last executing test programs: 11m38.196414571s ago: executing program 32 (id=1106): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 11m30.644821636s ago: executing program 33 (id=1180): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2201}, 0x18, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000003c0), 0x2, 0x8e8f81) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) write$char_usb(r1, 0x0, 0x0) landlock_restrict_self(r0, 0xf) setresuid(0xee00, 0x0, 0xee00) 10m44.763391156s ago: executing program 34 (id=1383): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="358742"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 7m12.642445093s ago: executing program 35 (id=3863): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r1, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021"], 0x54}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f00000001c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x38]}}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$media(&(0x7f0000005000), 0x7, 0x40) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000005c80)={{0x80000000, 0x0, 0x7, [0x3]}, {0x80000000, 0x0, 0x2, [0x2, 0x8]}, 0x4, [0x6, 0x2]}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 6m50.283952827s ago: executing program 36 (id=3946): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000700), 0x80, 0x0) ioctl$SOUND_PCM_READ_BITS(r1, 0x80045005, &(0x7f0000000740)) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0xfffffd7f}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}}) splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) (async) close(0x4) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0500000081cb00000000000000000000000078755f0e702d3de668a045bd89c9c32f86c987f59b764013ba4c8faca61cd1ef868da123f59ec2e6a74ed86d43fe25750d03dd38c76b199894dab28aa3a65a1cbe1a7a35bd0854fa28bb90f5184140bc566d006a3d1e284608e3bc2c23e42ee4a165635094e6f850667f16d5da5e831b6f16a3deaa9f21b8bc130abd690248c5f15e0260ee004a408db6e6c7e4aeeed005df4663a18ddf7ec56f903daf2df27291fe93acc08761fb77d9e6ce4dcd6e7b4942683a9d25712ab80d6601c4b29056fe84ccadd5966b82d85021922a3b0c3b2670305161a42014f47a495044b5b20d953a4c6c8403740f42962aeb02bc5dd73e36a970b87906c17c57c384a1cb80c6e4c4325c94b32ab84ad19457d003a9a2e9f9a5409478c16ee42fcdd4fd1a0250764eba8a556b5f98bbca0a9d394169f07ff4648f", @ANYRES32=r9, @ANYBLOB="0c00238006001b0057620000"], 0x28}, 0x1, 0x0, 0x0, 0x4140}, 0x0) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_START(r11, 0x5402) (async) ioctl$SNDCTL_TMR_TEMPO(r11, 0xc0045405, &(0x7f0000001080)=0x8f) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000600)="b9ed29d8fe490a060b483f2dd090fc6889ae6b84", 0xffeb}], 0x1}, 0x0) 5m57.083534444s ago: executing program 37 (id=4699): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) (async) listen(r0, 0x0) socket$caif_stream(0x25, 0x1, 0x5) pselect6(0x40, &(0x7f00000019c0)={0x3, 0x3, 0x6, 0x3bb, 0x9, 0xea, 0xfffffffffffffff7, 0x5}, 0x0, &(0x7f0000001a40)={0x8, 0x8, 0xffffffffffffffff, 0x7, 0xee, 0x3ff, 0x2, 0x5}, 0x0, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x3018001, &(0x7f0000000140)={'trans=unix,', {[{@access_any}], [{@dont_hash}]}}) (async) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x3018001, &(0x7f0000000140)={'trans=unix,', {[{@access_any}], [{@dont_hash}]}}) r1 = eventfd2(0x8000, 0x80001) read$eventfd(r1, &(0x7f0000000100), 0x8) 4m46.550713648s ago: executing program 38 (id=5701): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000001}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_EXT_SCAN_ENABLE={{0x2}, 0x8}}}, 0x7) ppoll(&(0x7f0000000980)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x0) shutdown(r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m25.265910157s ago: executing program 39 (id=5779): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}]}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027338298484200004400000008000300", @ANYRES32=r5, @ANYBLOB="14002380060018000700"], 0x38}, 0x1, 0x0, 0x0, 0x220080d0}, 0x0) (async) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@cswp={0x58, 0x114, 0x7, {{0x6, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x9, 0x9, 0x1c, 0x4}}], 0x58}, 0x0) (async) r7 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x40a803, 0x111) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x94, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0xc0000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, @in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x8001}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e22, @private=0xa010100}, @in={0x2, 0x4e20, @multicast1}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000300)={r8, @in6={{0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, 0x2, 0x40, 0xfffffff7, 0x9, 0x19, 0x3, 0x8}, 0x9c) 4m23.471721267s ago: executing program 40 (id=5796): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000600)="002147b7357e0e8d442441e9bea6583d48ac340dc69d54af976b6a7c18c4907ed175462f18ec0e16d2e54eec23d7c139254ead9f57abed3bad46320d0d4abf7c3a617f1b2fbe8b338d1fce449066bfe9fa0700eb00000000001861e3580bdf025cb470613b79119f1c9fe8b9ee5d1f41b6af7d12a2ba71c7a74727cece06221eadc4d7137811e483a94c11640bf56f0fe1829f55cd2d91b74aee000000007014dbb599acce7d933ae8928eccad0b8321", 0xb0}], 0x1, 0x73a, 0x800) preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}, {&(0x7f0000000200)=""/19, 0x13}], 0x2, 0x6, 0x1) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, &(0x7f0000000300)="c44175d98b400000000f01d166baf80cb83e57168bef66bafc0c66b8000066ef2ef04383a37c6f0000966536440f076441dc5c17ba470f01ca48b8c649d284e9e3755d0f23d00f21f8353000000c0f23f8660f3880b60e000000f2450f00d2", 0x5f}], 0x1, 0x0, &(0x7f00000003c0)=[@dstype3={0x7, 0x9}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) umount2(&(0x7f0000000040)='./file1\x00', 0x1) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8101, 0x40) r7 = fanotify_init(0x200, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r5, 0xaead) fanotify_mark(r7, 0x1, 0x40000020, r6, &(0x7f00000000c0)='./file0\x00') syz_emit_ethernet(0x9a, &(0x7f0000000b40)={@local, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "980880", 0x60, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xfffffffe}, @exp_smc={0xfe, 0x6}, @fastopen={0x22, 0xd, "0803000000d198d3fb36c6"}, @sack={0x5, 0x1a, [0x7, 0x7, 0x8, 0x7, 0x4, 0x8]}, @md5sig={0x13, 0x12, "0d678fadf674cece5030bacbe9ffdd8e"}]}}}}}}}}, 0x0) 3m42.240548364s ago: executing program 9 (id=6420): r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r5 = syz_open_dev$usbfs(&(0x7f0000000300), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x3, 0x44, &(0x7f00000001c0)={0x20, 0x3, 0x17, 0x1}, 0x8, 0x20, 0x3, 0x0, 0x4bf, 0x404, 0x0}) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040081}, 0x20000880) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0x31, 0x1000, 0x7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async, rerun: 64) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r10 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r10, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x237, 0x0, 0x2, 0x0, 0x6}) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38, 0x20008041}}], 0x1, 0x4000090) (async, rerun: 64) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x20, 0x0) (async) close_range(r7, r7, 0x2) 3m42.239781933s ago: executing program 9 (id=6421): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_pedit={0x0, 0x1f, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0x0, 0x2, {{{0x5, 0x5, 0x10000000, 0xd}, 0x6, 