last executing test programs: 3m11.85991588s ago: executing program 32 (id=497): syz_emit_ethernet(0xf7, &(0x7f0000000080)=ANY=[@ANYBLOB="a6dcd6709d96000000000000080501060127a2aeb16690105d8e2debb524193d2206f72280e27feb312a44a0b12ebaef7f73ee57325588e0ec11877e869f3aff16793d60eda76f1389ed259100cdb3cbbb"], 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f00000000c0)={'wlan1\x00'}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x84) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x300040d, 0x0) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) (async) writev(r1, &(0x7f0000000680)=[{&(0x7f00000000c0)='d', 0x1}], 0x1) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x8000, 0x102) (async) write$tun(r1, &(0x7f00000002c0)=ANY=[], 0x340a) 2m58.084857012s ago: executing program 33 (id=686): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x4f, 0x1e, 0x8000, 0x0, 0x6, 0x203ff, 0xfffffffc}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0xffc1, 0x7, 0xfff9, 0x8, 0x12, "b95d2b5b35f90e50"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa3, 0x0, &(0x7f0000000640)="b44c806748f06309624431ed337301000000010000009c1fd05dacf5bb80c9b7ee0fae7a6a53200386ce51def6a4effb86e8e2ad7cb4645c2b9c0614907d40080cd6f4e5b5da60159633bb490c4af96c8663ad81b86b898d9435af40b29d0936e15fb284457b0bc44d54579a75db65633809f4e37ef15070c36fdb9660809c71e250fab354c5772fee217712b65392", 0x0, 0x407, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x7, 0x0, 0x2}, 0x50) r2 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x0, 0x8, 0x2, 0x6, 0x0, "84c85da3c84256c8865ed1ba93ba9dc46b532f", 0x2, 0x6}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, &(0x7f00000001c0)=0x1) 2m38.142926626s ago: executing program 3 (id=1114): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)=0x400) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000003c0)="04", 0x1, 0x11, 0x0, 0x1a) 2m38.072033825s ago: executing program 3 (id=1117): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x468001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11) close(0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200000, 0x9) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f0000000080)={0xffffffffffffffff}) 2m38.012214097s ago: executing program 3 (id=1118): r0 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) r1 = memfd_create(&(0x7f0000000340)='-&:{-\xaa]{\x00', 0x2) writev(r1, &(0x7f0000000740)=[{&(0x7f00000000c0)="0a294eff445f876a61a41c2b8f2cebfbf712b20b0303910abe93b85412729bdb57dceb9b2b67d031db8e0bfcde2364eaa4920ac971b98fa6b266d22ec5b3674c63c2e1bacbcb6071ef0dee0348e719d801c3ea74ab2c69ae1d4f1ddd8443d7d78dbe7cecd3ab71da033fc1d0df6e916839", 0xfffffdc0}], 0x1) (async) fcntl$addseals(r1, 0x409, 0xc) r2 = socket(0x10, 0x803, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x4, 0x52}) socket$kcm(0x23, 0x5, 0x0) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000000)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async) r5 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000100)=""/200, 0xc8}, {0x0}, {0x0}, {&(0x7f0000001240)=""/167, 0xa7}], 0x4, 0x1000, 0x3f2f0fde) (async) ioctl$VIDIOC_S_FREQUENCY(r5, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0xfffffffe}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000240)={r2}, 0x1) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4048aecb, &(0x7f0000000000)) (async) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x7) ioctl$KVM_GET_TSC_KHZ_vm(r9, 0xaea3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000f000/0x2000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r10, 0x1, 0x3d, &(0x7f0000000080)={0x0, 0x300}, 0x8) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) 2m37.832219543s ago: executing program 3 (id=1124): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x20, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x610080, 0x23) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x10001011, r0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x24) io_setup(0x204, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x206, r1, &(0x7f0000000240)='&', 0x1, 0x1, 0x0, 0x2, r2}]) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_clone(0x2800100, 0x0, 0xfffffffffffffd1e, 0x0, 0x0, 0x0) 2m36.839379742s ago: executing program 3 (id=1135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000280)=[{0x2, 0xa6, 0x2, 0x3}, {0x2, 0x8, 0x8, 0xb}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r3, @ANYBLOB="0000000000000000c30100000001000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x24}, 0x94) write$binfmt_misc(r1, &(0x7f0000000100), 0x6) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a0102000000fdffffff000200000009000200730004310000000008000440000000000900010073797a3000000000080003"], 0x64}}, 0x0) 2m34.620474309s ago: executing program 3 (id=1152): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000300)={0x0, 0x2, 0x3, &(0x7f00000002c0)={0x1a, "bbf6d4ef1b290853ddd34e4ee9a65e8f2d11cdc13260c7fb16b831b023e8c37d5f"}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x34, r3, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000004a80)="69a865e58d2d1e88f3") r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r4, 0x2285, 0x0) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="5e15dc34f5ee1ec925b25c8b207855f6cb689166ea34e9dd247d1307993bded0a87343c7d891a80760ea3f2e0c5e8a2d9e3897adec5fd43c253f512598574d73406b57f3af576d2258bbadec68eac764066c66f8c01fdc995379f0493e9c3bcdef0e175a53ea6c372da989217b31a1b4e168a59c97188d8151e80468960eaf723a23c39e20064731ff4db3e8bbbb6509096f", 0x92}], 0x1) 2m34.549057571s ago: executing program 34 (id=1152): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000300)={0x0, 0x2, 0x3, &(0x7f00000002c0)={0x1a, "bbf6d4ef1b290853ddd34e4ee9a65e8f2d11cdc13260c7fb16b831b023e8c37d5f"}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x34, r3, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000004a80)="69a865e58d2d1e88f3") r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r4, 0x2285, 0x0) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="5e15dc34f5ee1ec925b25c8b207855f6cb689166ea34e9dd247d1307993bded0a87343c7d891a80760ea3f2e0c5e8a2d9e3897adec5fd43c253f512598574d73406b57f3af576d2258bbadec68eac764066c66f8c01fdc995379f0493e9c3bcdef0e175a53ea6c372da989217b31a1b4e168a59c97188d8151e80468960eaf723a23c39e20064731ff4db3e8bbbb6509096f", 0x92}], 0x1) 53.667106293s ago: executing program 6 (id=2512): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20008084}, 0x20004000) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x4c, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x45bb}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_adj\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20008084}, 0x20004000) (async) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x4c, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x45bb}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_adj\x00') (async) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 53.603800725s ago: executing program 6 (id=2514): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4a0282, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="142b7ca56dc9", 0x6}, {&(0x7f0000000080)="06cc15bbd8cf890bff8050609b897db61a17602a3e4affb2132e0e7abab7fe84a0317786f795aaf1b8c52de739053b21ac2fe8e66d7a33416d19031bb26d3c2339695111b2b864ca990dddf05c5099656c4cfe394043a739cd5470f07f022df48a69784d6994b7e832ea514f207f22c9c7fd53b2acf1d5ce26b4b2b564b947397aab11f73413062435e72514ee", 0x8d}, {&(0x7f0000000140)="84184137e1819a23d08a86b6eff72e9229", 0x11}], 0x3) (async, rerun: 64) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000004c0)={0x0, &(0x7f00000001c0)=[@cpuid={0x64, 0x18, {0x0, 0x8001}}, @nested_load_code={0x12e, 0x69, {0x0, "2e0f01c50f201ac42144580366baf80cb8f23d168bef66bafc0c66ed0f323626650f785300440f2000c744240067000000c744240200800000ff1c242666470fd0b353de00006736660f38228ee0a70000"}}, @in_dx={0x69, 0x20, {0x3270, 0x1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x8001, @save_area=0x64d, 0x1, 0x5, 0x3}}, @nested_vmresume={0x130, 0x18, 0x1}, @wr_crn={0x67, 0x20, {0x8, 0x10001}}, @cpuid={0x64, 0x18, {0x0, 0x1}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_amd_stgi={0x17e, 0x10}, @cpuid={0x64, 0x18, {0xf30, 0x7}}, @enable_nested={0x12c, 0x18}, @cpuid={0x64, 0x18, {0x8ee8, 0x9}}, @nested_load_code={0x12e, 0x66, {0x3, "c744240000000000c7442402346a81cec7442406000000000f0114240f01d0c4c2010d1502000000460f01d167660f38814f8c460f017b4d470f07460f7e9300000100c4e27d18f566b814008ed8"}}, @nested_load_code={0x12e, 0x7b, {0x3, "66470f7d35007800000fc76d58440f20c0350f000000440f22c08f2978d2ff66baf80cb86074bc81ef66bafc0cb8a1a20000ef66b8cf008ee8660fc77354b9270b00000f3265360fc7753348b802000000000000000f23c00f21f835020005000f23f8"}}, @rdmsr={0x66, 0x18, {0x362}}, @nested_load_syzos={0x136, 0x38, {0x3, 0x2, [@uexit={0x0, 0x18, 0x6}]}}, @set_irq_handler={0xc8, 0x20, {0x6, 0x1}}], 0x2ea}) (rerun: 64) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000500)={0x0, 0x0, 0x1, 0x5}) (async) r2 = creat(&(0x7f0000000540)='./file0\x00', 0x100) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000580)={0x1, 0xc2, "c4a93ab005272df39db972d842b8e465394f80bedd45a338a572fd6e23f139eac0f4f5b720f284082a9d7fcfe01da3064479a14f7050cb1538b2a57d17ffba3bb18a283fec8f29120a6a340150714fe06d374fef77db45b26732795d44b7844b04599c6f8205271424193701e59438d4cf33f6f05d494321787e5600f71ce104c239839be368bd6bb1676e6a5e0f3db5aa3ac6ebd77ae1feb68675b4f13d6e489f6ae439c9bac2a965a6e614a39dd864f5b1e0a1dc7e06020c65b1d210708e2973a7"}) ftruncate(r1, 0x7) (async) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000680)=0xc, 0x1, 0x2) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x216480, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) writev(r2, &(0x7f00000008c0)=[{&(0x7f0000000700)="ae8a9432f6b3959016799d26b027d63c2df1e52ea4b356be09b7ae6ff46d99e4a30cb8069cb1dde08bcd09b3c6d6d251e578ef897543f53fc789708c7a36930ddec63103f53aa7e4dc1ae79e89839cce3135af09638adb", 0x57}, {&(0x7f0000000780)="db49f8e31259d6841a", 0x9}, {&(0x7f00000007c0)="7eef111cca38026d6e45538b2162930a3d11d39aa152090f538dce338a205dbf0f0ab3c59b14bf67259b0cca6c65bd6baf81ca88aead3cbfdf9de272244fa178c2d028c4898148f0ed142c8ebbccbf2b1bcccf2e438f171b8c597b44c9ea83b4131d97f017db8423e9843e5ef9ff796d3ff0125e762d8e538607231f6028dadcf2efefa8036af30945db8998e80e187e72a8b423fe9220fe945dd058ec930e737abbdc15f31b7903b2ef45e50f69254f34332300abe4c12d5e2c36b37e691647891255", 0xc3}], 0x3) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000900)=""/62, &(0x7f0000000940)=0x3e) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a80)={@map=r2, 0x3, 0x1, 0x7, &(0x7f0000000980)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000ac0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x2}) (async, rerun: 64) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000b00)=""/61) (async, rerun: 64) write$cgroup_devices(r0, &(0x7f0000000b40)={'a', ' *:* ', 'w\x00'}, 0x8) (async) r3 = openat$cgroup_ro(r2, &(0x7f0000000b80)='cpuset.effective_mems\x00', 0x0, 0x0) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000c00)=0x4000, 0x4) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000c40), 0x200200) ioctl$SNDRV_TIMER_IOCTL_CREATE(r5, 0xc02054a5, &(0x7f0000000c80)={0x2, r1, 'id0\x00'}) (async) timer_create(0x1, &(0x7f0000000d00)={0x0, 0x8, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000d40)=0x0) timer_settime(r7, 0x0, &(0x7f0000000d80)={{0x77359400}}, 0x0) sendmmsg$alg(r3, &(0x7f0000003580)=[{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000dc0)="4c2c15806f6d7ea2e01ae3e8d0d3b47d6ad20ffe945dba1db2905f2ab9830808bb83d6bdd1ee65498a6d17ac", 0x2c}], 0x1, &(0x7f0000000e40)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0x118, 0x117, 0x2, 0xfe, "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"}, @iv={0x58, 0x117, 0x2, 0x43, "4952e4d9115609a3b484a0e377c5fd31e1a04c25a23e10daa1d70a8b9912255c380b6ee1b42063594d0807d95b4aacfff1597175a5beb743ae0508ff403a0dc37428a0"}, @op={0x18}, @op={0x18}], 0x1d0, 0x44841}, {0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001040)="e8a93a67e3663e7698915dc19f3f42210c495925c72d5a1224823c75e4f764d36ab389d6e671d228fc7dbc", 0x2b}, {&(0x7f0000001080)="40864a51fa9ecf06a996461a98448bf03aae4bb5d1ce30a3e79e3ace5d09613ba4e6f02e689f28be3006384b07f2bfa98f8e801c7b72a60bbdf6b6fdce02a777c98e569fe72ba63ecc15c5fe18731882d3692234de534fa45fa3bf66ed9a3e8cbd71207ee55435b640a1aeadbcafd5c8b22ebd125048b47d5c7f1b8ca884c1eb32ffbdf926dc5732ef72f376595becff53dd85ccf793e2aa938e6157e414c18295dcf861b2019cb3111e4b3d69005130c20c03d63f6fa92103ce9cc8a74ab432c0f3b8802a908e80cb42a18a", 0xcc}, {&(0x7f0000001180)="956ee91c4dc47f8954a3c72c96ed82e779ac42f7d3b15e06c6257de4e1d925aee876768e2cd65fb07a215a32b7079965a74308d463d4e124a7946b3da62d908611946bebad47c57378608f10d364c59a5786c067206f816aead111bedc2e1adfecfab31f02342b6e5e446dad47de3f2cc8ae", 0x72}, {&(0x7f0000001200)="73cda0f4066fbc653670a14cfaf4ef55759d534cd425e8be98ba1ff00b2762d9c6ba3390bbbc540f07a33158da2b6b7a9280d99e1e09440105b1a8634d042735f482b2a4942c5f442aafe25768963d8a67350e05afd3b2416400161c4a94c16bffd4364cdb29ed2a04a6aa2936135355e8cf38c72932b430c73d78a3024ca626639180fc271007b30cf19d990bd149c124df142e6443079ebc68debfbb10282c27665793df3dda52f3268d565a60625a2cfe670e9f80c891e1cb7f1f5e1b35466f8464b9796295407b7cc2060710", 0xce}], 0x4, &(0x7f0000001340)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18, 0x4040}, {0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001380)="79ec826f6aa28753e7a9606aa31b9dce5a210e06fd7927fb58c97068f0eabdc336919b19e227a55a3f731d03ec7973673ce2d34546eaf445a4fde21a3f810224aa5a9f57dd33a7f75e1a2ff58ab21969dfd53eca5ad419ba3e0aa556544bf4c55b37f1cd21a3a79a8e709b4b2a2e46d226ace6bf3525b50d74da1a75d2cab57c82e9866dc8a0be4e7995ef9a90dbc54332679b579138a91e867969d7df70e09c052bd2bf5ef66e180fdd7b439caf38cedcd098c9cb709e7b1103a157b961f9a967319d40dd1fc00a10eb214094be66b4a8233253c2155cc8b2782cebbe329133fb422b62f174b618a66887152b3c8b", 0xef}, {&(0x7f0000001480)="f9bf91ef56f05b253320abb91aea178c49988289c633cd89363644878d1968262e79421c008e190c27454b7c414bb6d0979d32d3d9d7757924a31ff883236a7a99707cb608c902d3de5aa91909fa79d14dbef28db067be048cf3eea3469d7b311b07774cb412e12f2bedd2b9ccf856d9895ecc8eff88198278529e338a218d0a668f", 0x82}, {&(0x7f0000001540)="488f94df57b1609ee81e21a1d614abc3095a480003336b85d46d8e11e8468f5af1df345244aa977ff69b0d9307d223b983bca482add9e42288ff522ffaf4527820bda40adb87c75f1b254566d65332a6ac80c0d754991d6110c5b2c55fabddf4f657ec140f6a996411dddf3785a8aae495", 0x71}, {&(0x7f00000015c0)="e01b866f0ad6fe8ed18855063715cd788ec9372d28caba544281b5ce6b1fbf683bbf6821f8aad29d71c4aaf01ec7acc6118937ad1b6fc38791d46f1b689cb98df0d62c48c16a15eccce3a2583e90efdcbae39b744529728a5d36de9162bb82f41236219b265af50612059d0696d7c7b226fe2092c089fda186a9ffa09cbc4299cf096f87271a64e087d8f38a58528aea683d5bf6c1b2292348b741f0b0bcac97cbd125c8dbcaf166e7c0", 0xaa}, {&(0x7f0000001680)="063c633f84368f302f0ce5ee1cee86b80b0e2adcf6c3005eccdad7eddcecdef78d61fbd7f9cda97dbff11f519e9ced069058ef3409ce9985c80c049cfc09401a879b36aa1e4e9ae4fa4c1f8eff692c6d8b4686a5eb30dc97797936c9be51c96b0ef9b38950fb23", 0x67}, {&(0x7f0000001700)="bdedc7f66e16149010153e02050af8638420b32030df6fc117219cb911892a47127b9184b50109e9ed5bcff0ec563ea11649a63038cde0c9a44c22685f43039677de4199bbfea6180507f76fcc23c822321c4c8dcfed87eea3a0cb500cb3b3a48e899bccd1d4200efdf7ae8b39fbe6b877e4a2aa8ebaa9e387e44b4bbb3df7b202135bb1cb00d2772e0a60c07e613b4c9aa0ffbf0bf2849a0740e5da2042ac17b059747070af6c932f", 0xa9}, {&(0x7f00000017c0)="d30a624a135d3bd10168e737fcfc95c2bc56385638a47cdc75f87a05b4990a83ef37872581bbe60fe57c9a6fb0a195a8b6b8a769e21948bf129a63879f6a15a42308730b35661d595b0ba2dd8a303c6a2677a40c8108ec77d4860f91a68c6d738423c765a3b24040172bba1f6b98dc9d1e2b505f39d85359cdb1a04615b13ffdc9d73cf0a6be58867b0ced1ef858f43401ca367627bff48bc6c8a98aa9bfd2917336419267003348d1d0cc1fa6cf3f249796dd1d65b3d11bf8efadf0296208ed49b685501553338beb98", 0xca}, {&(0x7f00000018c0)="872f5ba6a9bf6d494b54bd122b7337d45e11940c2553e47ee5b5b4f05cf0ae", 0x1f}], 0x8, &(0x7f0000001980)=[@iv={0xc0, 0x117, 0x2, 0xa8, "d3c6aad07f9122c67578ac3e6281017a38b329b6f67b0648761fba2e73758a5d0703d0bd5cdc6ebdaa8006056b1de9d7bb19dd11980734c783656ef1f40145a160aa6e38fdd6c0a128323b81c65e8381aa0d50a222392719d7c7c624a0a4d4521458fa5154a411671accba80f43dc9f3527cfa5df4cb6f62e70a689f5a17f04414e6b7414f2d46a784aa5375677623e73755fc36e19374544dd6f134ffdae2c4235c7ea52785f407"}, @iv={0xd8, 0x117, 0x2, 0xc3, "e388d0cc7a436c3fe510bdf7d4c15d13fabbf506a8dfff802ff6a25ee561dd34e5d2442f90f9613d18d401fa67b0c411c51c1a7674fe98cca7d8e98df4826f42ef771bb2e54ad6b7f07c8c8bf2f41783f6c671d710bccac2c07f70b39674f5b6288172f8cfca05e2f75d4e7eaab41818788f6e34b41fc63cc582c84f2656741668b9ac7071157ee77267ea9618a132655250265be189bd2c39c36308063eb170ceb2736380eefa4b6df808c9443c3073205be6a030985a67c51293e894ad0719a9ee74"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x18, 0x117, 0x2, 0x1, 'I'}, @iv={0x90, 0x117, 0x2, 0x77, "3969c4ea679ca47323494e776a95a29d5134a9e117344be91d1e2eca501a6e44f5f42ed7dcec4006d823e255cf58c29cfe839096e5dda4ff4eaf487187c4752c5de543066568e9816e4018cd0e82b2c06f0dcd1904cd751182f0707fef333a9072a1b39aaec57551c3e6f2b364a456252d53f57a127bc7"}], 0x270, 0x8010}, {0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001c00)="d7568739a719a323caf60850417fb61bc4f54d1809d5ec30b9b312553d2b9ade7a2165d924ba05351970516e61d00d75fb46c45f562fdf5eca3b3079150950759077e65c4caec508a3e1eeb3bff8b570c316a3b91b374798cbcafe1acf3ebde96ed5a25c61d8e3c2115d4019db5fb368358c1e79d2b63a6ce612129213b779a41b346d2d88501b279cb97f6e31474fd58e987468ebaf22d8ce9f7411d6d2", 0x9e}, {&(0x7f0000001cc0)="1247a09fd8d8a1bc917e1d0e059ea310e1aaad75f6aecaaa174110eaab629f5e993d17a29aed812269f8cd472b11ce0744985e842db3c5c402eeb6b552c35842dd87a5d7a8d4ec691b24e6f600709ffa752ba5aa160fe34a7eaa215a48edd65e5008f0f328559a57a669731717929099934c8ee287192352c1986636a25dea00973a7da802372a498db50cbdeef0aca4973cdc4d2252d1dcf159de62e33f506573617645a005964f46c8bb6c0a21d36b56e8be6d0879", 0xb6}, {&(0x7f0000001d80)="52a14a34ee6b9844899b88e63d299028197cc58457d661fd43d611809f208794259040", 0x23}, {&(0x7f0000001dc0)="d0ee398febe73522df4dfca8aab5e9dff76c5bc80f120d48605f1c877570f8c0a4400cd8e9d9a96e45c6a83d551202877312f9e8d137333f66cf2567b1bc0cb84dff5659e4121f6400ce6d4e0988c12bf0a14ad219eb250ef95cd3bcb8afc7b5412b8de6d6eec3566315379897cd870f425ffbb57028c243305f1052bed2ecb1a5d3980dfb7a6ed18049013bb73f2592d6acff50617bedcac6b58bac7a7c7f7c1207d3655bf00acce4c2cf66803b6fd3fc8387aafc983671bbbb2f68a76bb466fd677d2e8fb1c7a9f609", 0xca}, {&(0x7f0000001ec0)="755e078789ec475fa0129b41cb891df1e9a8f82af39090d8102c447ed17393210050b361e65c92717517f7dda27e57a85f62d2f7c7d6679116b5b990d90287604ea8d010944e8fbfca46005e10c712b2fa2a7956ddc8a776", 0x58}, {&(0x7f0000001f40)="2a4e13dc802be0bbd648f9280f3072753844e1777c13fb715c166f5ac1b5fa449da6e901c6652441456b7928101f7f057613608005832ddc5f5dcfd3223412c2c778ca05030784564eb6937995f8c691f6d7270d6aab203d2289009a8e49c97fd5ae7c1f575d76fd9250810e04a94419e9c159ece61adf842b13c4a2eb4ffc0f34be83d3d78b4a86c0ab6557920fb6ceced27885b94394b1b083285f53d1849f8ddfa22569170aaedc290d27449e951127", 0xb1}], 0x6, &(0x7f0000002080)=[@assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x48, 0x4000}, {0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002100)="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", 0x1000}], 0x1, &(0x7f0000003140)=[@assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x60, 0x117, 0x2, 0x46, "b9df94bdf99aefced4ef7b0d73050b0c6286ee55c626f167a93e7bb8337a785d34fcce2c8f1eff62bfac3909c6115f46c9e5197633868f5bae95a478a6564b1e952c731dd48e"}, @op={0x18}], 0xa8, 0x4000040}, {0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000003200)="3dac8387fa196ba09320d301bc75aad98f0d2b80e013136f9c7c829c325ff8219148a03a987502f6787120b2813470844101ade4bb08cfce3e7fa1dcf8a380a4a18c9626e73c59df62814987f3e06085fae048e55ef634e0e9cfa4d21876b15020bed29552987ad911788ebb4cf2998656a43e4fd8d32630a8b2856e2d", 0x7d}, {&(0x7f0000003280)="e567755f8676097dd14d5e6aba136ac8585f72f7cdddcb661c0cd3eda952f342d18687e56a0efe7d8fcd94767cfa69d2d8329ccc62dd164e7a964e66ab6d2073b1534a2c1d2a35e98c35d664d00e73d8f4b329466c41fe6d8376f764eb84e1c10584c3d408ccee450a71fd315df92502f03289b949e96ac3abae11be37b4e5b05c0d0facaa44ccd987a724ab9a4339b44000442714761568cfa2234225908c261675d0", 0xa3}, {&(0x7f0000003340)="d6b61f05d041fbc1c24621da8e77d218a2660c3d6fe7bb2876dae4057504d5b7b5671bb826be2e4bef598a40cf2076936553a6079c772a15de3cc0fb966910098c555f6e68cb061ac4fda0de5c10254854c67c99236a906309762c49bfee3acd0385a2078ef9d76eb6507a46ac27211c3cf8f2b624a6c0cadda6651172243edb124c21b27aa0cd254a3542f4805d5a482b0410b83c6a7a560c4e72ae84ac0c1ea9ece8", 0xa3}, {&(0x7f0000003400)="07cb8a72ab034b913cb935051aa7390f9f4a8767572b6350afde9e5b1d6219e1d1c5a0d402d625eddbeeb9820f116df32f70b864ae431788ac8fa3495869a8acad0588d52c6a8114b8b7a652c7dc6d4a9d01ec772ff934be9f72ab1237fb32", 0x5f}], 0x4, &(0x7f00000034c0)=[@iv={0x78, 0x117, 0x2, 0x60, "1f3be2aace6cbcd0963957d0566f57ea9981e5c3f0aeced92a11fd897fdd10e0ff1460300a9b68310827b95116c82c060dc8ca39e134f973790959ecd5ef6d4aeb7b767d247829d2e20b9b2bff3c55454019f486273ecc379c4ca59f00e84b77"}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xff}], 0xc0, 0x4}], 0x6, 0x4000) (async, rerun: 32) write$sndseq(r0, &(0x7f0000003700)=[{0xe, 0x7, 0x5, 0x6, @tick=0xd94, {0x1, 0x4}, {0x2, 0x7}, @note={0xa, 0x0, 0x2, 0xb3, 0x1}}], 0x1c) (async, rerun: 32) recvmsg$unix(r6, &(0x7f0000003c40)={&(0x7f0000003740)=@abs, 0x6e, &(0x7f0000003ac0)=[{&(0x7f00000037c0)=""/224, 0xe0}, {&(0x7f00000038c0)=""/83, 0x53}, {&(0x7f0000003940)=""/120, 0x78}, {&(0x7f00000039c0)=""/118, 0x76}, {&(0x7f0000003a40)=""/63, 0x3f}, {&(0x7f0000003a80)=""/51, 0x33}], 0x6, &(0x7f0000003b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000003c80), r10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000003cc0), 0x0, 0x0) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r9, 0x54a3) (async, rerun: 64) ioctl$vim2m_VIDIOC_DQBUF(r8, 0xc0585611, &(0x7f0000003d80)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x800000, 0x8, {}, {0x3, 0xc, 0xe4, 0x9, 0x2, 0x7, "ac71b7fb"}, 0x0, 0x1, {&(0x7f0000003d00)=[{0x72, 0x8, {0x3ff}, 0xffffffff}, {0x0, 0x1, {0x1}, 0x200}]}, 0x3, 0x0, r4}) 53.544978415s ago: executing program 6 (id=2517): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x0, 0x0, 0x4}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f00000000c0)='GPL\x00', 0x6}, 0x80) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x5c}}, 0x0) 53.416357378s ago: executing program 6 (id=2520): setresgid(0x0, 0x0, 0xee00) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') fchdir(r0) read$FUSE(r0, &(0x7f0000003240)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) creat(&(0x7f0000002200)='./file0\x00', 0x101) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}, {@noextend}]}}) umount2(&(0x7f0000000100)='./file0\x00', 0x4) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000002180)='/', &(0x7f00000021c0)='\x00', 0x0) 52.669474303s ago: executing program 6 (id=2522): r0 = socket(0xa, 0x3, 0x3a) prctl$PR_GET_CHILD_SUBREAPER(0xe) r1 = socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000000), 0x560c89bb) r9 = creat(&(0x7f0000000200)='./file0\x00', 0x20) splice(r7, 0x0, r9, 0x0, 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={r6, 0x2}, &(0x7f00000000c0)=0x8) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000161411"], 0x20}}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @private1}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x10001]}}, 0x5c) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x149000, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$PTP_EXTTS_REQUEST2(r10, 0xc4c03d12, &(0x7f0000000380)={0xa, 0x4}) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) 52.477394962s ago: executing program 6 (id=2527): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000000e480), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd2(0xb6c, 0x800) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={r4, 0x7, 0x2, r4}) close_range(r1, r3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x25dfdbfb, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x11, 0x0, 0x0, @uid}, @typed={0x6, 0xb, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 52.29568769s ago: executing program 35 (id=2527): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000000e480), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd2(0xb6c, 0x800) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={r4, 0x7, 0x2, r4}) close_range(r1, r3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x25dfdbfb, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x11, 0x0, 0x0, @uid}, @typed={0x6, 0xb, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 36.855128951s ago: executing program 0 (id=2738): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x71, &(0x7f0000000000)="03040000008002ff", 0x8) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @private2, {[], @dest_unreach={0x1, 0x2, 0x0, 0x3, '\x00', {0x8, 0x6, "9dd7e4", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @empty}, [], "a056d4cf81a9d1cc"}}}}}}}, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) poll(&(0x7f0000000040)=[{r2, 0x1a5}], 0x1, 0xc8c4) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000140)=0xfffffff4, 0x4) bind$inet6(r3, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x1}, 0x1c) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x23a, 0x800) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f0000000080)) 36.786862505s ago: executing program 0 (id=2739): syz_io_uring_setup(0x517, &(0x7f0000000100)={0x0, 0x15d2, 0x1000, 0x1, 0x11f}, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000080)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x2, 0x9, "e706d30bd224f8"}, {0x7, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x6, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 36.786327989s ago: executing program 0 (id=2740): r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000000140)={0x0, 0x0}, 0x10) 36.705870785s ago: executing program 0 (id=2741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)={[{@nr_blocks={'nr_blocks', 0x3d, [0x38]}}]}) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x1, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9300}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x14}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x1000}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008880) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000280)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 36.65144233s ago: executing program 0 (id=2743): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='iso9660\x00', 0x405, 0x0) 36.594387712s ago: executing program 0 (id=2745): mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r0 = socket$inet(0x2, 0x3, 0x30) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='xfs\x00', 0x2010491, &(0x7f00000000c0)='norecovery') 30.866902075s ago: executing program 4 (id=2817): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f00002ef000/0x3000)=nil, 0x3000, 0x3000007, 0x12, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)=[r3], 0x1}) r4 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="2d00000037020001feffffffffffffff0300000000000000", @ANYRES32=0x0, @ANYBLOB="0f002f76aad6c138ea85f2530600be7164ea9114175e5b1ee4b7849d0d313903"], 0x2d) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet_sctp(r6, &(0x7f0000000700)=[{&(0x7f0000000180)=@in6={0xa, 