.475010][T23324] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5082'. [ 400.517645][ T40] audit: type=1400 audit(2000000081.076:98100): avc: denied { name_bind } for pid=23330 comm="syz.7.5084" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 400.526498][T23331] QAT: Device 2 not found [ 400.575785][T23331] macvtap0: left allmulticast mode [ 400.578028][T23331] veth0_macvtap: left allmulticast mode [ 400.582741][T23331] bridge1: left allmulticast mode [ 400.586129][T23331] ip6gretap1: left allmulticast mode [ 400.712447][T23346] fuse: Bad value for 'fd' [ 400.748478][T23349] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 400.750675][T23349] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 400.753925][T23349] vhci_hcd vhci_hcd.0: Device attached [ 400.765543][T23347] lo speed is unknown, defaulting to 1000 [ 400.767968][T23349] vhci_hcd vhci_hcd.0: port 0 already used [ 400.772760][T23350] vhci_hcd: connection closed [ 400.772994][T15786] vhci_hcd: stop threads [ 400.775973][T15786] vhci_hcd: release socket [ 400.777415][T15786] vhci_hcd: disconnect device [ 401.398725][T23360] openvswitch: netlink: Flow actions attr not present in new flow. [ 401.441366][ T5939] Bluetooth: hci1: command tx timeout [ 401.445056][T23364] tmpfs: Unknown parameter 'nr_inoKYñ(…Mes' [ 401.452715][T23363] fuse: Bad value for 'user_id' [ 401.454895][T23363] fuse: Bad value for 'user_id' [ 401.539253][T23368] netlink: 'syz.4.5096': attribute type 1 has an invalid length. [ 401.734372][ T40] audit: type=1400 audit(2000000082.217:98101): avc: denied { sqpoll } for pid=23372 comm="syz.9.5099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 401.884294][T23383] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23383 comm=syz.4.5101 [ 401.916180][T23387] QAT: failed to copy from user cfg_data. [ 401.956097][ T40] audit: type=1400 audit(2000000082.432:98102): avc: denied { map } for pid=23388 comm="syz.7.5098" path="socket:[122932]" dev="sockfs" ino=122932 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 401.963677][ T40] audit: type=1400 audit(2000000082.432:98103): avc: denied { read accept } for pid=23388 comm="syz.7.5098" path="socket:[122932]" dev="sockfs" ino=122932 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 402.095545][ T40] audit: type=1400 audit(2000000082.563:98104): avc: denied { mounton } for pid=23396 comm="syz.7.5105" path="/bus" dev="bpf" ino=120300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 402.097964][T23397] overlayfs: upper fs does not support tmpfile. [ 402.170779][ T40] audit: type=1400 audit(2000000082.629:98105): avc: denied { append } for pid=23408 comm="syz.0.5108" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 402.178412][T23410] random: crng reseeded on system resumption [ 402.288937][T23419] xt_CONNSECMARK: invalid mode: 0 [ 402.327096][T23423] overlay: Bad value for 'workdir' [ 402.352652][T23425] openvswitch: netlink: Key type 51 is out of range max 32 [ 402.358966][T23425] netlink: 'syz.9.5115': attribute type 21 has an invalid length. [ 402.375177][T23431] tipc: Failed to obtain node identity [ 402.377262][T23431] tipc: Enabling of bearer rejected, failed to enable media [ 402.467821][ T24] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 402.629575][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 402.634004][ T24] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 402.637798][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.643055][ T24] usb 5-1: config 0 descriptor?? [ 402.645863][T23410] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 402.671944][ T6019] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 402.839701][T23473] 9pnet_fd: p9_fd_create_tcp (23473): problem connecting socket to 127.0.0.1 [ 402.848961][T23475] lo speed is unknown, defaulting to 1000 [ 402.852426][ T6019] usb 9-1: Using ep0 maxpacket: 32 [ 402.855713][ T6019] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 402.859030][ T6019] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 402.861808][ T6019] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 402.871181][ T6019] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 402.874413][ T6019] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 402.877647][ T6019] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 402.882146][ T6019] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 402.886186][ T6019] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.890300][ T6019] usb 9-1: config 0 descriptor?? [ 403.123412][ T6019] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 403.132678][ T6019] usb 9-1: USB disconnect, device number 8 [ 403.136583][ T6019] usblp0: removed [ 403.297628][T23410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.301943][T23410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.308034][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 403.315516][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 403.323852][ T24] usb 5-1: USB disconnect, device number 15 [ 403.461878][ T6019] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 403.580121][T23486] configfs: Unknown parameter ''' [ 403.601297][ T6019] usb 9-1: device descriptor read/64, error -71 [ 403.871155][T23493] xt_cgroup: invalid path, errno=-2 [ 403.871249][T23494] xt_cgroup: invalid path, errno=-2 [ 403.878855][ T6019] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 403.880143][T23495] overlayfs: conflicting lowerdir path [ 404.028668][ T6019] usb 9-1: device descriptor read/64, error -71 [ 404.140145][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 404.140157][ T40] audit: type=1400 audit(2000000084.471:98114): avc: denied { setattr } for pid=23518 comm="syz.0.5139" name="RXRPC" dev="sockfs" ino=123235 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 404.154426][ T40] audit: type=1400 audit(2000000084.480:98115): avc: denied { read } for pid=23518 comm="syz.0.5139" path="socket:[123235]" dev="sockfs" ino=123235 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 404.158061][ T6019] usb usb9-port1: attempt power cycle [ 404.180545][T23522] __nla_validate_parse: 5 callbacks suppressed [ 404.180556][T23522] netlink: 64 bytes leftover after parsing attributes in process `syz.9.5140'. [ 404.371890][T23530] lo speed is unknown, defaulting to 1000 [ 404.422534][ T5942] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 404.426222][ T5942] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 404.429441][ T5942] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 404.432873][ T5942] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 404.436514][ T5942] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 404.499080][T23532] lo speed is unknown, defaulting to 1000 [ 404.520534][ T6019] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 404.542238][ T6019] usb 9-1: device descriptor read/8, error -71 [ 404.795779][T23532] chnl_net:caif_netlink_parms(): no params data found [ 404.819896][ T6019] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 404.842249][ T6019] usb 9-1: device descriptor read/8, error -71 [ 404.860608][T23532] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.863702][T23532] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.866090][T23532] bridge_slave_0: entered allmulticast mode [ 404.869348][T23532] bridge_slave_0: entered promiscuous mode [ 404.872660][T23532] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.875516][T23532] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.877944][T23532] bridge_slave_1: entered allmulticast mode [ 404.880738][T23532] bridge_slave_1: entered promiscuous mode [ 404.897864][T23532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.902695][T23532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.939381][T23532] team0: Port device team_slave_0 added [ 404.944647][T23532] team0: Port device team_slave_1 added [ 404.969317][T23532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.972438][ T40] audit: type=1400 audit(2000000085.247:98116): avc: denied { create } for pid=23543 comm="syz.7.5144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 404.973956][ T6019] usb usb9-port1: unable to enumerate USB device [ 404.983683][T23532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.995764][T23532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.002365][T23532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.005506][T23532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.017482][T23532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.051843][T23546] syz.7.5145: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 405.059030][T23532] hsr_slave_0: entered promiscuous mode [ 405.062849][T23532] hsr_slave_1: entered promiscuous mode [ 405.066317][T23532] debugfs: 'hsr0' already exists in 'hsr' [ 405.068906][T23532] Cannot create hsr debugfs directory [ 405.273184][T23548] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 405.275861][T23547] [U] J"—E:ÀÆ" [ 405.316889][T23550] tipc: New replicast peer: 255.255.255.255 [ 405.321753][T23550] tipc: Enabled bearer , priority 10 [ 405.325067][T23550] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5147'. [ 405.328026][T23550] tipc: Disabling bearer [ 405.332105][T23550] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5147'. [ 405.374845][T23552] netlink: 