0xf, [{0x5, 0x8, 0x7, 0x8001, 0xd8fa, 0x5}, {0x7, 0x8, 0x6, 0x9, 0x2, 0x8}]}, [{0x3, 0xc63, 0x7, 0xffff, 0x2, 0x9}, {0x1e, 0x9, 0x9070, 0x1, 0x7, 0xb09}, {0x1, 0xc3e, 0x110, 0x6, 0xac}, {0x0, 0x9, 0x0, 0x6, 0xab2, 0xc6bc}, {0x7fffffff, 0x1, 0x53e1, 0x80000000, 0x8, 0x8}, {0x4, 0x81, 0xe1, 0x9, 0x5, 0xfffffffc}, {0x0, 0x80, 0x4, 0x3ff, 0x100, 0x4}, {0x8, 0xffffffff, 0x1, 0x0, 0x3ff, 0x4}, {0x1, 0x2, 0x6, 0x0, 0xfffffc00, 0x50}, {0x15a0, 0x3ff, 0xfffffff5, 0x1, 0x23, 0x6}, {0xa93b, 0x8, 0x1, 0x3, 0x1ff, 0x401}, {0x2, 0x8, 0x6e, 0x232bad79, 0x7, 0xeb}, {0xf20d, 0x401, 0x2, 0xad99, 0x574, 0x1}, {0x49c, 0x4d0, 0x2, 0x7b0, 0x75, 0x3}, {0x2, 0x2, 0x7, 0x1ff, 0x0, 0x5c9}, {0x8, 0xff, 0x1, 0x2, 0x80000000, 0x7}, {0xffff, 0x3, 0x3, 0x1537a8e2, 0x1ff, 0x9}, {0x8, 0x400, 0xfff, 0x8, 0x100, 0x4}, {0xf, 0xc0000000, 0x101, 0x3, 0x3, 0x401e}, {0x6, 0x8, 0x15d, 0xffffff80, 0x6, 0x5}, {0x6, 0xf, 0x0, 0x1, 0x5, 0x2}, {0xbc36, 0x0, 0x9, 0xfff, 0x0, 0x1}, {0x9, 0x3, 0xa, 0x7ff, 0x0, 0x6}, {0x2, 0xfffffff8, 0x2, 0x5, 0x4, 0x10002}, {0x2, 0x7, 0x5, 0x3, 0x0, 0x100}, {0xbc, 0xfff0, 0x9, 0x3, 0x80000000, 0x6}, {0xfffffffb, 0x3, 0x2, 0xc1a, 0x6, 0x6}, {0x40, 0x80000001, 0x8, 0xb, 0x4, 0x3ff}, {0x9, 0xfffffffd, 0x8001, 0x2, 0xfffffff0, 0x7fff}, {0x10001, 0xfffffff9, 0x6, 0x1, 0x7, 0x7}, {0x1, 0xb, 0x3, 0x9, 0x4, 0x10001}, {0x7, 0xffffffff, 0x40, 0x833d, 0x2, 0x2}, {0x7, 0x5, 0x1, 0x8, 0x0, 0x5}, {0xa2, 0x4, 0x3, 0x7, 0xe, 0xffffff71}, {0x2, 0x4, 0x80000000, 0x1000, 0x2, 0x1}, {0xd9a, 0x9, 0x9, 0x400000, 0x3, 0x5}, {0x81, 0x9, 0xed4, 0x7, 0x7, 0x7}, {0x5, 0x1, 0x6, 0x4, 0x85ab, 0x2}, {0x1, 0x0, 0x80, 0x3, 0x1, 0x2}, {0x8, 0xf38, 0xe, 0x9, 0x8000, 0xf}, {0xebe4, 0x1, 0x101, 0x1000, 0xd, 0x7f}, {0x5, 0x9, 0x2, 0x3, 0x1, 0x9}, {0x7, 0x80000001, 0x5, 0x5, 0x5, 0xfff}, {0x0, 0x2, 0x8ff9bcc, 0x5, 0xe, 0xfffffffb}, {0x6be4, 0x400, 0xb, 0x0, 0x844, 0x9}, {0xfffffffb, 0x8, 0x4, 0x5, 0x906, 0x401}, {0x7, 0xb7, 0x0, 0x10001, 0x7, 0x82a}, {0x5, 0x2, 0x3f, 0x0, 0x1000, 0x9}, {0xe15d, 0x3e, 0x0, 0x8001, 0x7, 0x9}, {0x8, 0x6, 0x2, 0x20, 0x0, 0xc4d8}, {0x7, 0xff, 0x0, 0x3, 0x97d9}, {0x6, 0x64c, 0x80000001, 0x80, 0x8, 0x6791a31d}, {0x2, 0x7, 0x401, 0x9, 0xee93, 0x10000}, {0xf4e, 0x7, 0x13c, 0xfffffffa, 0x558, 0xb}, {0xf, 0x10001, 0x6, 0x9, 0x8, 0x7fffffff}, {0x9, 0x0, 0x6, 0xfffa, 0x9, 0x80000001}, {0x492d, 0x6, 0x51, 0x7, 0x4, 0xfff}, {0xfffffffe, 0x9, 0xd6, 0x9, 0x1, 0x9}, {0x80000001, 0x8, 0xd46e, 0x4, 0x5, 0x1ff}, {0x0, 0x2, 0x200, 0x8, 0xa, 0x4}, {0xb53, 0xff, 0x1, 0x3b1, 0xfff, 0x8}, {0x9, 0x2b, 0x80, 0xeec, 0x1, 0x80000001}, {0x9, 0x9, 0x5a00, 0xc, 0x6, 0xfffff301}, {0xffffffff, 0xa44c, 0x7, 0x101, 0x8, 0x2f26b518}, {0x4, 0x80, 0x957, 0x7, 0x1}, {0xfff, 0x6, 0x6, 0x8, 0x0, 0x4}, {0x4, 0x8001, 0xe17, 0x9, 0x10000, 0x4}, {0x8, 0x4, 0x6, 0x5, 0x2, 0xffff0001}, {0x10, 0x9, 0x101, 0x80000000, 0x2b, 0x3}, {0x8c7, 0xec49, 0x0, 0x1}, {0xfffff1f8, 0x6, 0x7, 0x8, 0xe54f, 0x100}, {0x0, 0x3, 0x5, 0x0, 0x8, 0x3}, {0x4, 0x8001, 0x10000, 0xffff, 0xf6, 0x9}, {0x4, 0x4, 0xe7, 0x5a3a, 0x7fffffff, 0x7fff}, {0xfffffffc, 0x4835, 0x1, 0x2, 0x4, 0x1}, {0x9, 0x4, 0x6, 0x8, 0x0, 0x2bf9}, {0x0, 0x3d5, 0xffffffee, 0x0, 0x4}, {0x5, 0x5, 0x1000, 0xfffffffc, 0xa6, 0xc}, {0x0, 0x80000001, 0x10, 0x3, 0xe2cb, 0xffff}, {0xf92, 0x7ff, 0x4, 0xfffffffe, 0xd, 0x3}, {0x9, 0x9, 0x400, 0x2, 0xb, 0xffffffff}, {0x300, 0x4, 0x3, 0x2, 0x8, 0x4}, {0xfffffffb, 0x0, 0x6, 0x3, 0x8, 0x7fffffff}, {0x9, 0x80000001, 0x1, 0xfffffffc, 0x755338de, 0x81}, {0x4, 0x9, 0x3, 0x400, 0x8}, {0x3, 0x1, 0x2, 0x0, 0x5, 0x8}, {0x40, 0x1, 0x8, 0x800, 0x3, 0x7}, {0x3, 0x100, 0x0, 0x5de7, 0x9, 0xf18}, {0xfffffffc, 0x12000000, 0x1, 0x3, 0x6}, {0x8, 0xeb, 0x2, 0x5e06, 0x7, 0x6}, {0x2, 0x9619, 0x9, 0x10001, 0x1, 0x9}, {0xb, 0x9, 0x0, 0x8, 0x0, 0x5}, {0xa, 0x3, 0x7, 0x500, 0xfff, 0x4}, {0x40, 0xffffffff, 0x3, 