0x4e21, 0xd7, @dev={0xfe, 0x80, '\x00', 0x30}, 0x7}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000004c0)="c255149064adfead234b1b05f8e05cf39c5695f0bacf4f1fc6905cada9ee772d2ec44f840c3e72bed72a4bf406fc3a8b6a8a38842d5a7a162e533de8f5cd5f3d82438a680f924215053112d9ffb989c81b096e6c343cf67cd0c8381f70edaf8d4397086e969f504052ff80d42f1394d7c2910bea7753101745fb7b4a0e7ecdb36d82e028c7bb9d3748faeb23350208606563e3f892455b76c0addf44babe8180688baf56c282aa3f4bd59ffc5ccd7099190df761f03f4a19fa342b26a837e80c97eab8e9151e2b0e62930791b074bce13b3fbed5579f", 0xd6}, {&(0x7f0000000340)="2c1f2e0cf999bcd5286849252abca32d9fe7cded6ab2da1828a7f7a9a5d6a9ee6102ebbcd5aa2b92602cd7556201b5cfc34e349694798f4e4d39639b70bcbf7cf14e81794155fb4e70d26a0596cfdd2375e58d", 0x53}, {&(0x7f0000004180)="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", 0x1000}, {&(0x7f00000005c0)="e9a4962f19b1574af60992e12a5d6eed5477d7d4e3489baefebf11270b11d202bfc9aa4418a6ad42b2e043e5f21d94c8c1dc8b9888d6dd5ae42216bb5e115f0050f5de7cc6be635c00121a1a80354e458d4ed9c67499f5f51f02e692a48bf96ce92cc6100009df0f0b7fbef90f7b2ffe822c814e006d1ce9a2a465dc4f58436e6a6f65ad76eca64f975f2e406a940bc951ba134a8ef1d8acc3ceeb7f41a47472bcb8bae43e356bee418054c1341375ab6de1", 0xb2}, {&(0x7f00000001c0)="b319732af1536f", 0x7}], 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000008400000000000000810001000500000020000000000000008400000002000000020002000000008007000000", @ANYRES32=0x0, @ANYBLOB="300000000000000084000000010000000d0007000d000000860000000700000006000000040000006dffffff", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0], 0x88, 0x20000800}, {&(0x7f00000002c0)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001ac0)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)="343fab96d242b3e694a7eaf73bf9f92bc3de7a5c1d3d0ce46d83ef61c6be737772d00fac9e7d403ec2b63a9d518e249c6e08f098918870c4418f08d3c6f5fdd8b713bb007c2c65297952d041c7127e75d734274c00767f4aa5e9092454710fa1037d3b573725b091512c456a1d16c7d5cd6b3e7cd344f3d8b10c177dceec014cd9efc56db29116820ab93e5137de3748311a62aeb685da7886d821376d20eaefa5d245b1853f96997a5a0fbc06d2203cb19f868c8ecf2a2803ac3068a4211ec22a35d82b2f7428b8d9a48e876bde5c77935e96888e141c5f8a3403c32fcc", 0xde}, {&(0x7f00000008c0)="563c3c082931bb8e9bb2fe8a63a14512f08557b94ae027b31be5d1b0280295b7afacd3e948d190329a02e063d76c69eeecf2953b6871cd98ecf2e101cdda248932ccced4f412ef2c0931ed20d8e57e8945d3cf7549c259e470f8ec7d957316ba02d0b2751c21f89b1eeaedf5ddb05bea17140cf55ba82ce8dcafd054e22cffab2579", 0x82}, {&(0x7f0000001e40)="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", 0x106}], 0x4, &(0x7f0000001b80), 0x0, 0x80}, {&(0x7f0000001c00)=@in6={0xa, 0x4e21, 0xe, @mcast1}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000001c40)="8ea21d3961d9253ef39bed64ab49f9e08da7d9c63012c9fd78895145685a636f049849448654920aaab062e38d7821373a897842763bd05b569c8951b966b76d3fd89a632a15f1b0c27fd131089438ef697b5cb9aa090b6df63a86cd48e7449d05877b451a8fa5b4172f19b2ed4c45e420100449d5a22f89a5584503fbf2614b5c79eddfbbbf732077199a3aed85ea4740268f53ddb970ba62af608ec09aaad18e2be94fc076da29c6b4d5b7a4719722a9f4578c0497e9b3a9c11c7ecc183c", 0xbf}, {&(0x7f0000001d00)="1ed2651d21695fc24c235324", 0xc}], 0x2, 0x0, 0x0, 0x40}], 0x3, 0x4040001) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x281800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000008180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000006180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xffffffffffffffff, 0x0, 0x0, {0x40, 0x8, 0xe, 0xfffc, 0x0, 0x1, 0x0, 0x0, 0x121, 0x2000, 0x0, r9, r10, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r7, &(0x7f0000000440)={0x50, 0x0, r8, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r11 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r11, 0x40084d02, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB='6\x00\x00\x00\x00\x00\x00\x00'], 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000009c0)=ANY=[@ANYBLOB="f474ae638900000000000000"], 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x0, 0x3}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x28) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) 30.567324529s ago: executing program 4 (id=2818): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'vcan0\x00', 0xb420}) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x3, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7, 0x300}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r9, 0xc048aec8, &(0x7f0000000240)={0x4, 0x0, @ioapic={0xf000, 0x1, 0x7, 0x8001, 0x0, [{0x0, 0x7f, 0xa, '\x00', 0x4}, {0x5, 0x1, 0xf6, '\x00', 0x2}, {0x75, 0x4, 0x3, '\x00', 0x76}, {0xc, 0x1, 0x4, '\x00', 0x96}, {0x1, 0x4, 0x4, '\x00', 0x77}, {0x4, 0x3, 0x6, '\x00', 0xf}, {0x2, 0x9, 0xe1, '\x00', 0x4}, {0x3, 0x3, 0xff, '\x00', 0x38}, {0x9, 0x6, 0x40, '\x00', 0x2}, {0xf, 0xf, 0xb, '\x00', 0xfb}, {0xff, 0x3, 0xa1, '\x00', 0x52}, {0x4, 0x1, 0x4, '\x00', 0x1}, {0x1, 0x0, 0x0, '\x00', 0x2}, {0x4, 0x2, 0x7f, '\x00', 0x8}, {0x9f, 0x8, 0x7}, {0x40, 0xb, 0xa, '\x00', 0xb2}, {0x5, 0x80, 0x70, '\x00', 0x9}, {0x6, 0xff, 0x7, '\x00', 0x9}, {0x8, 0x8, 0xa, '\x00', 0x5}, {0x1, 0x9, 0x80, '\x00', 0x4a}, {0x6, 0x4, 0xff, '\x00', 0x6a}, {0x1, 0x7f, 0x8, '\x00', 0x80}, {0x42, 0x56, 0x4, '\x00', 0x6}, {0x7d, 0x5, 0x4, '\x00', 0x58}]}}) 30.296264223s ago: executing program 4 (id=2824): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x400000f3}]}) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x80000006}, 0x1c, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x40000000) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002e00090027bd7000fedbdf250400000008001a80040004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 30.095550827s ago: executing program 4 (id=2825): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200000, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x20) io_setup(0x202, &(0x7f0000000200)) add_key$keyring(&(0x7f0000005180), 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc) syz_emit_ethernet(0x98, &(0x7f00000017c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa1208004500008a00000000002f907800000000000000002480655800000000005a0016786a47ec864e62895fef2553c7a653dfa2d24db0291c96f96456bd0e300ecafd176f100008000005039e0fff000086dd000900000b9f080088be00000000100c00000100000000000000080022eb00000000200000080200000000000000a1a80501da47acc28b9d4a92000000000800655800000000"], 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000000c0)={0xb, 0xffffffffffffffff, 0x1}) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x88, 0x67, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="813e785600", 0x5}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) r5 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r6 = eventfd2(0x7, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002400a7b1af2140003006970766c616e3100"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r8 = openat$pmem0(0xffffff9c, &(0x7f00000000c0), 0x165101, 0x0) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = syz_clone(0x8108000, &(0x7f0000000940)="c07ce8bd3054179962dae7e092edc733c797279e6215d32d38712dba14669f69537eba06901a3c16b1ff283cc4099e09fee8a22e9d81c4e48c4d4461438cff13c64c55e2e61911331801b658957f22da9aa57bf384ed2c6b634ab2d4a8f8bddc584b7a20b9f746fc3b01d86f310b82e6f5a0200251f192a760fefac93d35039d07766f73271d", 0x86, &(0x7f0000000a00), &(0x7f0000000a40), &(0x7f0000000a80)="ddec7f9198daf6d3a5b8e9f11c8f0edfaa804e22afc7db8c7d2d75b0a769346ffc723c9c4f3acac3c965141998fc96bbd392ba90bb85e638e14c94b35f48c45fe1ae25c29805f0fff88beeb39bdadf04821ca7b6a8e3787d5a280f41929a449fa9b0a6d3815bce04e5860605d2a208111d7b6f") syz_open_procfs(r10, &(0x7f0000000b00)='net/udplite\x00') r11 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000840)='./binderfs/binder-control\x00', 0xc00, 0x0) io_submit(r1, 0x8, &(0x7f0000000900)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x6, r2, &(0x7f0000000100)="b76216fe6bf239e3b10571c7d5621fb86df196ac84fe2e04b6", 0x19, 0x9, 0x0, 0x0, r0}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f0000000240)="2e57aa01a3b470dc651b829a99af2e0577b33cde8f4c72e48b949db8de0ef78e794ebb72f2839312e3b32b1f765ad1eaa47266ddc1f74d451a5157bd1652dd6345d9c335cb2df52942abef0833a038edccefb9f9cc239df64fc82c19cd932cf632fefdc5f625d120fa8f83a7c992bee148aa78aeca0c9859bb2c4298db437c4924f3b43eea08f05a2f1b9d55ea034ebef356216419667857aff26a258032f5ae83ac728384a063d929d8b11ceb5b7069ee7dbaa6d5badd311b9e7b6f9644a48852cf0a761f56c935138cdf7481f7059f37d0606dbec75b02f9ba6b9c005178a92736a9d8946581f5b9ff4f15bb152450644a", 0xf2, 0x1, 0x0, 0x1, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x8, r3, &(0x7f0000000340)="1ab217dd8fc84b7a06430852321f57c19368f8ff5f58f3785b98d6ad806538b7b5cdf3511365f0c60c9ff2643c9f7a070e1691293f3865f2a95b01587de771b1456297d21772d34ae20c4b1b51a95fe6ba2271e0fdbcf2de78ceb00f70a79ca78bdb4b5756f10dba6cb54b35e1072f75fdff1cf728e83c3dbdd7d3a3c52a2d7a2518a290058ff975955490135ae08c62ac3a77a87466a52da14f427258cb9408f334aeb0c5b0e18cba1b9c9456a51bf7f4be087882478ee54bad07690294936b8ccc6802b869b5a9613c2378afcbbf29370a2bfa160f97895b299528c090e94926ceb6b1f355b68603326a6d67a87da198", 0xf1, 0x80000, 0x0, 0x0, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x6, 0x2, r5, &(0x7f0000000540)="431606f930ae0be6146eee22a1a36d56c2bf90", 0x13, 0x2, 0x0, 0x1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0x200, r5, &(0x7f00000005c0)="2d918258124f7a926a51af3f1cb7291776fd639baede87143f2cc1f230245801fb55d20a549dea825f76799f0172c30683a2b2110bd7a08ace9760dfbd74134405", 0x41, 0x8000, 0x0, 0x0, r6}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x5, 0x100, r9, &(0x7f0000000680)="cd1cef3e568c439d2d9a18838c442b47398661179c3013844b0c4740f55acc88568f7e18193cc4663718ae5d197dfc0d15c7901aa71e6f9805d27c79e3fda31afeef16aa1eece647634cfe7142e62452ae8aab6781f67128f28b2f7fb57d8dfe1f77b8eedbe4fdb653bbb253c36dfc32c1ca0a9086eb1ad29d00d8a206060bf82ae48291e17fa3eff72fc9404b17e9290f53daea507082b76d111d0fa9c5a4ffcf1e6009db69516f78d018cdc1733d4e307092945747d8f3ed02feb7c7dd19342809c0db5a8464b9977312cfeff8", 0xce, 0x7b, 0x0, 0x2, r0}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0xfd81, r5, &(0x7f00000007c0)="d925627880", 0x5, 0x100000001, 0x0, 0x0, r9}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x9, 0x6, r11, &(0x7f0000000880)="50a3c7d383e4af8456f41a00ef07d7cbfa5890149236844179ad61cbf0d6300f95b3bc", 0x23, 0x3}]) 29.81594342s ago: executing program 4 (id=2826): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110628bd7000ffdbdf251900000008000300", @ANYRES32=r3, @ANYBLOB="0500a2000900000005001c000600000005001c000200000005001d00db00000005001e0008"], 0x44}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a8001600090001c57bec6460456720fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb591643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e0036e19228aadc0db70100c1deec1f42447a5ae735938634a43a000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d", 0xd8}], 0x1}, 0xc0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000000)=""/80, &(0x7f0000000080)=0x50) socket$kcm(0x10, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110628bd7000ffdbdf251900000008000300", @ANYRES32=r3, @ANYBLOB="0500a2000900000005001c000600000005001c000200000005001d00db00000005001e0008"], 0x44}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a8001600090001c57bec6460456720fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb591643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e0036e19228aadc0db70100c1deec1f42447a5ae735938634a43a000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d", 0xd8}], 0x1}, 0xc0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000000)=""/80, &(0x7f0000000080)=0x50) (async) 28.917450613s ago: executing program 4 (id=2830): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x2}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000012c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0xba}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xf9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 28.861635428s ago: executing program 36 (id=2830): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x2}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000012c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0xba}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xf9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 25.906728255s ago: executing program 7 (id=2857): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x2, 0x2}}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0xfffffffc}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000080)={0x8, 'veth1_to_bond\x00', {'virt_wifi0\x00'}, 0xfff7}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x60, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc}]}]}, 0x60}}, 0x48040) 25.680390971s ago: executing program 7 (id=2859): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000001800), 0x4) mount$bpf(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x40, &(0x7f0000000080)={[], [{@seclabel}]}) 25.636941429s ago: executing program 7 (id=2860): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000013c0)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x9) 25.576552128s ago: executing program 7 (id=2862): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/hardlockup_count', 0x2719c4, 0x100) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1f}}, "00186371ae9b1c03"}}}}}, 0x0) ioctl$BLKDISCARDZEROES(r3, 0x127c, &(0x7f0000000080)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="4dc07f947163300c", 0x8) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$can_j1939(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)="d80bf5ff30ab01034d5efee97dbc3acb9fdca2a2c128df34b8c0c3a642c04accd2ec6ecf213b51b2cff0d26d96ea41b28ec4eb94ffc68d3b3392455b54e2d2b1b59ced6e9b403bc8925b2956d4abc394d3ca497efaf168002e47fd00644955f1741b21ed06746ebc57d29dcee9f5921d6f2eb51bf40e98ea7c1b63d6e3c8da254eb4b882f430fd64f27ebf5e00e33967433f159612e32688e5127997c8377c79d4c8faa32b924b1d9bd2800d9d482745cb67b6b0d4c6e868f1776f4b32b55c1789f315fc03781063105b19cc933aec23109417e0969c9704a27ab9e3bb96f3660b9b99a179c448b8891cef4c646097d5bbaa20b67bc6da9c75f156cefda4f1b46e5ee01bde1f78e4d539e0b80411e88cac1cc09bd9fc465c2aa8bc8d9545702a6800cf62ef8ecbc356cc6986a2314b9f551cc757076873f53098699e0400000000000000e52cc225c4b545ace9b5e009c93b62b855c5b9bc19c4b224d3db90a27d24812581f67a4d24d4beee53f1b2ecf0157dcf208f53a8656a85cda37386302cc199e604578988bbbcc7ae96d131bc0514884e949566fd61b4df76dccdc8f8d9c6edfb4efc56ad23079ca9fa1b443e635c6bda074698a334d84b4aef598f5cc140dc168d1ccbe2970a6b694b3f0be5d3baa7a6d52eb3ce40b212f1d93d56f40ea0f7cf9900c5a7dd04f7b5878d9c", 0x1ef}, 0x1, 0x0, 0x0, 0x24000844}, 0x500c5) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000000c0)=r3, 0x1) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) (async) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/hardlockup_count', 0x2719c4, 0x100) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1f}}, "00186371ae9b1c03"}}}}}, 0x0) (async) ioctl$BLKDISCARDZEROES(r3, 0x127c, &(0x7f0000000080)) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="4dc07f947163300c", 0x8) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendmsg$can_j1939(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)="d80bf5ff30ab01034d5efee97dbc3acb9fdca2a2c128df34b8c0c3a642c04accd2ec6ecf213b51b2cff0d26d96ea41b28ec4eb94ffc68d3b3392455b54e2d2b1b59ced6e9b403bc8925b2956d4abc394d3ca497efaf168002e47fd00644955f1741b21ed06746ebc57d29dcee9f5921d6f2eb51bf40e98ea7c1b63d6e3c8da254eb4b882f430fd64f27ebf5e00e33967433f159612e32688e5127997c8377c79d4c8faa32b924b1d9bd2800d9d482745cb67b6b0d4c6e868f1776f4b32b55c1789f315fc03781063105b19cc933aec23109417e0969c9704a27ab9e3bb96f3660b9b99a179c448b8891cef4c646097d5bbaa20b67bc6da9c75f156cefda4f1b46e5ee01bde1f78e4d539e0b80411e88cac1cc09bd9fc465c2aa8bc8d9545702a6800cf62ef8ecbc356cc6986a2314b9f551cc757076873f53098699e0400000000000000e52cc225c4b545ace9b5e009c93b62b855c5b9bc19c4b224d3db90a27d24812581f67a4d24d4beee53f1b2ecf0157dcf208f53a8656a85cda37386302cc199e604578988bbbcc7ae96d131bc0514884e949566fd61b4df76dccdc8f8d9c6edfb4efc56ad23079ca9fa1b443e635c6bda074698a334d84b4aef598f5cc140dc168d1ccbe2970a6b694b3f0be5d3baa7a6d52eb3ce40b212f1d93d56f40ea0f7cf9900c5a7dd04f7b5878d9c", 0x1ef}, 0x1, 0x0, 0x0, 0x24000844}, 0x500c5) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000000c0)=r3, 0x1) (async) 25.574661541s ago: executing program 7 (id=2864): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) socket$kcm(0x10, 0x2, 0x10) (async) r0 = socket$kcm(0x10, 0x2, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) (async) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f2435f01000884", 0x7, 0x4008041, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x6}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 25.415007492s ago: executing program 7 (id=2866): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) (async) r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8, @mcast1, 0x48dea848}, @in6={0xa, 0x4e21, 0xc72d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}], 0x38) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x3, 0x6925c2) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r2, 0x4068aea3, &(0x7f0000000080)={0xc1, 0x0, 0x2}) (async, rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000017fa37b630724922423ef35aac49da57"], 0x14}}, 0x0) (rerun: 64) 24.196941638s ago: executing program 5 (id=2880): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r1, {0xe, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004001}, 0x40004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x2, &(0x7f0000000040)=[{0x35}, {0x6}]}) 24.126585337s ago: executing program 5 (id=2881): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000140)={0x53, 0x0, 0x109, 0x0, @buffer={0x0, 0xef, &(0x7f0000000000)=""/239}, &(0x7f00000001c0)="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", 0x0, 0x0, 0x10020, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r2, &(0x7f0000001180)=""/4096, 0x1000) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000001c0)={'veth0_to_hsr\x00', 0x7f}) r4 = socket$unix(0x1, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xf, &(0x7f00000003c0)={0x2, &(0x7f0000000380)=[{0x81, 0x3, 0x8, 0x6}, {0x4, 0x7, 0x1, 0x9}]}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xa, 0x9}, {}, {0xc, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000000c0)={@private, @initdev, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x8, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xc, 0x1}, {0xffe0, 0xe}, {0xc, 0x4}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc018}, 0x1) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3ff, 0x2}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffe0}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x40000000}, @TCA_U32_SEL={0x24, 0x5, {0xa, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x1, 0xb}]}}]}}]}, 0x5c}}, 0x404c004) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x34}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 24.12626559s ago: executing program 5 (id=2882): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x40045731, &(0x7f0000000040)={0x1}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) 24.034115477s ago: executing program 5 (id=2883): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa0028000}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x0, 0x7fc00100}]}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000980)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000240)={0x8, 0x2}, 0x74) r5 = syz_open_dev$evdev(&(0x7f0000000140), 0xffff, 0x474282) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000180)={0x5640e7cb, 0x3, 0x0, 0x200, 0xac8f, 0xa9f4}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f"], 0x24}, 0x1, 0x0, 0x0, 0x4048890}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000002780)) 24.027410009s ago: executing program 5 (id=2884): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x101881, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 23.976043914s ago: executing program 5 (id=2885): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x50) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r2 = userfaultfd(0x801) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, 0x12, 0xa01, 0xffff, 0x0, {0x80}}, 0x14}}, 0x10) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES16=r2]) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d0000000c000000040000000100000080000000", @ANYRES32=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f0000000d40), 0x0}, 0x20) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x800bcbf, 0x80, 0x3, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x10, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x3516, 0x3e44, 0x8, 0x0, 0x0) syz_usbip_server_init(0x3) 21.004861131s ago: executing program 37 (id=2745): mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r0 = socket$inet(0x2, 0x3, 0x30) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='xfs\x00', 0x2010491, &(0x7f00000000c0)='norecovery') 10.337194201s ago: executing program 38 (id=2866): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) (async) r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8, @mcast1, 0x48dea848}, @in6={0xa, 0x4e21, 0xc72d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}], 0x38) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x3, 0x6925c2) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r2, 0x4068aea3, &(0x7f0000000080)={0xc1, 0x0, 0x2}) (async, rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000017fa37b630724922423ef35aac49da57"], 0x14}}, 0x0) (rerun: 64) 8.842425561s ago: executing program 39 (id=2885): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x50) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r2 = userfaultfd(0x801) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, 0x12, 0xa01, 0xffff, 0x0, {0x80}}, 0x14}}, 0x10) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES16=r2]) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d0000000c000000040000000100000080000000", @ANYRES32=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f0000000d40), 0x0}, 0x20) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x800bcbf, 0x80, 0x3, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x10, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x3516, 0x3e44, 0x8, 0x0, 0x0) syz_usbip_server_init(0x3) 3.714510949s ago: executing program 9 (id=3060): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$dsp(r1, &(0x7f00000004c0)='\x00', 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000000)={0x1, 0xc0, 0x800008, 0x80000000004, 0x346a, 0x100000001, 0xfffdfffffffffffe, 0x4, 0x0, 0x20000000000002, 0x1, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f0000000240)) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0xa0402) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000400)={0x23, 0x1, 0x12, 0x2, 0x0, 0x4, 0x0}) 3.167533894s ago: executing program 9 (id=3068): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f0000000200)={0x9, 0x8001, 0xd}}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) 3.09195682s ago: executing program 9 (id=3070): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x54, r1, 0xfe12482fe0801d67, 0x70bd2c, 0x24dfdbfb, {}, [{@nsim={{0xe}, {0xfffffffffffffc41, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xfffffffffffffffa}, {0xc, 0x90, 0xfffffffffffffffc}}, {@pci, {0x0, 0x8e, 0x3}, {0x0, 0x8f, 0x3}, {0x0, 0x90, 0x401}}, {@pci, {0x0, 0x8e, 0x2}, {0x0, 0x8f, 0x3}, {0x0, 0x90, 0x7}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x44004) 3.033766339s ago: executing program 9 (id=3071): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = io_uring_setup(0x167c, &(0x7f00000000c0)={0x0, 0x800000, 0x400, 0x2, 0x131}) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_REGISTER_PBUF_STATUS(r1, 0x1a, &(0x7f0000000000), 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r4, &(0x7f00000002c0)={0x2, 0x0, {&(0x7f0000000ac0)=""/116, 0xffffffffffffff8b, 0x0, 0x2, 0x2}}, 0x48) setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000080)=0x3, 0x49) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) syz_emit_vhci(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r5, 0x7, 0x4) syz_emit_ethernet(0x153, &(0x7f0000000440)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x145, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x2, 0x2, 0x0, {0x4a, 0x4, 0x1, 0x3, 0x8, 0x68, 0x4, 0x8, 0x84, 0x8, @dev={0xac, 0x14, 0x14, 0x10}, @private=0xa010100, {[@cipso={0x86, 0x48, 0x2, [{0x0, 0x6, "a2583926"}, {0x0, 0x9, "8bc5f360fda9b6"}, {0x2, 0x4, "b5e5"}, {0x0, 0x11, "8726dd71a039c7942c02e9ed5c8f0b"}, {0x2, 0x2}, {0x0, 0xd, "fc4333b6366a6ec9ff1baf"}, {0x5, 0xf, "0395944965e414352d2d2e7341"}]}, @timestamp_addr={0x44, 0x24, 0x5e, 0x1, 0x0, [{@remote, 0x9}, {@loopback, 0x62}, {@local, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x5}]}, @timestamp={0x44, 0x18, 0x2b, 0x0, 0x8, [0xcb, 0x4c9, 0xe2d, 0x10001, 0x5]}, @cipso={0x86, 0x52, 0x3, [{0x7, 0x10, "9ea1e7a74f5755807251dcae9615"}, {0x1, 0x6, "27be9c71"}, {0x6, 0xe, "9b789fbb0fb67cc33343ddc5"}, {0x2, 0x6, "96edea3f"}, {0x1, 0xf, "c7eb0c2cf38ccc17fc8dd531d6"}, {0x0, 0xe, "4700f5e21d87afedd8ee46e3"}, {0x0, 0x5, "9769f5"}]}, @generic={0x86, 0x4, "1591"}, @timestamp={0x44, 0x1c, 0x85, 0x0, 0x5, [0x0, 0x5, 0x1ff, 0x7, 0xfe, 0x800]}, @timestamp_addr={0x44, 0x1c, 0x85, 0x1, 0xc, [{@multicast2, 0x6}, {@remote}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf79}]}]}}, '-'}}}}}, 0x0) 2.890634245s ago: executing program 9 (id=3072): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x48403, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='ocfs2_dlmfs\x00', 0x1214040, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setresuid(0xee01, 0xee01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568daf1", @ANYRESHEX], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r1, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB='7\x00\x00\x00\x00 \x00\x00_\f\x00\x00', @ANYRES32=0x0, @ANYRES16=r1, @ANYRES64=r3], 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x3}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB="2f00010101200000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=r3], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x1d, 0x67726ae92d7f756f, 0xffffffffffffffff, @void, @void, @value, @void, r3}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYBLOB, @ANYRES64=r3], 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r5, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r5, 0x1, 0x2f, &(0x7f00000001c0)=0xa, 0x4) recvfrom(r5, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@newqdisc={0x11c, 0x10, 0x2, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xf}, {0xe, 0xd}}, [@TCA_STAB={0xf4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x8, 0x240, 0x1ff, 0x2, 0x3, 0xc08, 0x3}}, {0xa, 0x2, [0xc79c, 0xf, 0x83]}}, {{0x1c, 0x1, {0x1, 0x89, 0x2, 0x0, 0x1, 0x9, 0x8, 0x8}}, {0x14, 0x2, [0x2, 0x400, 0x6, 0xff, 0xbe0, 0x2, 0x6, 0xa33f]}}, {{0x1c, 0x1, {0xc0, 0x3b, 0x401, 0x200009, 0x1, 0x7, 0x80000000}}, {0x4}}, {{0x1c, 0x1, {0xff, 0x4, 0x8001, 0x8, 0x0, 0x3, 0x46, 0x80}}, {0xa, 0x2, [0x1, 0xd, 0x3]}}, {{0x1c, 0x1, {0x3, 0x3, 0x6, 0x6, 0x1, 0x6, 0x3, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x9, 0x3, 0xec61, 0x8, 0x0, 0xcb7, 0x3, 0x5}}, {0xe, 0x2, [0x8, 0x1, 0x4, 0x8000, 0x2c9]}}]}, @TCA_STAB={0x4}]}, 