'syz.7.5148': attribute type 21 has an invalid length. [ 405.377580][T23553] usb usb7: usbfs: process 23553 (syz.7.5148) did not claim interface 2 before use [ 405.378029][T23552] netlink: 152 bytes leftover after parsing attributes in process `syz.7.5148'. [ 405.552904][T23532] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 405.568283][T23532] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 405.582455][T23532] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 405.590601][T23532] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 405.614954][T23532] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.617763][T23532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.620303][T23532] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.622728][T23532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.661496][T23532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.677040][T19687] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.683686][T19687] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.710106][T23532] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.724708][T15786] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.727365][T15786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.739946][T15786] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.742366][T15786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.808232][T23587] bond1: Unable to set down delay as MII monitoring is disabled [ 405.812951][T23587] bond1 (unregistering): Released all slaves [ 405.829552][T23590] tipc: Enabling of bearer rejected, failed to enable media [ 405.832787][T23590] syzkaller0: entered promiscuous mode [ 405.834698][T23590] syzkaller0: entered allmulticast mode [ 405.917498][T23532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.994806][T23601] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 406.110868][T23532] veth0_vlan: entered promiscuous mode [ 406.118998][T23532] veth1_vlan: entered promiscuous mode [ 406.140537][T23532] veth0_macvtap: entered promiscuous mode [ 406.154453][T23532] veth1_macvtap: entered promiscuous mode [ 406.193912][T23532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.203993][T23532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.213616][T19683] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.217414][T19683] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.223761][T19683] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.227928][T19683] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.277102][ T40] audit: type=1400 audit(2000000086.473:98117): avc: denied { read write } for pid=23616 comm="syz.4.5164" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 406.292358][ T40] audit: type=1400 audit(2000000086.473:98118): avc: denied { open } for pid=23616 comm="syz.4.5164" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 406.294315][T19687] team0: left allmulticast mode [ 406.302509][T19687] team_slave_0: left allmulticast mode [ 406.304330][T19687] team_slave_1: left allmulticast mode [ 406.313543][T19687] vlan0: left allmulticast mode [ 406.315174][T19687] dummy0: left allmulticast mode [ 406.317807][T19687] team0: left promiscuous mode [ 406.319410][T19687] team_slave_0: left promiscuous mode [ 406.321292][T19687] team_slave_1: left promiscuous mode [ 406.323152][T19687] vlan0: left promiscuous mode [ 406.324849][T19687] dummy0: left promiscuous mode [ 406.326759][T19687] bridge0: port 3(team0) entered disabled state [ 406.347492][T19687] bridge_slave_1: left allmulticast mode [ 406.350251][T19687] bridge_slave_1: left promiscuous mode [ 406.352674][T19687] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.356796][T19687] bridge_slave_0: left allmulticast mode [ 406.359013][T19687] bridge_slave_0: left promiscuous mode [ 406.361672][T19687] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.669632][ T5939] Bluetooth: hci5: command tx timeout [ 407.081580][T19687] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.087280][T19687] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.091484][T19687] .` (unregistering): (slave batadv0): Releasing backup interface [ 407.095295][T19687] .` (unregistering): (slave dummy0): Releasing backup interface [ 407.105104][T19687] .