0xfffffe00, 0x81, 0x25}, {0x80, 0xffffffff, 0x8, 0x8000, 0x4, 0x29}, {0x81, 0x6, 0x7, 0x9, 0x1, 0x20000}, {0x3, 0x85, 0x4, 0x1, 0x80000001, 0x40}, {0x4, 0xfffffffe, 0x4f51, 0x2, 0xff}, {0x3, 0x4000, 0x6, 0x7, 0x40, 0x101}, {0x101, 0x101, 0x20, 0x48, 0x86a}, {0x4f7, 0x100, 0x5, 0x6, 0xfffffff7, 0x8001}, {0x2, 0x3, 0x9, 0x4, 0x7, 0x1}, {0x1179be7d, 0x5, 0xfffffff9, 0x9, 0x1, 0x2}, {0xffffffff, 0x7, 0xe, 0x0, 0x3, 0xfffffff8}, {0x2, 0x87, 0x401, 0x8, 0x0, 0x8}, {0xfff, 0x5, 0x4, 0x4, 0xa, 0x10}, {0x3, 0x1ff, 0x1, 0x4, 0x1000, 0x4}, {0x9, 0x8, 0x79, 0x6, 0x100}, {0x3, 0x0, 0x7, 0x2, 0xfffffffb, 0x210}, {0x4, 0x1, 0x7fff, 0x1000, 0xf, 0x2}, {0x80, 0x7fffffff, 0x6, 0xf9cd, 0x1}, {0xb, 0x4, 0xffff0001, 0x74a90dbb, 0x2, 0x4}, {0x8, 0xffff, 0xb03d, 0x6, 0x2, 0x5}, {0x7, 0x401, 0x7, 0xdbdc, 0x3, 0x34}, {0x8, 0x1, 0x5, 0x8, 0x101, 0x80000001}, {0x2, 0x8, 0x3, 0x2, 0x4, 0x3}, {0x3fc0000, 0x800, 0x4, 0x10001, 0x0, 0x3}, {0x0, 0x6, 0x3, 0x5, 0xf, 0x1}, {0xfffffff8, 0x9, 0x7fff, 0x2, 0x4f3, 0xfffffffa}, {0x0, 0xe789, 0x9, 0x3, 0x4, 0x8}, {0x6, 0x5, 0x4, 0xb, 0x9, 0x7}, {0x17, 0x800, 0x2, 0x5, 0x40, 0x5}, {0x5, 0x81, 0x8, 0x4, 0x555, 0x38}, {0x400, 0x8, 0x200, 0x7, 0x2, 0x5}, {0x9, 0xb, 0x4, 0x10001, 0x2, 0x7}, {0x7f, 0x3, 0x8001, 0xfffffff9, 0x2a, 0x55}, {0x5, 0xfffffffa, 0x0, 0xe0, 0x4, 0x1}, {0xfffffffb, 0xffff, 0x0, 0xb, 0xd, 0x80000001}], [{0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x1, 0x5c510a637d698c48}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x91c4a652bc16eebb}, {0x5}, {0x3, 0x1}, {}, {0x5}, {0x2}, {}, {0x3, 0x1}, {}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x2}, {0x5}, {0x2}, {0x2, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x1}, {0x5}, {0x0, 0x1}, {}, {0x4}, {}, {0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}]}}]}, {0x0, 0x6, "dd4193efdefe5bbcbf31ea7bf3a31ea4906e8f716cedc2ad873977320b28e0aed3cd50c61b41bc9a8dd095c069311237cc8029635a1df9bcf2721d279a995977ae71e422166e0ce6b0e72810b99757500fe2265d188dd274959da9d070297b926851a471f74c4632203a04eda18b897a77d07800f2b9dec5c92f1bd2810e0d7a179e4382554b846fb03cdf3e41ee3a2b83f91bc1b5f4611f379040a1e7c9a5b99f2bb09ede44d6a9b6648c4f805fbe6733c3ef769676c680b906d50e32a34a5e7b009317dcdb08042eecb9284e3a459a80d02b2950151f5d3861fc217d3e646f6b418ad9283778ac7836501be3a3d864b8e7a945a832b53b87fd764f"}, {}, {0x0, 0x8, {0x1, 0x3}}}}, @m_skbedit={0x0, 0xd, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x0, 0x2, {0x7ff, 0x8001, 0x6, 0x8001, 0x6}}, @TCA_SKBEDIT_MARK={0x0, 0x5, 0x7}]}, {0x0, 0x6, 'c'}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x1, 0x3}}}}]}]}, 0x64}}, 0x80) 3m42.172870991s ago: executing program 9 (id=6422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x3c, 0x4, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xedef}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x22}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040080}, 0x40000) 3m42.171958256s ago: executing program 9 (id=6423): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000100)={@local, 0x0}, &(0x7f0000000140)=0x14) r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) file_getattr(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x18, 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x40, 0x81, 0x1, 0x90, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0x5, 0xf4a5af75082b4511}, 0xc) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x6, &(0x7f0000000080)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0xd, 0x3, 0x0, 0x1}], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x2, '\x00', r1, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x0, 0x4, 0x8001, 0xbb65}, 0x10, 0x1cce5, r3, 0x5, &(0x7f0000000380)=[r4, r6, 0xffffffffffffffff, r5, 0x1, r6], &(0x7f00000004c0)=[{0x3, 0x5, 0x9, 0x2}, {0x40, 0x2, 0xf, 0x9}, {0x0, 