0x11c}}, 0x4) r6 = inotify_init1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0xf9, 0x5}, {0x42, 0x40}]}, 0x10) r8 = syz_clone(0xa002c000, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r6, 0x8, r8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f00000002c0)="c4916f3d6efe79d403ec6e678dc16f6dd8d3a7a607f20f3b3eac703812e8830dd4dafe77129942d49e89cd9daa261d173e42f6338f50fbdfddd3aae4b166f89caa136096d4abf23de9949c9487fa87f2c089121ea3f4a475638d8344d72941a5d3b0b484b3bd46a8b5f257bc462eac5972b9a6c3067bcb5d080a0368a00b27da5378a4f53d9c60cdc070c720fc08cbd86382f9839ca8eecb988f4ededc85d48261bd020e6747c001f7e3520079fdaad3f5ad928046a0167033214f981e5c28619b", 0xc1, r6}, 0x68) 2.012682297s ago: executing program 9 (id=3081): madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xffffffffffffffda}, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) setitimer(0x2, &(0x7f00000000c0)={{0x77359400}}, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x0, 0x8, 0x4, &(0x7f0000000100)={0x15, "deedcc99c1b8730800000703000000000000002000001f00"}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001140)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x9, 0x6, 0x80, 0x25cd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xb, 0x4, 0x12a3, 0x6, 0x1, 0x1, 0x6, 0x9, 0x81, 0x2, 0x75, 0x0, 0x10000, 0x2, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x2000401, 0xfffffff5, 0x405, 0xa7, 0x281, 0x9, 0xf99e, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0xfffffffe, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4000004], [0x9, 0x40000003, 0x6, 0x9, 0x4, 0xc67, 0xa8a9, 0x1, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x4809, 0x4, 0xa7, 0x1000, 0x6, 0x200b398, 0x400000, 0x0, 0x4, 0x2000020, 0x7, 0x1, 0xfffffff7, 0x6, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0x34, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x0, 0x1, 0x80000004, 0x206, 0x438, 0xfffffffe, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0x8000, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x3, 0x5, 0x491, 0x8d3, 0x200006, 0xfff, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x64, 0x1, 0x8000003, 0x3, 0xd, 0x3, 0x3, 0xc, 0x3, 0xc7, 0xfff, 0x10000e, 0x8000, 0x10400, 0x3e55, 0x3, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0xc, 0x4077, 0x9, 0x2, 0x5, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x1, 0x1afa, 0xbfc, 0x8, 0x7, 0x7f, 0x2, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x84, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0xfffffff3, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x5, 0x1ff, 0x2000803, 0xffffffff, 0x30000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff5, 0x7, 0x4, 0x463f, 0xc, 0xdab, 0x3, 0x8, 0x2, 0x1, 0x4000009]}, 0x45c) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000002c0)={0x1, 0x1, {0x2f, 0x15, 0x7, 0x16, 0xa, 0x81, 0x0, 0xf6}}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001006970366772657461700000000400028008000a00", @ANYRES32=0x0, @ANYBLOB="639fdca41f2e90a5bbbdb8913a54cca09b9acbae391a6cf150f142dcb850ea4aba203bc8e5ce952afbae6fa62118ba48c3cda7cf47e4b29431761933611f9254a973204da2e0990cafc58b2357d723dcfa410aeab0ce2e92af841a2e70007f4dd290346458c93b1e8d1a2567f3591fa5179b7393fd3f9a48fd26eaf623dd844e"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$SCSI_IOCTL_STOP_UNIT(r6, 0x6) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0x7, 0x7fffffffffffd, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2900, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.861231087s ago: executing program 2 (id=3086): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x5, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x4) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x7, &(0x7f0000000000)=0xb, 0x4) fchdir(r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x8800000, 0x0, 0x0) 1.74110958s ago: executing program 2 (id=3089): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r1, 0x11, 0x67, 0x0, &(0x7f0000000080)) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000100)=0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000001680)=@get={0x1, &(0x7f0000000680)=""/4090, 0xb}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0xc0f85403, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000040)=0x89c, &(0x7f00000000c0)=0x4) 1.67991973s ago: executing program 2 (id=3090): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x2, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x0, 0xc, 0x3}, 0xe) shutdown(r0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x26}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) close(r0) readv(r0, &(0x7f0000000780)=[{&(0x7f0000000580)=""/206, 0xce}], 0x1) socket$nl_route(0x10, 0x3, 0x0) 1.587607795s ago: executing program 2 (id=3092): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x48}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_SET_STATUS64(r4, 0xc0c0128e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x2a9, 0x0, 0x0, 0x10000015, 0x19, "8975301576b0cf0900245518580ce0c8bf604cca41f31c108938fcfa393edb69e0bcff0f0000000000000900000000000000d0f08e8ad896ba67a00973defa00", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee41b80000827cc7d24fdc26f2395d702020000e4b8fb1703e47463b969e4", "ca1bf5ff2b4a000000000000008218040000db00000000000000000000000059", [0xc, 0xfffffffffffffffd]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f00"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 791.003916ms ago: executing program 8 (id=3100): r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) ioctl$DVB_DVR_DMX_QUERYBUF(0xffffffffffffffff, 0xc0186f3d, &(0x7f0000000040)={0x0, 0xc8, 0x8, 0x80, 0x0, 0x1}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) 790.256909ms ago: executing program 1 (id=3101): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setresgid(0xee00, 0xee01, 0x0) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x16, 0x0, 0x0, 0x5, 0xfffffffffffffedc, 0x0}) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f00000000c0)={0x18, 0x1, 0x0, 0x0, r3, 0x10}) close_range(r2, 0xffffffffffffffff, 0x0) (async) r4 = socket(0x10, 0x80002, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="1ca12d394eaa", @empty, @void, {@ipv4={0x892f, @igmp={{0x5, 0x4, 0x1, 0x3, 0x1c, 0x66, 0x0, 0xa, 0x2, 0x0, @multicast2, @loopback}, {0x14, 0x5, 0x0, @multicast2}}}}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x18, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x4}]}, 0x18}}, 0x4000080) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) listen(r5, 0x7ff) 723.969254ms ago: executing program 8 (id=3102): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) write$vga_arbiter(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="6c6f636b20696f2b6d656d00d734fcd00534789c365b2a27ae093068ae6e56bfc6912630d3b162c85ded16af6b759032dff22b2c5b0641f648b18abc6c19c00bcb869871afd3"], 0xc) write$vga_arbiter(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="6465636f646573206e6f6e6500f8f9b080b27d129bbea03b5c1c2a99a168d5d5808661"], 0xd) mbind(&(0x7f000088b000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x2) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000140)=0xffffffc0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x2f) 722.334731ms ago: executing program 1 (id=3103): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x9, 0x84800) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000280)=""/211) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=rdma,port=0x0']) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) semtimedop(0x0, &(0x7f0000000a40)=[{0x0, 0x7f, 0x800}, {0xa9ffd865a9c4b239, 0x3, 0x1000}], 0x2, 0x0) (async) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000800)=ANY=[@ANYBLOB="00020201"], 0x18) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') 652.640035ms ago: executing program 8 (id=3104): openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020605000000000000000000000000070e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000009895080008400000005c05000500020000000500010006"], 0x6c}}, 0x8000) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000000c0)={0x6, 0xffffffff80000001, 0x0, 0x4, 0x3, [0x4, 0x6, 0x4, 0x4]}) (async, rerun: 32) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) (async, rerun: 32) close_range(r0, r0, 0x0) (async, rerun: 64) r2 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0xfffffff7}, 0x8) (async, rerun: 64) r5 = getpid() (rerun: 64) getpriority(0x1, r5) prlimit64(r5, 0x7, &(0x7f0000000140)={0x0, 0x200000000}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x8d, 0x0, 0x1}]}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002240)=@newtfilter={0xd4, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x8, 0xffe0}}, @TCA_U32_LINK={0x8, 0x3, 0x400}, @TCA_U32_SEL={0x94, 0x5, {0x8, 0x40, 0x8, 0x166, 0xe401, 0x0, 0x4, 0x4, [{0x0, 0x7, 0x9, 0xfffffff8}, {0x5, 0xbbe0, 0x24, 0x3e2}, {0x3, 0x7fff, 0x9, 0x7}, {0x7, 0xffffffff, 0x0, 0x8}, {0x8, 0x1ff, 0x5}, {0x5, 0x2, 0x0, 0x6}, {0xb, 0xfffffc3f, 0xda1, 0x10001}, {0x1000, 0xec1c, 0x8001, 0x401}]}}]}}]}, 0xd4}}, 0x0) 651.356159ms ago: executing program 1 (id=3105): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg2\x00'}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(blake2s-160-generic,essiv-cbc-aes-sha256-ce)\x00'}, 0x58) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180), r2, 0x0, 0x1, 0x4}}, 0x20) r3 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2003}, 0x4) r4 = accept4(r0, 0x0, 0x0, 0x40000) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x280, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) poll(&(0x7f0000000280)=[{r4, 0xb748}, {r5, 0x101}, {0xffffffffffffffff, 0x21b}, {r0, 0x201}, {r6, 0x5446}, {r0, 0x1000}], 0x6, 0xb) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) fchmod(r6, 0x100) socket$nl_generic(0x10, 0x3, 0x10) 571.201747ms ago: executing program 1 (id=3106): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x34, r5, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x842}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r9, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e20, @local}, 0x14c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='nr0\x00', 0xc, 0x63, 0x101}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) 429.180622ms ago: executing program 1 (id=3107): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x8000000000000000) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000300)=""/80, 0x50}], 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000001680)=[{&(0x7f0000000140)=""/57, 0x39}, {&(0x7f0000000180)=""/37, 0x25}, {&(0x7f0000000200)=""/8, 0x8}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000440)}, {&(0x7f0000001580)=""/214, 0xd6}, {&(0x7f00000004c0)=""/36, 0x24}], 0x8, &(0x7f0000000500)=[{&(0x7f0000001700)=""/235, 0xeb}, {&(0x7f0000001800)=""/197, 0xc5}, {&(0x7f0000001900)=""/230, 0xe6}], 0x3, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f0000000040)={0x0, 0x7}) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000001a00), 0xffffffffffffffff, 0x0, 0x2, 0x2}}, 0x20) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000440)={0x0, &(0x7f0000001b00)=[@nested_amd_clgi={0x17f, 0x10}, @nested_amd_stgi={0x17e, 0x10}, @code={0xa, 0x52, {"410f01c30f23a566b85d008ec86564f2f343c3c462bd8c0966b864000f00d02e0f01fab913000000b8c9000000ba000000000f30c4a27d5a8593a9ffff66640f08"}}, @uexit={0x0, 0x18, 0x6}, @nested_amd_stgi={0x17e, 0x10}, @wr_drn={0x68, 0x20, {0x8000000000000001, 0x3ff}}, @rdmsr={0x66, 0x18, {0x2dc}}, @wr_drn={0x68, 0x20, {0x2, 0x7}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_load_syzos={0x136, 0x50, {0x1, 0x9, [@nested_amd_vmsave={0x183, 0x18, 0x3}, @uexit={0x0, 0x18, 0x881}]}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_invlpga={0x17d, 0x20, {0x5000, 0x69eb}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x515, 0x5, 0x4, 0x7}}, @nested_amd_stgi={0x17e, 0x10}, @nested_load_code={0x12e, 0x68, {0x0, "0f3566ba2000ec0f01353800000066b864008ee826470f01c566baf80cb89033318bef66bafc0cedb9800000c00f3235002000000f30b9800000c00f3235000100000f30c422c109a24c122bf643211f"}}, @nested_amd_vmsave={0x183, 0x18, 0x2}], 0x272}) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x0, 0x2000001, 0x108bf3587420019d, r4, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r5, 0xc034564b, &(0x7f0000000040)={0x0, 0x42474752, 0x7, 0x167, 0x1, @stepwise={{0xffffff81, 0xfffffffa}, {0x3, 0x6}, {0x8, 0x6cc}}}) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x5, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r9, 0x8030ae7c, &(0x7f0000000100)) write$binfmt_misc(r7, &(0x7f0000000600)="566fbd5a8e5a838739", 0x9) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r7, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) 83.542979ms ago: executing program 8 (id=3108): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000280)=0x1ff) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x5, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4801}, 0x20000810) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000200001007fffffff000000000a0014400000000700000000050013000100000014000200fe808c3407d6eacb58c1000000fd8dba000017"], 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) 78.138344ms ago: executing program 2 (id=3109): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1100, 0x40}) ioctl$KVM_CAP_HALT_POLL(r0, 0x4068aea3, &(0x7f0000000200)={0xb6, 0x0, 0xfffffffffffffffa}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x90, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000002c0)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 76.903145ms ago: executing program 1 (id=3110): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000400)={0xe, 0x1, 0x9}) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000040)={0xb480000000000000, 0x6000, 0x7ffffffffffffffd, 0x5, 0x4}) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000080)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00118008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$FS_IOC_GETFLAGS(r4, 0x5409, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f00000000c0)={0x140001, 0x0, {[0x6, 0xb0d4, 0x7fffffff, 0x6, 0x8, 0x5b, 0x9, 0x7ff]}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x4048018}, 0x0) r6 = openat$drirender128(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc0106442, &(0x7f0000000000)) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000300)={'pcl711\x00', [0x2f00, 0x5, 0xd09a, 0x1002, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0x10, 0x3, 0x4, 0xaba5, 0xffff, 0x100006, 0x5, 0x8, 0x830, 0x40, 0x10000, 0xa, 0x800, 0xe2df, 0x2, 0x0, 0x7, 0xb, 0x4, 0x5, 0x800]}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x4018, r2}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f0000000500)="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", &(0x7f0000000140)=""/144, &(0x7f0000000240)="7a8ff777944ad210f0c4fa3249e49ccb3a55c12a0592d6d6513013fb9e5a4ea255dbf70bb6e9f303f535cffcd6", &(0x7f0000001500)="d66ff9252380451637380c87c533b212ff7fe9e147e7bb0f9f778addb570c940d120e2b6dd7bcb51a1daf0af4455c98a04bace79606d2dab9c672b70911436eed859491146f1d2aeacd84a3125879508431980f3c290919b214934faac7043f7aabb2b7b26bc8f491dd0fa545549c5e0eb1fb8f9fd2f5679bbf3fa8d00fb932c2e6ad45dd2fcf565b541bf95", 0x9, r9}, 0x38) ioctl$COMEDI_INSN(r8, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f0000000080)=[0x3, 0xfff, 0xc, 0xb, 0x660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x2, 0x0, 0x4, 0x6], 0x0, 0x4}) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x7, "ff0000bb719b98fb73e53a0000000600"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0x7, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES8=r0], &(0x7f0000000300)='GPL\x00', 0xfffffffe}, 0x94) 75.62357ms ago: executing program 8 (id=3111): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) r1 = signalfd(r0, &(0x7f0000000040)={[0x4]}, 0x8) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x3, 0x0, 0x3, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4040081) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0x100}, [@alu={0x4, 0x0, 0x4, 0x4, 0x3, 0x2, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000280)='GPL\x00', 0xf, 0x22, &(0x7f00000002c0)=""/34, 0x41000, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xb, 0xfffffffc, 0x9}, 0x10, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000380)=[r0], &(0x7f00000003c0)=[{0x1, 0x2, 0xa}, {0x3, 0x5, 0x2, 0x9}, {0x1, 0x3, 0xc, 0xc}], 0x10, 0xfffffffb}, 0x94) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f00000004c0)=0x5) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r1) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={0x218, r4, 0x3, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x88}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb1afd655}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbd28}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @empty, 0xe03}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xd8b, @private2, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x64d47b5c, @loopback, 0x8}}}}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x444}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff0692}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x40}, 0x4008080) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000840)=0x1) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000880)=""/178, &(0x7f0000000940)=0xb2) rt_sigprocmask(0x1, &(0x7f0000000980)={[0x1ff]}, &(0x7f00000009c0), 0x8) read$sequencer(r1, &(0x7f0000000a00)=""/83, 0x53) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000ac0)=@generic={&(0x7f0000000a80)='./file0\x00', r0}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, r2, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x3, 0x2, 0x5, 0xfff5, 0xd, 0x6, 0x6]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x0) rename(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0/file0\x00') ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x2, 0x4, 0x11, @mcast1, @mcast2, 0x8000, 0x40, 0x80000000}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000e00)={'tunl0\x00', &(0x7f0000000d40)={'tunl0\x00', r6, 0x20, 0x40, 0x3b, 0xefa2, {{0x25, 0x4, 0x1, 0x3c, 0x94, 0x68, 0x0, 0x1, 0x4, 0x0, @loopback, @local, {[@timestamp={0x44, 0x14, 0x5a, 0x0, 0x5, [0x3ff, 0x4, 0xb890, 0x3]}, @generic={0x94, 0xa, "8a280f9a8ed81531"}, @timestamp_addr={0x44, 0x24, 0xe5, 0x1, 0x1, [{@multicast1, 0x80}, {@multicast2, 0x2}, {@loopback, 0xfff}, {@rand_addr=0x64010102, 0x4}]}, @rr={0x7, 0x1f, 0xce, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x41}, @loopback, @dev={0xac, 0x14, 0x14, 0x2b}, @broadcast]}, @lsrr={0x83, 0x17, 0x54, [@remote, @dev={0xac, 0x14, 0x14, 0x14}, @multicast2, @private=0xa010101, @broadcast]}, @ra={0x94, 0x4}, @end]}}}}}) pwritev2(r1, &(0x7f00000020c0)=[{&(0x7f0000000e40)="edb68b04a4b0a5a01990e4e773b767c39c90b5129a07846e5f504382fb056e60ebb671b2366fc3a23b5fcef2f988ce23285b040fdedd7a857e3c09a63c893825ae2348d8f08a558019d472dfbc1403b4a53180208ad660cb9b0d7f57fe7d49cd737f84089d8f9a982c83985354dcbe8e5877a469fde6f4f5fb0d9f37d83517bfaddedb2f0103278f4b40a147fbdde1f13be3f5309e7c8d6d90a739af859c43330f89e35f2f0c332cbc0c1588da4c52be0fb59f884ea08374c446094e61b3cf68d4ad7c9ac4d3d47246118d31937e53616fd853f818e4d55c4ba63b06cb0f7684fddfb297bfdfcb3648b1fa67445e1d63818b770bfa8cc572b26262f4646669a7ff7ec1187ecdc6d76f5ac4ecf1015b611de7aa1009e55ee53e0eb94ce69fd3f78bbf0b6b71ab1ba70fd95f0c27fad12b6f3754f5d0ed62a0d4dc6ed9209a3be0de7a1b7d5fefc6d680165b10f46cfcaf5cbea5aa0c587447d169433912d35d344133f038c034797b815a317c63b9042595e11d746928455b012c1664dcddb0ac638f2485c936ebf609593d771f0d46fde25e9bc0a3c959a5466cd834c01ded80950d34fe2dcccff29002ed4a3d0c4a35aa65c05e0a96eb390302d6d09f0b796e74dd9a3be5aac4cdabe8cc80a3007d5a90e4470a73da05e65c803adae401b7cf47c7ea29977bc3b6a54373f42998b05fe3c47891abbfcc4fa69218e9b7286ee89f718788fd5c255f74e9d9d24d2fdaf33b9d6f3b885ce01e87ded5d9c5f90aa26f31783a9f9c663ff12881b76de76243dfc03f4f9ebf25e883ecfcdcdaeee21aa8a555aaa0ce4cf3ee9a25684ffa3bb6e988b09698fd3bab94e208879ab1aae966e7c24a5bb2f88ed8b651b6f17a96fac5f7458b3f44a3d8ccc5dc2c82d21aefdb069454e42ccb80bad01e0fecab01d907689f026244bc693212ff7a005833f4212a378c4af949737ab84c9449c4d192b1152dbfd58e976aff1059ecc887d9beb52f6d5eeea52e18bc9b552bad5e99d1e519469822d9a0c0db4b20a4b6babf2a386c14490d9a6a5127fdc835b7c6f2f2b33cf788a625e9535edff2f9916dcbbfe8c623a89edeeb895bbb1af3360ae77e9d3ff9d62881d0eaa57d373b861c97afa1b838340f5dce272f15106857185b797ac22a911e75f8b1e52c2f4dc6e36b60239157fe2f6af66d997e53403af85163a620b150366640ff55518e89ceb9a13b34aba12e645fd4ab0658cef988f512c8d110f8cb30b998369c91033755c57122b9d162b7375bebb3b12bd1042753fe892630fc644246cd9f5d28aa3faa288bdf5322e5fef1281b3c7f8d23f4e6fc088fb2c7d544e4bf401bdcbdf25e67a6f813c6a24deef34e0919c4308cbda5ccac6ea0d2a4d68733003044d3ff31095d0afd600a9e10ce0dcfa91918c23fb2fcb8a189d32cb8136740b0be00328952a4468700e73b2454751779564b293005dca37625a9242e3e8918ee8b328cbafeaf785c5b387ade80ec4e7cd272fedb3c04762894e9c2ab0e15442ba769eff4690fe8a24064ecc20de22c9df4592159e576424e249b2303befbb99cffb2680b69a9e0f1d42ea8aead5cc5b5e82f24dcb9a9acddd8a3e7298b447e5c89db3294f2929881fa4a4a986796f8895f1e48701eb80851e2f92001775c446f9fae07acf2096ea62f7cda9c328e3abb398391fa39e5de756703b97efc2dd4af1f8715bda691e66e77751130f7dd4e18d22e73e3d8fea0be0a0c2d8d339726d5dea15c0e8fc0bc88753427880352b3bb0063e3ecdc0a371265ff0c01558a7602bc1992c398e6f1daccc15f77b15cdaba690a947c4d2437f79d2ea710b2ecdf1689af38f2b7df9a58a5920712d36ca2d48ae05d391897805e75a2d09cb820ad2ac7f316b496fc2eae94a933d04678676b28709fa7bb5c029bde37ec92e7f6368a7de753b2c7b0362b154844c1e2a985155719a59e1550277e30cd04d0307e476b33206baaf850594e9511d7f786596cae7299438aac4d0c124424db690d6047deb58e6b0f548a182be33af84f6c6dc9ddeef3ef42a4436c15c7e0cd1103738d900cc80d60b3db20132108321dded1d8da07ee819eb3b859b77e6f4142ea8f14ebaad565c9a84a205a8f6dc464e91e4ad800b0a583628d4ae2b8729969ced1f111e3aba28d1568ea8a344bfefe2a70c7f68fe00e79c0a075a4a1a1054337f278b7785b69fc224637fe99ea1c9a5ebb05a447166cdebf644e3b2b49698e45d49ce7a88a1266972394e16814b39eaa88cac6428a32c9b14f9eb882c16146378629256b5bf9f24c01e40283195b4107ff708cd6a717598e6a275bd43976824afa981047e3d4a34e8dac82b6aaac85bd7ffa19dd31fba8af6f79ee3758bde60dcb841318628ead9994ef4c7730e7e94b39fe3c38d7e7518597d83dc7063db64b2509c99057fe58eb853441436f8f7b6ec82876c030a4c6095fb8f9b60932bd625c2e62b6398273314b3a5301c907a8d8e2187309f3468482b09b0253af6e3bc12d8ee986085c988cd034795f930fccf7088c2b9474a5dc72f4de528eeec9fa2bfe20e67ea59db40aa70eed19b3d2fd21850b4ae5ec3e42fac304420ac7784f318591e446a425fc9e7becc47052d26de1f98f9d4a8b77ef71ce36f9e174160929208a86dfd54ecbafa2296a79e13913a21140922f00d7461684f981302a2a0d2ee715f93b0e99cf3929c3cceedc4c49eeedcf23f1a41dec3bceec2225864765a56aa9c20cf4e591a4dd1e0d976a28035e7436ad84b7094a099b30ce8363c3cfdf81c47b238c89af01bcc2ee850bc71f60d03a61e335f614a81203650f4840bff9b5335c962bdb9d1763ad4e0a8e00b916ce0aa0fbfac32ec13d5e7f78dd32150820c1ce0275029a0e9bdb7f3c4bffdaa98a0b7ddd754a01dcf9e5fb592da51240859999f3a2d458b79307ff5bc00ba7cb04d927d4ff43516d645f8d5d5af5bc8c3571b61f4bb5e78c1a1d93afce2c616e7b5e9195ec28878ae85ea53609bca03ed30b7248ed188c585b586b45df734079f0171a66ee4e0f6b2547ca0b7f2570051ac9b8ed98fcfa8d4e82936c4cc589c9338c5d0fa8ec58348764ef16576a921d8bd477ad030bb410d0b05436d925f1ed7031eb4d3fbd97e04296a0cff8b05f898899a2097daa554bed9db3e8dfa5cbce4f0e9a223be5171928179627fc8d121af9e18245b7d944a25595b910bbcdfe3ef4cf108d92d38a0c9051e5a6c7740e849be223038aa75dc3b189d5b05fc67e4f075cfaa5eac68832e7d8a2857a014b00b3539bd4dcce3686113b296be9a814db69fb59ca9868deb8708cbd088e7d6e04f96690615672749da7b761566503cd9fa4a97ba965cf3797281d70421e0aed8efd65e59af184b558bf62bd3945d6b4a9cafea0e7eeca8b8036aee6590eda9f3f99d795bf04a259b67a13617dde7c47f61164aea52cdaf7be91908c5be49cf70f5a18d30135a58bd3214cd441e8c44c8bad291f0225f37d8246ca91c94ce24f1277f611c19c0b6d390aac0f82080b5371ca1ac9a2e0c4c0d9456fcede12ecd3b3e4494aa9bb0b1e40ddf5057274467cffea1cd22662a415138e77bb3f57217369e8b7dc04732478682b9ee84fcecbd382bb4966da0cd4b1f8f37f0d39732ea600148280862e99c844f4d55ead4c9a621c3b1437d1caf0774889764a71aba8a1ca0ec59285a635804266be974c0947943d0f9a628b258534b1fc262f3e897b0cee6172abf0ac00ded373a75abc42f9b377997a435be5f360ae3ebbbbeade5816394364f242bc47811e873509a665b6a6a319c1ab9402560fbe160770bb729a087c67c784fa5a136711db24405b87450a736decadc029bc2f7431c682defe89021f961f720d1bb14bd8dbb10f713c8d5c3f29925dff10ab769280d4b88fa878116d3a8308629fdb510f5cd9db1ba49bb607404159f295143fa6a5cc0c5ddd066408d461cad63217b4e5c3e3ae9465490ee39ad4041cc20a04bafecc6de0002d545b1c5e52e48462209f96a767ecde3efcf60eaea4bc6c46b3f15c8bfd5a3b5eb45bfdbd5aeeaa0e92ccde4286063eaae796991f522458314211934c645fc017cc301f329ded328249e53bd1d78f0508cb134b5b1795b73432c6ab162dd4bd8dfa67cb354e1f291b7972ea6726a593f3337f359c2f8bab9bfff1ab453e9724d3bba00aa923020776f4b775775ed6bf4039ad25e271eac992ab902f4c675f6674d407d953869f44df14eed6ef00c8b4b233cd1e360760d7a6318187c20b1e4bdbccf516bf5162a16962f1a5e152960cf06f23d2e928343d9699e39fe934bfb79baa101f13438e9821e760f27a0ef5222a921131f464efcaaf9afbaf54acfa76b45c86daab95a0272f440e670e4f75ec539f1f76e50133a9453c660e64867ad9b1f2e13f585760c78b8790e762fe71a0b75e9e78d0e4bd92c02121449982de27b113cf4d7624c648d0996db07b9b322a949a8879860caac2e47b3c64480b4abdac08df95cbe2462f8079279c0ac4796e1fa9357b02061910a06403e834d9d24e35bd4144c721d5c02bdd66af429147dfb811ca3a6d3448883b28f0dea5b6e751cc2e9a20d1d31deba8651f388908aa581aec6d821cae6b93a58d52a992dade20cbec76321179c3a759c5b9b7906970d4f17fe5b7c25454b8b12878f8169dc431146cd6eb57e38348a4a87407e044bc05c20e18fccdd36d4ac895192775580c7f244a2830a3017fa1158875adbfc5e888d2f4861838aaa54c9ec2c5e31f9ef8eefec1daa27e48a00efa54983fea7f2a1690b93222994bed7406312c5cf4bfdc7804bf320043a716d446a5e504f32de8273695ada35293e7d04d8b98391e5c9c607ef0b6e6cc6a910de28312e4cc35e989baa2178d3a884e8ce271d5b39964ffd8227ba7f3d6f0b128a36d42466e3b177c35cb576197ec7a06023d70b214a2525face931fcd85a67cbd12063c2b535bbef1ce07af638678b521e6f1135655dc6375381b8a3d13cd8860d1778bad0376dd2534a2213619c245fa74a70fef5288d449092898fdac55bcaac689eef56ec5d056ac292b95c42ad16f434d7c16f3fab30d9c9e86b826d184c5fb76b09273d0dbfb2f2685f3804d926d2960f37b8dd11c454c80b45699a4c0fae8f68a635b6aae85d2194c3cbb38537a7def48274aa37c5c0a0d9456627e30e5b6724a66ae9e2060a15f027643271c66f425539b0eea49d84bc6f5938f2ba17155cf2a7889349ef009e669ce70014d7494992776b460f9b7b9ce26fe59a4fd913725938b10b04b637c1f378d79383714ac4b2dcc94c62c98f0518cd865d344ba06fedec4e47cce7f93463b709821c4b460e85accd00f367f7fb7545d87e960bcb450b1bf9dfcbe6e188fdbba9ea4c79eb10ffac93a285a28f958fe934375d503c0efab3903d0846555acdf6c4224d97f39d4743a53e3e293405e2638d792d567c136c61ca1998c51d474c041aee00bedab260fde3065ed8ab29247ad8fcac32eb8c4ea0a029b203433a80ce99bd53fd3727887e44fae7bf54340ceba74efb29e01ce6d4c630aff9d4d99ca619d372aba3758e99ff7768075033469429e4d3874ee4ef14ff997677910ad4a703de3f59d9da3f1245808247b0da40e4e4880e0e2be2887cf7955d9f54aebf7bbbd20e560b40cf4df88e8309766ac1361fee68c9162fc8a50ab174985f3ca86a606d2e82d639a90b49eaa74bd7af1b2f229a90ffcf59f352e2b689ae0a0f89b0cd260b797da1f8a480f9b7ee62897bd3ac5a12efe72d566ee7ab", 0x1000}, {&(0x7f0000001e40)="e6f627d5af3d5f8dacc10e55e29cb42f8656a5512cee1fb8575ffc79612d5b09aefc1aca18cc4bc58d48d2be9151eb47d5ea1d40f2750dd5526d313451d8b123cd3c8617fd5b547d5b8a43c82e6d4295ccca5a93f588ff66d517df6ba2ff5281e7ee692e5464f05eb8de55147261", 