` (unregistering): Released all slaves [ 407.111932][T19687] bond1 (unregistering): Released all slaves [ 407.147665][T19687] bond0 (unregistering): Released all slaves [ 407.163279][T23631] tipc: Enabling of bearer rejected, failed to enable media [ 407.167924][T23632] syzkaller0: entered promiscuous mode [ 407.169861][T23632] syzkaller0: entered allmulticast mode [ 407.195258][T23639] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5167'. [ 407.309396][T23640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5167'. [ 407.314810][T19693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.317638][T19693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.329691][T19687] tipc: Left network mode [ 407.353404][T19687] IPVS: stopping backup sync thread 18212 ... [ 407.357679][T23640] tipc: Started in network mode [ 407.361499][T23640] tipc: Node identity ac14142f, cluster identity 4711 [ 407.365252][T23640] tipc: New replicast peer: 0.0.0.0 [ 407.370837][T23640] tipc: Enabled bearer , priority 10 [ 407.382074][T23642] overlayfs: failed to resolve './file0': -2 [ 407.389942][T23642] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 407.393269][T19693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.399334][T19693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.474375][ T40] audit: type=1400 audit(2000000087.586:98119): avc: denied { shutdown } for pid=23655 comm="syz.9.5142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 407.501906][T23646] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.611444][T23646] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.694561][ T40] audit: type=1400 audit(2000000087.791:98120): avc: denied { mount } for pid=23651 comm="syz.7.5170" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 407.695278][T23646] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.697421][T23652] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 407.795869][T23646] netdevsim netdevsim0 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.905434][T15786] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.916984][ T60] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.952234][ T60] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.968239][ T60] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.047113][T19687] hsr_slave_0: left promiscuous mode [ 408.055523][T19687] hsr_slave_1: left promiscuous mode [ 408.058586][T19687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.062612][T19687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.101011][T19687] team0 (unregistering): Port device vlan0 removed [ 408.281604][ T40] audit: type=1400 audit(2000000088.343:98121): avc: denied { unmount } for pid=20582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 408.481699][T19687] team0 (unregistering): Port device team_slave_1 removed [ 408.514124][T19687] team0 (unregistering): Port device team_slave_0 removed [ 408.803304][ T40] audit: type=1400 audit(2000000088.830:98122): avc: denied { connect } for pid=23712 comm="syz.9.5183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 408.811569][T23713] loop4: detected capacity change from 0 to 2560 [ 408.820751][ T6136] buffer_io_error: 54 callbacks suppressed [ 408.820767][ T6136] Buffer I/O error on dev loop4, logical block 0, async page read [ 408.841429][ T6136] Buffer I/O error on dev loop4, logical block 0, async page read [ 408.845141][ T6136] Buffer I/O error on dev loop4, logical block 0, async page read [ 408.848598][ T6136] Buffer I/O error on dev loop4, logical block 0, async page read [ 408.853935][ T6136] Buffer I/O error on dev loop4, logical block 0, async page read [ 408.885481][ T5939] Bluetooth: hci5: command tx timeout [ 408.911758][T23686] tipc: Enabling of bearer rejected, failed to enable media [ 408.923124][T23691] syzkaller0: entered promiscuous mode [ 408.925874][T23691] syzkaller0: entered allmulticast mode [ 408.936976][ T9] tipc: Node number set to 2886997039 [ 408.960760][T23718] netlink: 'syz.7.5185': attribute type 1 has an invalid length. [ 409.006754][T23718] bond4: entered promiscuous mode [ 409.009337][T23718] 8021q: adding VLAN 0 to HW filter on device bond4 [ 409.019146][T23718] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5185'. [ 409.023690][T23718] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5185'. [ 409.198645][T23747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.207200][T23747] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5192'. [ 409.207379][T23744] Failed to initialize the IGMP autojoin socket (err -2) [ 409.297424][T23754] netlink: 'syz.7.5194': attribute type 39 has an invalid length. [ 409.515250][T23763] syzkaller0: entered promiscuous mode [ 409.517829][T23763] syzkaller0: entered allmulticast mode [ 409.609721][ T6001] usb 14-1: new high-speed USB device number 43 using dummy_hcd [ 409.771319][ T6001] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.774926][ T6001] usb 14-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 409.778073][ T6001] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 