0x4, 0x4, 0x2}, {0x1, 0x1, 0x2, 0x5}, {0x0, 0x5, 0xd, 0xb}], 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) (async) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) (async) file_getattr(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x18, 0x0) (async) creat(&(0x7f00000001c0)='./file0\x00', 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x40, 0x81, 0x1, 0x90, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0x5, 0xf4a5af75082b4511}, 0xc) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x6, &(0x7f0000000080)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0xd, 0x3, 0x0, 0x1}], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x2, '\x00', r1, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x0, 0x4, 0x8001, 0xbb65}, 0x10, 0x1cce5, r3, 0x5, &(0x7f0000000380)=[r4, r6, 0xffffffffffffffff, r5, 0x1, r6], &(0x7f00000004c0)=[{0x3, 0x5, 0x9, 0x2}, {0x40, 0x2, 0xf, 0x9}, {0x0, 0x4, 0x4, 0x2}, {0x1, 0x1, 0x2, 0x5}, {0x0, 0x5, 0xd, 0xb}], 0x10, 0x1}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x98) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) (async) 3m42.122715117s ago: executing program 9 (id=6424): syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x2, 0x401) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) write$tun(r1, &(0x7f00000001c0)={@void, @val={0x0, 0x4, 0x0, 0x7, 0x400, 0xb46}, @mpls={[{0x1, 0x0, 0x1}, {0x6}, {0xffffb, 0x0, 0x1}, {0x1b}], @generic="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"}}, 0x101a) syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @local}, {{0x0, 0x4e22, 0x41424344, r0, 0x0, 0x6, 0x5}, {"a8e4ec4ec79496d52444478bf9eefeedac5c7bba63a9601424c4c517"}}}}}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000001200)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) syz_open_dev$loop(&(0x7f0000000000), 0x8a, 0x200000) 3m42.122230733s ago: executing program 9 (id=6425): r0 = socket(0x10, 0x3, 0x0) (async) r1 = getpid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000180)=r1) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_client}]}}) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x2, 0x0, 0x0, 0x40008000}, 0x10) r5 = socket(0x40000000015, 0x5, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) r6 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) r8 = dup(r7) fsetxattr$trusted_overlay_upper(r8, &(0x7f0000000000), 0x0, 0x0, 0x2) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) (async) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000006) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xabb7}, 0x1c) map_shadow_stack(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) (async) write(r0, &(0x7f0000000300)="240000001a005f0214f9f4070d0903ff80000000fe050000000200000800040001000000", 0x24) 3m27.073480112s ago: executing program 41 (id=6425): r0 = socket(0x10, 0x3, 0x0) (async) r1 = getpid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000180)=r1) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_client}]}}) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x2, 0x0, 0x0, 0x40008000}, 0x10) r5 = socket(0x40000000015, 0x5, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) r6 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) r8 = dup(r7) fsetxattr$trusted_overlay_upper(r8, &(0x7f0000000000), 0x0, 0x0, 0x2) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) (async) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000006) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xabb7}, 0x1c) map_shadow_stack(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) (async) write(r0, &(0x7f0000000300)="240000001a005f0214f9f4070d0903ff80000000fe050000000200000800040001000000", 0x24) 3m27.032697734s ago: executing program 3 (id=6613): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '.\x02\x00'}, 0x6e) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000001c0)=0x14, 0x80000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000200)={0x0, 'hsr0\x00', {0x4}, 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xfffffffffffffff7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x1005, 0x400, 0x20303159, 0x4, 0x9, 0x46, 0x8, 0x3, 0x1, 0x7, 0x0, 0x7}}) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000000c0)=""/121) 3m26.892009324s ago: executing program 3 (id=6614): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newrule={0x1c, 0x20, 0x301, 0xfffffffd, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x8, 0xfe, 0x0, 0x0, 0x3, 0x1d}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x44004) (async, rerun: 32) r1 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e) (async) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 3m26.83139346s ago: executing program 3 (id=6615): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x50) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000380), &(0x7f00000002c0)=r3}, 0x20) ppoll(&(0x7f0000000080)=[{r0, 0x22a}], 0x1, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4380, 0x0) preadv2(r6, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xa) close(r5) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='hpfs\x00', 0x800, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='hpfs\x00', 0x800, 0x0) 3m25.962434318s ago: executing program 3 (id=6622): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) process_vm_readv(0xffffffffffffffff, &(0x7f00000018c0)=[{&(0x7f0000000340)=""/160, 0xa0}], 0x1, &(0x7f0000001dc0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000170000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596f8aca1f26c4e54dd3c839c63ecba701f7518abef567139fd50aba0ce94ab8786582ae2f35099ba41"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001500192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r3 = socket$inet6(0xa, 0x3, 0x2f) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0xc}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000bc0)={'batadv0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, 0xb881}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x24}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844) sendto$packet(r7, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r10, 0x1, 0x0, 0x6, @local}, 0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000c00)=0x0, &(0x7f0000000c40)=0x4) r12 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r12, &(0x7f00000000c0)={0x1d, r13}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000c80)={0x0, @rand_addr, @broadcast}, &(0x7f0000000cc0)=0xc) r15 = socket(0x400000000010, 0x3, 0x0) r16 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r17, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x1ff, 0x0, 0x0, 0x10001, 0x4, 0x2, 0x5, 0x8}}}}]}, 0x58}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d00)={0x260, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}]}, 0x260}}, 0x80) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="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"], 0x3c0}, 0x1, 0x0, 0x0, 0x84}, 0x24008001) 3m25.761649428s ago: executing program 3 (id=6624): r0 = socket$unix(0x1, 0x2, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001500)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x40000) sendfile(r3, r3, 0x0, 0x6d276b17) landlock_restrict_self(r1, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r7, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10, 0xffffffff}, {@host=0x10, 0x1}, 0x400, "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"}, 0x418, 0x2001}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r7, 0x7ac, &(0x7f0000000100)={&(0x7f0000000980)={{@host, 