0x6e}, {&(0x7f0000001ec0)="451f143220d2620f7eb5d70c361bf9b9937e99020aa61d5e1ca8f1105dca409c503e4250edeee9428175c8ef68df69449e0c9769c0b6ed2064fd262e5b1e402df425a39fe16abd30e73a37da958e1e6791266991b5d70c6c687993ae4ef855cf96e15d1b8444dec9e1319f92daa8e93d4c022f3671d94861d05e99f252054aec7f6e4a1d001fecd6d9aab085afeeaf560153662fcc5cb4990920bb4a75aec086b47d840afadecf7b99105621c995e9923e5f286e78342d3e032cfc6c", 0xbc}, {&(0x7f0000001f80)="7ff4d49961239791d0a942b18a773374449193078d6c601ed5ff00d3b9f46747b3b770bd744d9762770e1b81d174c39c62c38f7de18d7c9cad19bd1daacb3358644a7be35babe003cb19a86fac387fcf0fc15f0e14f0fa", 0x57}, {&(0x7f0000002000)="62bc35e5e2441e346b7a4534", 0xc}, {&(0x7f0000002040)="febdd1a413a005c06ae9fc954e251572c1c66fb0afbd147630455b9393a1d2d3f42b2ed62730f7ddd40df9164b85df4ccae6b1a0e1e6c164fcba0a3d1803bbfc8068130a26e003297799c09d755e1e1edb26b221da8b822a22308b3e459dbbd1dec7f3f692a7b309683a4158", 0x6c}], 0x6, 0x1, 0x5, 0x6) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002200)={&(0x7f0000002180)={0x4c, 0x0, 0x710, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000002280)={{0x2, 0x4e23, @private=0xa010100}, {0x306}, 0x0, {0x2, 0x4e23, @empty}, 'veth0_to_hsr\x00'}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000002540)={""/32, 0x0, 0x0, 0x7, 0x0, &(0x7f0000002300)=[{}, {}, {}, {}, {}, {}, {}]}) linkat(r0, &(0x7f0000002580)='./file0\x00', r0, &(0x7f00000025c0)='./file0\x00', 0x0) r7 = syz_clone3(&(0x7f00000028c0)={0x10000000, &(0x7f0000002600), &(0x7f0000002640), &(0x7f0000002680), {0x22}, &(0x7f00000026c0)=""/166, 0xa6, &(0x7f0000002780)=""/222, &(0x7f0000002880)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58) ptrace$ARCH_SET_CPUID(0x1e, r7, 0x1, 0x1012) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000002940)=@nullb, 0x0, &(0x7f0000002a00)='./file0/file0\x00') 2.045613ms ago: executing program 2 (id=3112): setsockopt(0xffffffffffffffff, 0x4e5, 0x974, &(0x7f0000000000)="044fba8383d932e7034397a394d45c094e9037ab293eaa2e755bf4288e46c4167b30aef56140c6c9490653fc876125c2c9d512e95f1a4ef262d339c30a16ddef40df3ed822bbf5fcbad5e3eba2c5bfba427d6983e34a5275a673b431782592f887136da5aeecee125f31731e8e0ea416b556bd88bb96065dbbb5e631d3f563fb8e9cdd703d07a82a45da18956104b7a368d5b89c", 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)={r2, 0x3513, 0x2a, "ed6ff46714494a8c81c10d5c52642017520b4b0e61286c75c9f6849432a1e4e438d863c443d5188c96c5"}, 0x32) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f00000001c0)={'syz0\x00', {0xb, 0xc04, 0x7fff, 0x1619}, 0x4c, [0x0, 0x6, 0x8, 0x479, 0x0, 0x9, 0x0, 0x3ff, 0xffffffff, 0xfa92, 0x1ff, 0x7, 0x24000, 0x88d, 0xfff, 0xb, 0x9b, 0xa9, 0x3, 0x81, 0x400, 0x8, 0x0, 0xe136, 0x2, 0xfc, 0x7, 0x6, 0x7, 0x9, 0x3, 0x2, 0x1db0, 0x7, 0x200, 0x1e10, 0x9, 0x7, 0x3, 0xd9d2, 0x7, 0xb5c0, 0x4b4, 0x8000, 0x0, 0x5e, 0x7, 0xff, 0xffff, 0x9, 0x5, 0x3973, 0x4, 0x8, 0xa, 0xffffffff, 0x7, 0x1ff, 0x6, 0x7, 0x3, 0x7, 0xffffffff, 0xfb5e], [0x1, 0x3, 0x6b04, 0xe2, 0x116, 0xff80000, 0xffffff39, 0x101, 0x5, 0xfc6, 0x2, 0x0, 0x8, 0x1ff, 0x401, 0xd, 0x9, 0x3, 0x0, 0x10, 0x6, 0x3000000, 0x9, 0x0, 0x4, 0xc, 0x6, 0xfffffff1, 0xfff, 0x9, 0xfffff181, 0x0, 0x0, 0xe0e, 0x7ff, 0x8, 0xfd00, 0x1, 0x7fffffff, 0xfffffffd, 0x4, 0x0, 0x7, 0xc, 0xf026, 0x7, 0x4, 0x7, 0x3, 0x4, 0x7, 0xfd9b, 0x0, 0x1, 0x6, 0x5, 0xc48, 0x9, 0x0, 0x0, 0x8, 0x200, 0x2, 0x4], [0x4, 0x7, 0x5, 0x8, 0x4b3e0b1a, 0xb, 0x5, 0x7, 0x0, 0x6, 0x80000000, 0x0, 0x1, 0x2, 0x8, 0x80000000, 0x8f, 0x7fffffff, 0x3, 0xfffffffe, 0xd11, 0x0, 0x5, 0x371, 0xa, 0x7, 0x1000, 0xe, 0x10000, 0xd, 0x7, 0x6, 0x81, 0x1, 0x2, 0x8, 0x3, 0x200, 0x81, 0xe, 0x3, 0x1, 0x7, 0x7467, 0x80000001, 0x5, 0x3, 0xfffff710, 0x4, 0xb, 0xbc6, 0x8, 0x1, 0xffffd275, 0x0, 0x9, 0x4, 0xd, 0x7fff, 0x9, 0x4, 0x54, 0x79, 0x5], [0xfffffffa, 0x3, 0x80000000, 0x0, 0x2, 0x1, 0x7e98, 0x100, 0x3bf6, 0x8, 0x4, 0x100, 0x7ff, 0x5, 0xc32, 0x4, 0x9, 0x0, 0x7, 0x3, 0x8, 0x7, 0x8000, 0x3, 0x0, 0x4, 0x9, 0x7ff, 0xa, 0x6, 0x6, 0x4, 0x2, 0x3, 0xc0, 0xe, 0x9, 0x6, 0x7a, 0xb, 0x3ff, 0x1000, 0x9, 0xe7, 0x9, 0x2a1, 0x4, 0x60, 0x2, 0x80000001, 0x2, 0xfffffffa, 0x3, 0x4, 0x8, 0x1, 0x0, 0x8001, 0x9, 0x10, 0x6, 0xd, 0x7, 0x7ff]}, 0x45c) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000640), 0x240, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000680)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000006c0)={r2, 0x87}, 0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r5) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, r7, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0x30, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffff2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x20010, r5, 0x9683d000) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt(r5, 0xb, 0x5, &(0x7f0000000880)="e4c003e24ecff50ff652a4bfbdcd74f5949fb623c49c711bd219defe5eaa653ce760ae9695953a935c789e816af8c3bd433965790e543d14780ea48a7d0010b64403028fd9963558725dd54cd5712ad45a5975a28f2a6e72e709d97bae10fd85b8259dc961614e4ee7b24964c4a931ef7468005fae79de69de2ca6f27f0c8e4b9d592b57175694125c7b64321a3dcd8a288f8ab9b2f54e6463c4e727285ef5d5f2cc66f87520ee64a9fca14e4352bb85", 0xb0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xe4, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x50, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x1ff, 0x1ff, 0x3ff, 0x200]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x2]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x84f, 0x0]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x7, 0x2, 0x2, 0xffff, 0x9975]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0x3, 0x3, 0x8, 0x0, 0x30c, 0x2, 0x8, 0x0, 0x61]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0xfff8, 0xaf47]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xe3}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc8}, @NL80211_ATTR_CSA_IES={0x38, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x7fff, 0x81, 0x1]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0xcc6, 0xe5c8]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x2, 0x0]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x16, 0xf, [@mic={0x8c, 0x10, {0x36d, "8bb51eb808c8", @short="9a0f0413f748c9f4"}}]}]]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x24}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0xe4}, 0x1, 0x0, 0x0, 0x200048c1}, 0x1) ioctl$BLKFLSBUF(r5, 0x1261, &(0x7f0000000b00)=0xd) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000b40)={r1, 0x3}, 0x8) r8 = io_uring_setup(0x5182, &(0x7f0000000b80)={0x0, 0x9418, 0x800, 0x0, 0x35cc, 0x0, r5}) io_uring_enter(r8, 0x57cb, 0xfecd, 0x68, &(0x7f0000000c00), 0x8) r9 = syz_open_dev$sg(&(0x7f0000000c40), 0xa5c6, 0x20) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r9, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f0000000c80)={0x7, 0x0, 0x1, {0x2, @pix={0x3, 0x0, 0x34343452, 0x1, 0x2, 0x0, 0x7, 0x4, 0x0, 0x4, 0x0, 0x3}}, 0x5}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)={0x100, 0x48, 0x11}, 0x18) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000e00)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f0000000e40)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r5, 0x3b83, &(0x7f0000000e80)={0x28, 0x4, r10, r11, 0x195cc7, 0x7fffffff, 0x9, 0x31ed4c}) ioctl$SG_GET_TIMEOUT(r9, 0x2202, 0x0) r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r12, 0x4004af61, &(0x7f0000000f00)) 0s ago: executing program 8 (id=3113): r0 = socket(0x25, 0x2, 0x8000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xe5, 0x16}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x14014}, 0x24004100) (async) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r1, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf0}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x980) (async, rerun: 32) sendto$llc(r0, &(0x7f00000002c0)="04b3d611519921870114a357a38846a0ffd66430c6f28153ad839a98f0997aed424c67a68c812e476dac4fdaa112e2eb8401fbde3adbc2b4fc65f082a6b320132fe86cb3fea6ead5842df9b2a97658e389b9d818a30c574c1045a77e6fd2ba662ed5ec871508c46efe3437ca17bc00cfcf02ccd9044dab57f86ec321a68ba6c9f6d6cbb5d325b56f2c1f6d77abbf1d7babb0302b6e2996bdbab6f040ade199914a67629fc87745ee6bec4d51444eb6d6dd755ce4fa929b1c19dc13c74eb5645fa6997f3a43106483a1d82642bda7bd48401c142b2dec1497d1e56e5fcac1e1e6ea6c269df436c4f6a2e76fc26f4b7d30d620ae0f31f22439dbf428819fbe982910b2dc337776b7d2709668935fc426f1e1c855d2fa7b10546a15343818e556ee095bfe7934d91b2b92fbb1e6fd3d71d1ea1700794dab387148b449b94847444bb8317037c636b45d6ac1a9b3e1f0a1b0f3115d207a4621d340a944a7ddae76161f733651da9425abbc5948742bd815042ba593a40bd3d5910c7dbd10f10569e79b130ae3d744e1600c94e4747610d9834ebe4acfcaba311d9314ddccfec37c399d91c4f922ba06a665c8e153e3419e0067b500cc96d9d76d49dd5dcf9d1a8886dbd24eac4be55d8468cf10647f80b44104fec124d1df628ae12fb49f300b740126a66d382e318cdc592e3da54bde98af109e3d8987a08e5908f801368362d0e0f7c94683c139472e9592c5e3277e2cbc2cfd8e53dc7a829a2d01144e2ba44d39050af13e6e2b1accd1be531ad195c27626507b99a26fcdf3d4b2bde9af63779b9c1308a682414bcb4021ffd4a3fa04b8a9b9f7cbb67eb197687f85778e93c2a664c922aeba9bcd22e7e401e830234e76ed84a3fd445ce8d32e56f1380da5c65751924b1f25391b423d5b575e23d4f1ede897f245be9af9ddc6fd168b279724086cbb724876b490b64b8dc7874257a705f375aa68067a0617eb0c4651269da8ccd6533d15d45a47d5a181a7758b9ee95789a7ab53f9f63d55f32cf0b6f0254aab17d0b4944a874f8faa4ea6605f4d861fb156d2dc61c5ee4793496eeb87e570e217723e0500cc8ffa45554a46843a39ad5553ae40155d56600ba85a14988bddd255ac37d26441fe23725343d1f5e9ec8e5519351f2b83c2ebb13f1e1ddbb37cace34dee6fd0676670db44742d342c934ebb4a233a98a67a26c068a39e933b23156b86ed6e416d51212dd013e53cb584a36eb99c1c2acaef37381c1d1acd861257d1ebfed7d65f877bcedf3cef767e77b06f510c99cb5dab63f78714a0a66720a91e58ceb97b73f8639f6fb0f87bc9471719c9dcec8e9787d1608f34a435b96ec67829c685fc2c25c270338171293ba2d37269f748e9a9eb53525e92997bf585856b938b8397da574ae9d7a066c7c9a9986962a07e4f7ba5e3a3871ba423db8723b17650f596686b540f759c522d26e6d797173ed4dfd83ad8d7a324e8600cc01580a300f92673e1be2f1b0dda944ccde2d117d008b2c7ccdf5227f374dc69ea1235c3526450b7601c19eee56afc74638d4b20d675105fc06e68dc7af88f040d8b1801cde474e0d410b9854ccb1cc0f84f12f9dacae9c3087e23421e3e898aee8aae5ff80b484497c0f68b37eeb08ffd39a84c85a047a3535c2d8cc8ec52ee1a13c478f78eda1629ec85f65bb79aab1fc962162485372d0a60e324e73f8b3d6fabe13c7896875cba6fb5617765c884305c4b1b260be1e5ff5419626c8f17f093f365bd891c8204ec29aeaabdb56d6ce26d1d5dd94a1d91b81d470062c8fdebd11554dbaa1633df32f0706b0f5dfccbe17a995cde576f9d7f566156c6c3efd5f3bc2bd42c132f26addb5a7f19b08649644abd2bf7f9f063c9d5eb20d2fdffdef8e5b286ac1b8f0156762ef98752c163899b68079fb3293ffff36688d96c4f6d577aff8926d7429f5905c4b322ff32c9b263dec642e342ca41dfb8139ae456fa924efb49cc3e0ce8e77ad267131428751844a4e47e238e0b2f480014a913a22c3ce08696bc5607ad142ea0a2b9fc19e63dd65ee7b39034553ce9542895eff3bdc08a50508465f3884f3830f60a23f410e1de647d59a2607693f28bd27c45ecdadc024849f3fc6a6860ce335651e30e8ea003447257547a2e67e4b0c34a631c8d1500c6eb1754bd15f4578cf8f8de924503ebdf30c739aebab0937fa50f44176a9159a360e1db83955fef89e2c7effe91a86526221d15bc1b7a003aec1894a50bcfd0de48af8ed347adb3ac8b879ac6a97761475204fb9635e5fafe499dab2e48873b11b9fd361c94930e6803da06933545ef913e5e05af7c7831a9e99b820cf3de3307dec06857248971fbc6ed2e3123dc6366cc527e05d8c73aa2c5dbf07e12884d07f648cfdbef274937e57ea68705b988015c0cccb5c81c7d0b1b9b4901277155d72bcc27700965f66fa0f3b1afec0dd3842a1a6e29fb07727a4f3593ade39a903d5c89a1e6f7378a7ec2c12cd5e914844fceea3ba0bec48d5bfc42a4d128a1657c3b00316aa31aedda0c7be50f3c577816ea714e82c776d77c7437841c01f0e42857c64f96682965f4f70ad7c947c6dd75c96bc2c082e97852f672dfdf92840d23af3fa01aa94528abf8a286008879ec2eb793cd1f8b64f5b30f54858598bfcb3df26938dac92555650da799760fc32097f0106cd39bebf5652ec6cadc86f270c4be518e2c5c58d2b0c29a22cc703d9b5ffed8b0cb20f97492cec3ed0d29098ee912e7e2805c4ff5332a189d5307aef155a7aa710edae28dd11151ce13df7fb91128334e6c0ecde1302d1acd13b48a501b1a0f0ef1b2e81e0a09854aac423b081d516926561176d9da8d645d09c6273e74bc8018ac1640379f27d6635912ca9a1b0b24f2e9b4ed653014f95c8a0efeff4c2fcc3587a78d6f1670fc6fa2cfc7a7c89b5064d7d100a7cd86972c94fee0546281f927c52a5ab538703cf6b2a5490e2669c6d62b20501ccfa3d9806d8096c87f7a03b9cf828df6ecf65cbf1416893fd8450c50e314e3f1edacede6ca88849efc042c17f28b5ca5fa7452be040869668078cb9401338b75d82c1ec55b84ec1893e2d30ea9a65d93bfc956402e9b411ce40e8dacf879d3a60019688a97848a50e1ee0e7e1766564d3ed1d547e6da43c0aa52ddc606a2e94b91ac18e40458ce11f8702de3cae44077caccaf26c1f2e7912fdc8267337a23e4e4f838b66e88a6a1d56fcf6fff1e4c189eb67de26f91132e35bc8c5b07d45f771c1ece5e69139accf727d8d9ba0531f880cb5efb83fc64d62b19563d3eed9efc100922ac5bafa34bd2e30a795fde447af6021a44102e8e1eb1eb22e01ffdb4d878f99d12e0c72998dd10a46794f0aeab191148aba80fe6120480ac6e5de96f680367db6bfb6c8f9f2a49938e1859eb5f6525300ae8ba6cacf6c353c27f1cf0519d054c1b06cbe5df30eb3b8c17eaabdd6b4a0cfe57e0920fc7d282eeb7efce088c615057c8a7886fd377dcad375d6e87b5549fee235650c7434b26e8483dbbbb5be66b4c57a9fadab0bbbfb162f1974e7a5776f46bf6c992cf49fe5a3f23b6f13965ef7c97fe8e4690078d4e872cefb5b2a8e645e0771790b3bc5150cb4e137f43b753d1ea1e8369d6df2e9b36e96131886eece13de9ccacf42b7544e888e762259a9972b00d4c7ff03b2848ef260ba8069554ceee97b8c09c3b0a618ad5b81e085a60240a376d03da3103cef65f3553004e5df624ab6145a401038e1b8155dfc0136ed2b9a70f3241d0b63315ea5985d8ffd77d3bc213583b7aad6b601800b9e6fc52c408c80fce2df0ea19ecdad128c2d9fbffc04fda0c48f7c166ad68077b8144ca797feea91289cb8c517045e5bbfee820656e51e760b4e0c8bfc11b4e5b34a33b6976a7f54dcc6f621973a4e2b630ada46f55c0107b537c4fc0e4ee666f7b981cd278570e5c74a358a8009db775bb90a51d18d81b72551db385c75bd2efcf1a337dca6ac8f97ec13b69b6219b525119fe3aab2dde2dbcb4a6353d1f35f2dea053f03a0bfac41c220e402829ffb22ed5c05a64979f7b5c73a25bc2130bf0a03e4cc35695388e2f6cab097fd6ee57d4853dd0b61e66a2c0678d0aa256d75171ceacc709be77596d7cdbbd944d79d5ab1f0ef1ce1d7d3b4c980ef420b4e7698ffaac332dde0ee63c46f30d4aa493f7bc004162f397e6c1ba4fd00917a1b24a225fecdbc6eae8b71ded5e56565b14218dc9ef73886500ae923539e93be0ade823d9531cd1fef111aa486ee119ac7ab48165ad2424e354eb102032e13664f67fbc7dc9aa3b3ba040668e0966ab90ccd2ba879774b20a67d62ff7910f97cfa543d70be86ec5a048eeea31caebe336e288446e0956d41a320b44a5aa83a672ddf738bc6655e3a6088fe97b650926d56eaf4a5495bee6049eca0e1a7c4e64df1a39171d515859f2de2f83e9c12a88b2c9bd9886842c3a6d25ec4a81bd76579256310e285727ee39883c82ef02c3f404885fc05eb0e9b0d66a6c84e3c1c3467baf9f704491beff1b9d6e7674e0fd1b2c5ceeffe4c99bcae69eab2246a77ee202c39b521c244c99619bc1f3bd1ec7694cf5b3997f55108628308cb8207b79d7ab3bd434fb9ca91a9898427f48694fd4946586e8fa568edfe5562d8c57b4cffa196660b1d329b6ed34b281dcfa3a1fbc088db859b77d89fa1547e83728f4b6cfb30b4e17840117625c1cf0a1bb4901547c8aa32bf87056c0ad01fdceb3f08b063192172b80d87ffec968ff7ba6bf1e2789290da4dd2cbb16f3225b0c383c4af78d45e94866260d16f561126d66c27ceb1b55d5c9bd3b69307465334d376f89855aa198d8cb044e970266a4ae86eb7498f3e5a84a0d620254cc6644f129243fe229f76600134eebf5ab9a878e9324e9ed452dde74319ff6569e97fae119d0a310261cfd2c4ca71f300374cd18cd4f2655d15998218fecda6bff035b2880c7c11e409e668245465fcffe819d0993de0fc75181e6f443ec6bc798d3e4da8d3d8a03bbfef581942d846dedcb92738064fe738d112261f3351d4ed3f56cd1ac0451c06f52b01745934474e2cd65d6957e4b12e3d5981807f78a7c620aaf26daa584e20265ad7c7f154255b1bfab453d95093881e6137cd9a4fd6352b57820ad88f5831d08e58b6d8868f7b63489ea159fe8dac460ff71dfdad9187dcb9009fe765a4c905e2ce1b12b000a79635065172252c068e3e607e122d869ca0daa4a590991e775ea1e64b06245a95c5c4fc056324b1550d841bb95d235f09375a9a20be188c9077e44fcc589f8e835ce1ae4a3435855d9e4b484b178e18d55efbf4fd543a6b9ac0268c078b7db14f33c864a2a43bbc6a7a05ec4332ff7353a6a0680ca57248a77f0f12a8601ec8665064a59ba8a59b660a9fdd94a2ff76a0b99edd91afe47013729643f863fcf7ee995e829f0746d9eb522eb306d561a6ca46f8585510f56f64db80993b4b1122214a489f8902a791947884da7d30ef427abde4b02fa0c90239ee297e6a690913215d491725acc44fd11d6629d08f7827d3f9f6cb1dfcb6e9ce612778372f63c35346e6c4c5200cbd6d6348a255208ebad0b76310456a22984527f0e66df6120a1d1c989510977311b10838ffb916c7839cbb86888fda12ad95a3a20a8e1a3e92a51a6e20f6488cca41edd4801372fba6d4e691b51532dc8b3f772bc8088ff10e4f4f99e453a4adb9a9f544d75227b0ba87b382daf6f6a26e5bd0da171131e25a2d0c1f999a4b3446ab8556422ca7c588a1d5fe8", 0x1000, 0x4000004, &(0x7f00000012c0)={0x1a, 0x108, 0x92, 0x7, 0x2, 0x0, @local}, 0x10) (async, rerun: 32) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x28, r1, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x6e}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x80) r3 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000001540)={0x0, 0x6, [{0xffffffffffffffff, 0x0, 0xfffff000, 0x2000}, {0xffffffffffffffff, 0x0, 0x4000, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0x8000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x10000, 0x8000}, {0xffffffffffffffff, 0x0, 0x10000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x10000, 0xfffff000}]}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000001600)=0x4) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001700)={'syztnl1\x00', &(0x7f0000001680)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x7, 0x0, 0x12, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x7, 0x5, 0x5}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000017c0)={'syztnl2\x00', &(0x7f0000001740)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x83, 0x5, 0x15, @mcast2, @loopback, 0x700, 0x701, 0x9, 0xc000000}}) sendmsg$nl_route(r0, &(0x7f00000018c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)=@ipv6_getnetconf={0x44, 0x52, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}, @NETCONFA_FORWARDING={0x8, 0x2, 0x4e1b}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x2fe7}, @NETCONFA_RP_FILTER={0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r4}, @NETCONFA_IFINDEX={0x8, 0x1, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) (async) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000001900), &(0x7f0000001940)=0x4) (async) r6 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000001980), 0x40000, 0x0) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000019c0)={r6, r4, 0x25, 0x2, @val=@netfilter={0x0, 0x1, 0x4}}, 0x20) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001a40), r6) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x34, r8, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x34}}, 0x44011) (async) r9 = dup3(r7, r7, 0x0) close_range(r0, r9, 0x0) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001b80), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x38, r10, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x200}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x200080c0}, 0x41) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), r6) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r9, &(0x7f0000001e00)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d00)={0xa0, r11, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x20}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) (async) r12 = syz_open_dev$vim2m(&(0x7f0000001e40), 0x3, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r12, 0xc0d05640, &(0x7f0000001e80)={0x1, @vbi={0x6, 0x7, 0x5, 0x41415270, [0x7, 0x6ee], [0xfffff3d3], 0x2}}) (async, rerun: 32) syz_emit_vhci(&(0x7f0000001f80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa4}, "41eb10b1018fd5caeaafc066a82758b15eeb7df76c6874c445b995440abf916067ae7eb991c783ef5bfc50e32bae6c944247885ad27890ec8380ee3b7af702a08dfcfbd5a974326d2de4008bfa001af280a728aee065438c59821f7de5134e9ca2e0cd98020c8ba384a41be45b0e052196131ca8acfee5d56ff63af51537cb4117371c1cef6c84588458037efd50e005b5a37829c8b85317899d679a80b65fe4f3109a4c"}, 0xa8) (async, rerun: 32) pipe(&(0x7f0000002040)) (async, rerun: 32) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002180)={&(0x7f00000020c0)={0xa4, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf05c}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004805}, 0x4004040) (rerun: 32) sendmsg$DEVLINK_CMD_PORT_SET(r6, &(0x7f0000002440)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002400)={&(0x7f0000002280)={0x154, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4814}, 0xc000) kernel console output (not intermixed with test programs): set [1, 0] type 2 family 0 port 6081 - 0 [ 241.345205][ T1157] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.403414][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.406883][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.461697][T14357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.467604][T14357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.592199][T14564] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.2395'. [ 241.596933][T14564] netlink: Conntrack attr has 4 unknown bytes [ 241.604496][T14564] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.618618][T14556] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2377'. [ 241.683271][T14571] team0: Device gtp0 is of different type [ 241.773988][T14576] Cannot find set identified by id 65534 to match [ 241.807941][T14578] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2405'. [ 241.891025][ T5929] Bluetooth: hci5: command tx timeout [ 241.898104][T14587] mkiss: ax0: crc mode is auto. [ 241.908988][T14588] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 242.020932][ T40] kauditd_printk_skb: 311 callbacks suppressed [ 242.020949][ T40] audit: type=1400 audit(1772960138.809:16639): avc: denied { write } for pid=14586 comm="syz.6.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 242.167282][ T40] audit: type=1400 audit(1772960138.949:16640): avc: denied { create } for pid=14593 comm="syz.0.2409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 242.178462][ T40] audit: type=1400 audit(1772960138.959:16641): avc: denied { read write } for pid=14593 comm="syz.0.2409" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 242.186036][T14594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=14594 comm=syz.0.2409 [ 242.190103][ T40] audit: type=1400 audit(1772960138.959:16642): avc: denied { open } for pid=14593 comm="syz.0.2409" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 242.207995][ T40] audit: type=1400 audit(1772960138.959:16643): avc: denied { ioctl } for pid=14593 comm="syz.0.2409" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 242.222031][ T40] audit: type=1400 audit(1772960138.969:16644): avc: denied { create } for pid=14593 comm="syz.0.2409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 242.231491][ T40] audit: type=1400 audit(1772960138.969:16645): avc: denied { ioctl } for pid=14593 comm="syz.0.2409" path="socket:[60894]" dev="sockfs" ino=60894 ioctlcmd=0x9417 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 242.242506][ T40] audit: type=1400 audit(1772960138.969:16646): avc: denied { write } for pid=14593 comm="syz.0.2409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 242.251747][ T40] audit: type=1400 audit(1772960138.969:16647): avc: denied { read } for pid=14593 comm="syz.0.2409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 242.261049][ T40] audit: type=1400 audit(1772960139.009:16648): avc: denied { unmount } for pid=14480 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 242.286859][T14597] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 242.438233][T14605] block nbd5: NBD_DISCONNECT [ 242.452647][T14605] veth0_to_bond: entered allmulticast mode [ 242.565714][T14609] syzkaller1: entered promiscuous mode [ 242.568230][T14609] syzkaller1: entered allmulticast mode [ 242.571489][T14609] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 242.743529][T14624] netlink: 'syz.0.2418': attribute type 10 has an invalid length. [ 242.743562][T14625] netlink: 'syz.0.2418': attribute type 10 has an invalid length. [ 242.752898][T14624] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 242.756580][T14624] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 242.761580][T14624] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 242.764210][T14625] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 242.768454][T14625] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 242.773280][T14625] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 242.951375][T14649] openvswitch: netlink: Flow key attr not present in new flow. [ 243.292136][T14653] Cannot find add_set index 0 as target [ 243.722014][T14660] tmpfs: Invalid gid '0x00000000ffffffff' [ 243.724287][T14661] tmpfs: Invalid gid '0x00000000ffffffff' [ 243.861914][T14673] Cannot find del_set index 3 as target [ 243.863942][T14672] Cannot find del_set index 3 as target [ 243.972045][ T5929] Bluetooth: hci5: command tx timeout [ 244.144404][T14690] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29288 sclass=netlink_route_socket pid=14690 comm=syz.4.2441 [ 244.475478][T14725] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 244.477960][T14725] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 244.482704][T14725] vhci_hcd vhci_hcd.0: Device attached [ 244.485630][T14725] random: crng reseeded on system resumption [ 244.492244][T14725] Unrecognized hibernate image header format! [ 244.496703][T14725] PM: hibernation: Image mismatch: architecture specific data [ 244.500720][T14726] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 244.505337][T14725] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 244.518195][T14728] usbip_core: unknown command [ 244.520505][T14728] vhci_hcd: unknown pdu 158 [ 244.522565][T14728] usbip_core: unknown command [ 244.525218][T14357] vhci_hcd vhci_hcd.4: stop threads [ 244.527113][T14357] vhci_hcd vhci_hcd.4: release socket [ 244.530607][T14357] vhci_hcd vhci_hcd.4: disconnect device [ 244.662047][T14745] kAFS: unable to lookup cell 'syz0' [ 244.665014][T14745] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 244.669456][T14745] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 244.676578][T14745] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 244.715290][T14749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14749 comm=syz.6.2456 [ 245.057345][T14755] fuse: Unknown parameter '0x00000000000000030x0000000000000003' [ 245.380531][T14781] vlan0: entered allmulticast mode [ 245.382313][T14781] veth0_vlan: entered allmulticast mode [ 245.445318][T14783] xfrm0 speed is unknown, defaulting to 1000 [ 245.448518][T14783] lo speed is unknown, defaulting to 1000 [ 245.579394][ T5963] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 245.729427][ T5963] usb 5-1: device descriptor read/64, error -71 [ 245.772495][T14793] vxfs: WRONG superblock magic 00000000 at 1 [ 245.775980][T14793] vxfs: WRONG superblock magic 00000000 at 8 [ 245.778328][T14793] vxfs: can't find superblock. [ 245.979364][ T5963] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 246.091816][T14812] dns_resolver: Unsupported content type (238) [ 246.109236][ T5963] usb 5-1: device descriptor read/64, error -71 [ 246.209402][ T5929] Bluetooth: hci5: command tx timeout [ 246.210599][T14357] wlan1: Trigger new scan to find an IBSS to join [ 246.231696][ T5963] usb usb5-port1: attempt power cycle [ 246.569412][ T5963] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 246.590208][ T5963] usb 5-1: device descriptor read/8, error -71 [ 246.829340][ T5963] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 246.851079][ T5963] usb 5-1: device descriptor read/8, error -71 [ 246.921149][T14823] xfrm0 speed is unknown, defaulting to 1000 [ 246.924812][T14823] lo speed is unknown, defaulting to 1000 [ 246.959324][ T5963] usb usb5-port1: unable to enumerate USB device [ 247.111371][ T40] kauditd_printk_skb: 265 callbacks suppressed [ 247.111383][ T40] audit: type=1400 audit(1772960143.899:16914): avc: denied { create } for pid=14833 comm="syz.5.2481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 247.129344][ T40] audit: type=1400 audit(1772960143.919:16915): avc: denied { bpf } for