409.781880][ T6001] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.786265][ T6001] usb 14-1: config 0 descriptor?? [ 410.056109][T23779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5202'. [ 410.059920][T23779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5202'. [ 410.062963][T23779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5202'. [ 410.069776][T23779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5202'. [ 410.073965][T23779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5202'. [ 410.077933][T23779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5202'. [ 410.082426][T23779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5202'. [ 410.086639][T23779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5202'. [ 410.090811][T23779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5202'. [ 410.095075][T23779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5202'. [ 410.147436][ T40] audit: type=1400 audit(2000000090.092:98123): avc: denied { getopt } for pid=23783 comm="syz.4.5203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 410.281551][T23800] tipc: Enabling of bearer rejected, failed to enable media [ 410.285156][T23800] syzkaller0: entered promiscuous mode [ 410.287238][T23800] syzkaller0: entered allmulticast mode [ 410.359499][ T5939] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 410.393020][ T9] usb 14-1: USB disconnect, device number 43 [ 410.418849][T23813] netlink: 'syz.9.5212': attribute type 1 has an invalid length. [ 410.518660][ T6001] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 410.525716][T23822] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 410.620216][ T40] audit: type=1400 audit(2000000090.532:98124): avc: denied { mount } for pid=23830 comm="syz.9.5219" name="/" dev="hugetlbfs" ino=125965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 410.620742][T23831] hugetlbfs: Bad value 'B%' for mount option 'size' [ 410.620742][T23831] [ 410.626000][ T40] audit: type=1400 audit(2000000090.532:98125): avc: denied { remount } for pid=23830 comm="syz.9.5219" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 410.657819][ T6001] usb 9-1: device descriptor read/64, error -71 [ 410.662833][ T40] audit: type=1400 audit(2000000090.569:98126): avc: denied { unmount } for pid=23532 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 410.689674][ T40] audit: type=1400 audit(2000000090.597:98127): avc: denied { listen } for pid=23833 comm="syz.9.5220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 410.914256][ T6001] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 410.963770][ T40] audit: type=1400 audit(2000000090.850:98128): avc: denied { write } for pid=23848 comm="syz.7.5226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 410.976954][T23850] binder: 23845:23850 unknown command 0 [ 410.979678][T23850] binder: 23845:23850 ioctl c0306201 200000000080 returned -22 [ 411.053292][ T6001] usb 9-1: device descriptor read/64, error -71 [ 411.108440][T23856] netlink: 'syz.7.5229': attribute type 10 has an invalid length. [ 411.112068][T23856] mac80211_hwsim hwsim51 wlan0: entered promiscuous mode [ 411.117273][ T5939] Bluetooth: hci5: command tx timeout [ 411.151906][T23858] netlink: 'syz.7.5230': attribute type 1 has an invalid length. [ 411.156756][ T40] audit: type=1400 audit(2000000091.028:98129): avc: denied { execute } for pid=23857 comm="syz.7.5230" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 411.171323][ T6001] usb usb9-port1: attempt power cycle [ 411.198899][T23860] openvswitch: netlink: Duplicate key (type 1). [ 411.324578][ T40] audit: type=1400 audit(2000000091.187:98130): avc: denied { read } for pid=23864 comm="syz.7.5233" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 411.332349][ T40] audit: type=1400 audit(2000000091.187:98131): avc: denied { open } for pid=23864 comm="syz.7.5233" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 411.340030][ T40] audit: type=1400 audit(2000000091.187:98132): avc: denied { map } for pid=23864 comm="syz.7.5233" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 411.534305][ T6001] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 411.556476][ T6001] usb 9-1: device descriptor read/8, error -71 [ 411.785500][T23889] netlink: 'syz.9.5234': attribute type 1 has an invalid length. [ 411.812874][ T6001] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 411.818437][T23889] bond1: entered promiscuous mode [ 411.821014][T23889] 8021q: adding VLAN 0 to HW filter on device bond1 [ 411.834155][ T6001] usb 9-1: device descriptor read/8, error -71 [ 411.951713][ T6001] usb usb9-port1: unable to