pid=14833 comm="syz.5.2481" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 247.137888][ T40] audit: type=1400 audit(1772960143.919:16916): avc: denied { perfmon } for pid=14833 comm="syz.5.2481" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 247.208386][ T40] audit: type=1400 audit(1772960143.989:16917): avc: denied { read } for pid=14833 comm="syz.5.2481" dev="nsfs" ino=4026534061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 247.228169][ T40] audit: type=1400 audit(1772960143.989:16918): avc: denied { open } for pid=14833 comm="syz.5.2481" path="net:[4026534061]" dev="nsfs" ino=4026534061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 247.275962][ T40] audit: type=1400 audit(1772960144.059:16919): avc: denied { read } for pid=14835 comm="syz.5.2482" name="msr" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 247.286509][ T40] audit: type=1400 audit(1772960144.059:16920): avc: denied { open } for pid=14835 comm="syz.5.2482" path="/dev/cpu/3/msr" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 247.319957][ T40] audit: type=1400 audit(1772960144.109:16921): avc: denied { read write } for pid=14838 comm="syz.5.2483" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 247.329571][ T40] audit: type=1400 audit(1772960144.109:16922): avc: denied { open } for pid=14838 comm="syz.5.2483" path="/dev/ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 247.337673][ T40] audit: type=1400 audit(1772960144.109:16923): avc: denied { ioctl } for pid=14838 comm="syz.5.2483" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 247.425311][T14843] trusted_key: encrypted_key: insufficient parameters specified [ 247.468810][T14845] netlink: 'syz.5.2486': attribute type 1 has an invalid length. [ 247.475087][T14845] netlink: 'syz.5.2486': attribute type 1 has an invalid length. [ 248.095944][T14356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.100254][T14356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.200969][T14875] __nla_validate_parse: 12 callbacks suppressed [ 248.200981][T14875] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2496'. [ 248.508910][T14895] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2502'. [ 248.514213][T14895] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2502'. [ 248.702924][T14914] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 248.797375][T14910] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 248.803738][T14910] bond1 (unregistering): Released all slaves [ 248.895353][T14922] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2512'. [ 248.899079][T14922] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2512'. [ 248.904794][T14922] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2512'. [ 248.908117][T14922] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2512'. [ 248.916317][T14924] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2512'. [ 248.921379][T14924] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2512'. [ 248.926131][T14924] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2512'. [ 248.960728][T14927] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 248.964002][T14927] cramfs: wrong magic [ 249.018781][T14934] netlink: 'syz.4.2516': attribute type 3 has an invalid length. [ 249.143594][T14947] xt_hashlimit: size too large, truncated to 1048576 [ 249.172217][T14353] wlan1: Trigger new scan to find an IBSS to join [ 250.028764][T14963] SELinux: failed to load policy [ 250.090366][ T480] wlan1: Creating new IBSS network, BSSID ae:cd:b5:c6:a0:45 [ 250.146469][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.178138][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.281828][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.285367][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.355150][T14974] pimreg: tun_chr_ioctl cmd 1074025676 [ 250.357621][T14974] pimreg: owner set to 0 [ 250.383302][ T5925] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 250.391478][ T5925] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 250.403773][ T5925] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 250.407562][ T5925] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 250.412382][ T5925] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 250.417584][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.421844][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.445939][T14976] xfrm0 speed is unknown, defaulting to 1000 [ 250.448737][T14976] lo speed is unknown, defaulting to 1000 [ 250.523727][T14980] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 250.586706][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.591510][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.644813][T14976] chnl_net:caif_netlink_parms(): no params data found [ 250.853605][T14976] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.858078][T14976] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.860213][T14996] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 250.862009][T14976] bridge_slave_0: entered allmulticast mode [ 250.864354][T14996] SELinux: failed to load policy [ 250.867137][T14976] bridge_slave_0: entered promiscuous mode [ 250.891200][T14976] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.893635][T14976] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.898361][T14976] bridge_slave_1: entered allmulticast mode [ 250.903096][T14976] bridge_slave_1: entered promiscuous mode [ 251.336334][ T12] bond0 (unregistering): Released all slaves [ 251.342306][ T12] bond1 (unregistering): Released all slaves [ 251.353674][ T12] bond2 (unregistering): Released all slaves [ 251.359656][T15006] openvswitch: netlink: Flow key attr not present in new flow. [ 251.368874][ T12] bond3 (unregistering): Released all slaves [ 251.403182][T14976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.412125][T14976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.447200][T14976] team0: Port device team_slave_0 added [ 251.460916][T15000] xfrm0 speed is unknown, defaulting to 1000 [ 251.470054][T15000] lo speed is unknown, defaulting to 1000 [ 251.473461][T14976] team0: Port device team_slave_1 added [ 251.522953][ T12] tipc: Disabling bearer [ 251.527097][ T12] tipc: Left network mode [ 251.527777][T14976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.532936][T14976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.545196][T14976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.586098][T14976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.591434][T14976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.607481][T14976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.646803][ T12] IPVS: stopping backup sync thread 10432 ... [ 251.697776][T14976] hsr_slave_0: entered promiscuous mode [ 251.700374][ T5983] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 251.704239][T14976] hsr_slave_1: entered promiscuous mode [ 251.706455][T14976] debugfs: 'hsr0' already exists in 'hsr' [ 251.708347][T14976] Cannot create hsr debugfs directory [ 251.849689][ T5983] usb 5-1: Using ep0 maxpacket: 8 [ 251.854445][ T5983] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 251.857157][ T5983] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 251.877786][ T5983] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 251.884444][ T5983] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 251.892621][ T5983] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.897306][ T5983] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 251.907469][ T5983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.962047][T14976] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 251.972434][T14976] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 251.983594][T14976] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 251.999830][T14976] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 252.123665][ T5983] usb 5-1: usb_control_msg returned -32 [ 252.124438][ T40] kauditd_printk_skb: 171 callbacks suppressed [ 252.124452][ T40] audit: type=1400 audit(1772960148.909:17095): avc: denied { ioctl } for pid=15009 comm="syz.0.2538" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.125609][ T5983] usbtmc 5-1:16.0: can't read capabilities [ 252.143156][ T40] audit: type=1400 audit(1772960148.909:17096): avc: denied { read write } for pid=15009 comm="syz.0.2538" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.155406][ T40] audit: type=1400 audit(1772960148.909:17097): avc: denied { open } for pid=15009 comm="syz.0.2538" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.218911][T14976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.245424][T14976] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.265645][ T480] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.269763][ T480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.272029][ T40] audit: type=1400 audit(1772960149.059:17098): avc: denied { mounton } for pid=15044 comm="syz.5.2542" path="/442/file0" dev="tmpfs" ino=2368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 252.288587][T15045] vim2m vim2m.0: vidioc_s_fmt queue busy [ 252.294364][ T40] audit: type=1400 audit(1772960149.059:17099): avc: denied { mount } for pid=15044 comm="syz.5.2542" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 252.303245][ T40] audit: type=1400 audit(1772960149.069:17101): avc: denied { read write } for pid=15044 comm="syz.5.2542" name="video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 252.311222][ T40] audit: type=1400 audit(1772960149.069:17100): avc: denied { getattr } for pid=15046 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.326580][ T12] veth1_macvtap: left promiscuous mode [ 252.327664][ T40] audit: type=1400 audit(1772960149.069:17103): avc: denied { search } for pid=15046 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.328782][ T12] veth0_macvtap: left promiscuous mode [ 252.338981][ T40] audit: type=1400 audit(1772960149.069:17102): avc: denied { open } for pid=15044 comm="syz.5.2542" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 252.352557][ T40] audit: type=1400 audit(1772960149.069:17104): avc: denied { search } for pid=15046 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.359256][ T12] veth1_vlan: left promiscuous mode [ 252.369323][ T12] veth0_vlan: left promiscuous mode [ 252.401799][T15050] usb usb8: usbfs: process 15050 (syz.5.2543) did not claim interface 0 before use [ 252.410370][T15053] usb usb8: usbfs: process 15053 (syz.5.2543) did not claim interface 0 before use [ 252.463384][ T5925] Bluetooth: hci2: command tx timeout [ 252.510140][ T12] vlan0 (unregistering): left allmulticast mode [ 252.512278][ T12] veth0_vlan (unregistering): left allmulticast mode [ 252.650171][T14357] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.652620][T14357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.670630][T15055] sp0: Synchronizing with TNC [ 252.673101][T15054] [U] è [ 252.714528][T14976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.848025][T15072] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 252.858673][T14976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.063946][ T12] IPVS: stop unused estimator thread 0... [ 253.114630][T14976] veth0_vlan: entered promiscuous mode [ 253.122973][T14976] veth1_vlan: entered promiscuous mode [ 253.138147][T14976] veth0_macvtap: entered promiscuous mode [ 253.143314][T14976] veth1_macvtap: entered promiscuous mode [ 253.156712][T14976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.162802][T14976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.168811][T14357] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.181130][T14357] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.211687][T14357] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.215470][T14357] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.226079][T15088] usbtmc 5-1:16.0: usb_clear_halt returned -32 [ 253.270500][T14356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.273129][T14356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.300173][T14353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.303061][T14353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.304355][T15091] __nla_validate_parse: 2 callbacks suppressed [ 253.304370][T15091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2546'. [ 253.312442][T15091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2546'. [ 253.370877][T15094] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2528'. [ 253.547436][T15102] xt_check_table_hooks: 1 callbacks suppressed [ 253.547447][T15102] x_tables: duplicate underflow at hook 3 [ 253.592966][T15101] hfs: can't find a HFS filesystem on dev sr0 [ 253.727999][T15112] cgroup: Need name or subsystem set [ 253.740915][T15113] cgroup: Need name or subsystem set [ 253.784861][T15116] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2553'. [ 253.924472][T15121] sg_write: data in/out 1268889041/195 bytes for SCSI command 0xf-- guessing data in; [ 253.924472][T15121] program syz.7.2555 not setting count and/or reply_len properly [ 253.945868][T15123] netlink: 'syz.5.2556': attribute type 1 has an invalid length. [ 253.962897][T15123] bond4: entered promiscuous mode [ 253.965054][T15123] 8021q: adding VLAN 0 to HW filter on device bond4 [ 253.989077][T15125] 8021q: adding VLAN 0 to HW filter on device bond4 [ 253.993881][T15125] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 253.998720][T15125] bond4: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 254.005833][T15125] bond4: (slave vxcan3): making interface the new active one [ 254.009373][T15125] vxcan3: entered promiscuous mode [ 254.012654][T15125] bond4: (slave vxcan3): Enslaving as an active interface with an up link [ 254.035107][T15123] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 254.044814][T15123] bond4: (slave vxcan5): Enslaving as a backup interface with an up link [ 254.076619][T15136] netlink: 'syz.4.2560': attribute type 1 has an invalid length. [ 254.102324][T15136] 8021q: adding VLAN 0 to HW filter on device bond3 [ 254.115929][T15136] bond3: (slave ip6gretap1): making interface the new active one [ 254.121164][T15136] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 254.210934][T15141] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 254.488358][T15161] netlink: 'syz.5.2566': attribute type 1 has an invalid length. [ 254.489821][ T29] usb 5-1: USB disconnect, device number 22 [ 254.515361][T15161] 8021q: adding VLAN 0 to HW filter on device bond5 [ 254.529302][ T5925] Bluetooth: hci2: command tx timeout [ 254.536119][T15161] bond5: (slave geneve2): making interface the new active one [ 254.542476][T15161] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 254.724818][T15181] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 254.890856][T15203] xfrm0 speed is unknown, defaulting to 1000 [ 254.946596][T15213] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 254.948004][T15215] openvswitch: netlink: Missing key (keys=40, expected=80) [ 255.023984][T15219] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2579'. [ 255.063297][T15229] bridge0: port 3(syz_tun) entered blocking state [ 255.067160][T15229] bridge0: port 3(syz_tun) entered disabled state [ 255.071092][T15229] syz_tun: entered allmulticast mode [ 255.074908][T15229] syz_tun: entered promiscuous mode [ 255.077737][T15229] bridge0: port 3(syz_tun) entered blocking state [ 255.081121][T15229] bridge0: port 3(syz_tun) entered forwarding state [ 255.116107][T15232] tipc: Enabling of bearer rejected, failed to enable media [ 255.333207][T15250] bridge0: port 3(syz_tun) entered blocking state [ 255.336253][T15250] bridge0: port 3(syz_tun) entered disabled state [ 255.339567][T15250] syz_tun: entered allmulticast mode [ 255.345033][T15250] syz_tun: entered promiscuous mode [ 255.348104][T15250] bridge0: port 3(syz_tun) entered blocking state [ 255.351300][T15250] bridge0: port 3(syz_tun) entered forwarding state [ 255.364643][T15250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=15250 comm=syz.7.2592 [ 255.389266][ T10] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 255.432131][T15254] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2594'. [ 255.433332][T15244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2590'. [ 255.436358][T15256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2593'. [ 255.510487][T15260] overlayfs: workdir and upperdir must be separate subtrees [ 255.545204][ T10] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 255.548647][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.552148][ T10] usb 10-1: Product: syz [ 255.553705][ T10] usb 10-1: Manufacturer: syz [ 255.555504][ T10] usb 10-1: SerialNumber: syz [ 255.564483][ T10] usb 10-1: config 0 descriptor?? [ 255.743909][T15264] syzkaller0: entered promiscuous mode [ 255.745825][T15264] syzkaller0: entered allmulticast mode [ 255.749775][T15264] nftables ruleset with unbound set [ 255.758934][T15264] 0: reclassify loop, rule prio 0, protocol 800 [ 255.759266][ T5983] usb 12-1: new low-speed USB device number 2 using dummy_hcd [ 255.877477][ T2306] usb 10-1: USB disconnect, device number 12 [ 255.912818][ T5983] usb 12-1: config 5 has an invalid interface number: 176 but max is 0 [ 255.915509][ T5983] usb 12-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 255.918540][ T5983] usb 12-1: config 5 has no interface number 0 [ 255.921763][ T5983] usb 12-1: config 5 interface 176 altsetting 12 endpoint 0x5 is Bulk; changing to Interrupt [ 255.925284][ T5983] usb 12-1: config 5 interface 176 altsetting 12 endpoint 0xB has invalid maxpacket 512, setting to 8 [ 255.928896][ T5983] usb 12-1: config 5 interface 176 altsetting 12 endpoint 0x9 has invalid maxpacket 64, setting to 8 [ 255.934736][ T5983] usb 12-1: config 5 interface 176 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 255.938593][ T5983] usb 12-1: config 5 interface 176 altsetting 12 endpoint 0x8 has invalid maxpacket 64, setting to 8 [ 255.943704][ T5983] usb 12-1: config 5 interface 176 altsetting 12 has a duplicate endpoint with address 0xB, skipping [ 255.947320][ T5983] usb 12-1: config 5 interface 176 altsetting 12 endpoint 0x3 has invalid maxpacket 1023, setting to 8 [ 255.948056][T15272] netlink: 'syz.4.2600': attribute type 4 has an invalid length. [ 255.951268][ T5983] usb 12-1: config 5 interface 176 altsetting 12 endpoint 0x1 has invalid maxpacket 1024, setting to 8 [ 255.958243][ T5983] usb 12-1: config 5 interface 176 altsetting 12 endpoint 0xF has invalid maxpacket 1024, setting to 8 [ 255.962040][ T5983] usb 12-1: config 5 interface 176 altsetting 12 endpoint 0xC has an invalid bInterval 0, changing to 10 [ 255.965736][ T5983] usb 12-1: config 5 interface 176 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 255.969871][ T5983] usb 12-1: config 5 interface 176 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 255.973884][ T5983] usb 12-1: config 5 interface 176 altsetting 12 has a duplicate endpoint with address 0xC, skipping [ 255.977465][ T5983] usb 12-1: config 5 interface 176 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 255.981468][ T5983] usb 12-1: config 5 interface 176 altsetting 12 has a duplicate endpoint with address 0xB, skipping [ 255.985073][ T5983] usb 12-1: config 5 interface 176 altsetting 12 endpoint 0x2 has invalid maxpacket 32, setting to 8 [ 255.989108][ T5983] usb 12-1: config 5 interface 176 has no altsetting 0 [ 256.042569][T15282] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2603'. [ 256.045739][T15282] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2603'. [ 256.077417][T15288] netlink: 'syz.0.2604': attribute type 1 has an invalid length. [ 256.080416][T15288] netlink: 'syz.0.2604': attribute type 2 has an invalid length. [ 256.083040][T15288] netlink: 'syz.0.2604': attribute type 1 has an invalid length. [ 256.085817][T15288] netlink: 'syz.0.2604': attribute type 3 has an invalid length. [ 256.134819][T15288] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 256.242474][T15296] batman_adv: batadv0: Adding interface: gretap1 [ 256.244611][T15296] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.254575][T15296] batman_adv: batadv0: Interface activated: gretap1 [ 256.293797][T15300] xfrm0 speed is unknown, defaulting to 1000 [ 256.364885][T15308] input: syz1 as /devices/virtual/input/input27 [ 256.609357][ T5925] Bluetooth: hci2: command tx timeout [ 257.234033][ T40] kauditd_printk_skb: 376 callbacks suppressed [ 257.234049][ T40] audit: type=1400 audit(1772960154.019:17481): avc: denied { create } for pid=15320 comm="syz.4.2614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 257.308009][ T40] audit: type=1400 audit(1772960154.089:17482): avc: denied { create } for pid=15320 comm="syz.4.2614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 257.316363][ T40] audit: type=1400 audit(1772960154.099:17483): avc: denied { allowed } for pid=15320 comm="syz.4.2614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 257.324894][ T40] audit: type=1400 audit(1772960154.099:17484): avc: denied { create } for pid=15320 comm="syz.4.2614" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 257.329457][T15322] netlink: 'syz.4.2614': attribute type 10 has an invalid length. [ 257.333698][ T40] audit: type=1400 audit(1772960154.099:17485): avc: denied { map } for pid=15320 comm="syz.4.2614" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=66834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 257.343976][ T40] audit: type=1400 audit(1772960154.099:17486): avc: denied { read write } for pid=15320 comm="syz.4.2614" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=66834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 257.352119][ T40] audit: type=1400 audit(1772960154.109:17487): avc: denied { read } for pid=15320 comm="syz.4.2614" dev="nsfs" ino=4026533491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 257.359730][ T40] audit: type=1400 audit(1772960154.109:17488): avc: denied { open } for pid=15320 comm="syz.4.2614" path="net:[4026533491]" dev="nsfs" ino=4026533491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 257.380838][ T40] audit: type=1400 audit(1772960154.169:17489): avc: denied { accept } for pid=15320 comm="syz.4.2614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 257.407971][ T40] audit: type=1400 audit(1772960154.189:17490): avc: denied { read } for pid=5636 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 257.597499][T15322] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 257.640749][T15317] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 257.644448][T15317] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 257.693613][T15317] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 257.695661][T15317] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 258.448348][ T5983] usb 12-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=80.8c [ 258.452215][ T5983] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.458629][ T5983] usb 12-1: Product: 꾶뢷퀒꼧뼳ã´ê©¬á¢šéŠ¯á„°ã‹™á®†ë€ê‘“å¸â¸‰ì…–㮻懓댎䅘ï“ì¸æ©«à¿§åœ—á›ê‚¤ç‘«ì’­ë¨„ৼ⛇쓥瞢逰ᒵ잆硛 [ 258.468481][ T5983] usb 12-1: Manufacturer: ч [ 258.479632][ T5983] usb 12-1: can't set config #5, error -71 [ 258.488875][ T5983] usb 12-1: USB disconnect, device number 2 [ 258.544192][T15388] fuse: Unknown parameter 'max_rSad' [ 258.676610][T15394] bridge6: entered promiscuous mode [ 258.829320][ T5983] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 258.992604][ T5983] usb 12-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 258.996753][ T5983] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.002442][ T5983] usb 12-1: Product: syz [ 259.004543][ T5983] usb 12-1: Manufacturer: syz [ 259.006698][ T5983] usb 12-1: SerialNumber: syz [ 259.014767][ T5983] usb 12-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 259.046129][ T10] usb 12-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 259.053633][T15424] pimreg: entered allmulticast mode [ 259.073369][T15429] pimreg: left allmulticast mode [ 259.195256][T15435] syz.4.2641 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 259.428622][T15444] mkiss: ax0: crc mode is auto. [ 259.525708][T15446] __nla_validate_parse: 7 callbacks suppressed [ 259.525719][T15446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2646'. [ 259.531257][T15446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2646'. [ 259.619327][ T6217] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 259.774305][ T6217] usb 10-1: unable to get BOS descriptor or descriptor too short [ 259.778751][ T6217] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 259.782193][ T6217] usb 10-1: can't read configurations, error -71 [ 260.129315][ T10] ath9k_htc 12-1:1.0: ath9k_htc: Target is unresponsive [ 260.132130][ T10] ath9k_htc: Failed to initialize the device [ 260.158143][ T10] usb 12-1: ath9k_htc: USB layer deinitialized [ 260.171565][ T29] usb 12-1: USB disconnect, device number 3 [ 260.353068][T15470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15470 comm=syz.4.2654 [ 260.353068][T15471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15471 comm=syz.4.2654 [ 260.693322][T15507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2667'. [ 260.696396][T15507] netlink: 'syz.4.2667': attribute type 3 has an invalid length. [ 260.699571][T15507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2667'. [ 260.702961][T15507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2667'. [ 260.706003][T15507] netlink: 'syz.4.2667': attribute type 3 has an invalid length. [ 260.708601][T15507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2667'. [ 261.113422][T15518] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2670'. [ 261.117601][T15518] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2670'. [ 261.172809][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.175628][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.495541][T15528] ipvlan1: entered allmulticast mode [ 261.497758][T15528] veth0_vlan: entered allmulticast mode [ 261.549909][T15534] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15534 comm=syz.0.2676 [ 261.630129][T15534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2676'. [ 261.635897][T15534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2676'. [ 262.037109][T15566] netlink: 'syz.4.2685': attribute type 4 has an invalid length. [ 262.041169][T15566] netlink: 'syz.4.2685': attribute type 4 has an invalid length. [ 262.063498][T15581] 9pnet_virtio: no channels available for device syz [ 262.066419][T15581] 9pnet_virtio: no channels available for device syz [ 262.070284][T15581] 9pnet_virtio: no channels available for device syz [ 262.075025][T15581] 9pnet_virtio: no channels available for device syz [ 262.078222][T15581] 9pnet_virtio: no channels available for device syz [ 262.084170][T15581] 9pnet_virtio: no channels available for device syz [ 262.087599][T15581] 9pnet_virtio: no channels available for device syz [ 262.091283][T15581] 9pnet_virtio: no channels available for device syz [ 262.094699][T15581] 9pnet_virtio: no channels available for device syz [ 262.097066][T15581] 9pnet_virtio: no channels available for device syz [ 262.099894][ T5983] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 262.104414][T15581] 9pnet_virtio: no channels available for device syz [ 262.108271][T15581] 9pnet_virtio: no channels available for device syz [ 262.111561][T15581] 9pnet_virtio: no channels available for device syz [ 262.114855][T15581] 9pnet_virtio: no channels available for device syz [ 262.124574][T15581] 9pnet_virtio: no channels available for device syz [ 262.128394][T15581] 9pnet_virtio: no channels available for device syz [ 262.128675][T15581] 9pnet_virtio: no channels available for device syz [ 262.129045][T15581] 9pnet_virtio: no channels available for device syz [ 262.129603][T15581] 9pnet_virtio: no channels available for device syz [ 262.129946][T15581] 9pnet_virtio: no channels available for device syz [ 262.130230][T15581] 9pnet_virtio: no channels available for device syz [ 262.147828][T15581] 9pnet_virtio: no channels available for device syz [ 262.151450][T15581] 9pnet_virtio: no channels available for device syz [ 262.155017][T15581] 9pnet_virtio: no channels available for device syz [ 262.158525][T15581] 9pnet_virtio: no channels available for device syz [ 262.161900][T15581] 9pnet_virtio: no channels available for device syz [ 262.164715][T15581] 9pnet_virtio: no channels available for device syz [ 262.167166][T15581] 9pnet_virtio: no channels available for device syz [ 262.170103][T15581] 9pnet_virtio: no channels available for device syz [ 262.173727][T15581] 9pnet_virtio: no channels available for device syz [ 262.176126][T15581] 9pnet_virtio: no channels available for device syz [ 262.178657][T15581] 9pnet_virtio: no channels available for device syz [ 262.263113][ T40] kauditd_printk_skb: 356 callbacks suppressed [ 262.263124][ T40] audit: type=1400 audit(1772960159.049:17847): avc: denied { mounton } for pid=15598 comm="syz.4.2695" path="/491/file0" dev="tmpfs" ino=2633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 262.269618][ T5983] usb 12-1: Using ep0 maxpacket: 16 [ 262.273820][ T40] audit: type=1400 audit(1772960159.049:17848): avc: denied { add_name } for pid=15598 comm="syz.4.2695" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 262.280926][ T5983] usb 12-1: config 141 has an invalid descriptor of length 0, skipping remainder of the config [ 262.283263][ T40] audit: type=1400 audit(1772960159.049:17849): avc: denied { create } for pid=15598 comm="syz.4.2695" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 262.285446][ T5983] usb 12-1: config 141 has 0 interfaces, different from the descriptor's value: 1 [ 262.288246][ T5983] usb 12-1: string descriptor 0 read error: -22 [ 262.293343][ T40] audit: type=1400 audit(1772960159.049:17850): avc: denied { associate } for pid=15598 comm="syz.4.2695" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 262.296336][ T5983] usb 12-1: New USB device found, idVendor=05e3, idProduct=1bf0, bcdDevice=ca.00 [ 262.298328][ T40] audit: type=1400 audit(1772960159.059:17851): avc: denied { write } for pid=15598 comm="syz.4.2695" name="file0" dev="9p" ino=74973367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 262.305657][ T5983] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.308621][ T40] audit: type=1400 audit(1772960159.059:17852): avc: denied { open } for pid=15598 comm="syz.4.2695" path="/491/file0/file0" dev="9p" ino=74973367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 262.329263][ T40] audit: type=1400 audit(1772960159.059:17853): avc: denied { remount } for pid=15598 comm="syz.4.2695" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 262.335866][ T40] audit: type=1400 audit(1772960159.059:17854): avc: denied { ioctl } for pid=15598 comm="syz.4.2695" path="/491/file0/file0" dev="9p" ino=74973367 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 262.345131][ T40] audit: type=1400 audit(1772960159.059:17855): avc: denied { create } for pid=15598 comm="syz.4.