enumerate USB device [ 412.370098][T23945] openvswitch: netlink: Unknown nsh attribute 0 [ 412.373112][T23945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.685617][T19687] [ 412.686760][T19687] ============================================ [ 412.689441][T19687] WARNING: possible recursive locking detected [ 412.692091][T19687] syzkaller #0 Not tainted [ 412.694287][T19687] -------------------------------------------- [ 412.697026][T19687] kworker/u32:35/19687 is trying to acquire lock: [ 412.699798][T19687] ffffe8fefc5b8cf8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x7d7/0xda0 [ 412.703811][T19687] SYZFAIL: failed to recv rpc [ 412.703811][T19687] but task is already holding lock: fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 412.707124][T19687] ffffe8fefc4c76a8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x6b0/0xda0 [ 412.711032][T19687] [ 412.711032][T19687] other info that might help us debug this: [ 412.714470][T19687] Possible unsafe locking scenario: [ 412.714470][T19687] [ 412.717696][T19687] CPU0 [ 412.719185][T19687] ---- [ 412.720646][T19687] lock(&pd_list->lock); [ 412.722547][T19687] lock(&pd_list->lock); [ 412.724464][T19687] [ 412.724464][T19687] *** DEADLOCK *** [ 412.724464][T19687] [ 412.727876][T19687] May be due to missing lock nesting notation [ 412.727876][T19687] [ 412.731431][T19687] 3 locks held by kworker/u32:35/19687: [ 412.733849][T19687] #0: ffff8880240db148 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 412.738776][T19687] #1: ffffc900046bfc90 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 412.743524][T19687] #2: ffffe8fefc4c76a8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x6b0/0xda0 [ 412.747732][T19687] [ 412.747732][T19687] stack backtrace: [ 412.750297][T19687] CPU: 3 UID: 0 PID: 19687 Comm: kworker/u32:35 Not tainted syzkaller #0 PREEMPT(full) [ 412.750318][T19687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 412.750331][T19687] Workqueue: pencrypt_parallel padata_parallel_worker [ 412.750351][T19687] Call Trace: [ 412.750358][T19687] [ 412.750365][T19687] dump_stack_lvl+0x116/0x1f0 [ 412.750385][T19687] print_deadlock_bug+0x285/0x3b0 [ 412.750405][T19687] __lock_acquire+0x136e/0x22f0 [ 412.750429][T19687] lock_acquire+0x179/0x330 [ 412.750449][T19687] ? padata_do_serial+0x7d7/0xda0 [ 412.750466][T19687] ? mark_held_locks+0x49/0x80 [ 412.750487][T19687] ? queue_work_on+0x12a/0x1f0 [ 412.750511][T19687] _raw_spin_lock+0x2e/0x40 [ 412.750536][T19687] ? padata_do_serial+0x7d7/0xda0 [ 412.750551][T19687] padata_do_serial+0x7d7/0xda0 [ 412.750571][T19687] pcrypt_aead_enc+0x5b/0x70 [ 412.750596][T19687] padata_parallel_worker+0x65/0xb0 [ 412.750613][T19687] process_one_work+0x9ba/0x1b20 [ 412.750639][T19687] ? __pfx_process_one_work+0x10/0x10 [ 412.750670][T19687] ? assign_work+0x1a0/0x250 [ 412.750691][T19687] worker_thread+0x6c8/0xf10 [ 412.750717][T19687] ? __pfx_worker_thread+0x10/0x10 [ 412.750738][T19687] kthread+0x3c5/0x780 [ 412.750758][T19687] ? __pfx_kthread+0x10/0x10 [ 412.750779][T19687] ? rcu_is_watching+0x12/0xc0 [ 412.750796][T19687] ? __pfx_kthread+0x10/0x10 [ 412.750817][T19687] ret_from_fork+0x855/0xa50 [ 412.750835][T19687] ? __pfx_ret_from_fork+0x10/0x10 [ 412.750853][T19687] ? __switch_to+0x7af/0x10d0 [ 412.750874][T19687] ? __pfx_kthread+0x10/0x10 [ 412.750896][T19687] ret_from_fork_asm+0x1a/0x30 [ 412.750925][T19687] [ 413.038440][T23796] delete_channel: no stack [ 413.040220][T23796] delete_channel: no stack [ 413.559639][ T24] SELinux: failure in sel_netif_sid_slow(), invalid network interface (81) [ 413.855731][T19687] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 413.859267][T19687] bridge2 (unregistering): left promiscuous mode [ 414.095791][T19687] bond0 (unregistering): Released all slaves [ 414.193496][T19687] bond1 (unregistering): Released all slaves [ 414.291331][T19687] bond2 (unregistering): Released all slaves [ 414.296654][T19687] bond3 (unregistering): Released all slaves [ 414.379537][T19687] bond4 (unregistering): Released all slaves [ 414.477522][T19687] tipc: Left network mode [ 414.737617][T19687] hsr_slave_0: left promiscuous mode [ 414.739729][T19687] hsr_slave_1: left promiscuous mode [ 415.654360][T19687] IPVS: stop unused estimator thread 0... [ 415.774807][T19687] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.836284][T19687] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.910177][T19687] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.964271][T19687] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.039411][T19687] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.122916][T19687] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.176445][T19687] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.230102][T19687] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.316514][T19687] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.380487][T19687] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.434634][T19687] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.476952][T19687] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.531615][T19687] bridge_slave_1: left allmulticast mode [ 416.533330][T19687] bridge_slave_1: left promiscuous mode [ 416.535037][T19687] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.538132][T19687] bridge_slave_0: left allmulticast mode [ 416.539854][T19687] bridge_slave_0: left promiscuous mode [ 416.541626][T19687] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.546022][T19687] bridge_slave_1: left allmulticast mode [ 416.547807][T19687] bridge_slave_1: left promiscuous mode [ 416.549630][T19687] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.552477][T19687] bridge_slave_0: left allmulticast mode [ 416.554341][T19687] bridge_slave_0: left promiscuous mode [ 416.556293][T19687] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.681872][T19687] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.685692][T19687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.689234][T19687] bond0 (unregistering): Released all slaves [ 416.782427][T19687] bond1 (unregistering): Released all slaves [ 416.832200][T19687] bridge0 (unregistering): left allmulticast mode [ 417.078751][T19687] smc: removing net device bond0 with user defined pnetid SYZ2 [ 417.082037][T19687] bond0 (unregistering): Released all slaves [ 417.088753][T19687] bond1 (unregistering): Released all slaves [ 417.094790][T19687] bond2 (unregistering): Released all slaves [ 417.100605][T19687] bond3 (unregistering): Released all slaves [ 417.108038][T19687] bond4 (unregistering): Released all slaves [ 417.201247][T19687] bond5 (unregistering): Released all slaves [ 417.206161][T19687] bond6 (unregistering): Released all slaves [ 417.311108][T19687] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.315724][T19687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.319529][T19687] bond0 (unregistering): Released all slaves [ 417.427306][T19687] : left promiscuous mode [ 417.487923][T19687] tipc: Left network mode [ 417.491387][T19687] tipc: Disabling bearer [ 417.493882][T19687] tipc: Left network mode [ 418.266532][T19687] hsr_slave_0: left promiscuous mode [ 418.269549][T19687] hsr_slave_1: left promiscuous mode [ 418.272379][T19687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.275144][T19687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.278017][T19687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.280486][T19687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.284895][T19687] hsr_slave_0: left promiscuous mode [ 418.287034][T19687] hsr_slave_1: left promiscuous mode [ 418.289011][T19687] batman_adv: batadv0: Removing interface: vlan0 [ 418.295187][T19687] hsr_slave_0: left promiscuous mode [ 418.297294][T19687] hsr_slave_1: left promiscuous mode [ 418.299290][T19687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.301878][T19687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.304908][T19687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.307457][T19687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.319284][T19687] veth1_macvtap: left promiscuous mode [ 418.321189][T19687] veth0_macvtap: left promiscuous mode [ 418.323094][T19687] veth1_vlan: left promiscuous mode [ 418.325506][T19687] veth0_vlan: left promiscuous mode [ 418.327778][T19687] veth1_macvtap: left promiscuous mode [ 418.329614][T19687] veth0_macvtap: left promiscuous mode [ 418.331485][T19687] veth1_vlan: left promiscuous mode [ 418.333389][T19687] veth0_vlan: left promiscuous mode [ 418.335869][T19687] veth1_macvtap: left promiscuous mode [ 418.337764][T19687] veth0_macvtap: left promiscuous mode [ 418.339647][T19687] veth1_vlan: left promiscuous mode [ 418.341458][T19687] veth0_vlan: left promiscuous mode [ 418.498881][T19687] team0 (unregistering): Port device team_slave_1 removed [ 418.515375][T19687] team0 (unregistering): Port device team_slave_0 removed [ 418.606163][T19687] pimreg (unregistering): left allmulticast mode [ 418.811050][T15778] smc: removing ib device syz1 [ 418.927880][T19687] team0 (unregistering): Port device team_slave_1 removed [ 418.944135][T19687] team0 (unregistering): Port device team_slave_0 removed [ 419.032670][ T6077] lo speed is unknown, defaulting to 1000 [ 419.034654][ T6077] syz1: Port: 1 Link DOWN