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 262.382143][ T40] audit: type=1400 audit(1772960159.169:17856): avc: denied { read write } for pid=15605 comm="syz.0.2692" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 262.535333][T15541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.538924][T15541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.553214][ T5963] usb 12-1: USB disconnect, device number 4 [ 262.630031][ T6217] usb 10-1: new low-speed USB device number 15 using dummy_hcd [ 262.667547][T15635] netlink: 'syz.4.2706': attribute type 1 has an invalid length. [ 262.683378][T15635] 8021q: adding VLAN 0 to HW filter on device bond4 [ 262.698944][T15635] bond4: (slave bridge7): making interface the new active one [ 262.705414][T15635] bond4: (slave bridge7): Enslaving as an active interface with an up link [ 262.769390][ T6217] usb 10-1: device descriptor read/64, error -71 [ 263.007284][T15663] netlink: 'syz.4.2714': attribute type 1 has an invalid length. [ 263.010861][ T6217] usb 10-1: new low-speed USB device number 16 using dummy_hcd [ 263.149436][ T6217] usb 10-1: device descriptor read/64, error -71 [ 263.259550][ T6217] usb usb10-port1: attempt power cycle [ 263.339484][ T24] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 263.489463][ T24] usb 12-1: Using ep0 maxpacket: 32 [ 263.492519][ T24] usb 12-1: config 0 has an invalid interface number: 119 but max is 0 [ 263.495286][ T24] usb 12-1: config 0 has no interface number 0 [ 263.497328][ T24] usb 12-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 263.501320][ T24] usb 12-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 263.505527][ T24] usb 12-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 21506, setting to 1024 [ 263.511025][ T24] usb 12-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 263.514516][ T24] usb 12-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 263.520647][ T24] usb 12-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 263.524589][ T24] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.527566][ T24] usb 12-1: Product: syz [ 263.529649][ T24] usb 12-1: Manufacturer: syz [ 263.531318][ T24] usb 12-1: SerialNumber: syz [ 263.535906][ T24] usb 12-1: config 0 descriptor?? [ 263.539075][T15673] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 263.544640][ T24] input: bcm5974 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.119/input/input28 [ 263.549726][ T5319] usb 12-1: BOGUS urb xfer, pipe 1 != type 3 [ 263.613953][ T6217] usb 10-1: new low-speed USB device number 17 using dummy_hcd [ 263.639916][ T6217] usb 10-1: device descriptor read/8, error -71 [ 263.699441][ T24] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 263.744970][ T6067] usb 12-1: USB disconnect, device number 5 [ 263.829369][ T24] usb 9-1: device descriptor read/64, error -71 [ 263.890020][ T6217] usb 10-1: new low-speed USB device number 18 using dummy_hcd [ 263.910216][ T6217] usb 10-1: device descriptor read/8, error -71 [ 263.970758][T15710] [U] `è`è [ 264.021487][ T6217] usb usb10-port1: unable to enumerate USB device [ 264.070709][ T24] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 264.199367][ T24] usb 9-1: device descriptor read/64, error -71 [ 264.310697][ T24] usb usb9-port1: attempt power cycle [ 264.357699][T15739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.394015][T15742] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 264.407412][T15738] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 264.434445][T15747] netlink: 'syz.7.2732': attribute type 10 has an invalid length. [ 264.440938][T15747] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 264.454816][T15747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.461363][T15747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.465961][T15738] kvm: pic: non byte read [ 264.466216][T15747] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 264.467847][T15738] kvm: pic: non byte read [ 264.473568][T15738] kvm: pic: non byte read [ 264.474469][T15747] bond0 (unregistering): Released all slaves [ 264.475454][T15738] kvm: pic: non byte read [ 264.478915][T15738] kvm: pic: non byte read [ 264.480926][T15738] kvm: pic: non byte read [ 264.483099][T15738] kvm: pic: non byte read [ 264.485580][T15738] kvm: pic: non byte read [ 264.487853][T15738] kvm: pic: non byte read [ 264.490313][T15738] kvm: pic: non byte read [ 264.632088][T15750] __nla_validate_parse: 13 callbacks suppressed [ 264.632100][T15750] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2733'. [ 264.649356][ T24] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 264.669785][ T24] usb 9-1: device descriptor read/8, error -71 [ 264.929265][ T24] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 264.959949][ T24] usb 9-1: device descriptor read/8, error -71 [ 265.069463][ T24] usb usb9-port1: unable to enumerate USB device [ 265.463723][T15763] bridge0: port 3(syz_tun) entered disabled state [ 265.474673][T15763] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.477255][T15763] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.548755][T15763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.566224][T15763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.675264][T15763] batman_adv: batadv0: Interface deactivated: gretap1 [ 265.689983][T14353] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.693451][T14353] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.696337][T14353] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.701319][T14353] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.734048][T15770] netlink: 'syz.5.2737': attribute type 10 has an invalid length. [ 265.737906][T15770] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2737'. [ 265.929433][T15790] ISOFS: Unable to identify CD-ROM format. [ 266.018347][T15795] XFS (nbd0): SB validate failed with error -5. [ 266.043570][T15805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2746'. [ 266.049058][T15805] ip_vti0: Master is either lo or non-ether device [ 266.050385][ T1283] block nbd0: Dead connection, failed to find a fallback [ 266.595405][T15834] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2753'. [ 266.676434][T15842] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2757'. [ 266.680704][T15840] netlink: 'syz.4.2754': attribute type 20 has an invalid length. [ 266.718386][T15843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.719485][T15842] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15842 comm=syz.5.2757 [ 266.734963][T15843] hpfs: hpfs_map_sector(): read error [ 266.872892][T15849] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2760'. [ 266.950022][T15856] xfrm0 speed is unknown, defaulting to 1000 [ 267.037638][T15861] hfs: can't find a HFS filesystem on dev sr0 [ 267.093761][T15863] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2764'. [ 267.273946][ T40] kauditd_printk_skb: 382 callbacks suppressed [ 267.273962][ T40] audit: type=1400 audit(1772960164.059:18239): avc: denied { create } for pid=15871 comm="syz.4.2768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 267.285242][ T40] audit: type=1400 audit(1772960164.069:18240): avc: denied { write } for pid=15871 comm="syz.4.2768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 267.354730][ T40] audit: type=1400 audit(1772960164.139:18241): avc: denied { write } for pid=15875 comm="syz.4.2770" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 267.565825][ T40] audit: type=1400 audit(1772960164.349:18242): avc: denied { create } for pid=15877 comm="syz.5.2771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 267.572665][T15878] 8021q: VLANs not supported on ip_vti0 [ 267.573826][ T40] audit: type=1400 audit(1772960164.349:18243): avc: denied { write } for pid=15877 comm="syz.5.2771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 267.583547][ T40] audit: type=1400 audit(1772960164.349:18244): avc: denied { create } for pid=15877 comm="syz.5.2771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 267.591099][ T40] audit: type=1400 audit(1772960164.349:18245): avc: denied { ioctl } for pid=15877 comm="syz.5.2771" path="socket:[68296]" dev="sockfs" ino=68296 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 267.599402][ T29] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 267.600079][ T40] audit: type=1400 audit(1772960164.359:18246): avc: denied { ioctl } for pid=15877 comm="syz.5.2771" path="socket:[70244]" dev="sockfs" ino=70244 ioctlcmd=0x5663 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 267.611847][ T40] audit: type=1400 audit(1772960164.369:18247): avc: denied { getopt } for pid=15877 comm="syz.5.2771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 267.627749][ T40] audit: type=1400 audit(1772960164.409:18248): avc: denied { setopt } for pid=15879 comm="syz.5.2772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 267.658226][T15883] netlink: 'syz.5.2773': attribute type 1 has an invalid length. [ 267.662929][T15883] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 267.732084][T15891] netlink: 'syz.5.2775': attribute type 1 has an invalid length. [ 267.753373][T15891] bond6: (slave vxcan7): The slave device specified does not support setting the MAC address [ 267.757065][T15891] bond6: (slave vxcan7): Error -95 calling set_mac_address [ 267.759449][ T29] usb 9-1: Using ep0 maxpacket: 32 [ 267.760898][ T29] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 267.764111][ T29] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 267.767155][ T29] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 267.771912][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 267.775117][ T29] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 267.778497][ T29] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 267.783372][ T29] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 267.786469][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.792339][ T29] usb 9-1: config 0 descriptor?? [ 267.812682][T15893] gretap1: entered promiscuous mode [ 267.823236][T15893] bond6: (slave gretap1): making interface the new active one [ 267.827355][T15893] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 267.840381][T15891] macvlan2: entered promiscuous mode [ 267.842172][T15891] macvlan2: entered allmulticast mode [ 267.844639][T15891] bond6: entered promiscuous mode [ 267.847204][T15891] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 267.852434][T15891] bond6: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 267.857054][T15891] bond6: left promiscuous mode [ 267.984506][T15895] overlay: ./file1 is not a directory [ 268.003634][ T29] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 268.010900][ T29] usb 9-1: USB disconnect, device number 23 [ 268.020514][ T29] usblp0: removed [ 268.196640][T15905] macsec0: entered promiscuous mode [ 268.198622][T15905] macsec0: entered allmulticast mode [ 268.201125][T15905] veth1_macvtap: entered allmulticast mode [ 268.269994][T15907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2780'. [ 268.449529][ T29] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 268.599406][ T29] usb 9-1: Using ep0 maxpacket: 32 [ 268.602877][ T29] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 268.606487][ T29] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 268.610236][ T29] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 268.614114][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 268.618015][ T29] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 268.622057][ T29] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 268.627649][ T29] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 268.631614][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.636706][ T29] usb 9-1: config 0 descriptor?? [ 268.843126][ T29] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 269.098214][T15917] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2784'. [ 269.203547][T15921] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 269.296932][T15917] bond9 (unregistering): Released all slaves [ 269.403936][ T24] usb 9-1: USB disconnect, device number 24 [ 269.411399][ T24] usblp0: removed [ 269.714265][T15950] xfrm0 speed is unknown, defaulting to 1000 [ 270.976547][T15977] input: syz0 as /devices/virtual/input/input29 [ 271.181077][T15998] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2806'. [ 271.184798][T15998] openvswitch: netlink: Flow key attr not present in new flow. [ 271.404121][T16022] netlink: 'syz.7.2812': attribute type 6 has an invalid length. [ 271.412395][T16022] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2812'. [ 271.473060][T16023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16023 comm=syz.7.2812 [ 271.478685][T16023] netlink: 'syz.7.2812': attribute type 6 has an invalid length. [ 271.693415][T16029] netlink: 'syz.4.2816': attribute type 3 has an invalid length. [ 271.872962][T16036] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 271.878559][T16036] block device autoloading is deprecated and will be removed. [ 272.040682][T16043] CIFS mount error: No usable UNC path provided in device string! [ 272.040682][T16043] [ 272.045203][T16043] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 272.088263][T16048] xfrm0 speed is unknown, defaulting to 1000 [ 272.463436][ T40] kauditd_printk_skb: 243 callbacks suppressed [ 272.463452][ T40] audit: type=1400 audit(1772960169.249:18492): avc: denied { add_name } for pid=16060 comm="syz.4.2825" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 272.474523][ T40] audit: type=1400 audit(1772960169.249:18493): avc: denied { create } for pid=16060 comm="syz.4.2825" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 272.482185][ T40] audit: type=1400 audit(1772960169.249:18494): avc: denied { associate } for pid=16060 comm="syz.4.2825" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 272.490169][ T40] audit: type=1400 audit(1772960169.259:18495): avc: denied { perfmon } for pid=16060 comm="syz.4.2825" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 272.498953][ T40] audit: type=1400 audit(1772960169.259:18496): avc: denied { prog_run } for pid=16060 comm="syz.4.2825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 272.506495][ T40] audit: type=1400 audit(1772960169.269:18497): avc: denied { create } for pid=16060 comm="syz.4.2825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 272.515100][ T40] audit: type=1400 audit(1772960169.269:18498): avc: denied { write } for pid=16060 comm="syz.4.2825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 272.524517][ T40] audit: type=1400 audit(1772960169.299:18499): avc: denied { write } for pid=16062 comm="syz.4.2825" path="/532/file0/core" dev="9p" ino=74973537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 272.724140][ T40] audit: type=1400 audit(1772960169.509:18500): avc: denied { unmount } for pid=8498 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 273.068158][ T40] audit: type=1400 audit(1772960169.839:18501): avc: denied { ioctl } for pid=16063 comm="syz.5.2827" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 273.773849][T16076] (syz.7.2832,16076,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 273.777264][T16076] (syz.7.2832,16076,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 273.795733][ T5929] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 273.801741][ T5929] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 273.809443][ T5929] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 273.820559][ T5929] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 273.824587][ T5929] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 273.837601][ T5925] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 273.842458][ T5925] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 273.845932][ T5925] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 273.849264][ T5925] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 273.852307][ T5925] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 273.862371][T16082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=16082 comm=syz.7.2834 [ 273.867772][T16082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=16082 comm=syz.7.2834 [ 273.875687][T16082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=16082 comm=syz.7.2834 [ 273.888114][T16077] xfrm0 speed is unknown, defaulting to 1000 [ 274.002529][T16077] chnl_net:caif_netlink_parms(): no params data found [ 274.083841][T16077] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.086514][T16077] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.089534][T16077] bridge_slave_0: entered allmulticast mode [ 274.093657][T16077] bridge_slave_0: entered promiscuous mode [ 274.098259][T16077] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.101724][T16077] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.105454][T16077] bridge_slave_1: entered allmulticast mode [ 274.110126][T16077] bridge_slave_1: entered promiscuous mode [ 274.139445][T16077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.144497][T16077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.166228][T16077] team0: Port device team_slave_0 added [ 274.173041][T16077] team0: Port device team_slave_1 added [ 274.192101][T16077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.195208][T16077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.208297][T16077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.217621][T16077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.221413][T16077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.230941][T16077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.268035][T16077] hsr_slave_0: entered promiscuous mode [ 274.270918][T16077] hsr_slave_1: entered promiscuous mode [ 274.273584][T16077] debugfs: 'hsr0' already exists in 'hsr' [ 274.275791][T16077] Cannot create hsr debugfs directory [ 274.298558][T16100] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2838'. [ 274.314898][T16100] bond9: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 274.322272][T16100] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2838'. [ 274.329135][T16100] bond9: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 274.381674][T16103] netlink: 'syz.5.2839': attribute type 15 has an invalid length. [ 274.388674][T16103] netlink: 'syz.5.2839': attribute type 15 has an invalid length. [ 274.396664][T16103] netlink: 'syz.5.2839': attribute type 15 has an invalid length. [ 274.401236][T16103] netlink: 'syz.5.2839': attribute type 15 has an invalid length. [ 274.404761][T16103] netlink: 'syz.5.2839': attribute type 15 has an invalid length. [ 274.408365][T16103] netlink: 'syz.5.2839': attribute type 15 has an invalid length. [ 274.412289][T16103] netlink: 'syz.5.2839': attribute type 15 has an invalid length. [ 274.471306][T16077] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 274.475947][T16077] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 274.486431][T16077] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 274.495817][T16077] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 274.568288][T16116] openvswitch: netlink: Duplicate or invalid key (type 0). [ 274.572129][T16116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.575098][T16077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.591817][T16077] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.596841][T16117] openvswitch: netlink: Duplicate or invalid key (type 0). [ 274.600445][T16117] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.602445][T14353] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.607219][T14353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.626608][T14356] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.630150][T14356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.682775][ T10] usb 12-1: new full-speed USB device number 6 using dummy_hcd [ 274.713594][T16128] ieee802154 phy0 wpan0: encryption failed: -22 [ 274.802515][T16077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.841770][ T10] usb 12-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x41, changing to 0x1 [ 274.846069][ T10] usb 12-1: config 0 interface 0 altsetting 251 endpoint 0x1 has invalid wMaxPacketSize 0 [ 274.849572][ T10] usb 12-1: config 0 interface 0 has no altsetting 0 [ 274.853390][ T10] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 274.856410][ T10] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 274.859898][ T10] usb 12-1: Product: syz [ 274.861815][ T10] usb 12-1: Manufacturer: syz [ 274.863617][ T10] usb 12-1: SerialNumber: syz [ 274.868153][ T10] usb 12-1: config 0 descriptor?? [ 274.875824][ T10] usb 12-1: selecting invalid altsetting 0 [ 274.889076][T16138] can0: slcan on ttyS3. [ 274.979132][T16077] veth0_vlan: entered promiscuous mode [ 274.980563][T16135] can0 (unregistered): slcan off ttyS3. [ 274.990191][T16077] veth1_vlan: entered promiscuous mode [ 275.017943][T16077] veth0_macvtap: entered promiscuous mode [ 275.026449][T16077] veth1_macvtap: entered promiscuous mode [ 275.045099][T16077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.059855][T16077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.068875][T14353] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.072725][T14353] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.075875][T14353] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.079263][T14353] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.159976][T16107] tipc: Started in network mode [ 275.162288][T16107] tipc: Node identity 62424a081002, cluster identity 4711 [ 275.165846][T16107] tipc: Enabled bearer , priority 0 [ 275.179289][ T480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.189354][ T480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.193683][T16107] syzkaller0: entered promiscuous mode [ 275.196122][T16107] syzkaller0: entered allmulticast mode [ 275.203111][T16106] tipc: Resetting bearer [ 275.217846][T16106] tipc: Disabling bearer [ 275.236675][T14353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.240385][T14353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.277373][ T29] usb 12-1: USB disconnect, device number 6 [ 275.375792][T16160] xt_HMARK: spi-set and port-set can't be combined [ 275.446523][T16162] binder: 16161:16162 ioctl f507 0 returned -22 [ 275.452458][T16162] binder: 16161:16162 ioctl c018620c 200000000100 returned -22 [ 275.495792][T16164] JFS: discard option not supported on device [ 275.502288][T16164] Mount JFS Failure: -5 [ 275.512158][T16164] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2848'. [ 275.523462][T16164] team0: Port device team_slave_0 removed [ 275.859133][T16172] sp0: Synchronizing with TNC [ 275.873842][T16172] fuse: Bad value for 'group_id' [ 275.876368][T16172] fuse: Bad value for 'group_id' [ 275.889351][ T5929] Bluetooth: hci3: command tx timeout [ 276.019047][T16179] binder_alloc: 16178: binder_alloc_buf, no vma [ 276.314019][T16187] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16187 comm=syz.7.2856 [ 276.453033][T16187] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2856'. [ 276.839074][T16193] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 277.036147][T16214] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 277.095141][T16214] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.2864'. [ 277.104033][T16218] mac80211_hwsim hwsim20 syzkaller0: entered promiscuous mode [ 277.107384][T16218] mac80211_hwsim hwsim20 syzkaller0: entered allmulticast mode [ 277.150761][T16201] validate_nla: 27 callbacks suppressed [ 277.150780][T16201] netlink: 'syz.8.2861': attribute type 9 has an invalid length. [ 277.156583][T16201] netlink: 'syz.8.2861': attribute type 11 has an invalid length. [ 277.160482][T16201] netlink: 'syz.8.2861': attribute type 12 has an invalid length. [ 277.170771][T16201] netlink: 210020 bytes leftover after parsing attributes in process `syz.8.2861'. [ 277.174651][T16201] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2861'. [ 277.192565][T16212] kvm: kvm [16200]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 277.213045][T16228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2868'. [ 277.832728][ T40] kauditd_printk_skb: 253 callbacks suppressed [ 277.832741][ T40] audit: type=1400 audit(1772960174.619:18755): avc: denied { prog_load } for pid=16229 comm="syz.8.2869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 277.842314][ T40] audit: type=1400 audit(1772960174.619:18756): avc: denied { prog_run } for pid=16229 comm="syz.8.2869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 277.849504][ T40] audit: type=1400 audit(1772960174.629:18757): avc: denied { ioctl } for pid=16229 comm="syz.8.2869" path="socket:[71634]" dev="sockfs" ino=71634 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 277.859135][T16230] kthread_run failed with err -4 [ 277.938390][ T40] audit: type=1400 audit(1772960174.719:18758): avc: denied { map_create } for pid=16235 comm="syz.8.2870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 277.969295][ T5929] Bluetooth: hci3: command tx timeout [ 277.973674][ T40] audit: type=1400 audit(1772960174.759:18759): avc: denied { create } for pid=16237 comm="syz.8.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 277.980242][ T40] audit: type=1400 audit(1772960174.759:18760): avc: denied { read } for pid=16237 comm="syz.8.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 277.988176][ T40] audit: type=1400 audit(1772960174.759:18761): avc: denied { write } for pid=16237 comm="syz.8.2871" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:mnt_t:s0" [ 277.994874][T16238] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2871'. [ 277.998143][ T40] audit: type=1400 audit(1772960174.759:18762): avc: denied { open } for pid=16237 comm="syz.8.2871" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:mnt_t:s0" [ 278.010150][ T40] audit: type=1400 audit(1772960174.759:18763): avc: denied { ioctl } for pid=16237 comm="syz.8.2871" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:mnt_t:s0" [ 278.018862][ T40] audit: type=1400 audit(1772960174.769:18764): avc: denied { bind } for pid=16237 comm="syz.8.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 278.100325][T16247] program syz.5.2874 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.214835][T16255] overlayfs: failed to resolve './file0': -2 [ 278.255296][T16261] kAFS: unparsable volume name [ 278.269915][T16261] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 278.273495][T16261] team0: Port device batadv1 added [ 279.180806][T16276] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2886'. [ 279.185842][T16276] xt_hashlimit: size too large, truncated to 1048576 [ 279.304447][T16284] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.309711][T16284] bridge_slave_1: left allmulticast mode [ 279.312315][T16284] bridge_slave_1: left promiscuous mode [ 279.314809][T16284] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.321673][T16284] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 279.615178][T16295] infiniband syz2: set down [ 279.619133][T16295] infiniband syz2: added ipvlan0 [ 279.626633][T16295] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 279.628613][T16295] infiniband syz2: Couldn't open port 1 [ 279.652279][T16295] RDS/IB: syz2: added [ 279.654882][T16295] smc: adding ib device syz2 with port count 1 [ 279.658267][T16295] smc: ib device syz2 port 1 has no pnetid [ 280.049357][ T5929] Bluetooth: hci3: command tx timeout [ 280.593869][T16310] xt_HMARK: spi-set and port-set can't be combined [ 280.829366][ T58] usb 13-1: new low-speed USB device number 2 using dummy_hcd [ 280.981238][ T58] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 280.983659][ T58] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 280.987127][ T58] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 280.991725][ T58] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 280.996150][ T58] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 280.998587][ T58] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 281.002199][ T58] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 281.005869][ T58] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 281.011217][ T58] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 281.014350][ T58] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 281.018751][ T58] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 281.023739][ T58] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 281.030940][ T58] usb 13-1: string descriptor 0 read error: -22 [ 281.033247][ T58] usb 13-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 281.037301][ T58] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.049341][ T58] adutux 13-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 281.645628][ T5925] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 281.653370][ T5925] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 281.657885][ T5925] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 281.663214][ T5925] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 281.666105][ T5925] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 281.695151][T16312] xfrm0 speed is unknown, defaulting to 1000 [ 281.855153][T16312] chnl_net:caif_netlink_parms(): no params data found [ 281.918264][T16312] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.920933][T16312] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.923639][T16312] bridge_slave_0: entered allmulticast mode [ 281.926706][T16312] bridge_slave_0: entered promiscuous mode [ 281.930246][T16312] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.932694][T16312] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.935944][T16312] bridge_slave_1: entered allmulticast mode [ 281.940929][T16312] bridge_slave_1: entered promiscuous mode [ 281.964055][T16312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.969046][T16312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.988223][T16312] team0: Port device team_slave_0 added [ 281.992333][T16312] team0: Port device team_slave_1 added [ 282.017470][T16312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.020937][T16312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.032131][T16312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.039425][T16312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.042649][T16312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.054196][T16312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.083801][T16312] hsr_slave_0: entered promiscuous mode [ 282.086186][T16312] hsr_slave_1: entered promiscuous mode [ 282.088463][T16312] debugfs: 'hsr0' already exists in 'hsr' [ 282.090864][T16312] Cannot create hsr debugfs directory [ 282.129637][ T5925] Bluetooth: hci3: command tx timeout [ 282.201254][T16312] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 282.206498][T16312] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 282.212573][T16312] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 282.217041][T16312] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 282.242181][T16312] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.245794][T16312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.249692][T16312] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.252963][T16312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.302463][T16312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.315824][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.320679][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.331727][T16312] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.341257][T14356] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.344778][T14356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.353608][ T480] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.355988][ T480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.496987][T16312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.654903][T16312] veth0_vlan: entered promiscuous mode [ 282.663542][T16312] veth1_vlan: entered promiscuous mode [ 282.691801][T16312] veth0_macvtap: entered promiscuous mode [ 282.696588][T16312] veth1_macvtap: entered promiscuous mode [ 282.708149][T16312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.716346][T16312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.723184][ T1157] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.727118][ T1157] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.732616][ T1157] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.736665][ T1157] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.795886][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.799059][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.815677][ T480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.819854][ T480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.852087][ T40] kauditd_printk_skb: 71 callbacks suppressed [ 282.852111][ T40] audit: type=1400 audit(1772960179.639:18836): avc: denied { read write } for pid=16312 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 282.864814][ T40] audit: type=1400 audit(1772960179.639:18837): avc: denied { open } for pid=16312 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 282.874429][ T40] audit: type=1400 audit(1772960179.639:18838): avc: denied { ioctl } for pid=16312 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 282.884082][ T40] audit: type=1400 audit(1772960179.659:18839): avc: denied { execute } for pid=16336 comm="syz.9.2896" name="file2" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 282.892114][ T40] audit: type=1400 audit(1772960179.659:18840): avc: denied { execute_no_trans } for pid=16336 comm="syz.9.2896" path="/0/file2" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 282.901005][ T40] audit: type=1400 audit(1772960179.669:18841): avc: denied { create } for pid=16336 comm="syz.9.2896" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 282.908109][ T40] audit: type=1400 audit(1772960179.669:18842): avc: denied { create } for pid=16336 comm="syz.9.2896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 282.917052][ T40] audit: type=1400 audit(1772960179.669:18843): avc: denied { getopt } for pid=16336 comm="syz.9.2896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 282.926501][ T40] audit: type=1400 audit(1772960179.669:18844): avc: denied { unlink } for pid=16336 comm="syz.9.2896" name="file0" dev="tmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 282.937228][ T40] audit: type=1400 audit(1772960179.709:18845): avc: denied { allowed } for pid=16341 comm="syz.9.2897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 283.261192][ T9] usb 13-1: USB disconnect, device number 2 [ 283.673854][T16358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.718091][T16360] program syz.8.2901 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.729674][ T5925] Bluetooth: hci4: command tx timeout [ 283.897162][T16371] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2905'. [ 283.901532][T16371] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2905'. [ 283.904770][T16372] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2905'. [ 284.163788][T16384] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2908'. [ 284.988904][T16386] team0: Device gtp0 is up. Set it down before adding it as a team port [ 285.440955][T16401] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2914'. [ 285.809300][ T5925] Bluetooth: hci4: command tx timeout [ 285.819990][T16422] fuse: Bad value for 'group_id' [ 285.821952][T16422] fuse: Bad value for 'group_id' [ 285.934764][T16430] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 285.939735][T16430] qnx6: wrong signature (magic) in superblock #1. [ 285.942344][T16430] qnx6: unable to read the first superblock [ 286.014105][T16435] befs: (nbd8): unable to read superblock [ 286.021176][T16434] ieee802154 phy0 wpan0: encryption failed: -22 [ 286.164497][T16442] overlayfs: statfs failed on './file0' [ 286.286614][T16448] input: syz1 as /devices/virtual/input/input30 [ 286.416921][T16453] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2932'. [ 286.696655][T16463] QAT: failed to copy from user cfg_data. [ 286.850243][T16472] vxfs: WRONG superblock magic 00000000 at 1 [ 286.853444][T16472] vxfs: WRONG superblock magic 00000000 at 8 [ 286.855843][T16472] vxfs: can't find superblock. [ 286.976392][T16475] xfrm0 speed is unknown, defaulting to 1000 [ 287.890639][ T5925] Bluetooth: hci4: command tx timeout [ 287.931513][ T40] kauditd_printk_skb: 171 callbacks suppressed [ 287.931533][ T40] audit: type=1400 audit(1772960184.719:19017): avc: denied { read write } for pid=16501 comm="syz.9.2950" name="vbi7" dev="devtmpfs" ino=1017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 287.944774][ T40] audit: type=1400 audit(1772960184.719:19018): avc: denied { open } for pid=16501 comm="syz.9.2950" path="/dev/vbi7" dev="devtmpfs" ino=1017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 287.960273][ T40] audit: type=1400 audit(1772960184.749:19019): avc: denied { ioctl } for pid=16501 comm="syz.9.2950" path="/dev/vbi7" dev="devtmpfs" ino=1017 ioctlcmd=0x5640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 288.001669][ T40] audit: type=1400 audit(1772960184.789:19020): avc: denied { prog_load } for pid=16506 comm="syz.9.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 288.009523][ T40] audit: type=1400 audit(1772960184.789:19021): avc: denied { bpf } for pid=16506 comm="syz.9.2951" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 288.018903][ T40] audit: type=1400 audit(1772960184.789:19022): avc: denied { perfmon } for pid=16506 comm="syz.9.2951" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 288.029418][ T40] audit: type=1400 audit(1772960184.809:19023): avc: denied { prog_run } for pid=16506 comm="syz.9.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 288.040980][ T40] audit: type=1400 audit(1772960184.829:19024): avc: denied { allowed } for pid=16506 comm="syz.9.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 288.055404][ T40] audit: type=1400 audit(1772960184.839:19025): avc: denied { map_create } for pid=16506 comm="syz.9.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 288.172427][T16509] erspan1: entered allmulticast mode [ 288.222530][ T40] audit: type=1400 audit(1772960185.009:19026): avc: denied { create } for pid=16506 comm="syz.9.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 288.606411][T16518] F2FS-fs (nbd9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 288.611858][T16518] F2FS-fs (nbd9): Can't find valid F2FS filesystem in 1th superblock [ 288.616007][T16518] F2FS-fs (nbd9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 288.620282][T16518] F2FS-fs (nbd9): Can't find valid F2FS filesystem in 2th superblock [ 288.623385][T16520] usb usb8: usbfs: interface 0 claimed by hub while 'syz.8.2955' sets config #0 [ 289.528214][T16533] openvswitch: netlink: Missing key (keys=40, expected=100) [ 289.540600][T16530] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 289.545163][T16530] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 289.574390][T16530] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 289.601537][T16530] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 289.619526][T16530] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 289.623695][T16530] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 289.627222][T16542] netlink: 'syz.8.2961': attribute type 21 has an invalid length. [ 289.634004][T16544] netlink: 'syz.8.2961': attribute type 21 has an invalid length. [ 289.726474][T16549] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 289.772315][T16549] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 289.836910][T16559] tmpfs: Bad value for 'mode' [ 290.055521][T16563] overlay: Unknown parameter 'q' [ 290.593306][T16590] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2973'. [ 290.686499][T16600] netlink: 'syz.9.2976': attribute type 10 has an invalid length. [ 290.702854][T16600] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 290.870602][ T5925] Bluetooth: hci3: command 0x0c1a tx timeout [ 291.137271][T16628] fuse: Bad value for 'user_id' [ 291.139348][T16628] fuse: Bad value for 'user_id' [ 291.144306][T16628] xt_hashlimit: invalid interval [ 291.369489][T16648] trusted_key: encrypted_key: insufficient parameters specified [ 291.593199][ T6223] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 291.706330][ T5925] Bluetooth: hci4: command 0x0c1a tx timeout [ 291.736465][T16659] /dev/sg0: Can't lookup blockdev [ 291.738789][T16659] /dev/sg0: Can't lookup blockdev [ 291.782540][ T6223] usb 13-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 291.786634][ T6223] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.791058][ T6223] usb 13-1: Product: syz [ 291.793303][ T6223] usb 13-1: Manufacturer: syz [ 291.795458][T16664] random: crng reseeded on system resumption [ 291.795481][ T6223] usb 13-1: SerialNumber: syz [ 291.816065][ T6223] usb 13-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 291.833204][ T5983] usb 13-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 292.359573][ T5929] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 292.366362][ T5929] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 292.373659][ T5929] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 292.387444][ T5929] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 292.393615][ T5929] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 292.439905][T16680] xfrm0 speed is unknown, defaulting to 1000 [ 292.459045][T16686] netlink: 'syz.9.3005': attribute type 1 has an invalid length. [ 292.481833][T16686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6416 sclass=netlink_route_socket pid=16686 comm=syz.9.3005 [ 292.500605][T15096] bridge0: port 3(syz_tun) entered disabled state [ 292.524061][T15096] syz_tun (unregistering): left allmulticast mode [ 292.526555][T15096] syz_tun (unregistering): left promiscuous mode [ 292.529327][T15096] bridge0: port 3(syz_tun) entered disabled state [ 292.606701][T16692] loop1: detected capacity change from 0 to 4 [ 292.610319][T16692] Dev loop1: unable to read RDB block 4 [ 292.621053][T16692] loop1: unable to read partition table [ 292.624832][T16692] loop1: partition table beyond EOD, truncated [ 292.627349][T16692] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 292.630104][T16684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.638299][T16684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.792021][T16680] chnl_net:caif_netlink_parms(): no params data found [ 292.843106][T16712] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3012'. [ 292.884853][T14356] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.931795][ T5983] ath9k_htc 13-1:1.0: ath9k_htc: Target is unresponsive [ 292.934575][ T5983] ath9k_htc: Failed to initialize the device [ 292.996592][T14356] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.014964][ T5925] Bluetooth: hci3: command 0x0c1a tx timeout [ 293.025091][ T40] kauditd_printk_skb: 268 callbacks suppressed [ 293.025092][ T5983] usb 13-1: ath9k_htc: USB layer deinitialized [ 293.025109][ T40] audit: type=1400 audit(1773484477.725:19295): avc: denied { create } for pid=16722 comm="syz.9.3015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 293.042389][ T40] audit: type=1400 audit(1773484477.735:19296): avc: denied { ioctl } for pid=16722 comm="syz.9.3015" path="socket:[75973]" dev="sockfs" ino=75973 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 293.054657][ T40] audit: type=1400 audit(1773484477.735:19297): avc: denied { ioctl } for pid=16649 comm="syz.8.2995" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 293.056587][ T1328] usb 13-1: USB disconnect, device number 3 [ 293.121084][T14356] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.131895][T16680] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.135291][T16680] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.139385][T16680] bridge_slave_0: entered allmulticast mode [ 293.141829][ T40] audit: type=1400 audit(1773484477.842:19298): avc: denied { create } for pid=16722 comm="syz.9.3015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 293.143648][T16680] bridge_slave_0: entered promiscuous mode [ 293.151811][ T40] audit: type=1400 audit(1773484477.842:19299): avc: denied { write } for pid=16722 comm="syz.9.3015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 293.156128][T16680] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.163047][ T40] audit: type=1400 audit(1773484477.842:19300): avc: denied { read } for pid=16722 comm="syz.9.3015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 293.163096][ T40] audit: type=1400 audit(1773484477.852:19301): avc: denied { read } for pid=16722 comm="syz.9.3015" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 293.163130][ T40] audit: type=1400 audit(1773484477.852:19302): avc: denied { open } for pid=16722 comm="syz.9.3015" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 293.171811][T16680] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.177068][ T40] audit: type=1400 audit(1773484477.852:19303): avc: denied { ioctl } for pid=16722 comm="syz.9.3015" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 293.189694][T16680] bridge_slave_1: entered allmulticast mode [ 293.214867][T16680] bridge_slave_1: entered promiscuous mode [ 293.232261][T14356] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.258816][T16680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.267530][T16680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.274226][ T40] audit: type=1400 audit(1773484477.968:19304): avc: denied { write } for pid=16722 comm="syz.9.3015" name="demux0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 293.292324][T16680] team0: Port device team_slave_0 added [ 293.298092][T16680] team0: Port device team_slave_1 added [ 293.332130][T16680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.335836][T16680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.349496][T16680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.356481][T16680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.359800][T16680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.370210][T16680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.458046][T14356] bridge_slave_1: left allmulticast mode [ 293.460486][T14356] bridge_slave_1: left promiscuous mode [ 293.462557][T14356] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.473445][T14356] bridge_slave_0: left allmulticast mode [ 293.475408][T14356] bridge_slave_0: left promiscuous mode [ 293.477544][T14356] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.649603][T16680] hsr_slave_0: entered promiscuous mode [ 293.662002][T16680] hsr_slave_1: entered promiscuous mode [ 293.664472][T16680] debugfs: 'hsr0' already exists in 'hsr' [ 293.666460][T16680] Cannot create hsr debugfs directory [ 293.763660][T16734] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3017'. [ 293.770159][T16734] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3017'. [ 293.792798][T14356] tipc: Left network mode [ 293.843101][T14356] IPVS: stopping backup sync thread 16193 ... [ 293.843583][ T5925] Bluetooth: hci4: command 0x0c1a tx timeout [ 293.849413][ T5933] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 293.868232][ T5933] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 293.875604][ T5933] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 293.897272][ T5933] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 293.902954][ T5933] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 294.088768][T16740] xfrm0 speed is unknown, defaulting to 1000 [ 294.235507][T16754] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3020'. [ 294.236460][ T5983] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 294.238997][T16754] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3020'. [ 294.424326][ T5983] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.434874][ T5983] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.439263][ T5983] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 294.454695][ T5983] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 294.458861][ T5983] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.493434][ T5929] Bluetooth: hci6: command tx timeout [ 294.555094][ T5983] usb 13-1: config 0 descriptor?? [ 294.648090][T14356] hsr_slave_0: left promiscuous mode [ 294.651351][T14356] hsr_slave_1: left promiscuous mode [ 294.654922][T14356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.674114][T14356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.678518][T14356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.681900][T14356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.692755][T14356] veth1_macvtap: left promiscuous mode [ 294.695380][T14356] veth0_macvtap: left promiscuous mode [ 294.697798][T14356] veth1_vlan: left promiscuous mode [ 294.701352][T14356] veth0_vlan: left promiscuous mode [ 294.911125][T14356] team0 (unregistering): Port device team_slave_1 removed [ 294.922914][T14356] team0 (unregistering): Port device team_slave_0 removed [ 294.983547][ T5983] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xd [ 294.987148][ T5983] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x2 [ 294.990243][ T5983] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 294.993017][ T5983] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 294.996038][ T5983] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 294.998636][ T5983] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 295.001344][ T5983] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 295.003996][ T5983] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 295.008105][ T5983] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 295.021003][T16740] chnl_net:caif_netlink_parms(): no params data found [ 295.027168][ T5983] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 295.082354][T16788] netlink: 'syz.9.3026': attribute type 4 has an invalid length. [ 295.159487][ T5929] Bluetooth: hci3: command 0x0c1a tx timeout [ 295.194466][T16740] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.196897][T16740] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.199549][T16740] bridge_slave_0: entered allmulticast mode [ 295.203765][T16740] bridge_slave_0: entered promiscuous mode [ 295.244703][T16740] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.247277][T16740] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.250279][T16740] bridge_slave_1: entered allmulticast mode [ 295.254158][T16744] netlink: 788 bytes leftover after parsing attributes in process `syz.8.3019'. [ 295.260492][T16740] bridge_slave_1: entered promiscuous mode [ 295.275905][T16744] bond0: entered allmulticast mode [ 295.277986][T16744] bond_slave_0: entered allmulticast mode [ 295.280094][T16744] bond_slave_1: entered allmulticast mode [ 295.282085][T16744] bridge_slave_1: entered allmulticast mode [ 295.290245][ T5983] usb 13-1: USB disconnect, device number 4 [ 295.337860][T16740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.344808][T16740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.373250][T16740] team0: Port device team_slave_0 added [ 295.381957][T16740] team0: Port device team_slave_1 added [ 295.402864][T16740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.405765][T16740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.417086][T16740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.423792][T16740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.427475][T16740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.439234][T16740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.531144][T16740] hsr_slave_0: entered promiscuous mode [ 295.535170][T16740] hsr_slave_1: entered promiscuous mode [ 295.538125][T16740] debugfs: 'hsr0' already exists in 'hsr' [ 295.540924][T16740] Cannot create hsr debugfs directory [ 295.604508][T16680] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 295.615661][T16680] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 295.631375][T16680] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 295.646951][T16680] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 295.769323][T14356] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.779466][T14356] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.905901][T16740] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.912403][T16740] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.959924][T14356] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.964311][T14356] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.971045][ T5929] Bluetooth: hci4: command 0x0c1a tx timeout [ 296.004421][T16845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.008069][T16845] batadv_slave_0: entered promiscuous mode [ 296.012767][T16845] batadv_slave_0: entered allmulticast mode [ 296.047095][T16740] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.051246][ T5929] Bluetooth: hci2: command tx timeout [ 296.054736][T16740] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.083971][T14356] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.087695][T14356] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.107664][T16680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.117756][T16680] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.135532][T14357] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.138565][T14357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.157606][T14357] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.160097][T14357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.213522][T14356] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.218116][T14356] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.265821][T16740] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.270539][T16740] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.400405][T16740] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.404388][T16740] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.529160][T16876] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3036'. [ 296.633436][ T5929] Bluetooth: hci6: command tx timeout [ 296.649446][T16883] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3037'. [ 296.660617][T14356] bond3 (unregistering): (slave erspan2): Releasing active interface [ 296.664889][T14356] erspan2 (unregistering): left promiscuous mode [ 296.714606][T14356] bond6 (unregistering): (slave gretap1): Releasing active interface [ 296.726022][T14356] dvmrp31 (unregistering): left allmulticast mode [ 296.738022][T14356] bond5 (unregistering): (slave geneve2): Releasing active interface [ 296.759590][T16895] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16895 comm=syz.8.3037 [ 296.767523][T16895] vivid-000: ================= START STATUS ================= [ 296.770565][T16895] vivid-000: Test Pattern: 100% Colorbar [ 296.775678][T16895] vivid-000: Fill Percentage of Frame: 100 [ 296.780089][T16898] input: syz1 as /devices/virtual/input/input33 [ 296.784017][T16895] vivid-000: Horizontal Movement: Move Right Slow [ 296.789644][T16895] vivid-000: Vertical Movement: No Movement [ 296.792284][T16895] vivid-000: OSD Text Mode: All [ 296.794892][T16895] vivid-000: Show Border: false [ 296.804022][T16895] vivid-000: Show Square: false [ 296.806216][T16895] vivid-000: Sensor Flipped Horizontally: false [ 296.809543][T16895] vivid-000: Sensor Flipped Vertically: false [ 296.812396][T16895] vivid-000: Insert SAV Code in Image: false [ 296.815055][T16895] vivid-000: Insert EAV Code in Image: false [ 296.819005][T16895] vivid-000: Insert Video Guard Band: false [ 296.826028][T16895] vivid-000: Reduced Framerate: false [ 296.829144][T16895] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 296.832722][T16895] vivid-000: S-Video 000-0 Is Connected To: None [ 296.835739][T16895] vivid-000: Enable Capture Cropping: true [ 296.838739][T16895] vivid-000: Enable Capture Composing: true [ 296.841019][T16895] vivid-000: Enable Capture Scaler: true [ 296.843568][T16895] vivid-000: Timestamp Source: End of Frame [ 296.846340][T16895] vivid-000: Colorspace: sRGB [ 296.848813][T16895] vivid-000: Transfer Function: Default [ 296.851067][T16895] vivid-000: Y'CbCr Encoding: Default [ 296.853715][T16895] vivid-000: HSV Encoding: Hue 0-179 [ 296.856128][T16895] vivid-000: Quantization: Default [ 296.858898][T16895] vivid-000: Apply Alpha To Red Only: false [ 296.861333][T16895] vivid-000: Standard Aspect Ratio: 16x9 Anamorphic [ 296.864137][T16895] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 296.868042][T16895] vivid-000: DV Timings: 640x480p59 inactive [ 296.871576][T16895] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 296.874885][T16895] vivid-000: Maximum EDID Blocks: 2 [ 296.877302][T16895] vivid-000: Limited RGB Range (16-235): false [ 296.880427][T16895] vivid-000: Rx RGB Quantization Range: Automatic [ 296.882716][T16895] vivid-000: Power Present: 0x00000001 [ 296.885199][T16895] tpg source WxH: 320x180 (Y'CbCr) [ 296.887440][T16895] tpg field: 1 [ 296.895485][T16895] tpg crop: (0,0)/320x180 [ 296.897263][T16895] tpg compose: (0,0)/320x180 [ 296.898802][T16895] tpg colorspace: 8 [ 296.900620][T16895] tpg transfer function: 0/2 [ 296.902903][T16895] tpg Y'CbCr encoding: 0/1 [ 296.904935][T16895] tpg quantization: 0/2 [ 296.906827][T16895] tpg RGB range: 0/2 [ 296.908602][T16895] vivid-000: ================== END STATUS ================== [ 296.927742][T14356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.932286][T14356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.936548][T14356] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 296.941049][T14356] bond0 (unregistering): Released all slaves [ 296.945770][T14356] bond1 (unregistering): Released all slaves [ 296.953534][T14356] bond2 (unregistering): Released all slaves [ 296.960650][T14356] bond3 (unregistering): Released all slaves [ 296.968808][T14356] bond4 (unregistering): (slave vxcan3): Releasing backup interface [ 296.971882][T14356] vxcan3: left promiscuous mode [ 296.975064][T14356] bond4 (unregistering): (slave vxcan5): Releasing backup interface [ 296.978593][T14356] bond4 (unregistering): Released all slaves [ 296.985909][T14356] bond5 (unregistering): Released all slaves [ 296.997042][T14356] bond6 (unregistering): Released all slaves [ 297.004672][T14356] bond7 (unregistering): Released all slaves [ 297.013568][T14356] bond8 (unregistering): Released all slaves [ 297.020572][T14356] bond9 (unregistering): Released all slaves [ 297.032957][ T5963] xfrm0 speed is unknown, defaulting to 1000 [ 297.035376][ T5963] infiniband syz1: ib_query_port failed (-19) [ 297.097899][T16680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.213166][T16680] veth0_vlan: entered promiscuous mode [ 297.255733][T14356] tipc: Left network mode [ 297.256264][T16680] veth1_vlan: entered promiscuous mode [ 297.291233][T16740] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 297.314641][T16740] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 297.337770][T16740] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 297.375374][T16740] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 297.489570][T16680] veth0_macvtap: entered promiscuous mode [ 297.502504][T16680] veth1_macvtap: entered promiscuous mode [ 297.561402][T16680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.607075][T16680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.616516][ T72] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.622461][ T72] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.632876][ T72] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.640884][ T72] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.649139][T16740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.686692][T16740] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.692246][T16937] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 297.701557][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.703951][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.764221][ T480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.768532][T14357] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.768728][ T480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.771215][T14357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.804962][ T480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.808159][ T480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.820728][T16943] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3046'. [ 297.937730][T16955] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.940661][T16955] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.946298][T16955] bridge0: entered allmulticast mode [ 298.085621][T16740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.092509][T16968] overlayfs: missing 'lowerdir' [ 298.136464][T14356] hsr_slave_0: left promiscuous mode [ 298.140093][T14356] hsr_slave_1: left promiscuous mode [ 298.160764][ C2] sr 2:0:0:0: [sr0] tag#22 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 298.165066][ C2] sr 2:0:0:0: [sr0] tag#22 CDB: Service action out(16), sa=0x18 9f 98 00 00 00 00 00 00 00 00 00 00 [ 298.177834][T14356] veth1_macvtap: left allmulticast mode [ 298.178509][ T5929] Bluetooth: hci2: command tx timeout [ 298.181099][T14356] veth1_macvtap: left promiscuous mode [ 298.184731][T14356] veth0_macvtap: left promiscuous mode [ 298.185379][ T40] kauditd_printk_skb: 362 callbacks suppressed [ 298.185393][ T40] audit: type=1400 audit(1773484482.754:19667): avc: denied { read write } for pid=16976 comm="syz.2.3054" name="swradio4" dev="devtmpfs" ino=1031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 298.187317][T14356] veth1_vlan: left promiscuous mode [ 298.191453][ T40] audit: type=1400 audit(1773484482.754:19668): avc: denied { open } for pid=16976 comm="syz.2.3054" path="/dev/swradio4" dev="devtmpfs" ino=1031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 298.200689][T14356] veth0_vlan: left promiscuous mode [ 298.217672][ T40] audit: type=1400 audit(1773484482.763:19669): avc: denied { ioctl } for pid=16976 comm="syz.2.3054" path="/dev/swradio4" dev="devtmpfs" ino=1031 ioctlcmd=0x5604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 298.222126][T16980] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3055'. [ 298.247726][ T40] audit: type=1400 audit(1773484482.793:19670): avc: denied { write } for pid=16976 comm="syz.2.3054" name="mcfilter6" dev="proc" ino=4026534951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 298.257383][ T40] audit: type=1400 audit(1773484482.793:19671): avc: denied { write } for pid=16978 comm="syz.8.3055" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 298.267239][ T40] audit: type=1400 audit(1773484482.803:19672): avc: denied { create } for pid=16976 comm="syz.2.3054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 298.274648][ T40] audit: type=1400 audit(1773484482.842:19673): avc: denied { create } for pid=16981 comm="syz.2.3056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 298.281653][ T40] audit: type=1400 audit(1773484482.852:19674): avc: denied { write } for pid=16981 comm="syz.2.3056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 298.288309][ T40] audit: type=1400 audit(1773484482.852:19675): avc: denied { create } for pid=16981 comm="syz.2.3056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 298.295239][ T40] audit: type=1400 audit(1773484482.852:19676): avc: denied { ioctl } for pid=16981 comm="syz.2.3056" path="socket:[79072]" dev="sockfs" ino=79072 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 298.336652][T14356] team0 (unregistering): Port device vlan2 removed [ 298.504901][T14356] team0 (unregistering): Port device team_slave_1 removed [ 298.513924][T14356] team0 (unregistering): Port device team_slave_0 removed [ 298.654563][T16740] veth0_vlan: entered promiscuous mode [ 298.664364][T16740] veth1_vlan: entered promiscuous mode [ 298.725033][T16740] veth0_macvtap: entered promiscuous mode [ 298.731977][T16740] veth1_macvtap: entered promiscuous mode [ 298.744700][T16740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.752418][T16740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.758513][ T5929] Bluetooth: hci6: command tx timeout [ 298.780832][ T1157] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.784840][ T1157] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.787693][ T1157] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.804348][ T1157] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.964424][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.967925][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.991113][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.997737][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.060976][T14356] IPVS: stop unused estimator thread 0... [ 299.119258][T16992] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 299.276874][ T5929] Bluetooth: hci3: unexpected event for opcode 0x1804 [ 299.281068][T17022] tmpfs: Unknown parameter 'grpquota)½p' [ 299.480941][T17046] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3070'. [ 300.049537][T17066] openvswitch: netlink: Unknown key attributes 2 [ 300.060091][T17066] batman_adv: batadv0: Adding interface: dummy0 [ 300.063106][T17066] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.071377][T17066] batman_adv: batadv0: Interface activated: dummy0 [ 300.080770][T17066] batadv0: mtu less than device minimum [ 300.084731][T17066] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 300.089760][T17066] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 300.094015][T17066] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 300.098122][T17066] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 300.102635][T17066] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 300.106598][T17066] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 300.110508][T17066] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 300.295854][ T5929] Bluetooth: hci2: command tx timeout [ 300.701239][T17108] overlayfs: upper fs does not support file handles, falling back to index=off. [ 300.835130][ T5983] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 300.865618][ T5929] Bluetooth: hci6: command tx timeout [ 301.002044][ T5983] usb 14-1: Using ep0 maxpacket: 8 [ 301.012612][ T5983] usb 14-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.017231][ T5983] usb 14-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.029466][ T5983] usb 14-1: config 0 interface 0 has no altsetting 0 [ 301.038800][ T5983] usb 14-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 301.042098][ T5983] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.053695][ T5983] usb 14-1: config 0 descriptor?? [ 301.477270][ T5983] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 301.480150][ T5983] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 301.483374][ T5983] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 301.485967][ T5983] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 301.488659][ T5983] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 301.491316][ T5983] mcp2221 0003:04D8:00DD.000C: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 301.845558][T17172] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 301.869605][T17174] CIFS mount error: No usable UNC path provided in device string! [ 301.869605][T17174] [ 301.875217][T17174] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 301.990413][T17182] netlink: 'syz.1.3106': attribute type 1 has an invalid length. [ 301.997841][T17182] 8021q: VLANs not supported on ipvlan1 [ 302.436022][ T5929] Bluetooth: hci2: command tx timeout [ 302.480727][T17191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64545 sclass=netlink_route_socket pid=17191 comm=syz.8.3108 [ 302.508665][T17195] binder: 17194:17195 ioctl 4068aea3 200000000200 returned -22 [ 302.592331][T17205] [ 302.593716][T17205] ============================================ [ 302.596014][T17205] WARNING: possible recursive locking detected [ 302.598329][T17205] syzkaller #0 Tainted: G L [ 302.600896][T17205] -------------------------------------------- [ 302.603705][T17205] syz.1.3110/17205 is trying to acquire lock: [ 302.606079][T17205] ffff8880349bc0f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_do_insn+0x2e/0x360 [ 302.610078][T17205] [ 302.610078][T17205] but task is already holding lock: [ 302.613838][T17205] ffff8880349bb8f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 302.618011][T17205] [ 302.618011][T17205] other info that might help us debug this: [ 302.620710][T17205] Possible unsafe locking scenario: [ 302.620710][T17205] [ 302.623273][T17205] CPU0 [ 302.624469][T17205] ---- [ 302.625909][T17205] lock(&dev->mutex#4); [ 302.627719][T17205] lock(&dev->mutex#4); [ 302.629159][T17205] [ 302.629159][T17205] *** DEADLOCK *** [ 302.629159][T17205] [ 302.631930][T17205] May be due to missing lock nesting notation [ 302.631930][T17205] [ 302.634986][T17205] 1 lock held by syz.1.3110/17205: [ 302.636788][T17205] #0: ffff8880349bb8f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 302.639981][T17205] [ 302.639981][T17205] stack backtrace: [ 302.641957][T17205] CPU: 1 UID: 0 PID: 17205 Comm: syz.1.3110 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.641975][T17205] Tainted: [L]=SOFTLOCKUP [ 302.641979][T17205] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 302.641986][T17205] Call Trace: [ 302.641991][T17205] [ 302.641996][T17205] dump_stack_lvl+0x100/0x190 [ 302.642015][T17205] print_deadlock_bug.cold+0xbd/0xca [ 302.642033][T17205] __lock_acquire+0x12bb/0x2630 [ 302.642055][T17205] lock_acquire+0x1cf/0x380 [ 302.642072][T17205] ? comedi_do_insn+0x2e/0x360 [ 302.642085][T17205] ? __pfx___might_resched+0x10/0x10 [ 302.642098][T17205] __mutex_lock+0x1a2/0x1b90 [ 302.642110][T17205] ? comedi_do_insn+0x2e/0x360 [ 302.642122][T17205] ? comedi_do_insn+0x2e/0x360 [ 302.642134][T17205] ? __pfx___mutex_lock+0x10/0x10 [ 302.642146][T17205] ? __pfx___might_resched+0x10/0x10 [ 302.642158][T17205] ? __up_read+0x2c5/0x700 [ 302.642170][T17205] ? comedi_do_insn+0x2e/0x360 [ 302.642181][T17205] comedi_do_insn+0x2e/0x360 [ 302.642193][T17205] comedi_dio_bitfield2+0x3c0/0x420 [ 302.642206][T17205] ? __pfx_comedi_dio_bitfield2+0x10/0x10 [ 302.642219][T17205] ? do_insn_ioctl+0xda/0x4e0 [ 302.642233][T17205] ? stack_trace_save+0x8e/0xc0 [ 302.642247][T17205] ? __pfx_stack_trace_save+0x10/0x10 [ 302.642261][T17205] bonding_dio_insn_bits+0x2b9/0x570 [ 302.642276][T17205] ? kasan_save_track+0x14/0x30 [ 302.642292][T17205] ? __pfx_bonding_dio_insn_bits+0x10/0x10 [ 302.642306][T17205] ? __x64_sys_ioctl+0x18e/0x210 [ 302.642321][T17205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.642333][T17205] insn_rw_emulate_bits+0x2a2/0x5e0 [ 302.642352][T17205] ? __pfx_insn_rw_emulate_bits+0x10/0x10 [ 302.642370][T17205] ? comedi_check_chanlist+0x27e/0x300 [ 302.642387][T17205] parse_insn+0x83f/0x19f0 [ 302.642401][T17205] ? trace_kmalloc+0x101/0x130 [ 302.642410][T17205] ? __pfx_parse_insn+0x10/0x10 [ 302.642424][T17205] ? __kmalloc_noprof+0x320/0x850 [ 302.642439][T17205] do_insn_ioctl+0x152/0x4e0 [ 302.642454][T17205] comedi_unlocked_ioctl+0xf68/0x3310 [ 302.642470][T17205] ? tomoyo_path_number_perm+0x188/0x580 [ 302.642491][T17205] ? futex_wait+0x125/0x380 [ 302.642505][T17205] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 302.642523][T17205] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 302.642539][T17205] ? do_vfs_ioctl+0x226/0x13e0 [ 302.642555][T17205] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 302.642570][T17205] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 302.642586][T17205] ? __fget_files+0x215/0x3d0 [ 302.642596][T17205] ? hook_file_ioctl_common+0x146/0x410 [ 302.642613][T17205] ? selinux_file_ioctl+0x139/0x290 [ 302.642624][T17205] ? selinux_file_ioctl+0xb4/0x290 [ 302.642636][T17205] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 302.642652][T17205] __x64_sys_ioctl+0x18e/0x210 [ 302.642667][T17205] do_syscall_64+0x106/0xf80 [ 302.642678][T17205] ? clear_bhb_loop+0x40/0x90 [ 302.642690][T17205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.642702][T17205] RIP: 0033:0x7f8846b9c799 [ 302.642712][T17205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.642722][T17205] RSP: 002b:00007f8847a07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.642734][T17205] RAX: ffffffffffffffda RBX: 00007f8846e16090 RCX: 00007f8846b9c799 [ 302.642741][T17205] RDX: 0000200000000000 RSI: 000000008028640c RDI: 000000000000000b [ 302.642747][T17205] RBP: 00007f8846c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 302.642753][T17205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.642760][T17205] R13: 00007f8846e16128 R14: 00007f8846e16090 R15: 00007ffccad13d88 [ 302.642769][T17205] [ 302.644657][ T5983] usb 14-1: reset high-speed USB device number 2 using dummy_hcd SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 303.300459][T14353] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.410442][T14353] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.471334][T14353] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.534322][T14353] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.593911][ T40] kauditd_printk_skb: 339 callbacks suppressed [ 303.593922][ T40] audit: type=1400 audit(1773484488.081:20016): avc: denied { read } for pid=5636 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 303.610709][T14353] bridge_slave_1: left allmulticast mode [ 303.613317][T14353] bridge_slave_1: left promiscuous mode [ 303.615861][T14353] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.620153][T14353] bridge_slave_0: left allmulticast mode [ 303.622040][T14353] bridge_slave_0: left promiscuous mode [ 303.624002][T14353] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.713557][T14353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.717235][T14353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.722061][T14353] bond0 (unregistering): Released all slaves [ 303.736335][ T40] audit: type=1400 audit(1773484488.219:20017): avc: denied { search } for pid=5636 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.745356][ T40] audit: type=1400 audit(1773484488.219:20018): avc: denied { search } for pid=5636 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.755011][ T40] audit: type=1400 audit(1773484488.219:20019): avc: denied { search } for pid=5636 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.764935][ T40] audit: type=1400 audit(1773484488.219:20020): avc: denied { read } for pid=5636 comm="dhcpcd" name="n167" dev="tmpfs" ino=12392 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 303.774350][ T40] audit: type=1400 audit(1773484488.219:20021): avc: denied { open } for pid=5636 comm="dhcpcd" path="/run/udev/data/n167" dev="tmpfs" ino=12392 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 303.784290][ T40] audit: type=1400 audit(1773484488.219:20022): avc: denied { getattr } for pid=5636 comm="dhcpcd" path="/run/udev/data/n167" dev="tmpfs" ino=12392 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 303.794832][ T40] audit: type=1400 audit(1773484488.249:20023): avc: denied { read open } for pid=17218 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.806648][ T40] audit: type=1400 audit(1773484488.249:20024): avc: denied { getattr } for pid=17218 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.817290][ T40] audit: type=1400 audit(1773484488.259:20025): avc: denied { add_name } for pid=17217 comm="dhcpcd-run-hook" name="resolv.conf.eth18.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.021198][T14353] hsr_slave_0: left promiscuous mode [ 304.023824][T14353] hsr_slave_1: left promiscuous mode [ 304.024895][ T6223] usb 14-1: USB disconnect, device number 2 [ 304.035867][T14353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.054873][T14353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.062509][T14353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.069928][T14353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.073502][T14353] batman_adv: batadv0: Interface deactivated: dummy0 [ 304.076959][T14353] batman_adv: batadv0: Removing interface: dummy0 [ 304.081673][T14353] veth1_macvtap: left promiscuous mode [ 304.084101][T14353] veth0_macvtap: left promiscuous mode [ 304.086773][T14353] veth1_vlan: left promiscuous mode [ 304.089126][T14353] veth0_vlan: left promiscuous mode [ 304.175265][T14353] team0 (unregistering): Port device team_slave_1 removed [ 304.184148][T14353] team0 (unregistering): Port device team_slave_0 removed [ 304.619715][T14353] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.697005][T14353] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.747847][T14353] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.839830][T14353] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.927380][T14353] bridge_slave_1: left allmulticast mode [ 304.930127][T14353] bridge_slave_1: left promiscuous mode [ 304.932739][T14353] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.938009][T14353] bridge_slave_0: left allmulticast mode [ 304.940426][T14353] bridge_slave_0: left promiscuous mode [ 304.942940][T14353] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.072558][T14353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.078083][T14353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.083618][T14353] bond0 (unregistering): Released all slaves [ 305.088419][T14353] bond1 (unregistering): Released all slaves [ 305.456997][T14353] hsr_slave_0: left promiscuous mode [ 305.459890][T14353] hsr_slave_1: left promiscuous mode [ 305.462576][T14353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.466087][T14353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.469823][T14353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.473111][T14353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.485111][T14353] veth1_macvtap: left promiscuous mode [ 305.487526][T14353] veth0_macvtap: left promiscuous mode [ 305.489986][T14353] veth1_vlan: left promiscuous mode [ 305.492255][T14353] veth0_vlan: left promiscuous mode [ 305.603256][T14353] team0 (unregistering): Port device team_slave_1 removed [ 305.614143][T14353] team0 (unregistering): Port device team_slave_0 removed