0x1}, {@host, 0x8}, 0x400, "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"}, 0x418, 0x4}) bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0x6e) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r9, 0xa01, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8000}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10000}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9d}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x71fc}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x1) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000080)={0x8}) connect$unix(r0, &(0x7f0000000640)=@file={0x1}, 0x6e) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r11, r12, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000080)="f08666680f222566b9800000c00f326635004000000f303e0f21187d1f650f38c8ca64660f38807200bad10466ed640f01c90fe5ae0000", 0x37}], 0x1, 0x76, 0x0, 0x0) dup3(r12, r12, 0x80000) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r12, 0xc0805841, &(0x7f0000000100)={0x7fffffff, 0x7, 0xb27a, 0xfde, 0x8001}) 3m25.628291234s ago: executing program 3 (id=6626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, &(0x7f00000001c0), &(0x7f0000000200), 0x1, r0}, 0x38) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560f, &(0x7f00000002c0)={0xb}) (async, rerun: 64) ioctl$TCSBRK(r1, 0x5409, 0x2) (rerun: 64) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3m10.593870732s ago: executing program 42 (id=6626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, &(0x7f00000001c0), &(0x7f0000000200), 0x1, r0}, 0x38) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560f, &(0x7f00000002c0)={0xb}) (async, rerun: 64) ioctl$TCSBRK(r1, 0x5409, 0x2) (rerun: 64) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2m48.540854261s ago: executing program 4 (id=7108): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000a00000500150003000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x4, 0x0, 0x0, 0x6}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/96, 0x87}], 0x1, 0x7, 0xb) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="822a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 2m48.29189854s ago: executing program 4 (id=7111): syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"86dbb8b3cba28d7abac784cac0f10ab1", 0x0, 0x0, {0x5, 0x5}, {0x2, 0x8}, 0x7fffffffffffffff, [0x401, 0x500000000000000, 0x2, 0x800, 0x100000001, 0x4, 0x8001, 0x5, 0x7, 0x9, 0x1, 0x600000, 0x80000001, 0x8, 0xa, 0x6]}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r2 = dup2(r1, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x73e0}, 0x8) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xfffff296, 0x9, 0x10}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) r7 = epoll_create1(0x0) r8 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0xa0028000}) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x15, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0xffffffffffffffe6, r8, {0x92, 0x80}}, './file0\x00'}) 2m48.086225759s ago: executing program 4 (id=7112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = fsopen(&(0x7f0000000080)='msdos\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000140)={0x0, 0x80000, r1}) r4 = openat$cgroup_ro(r3, &(0x7f0000000180)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r1, 0x0, 0x0, 0x80800) recvmsg(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/14, 0xe}], 0x1}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f000001c340)={'syz0\x00', {0xc, 0x1, 0x3, 0xffff}, 0x3c, [0x6169, 0xad, 0x6, 0x9, 0x0, 0x10001, 0xffffff1f, 0x1, 0x8, 0x2, 0x5, 0x5, 0x3, 0x24, 0x9, 0x3, 0x59, 0x0, 0x7, 0x8, 0x4, 0xff, 0x78ea, 0x8, 0x3, 0x1, 0x80000000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x400, 0xffffffff, 0x4, 0x2, 0x8, 0x5, 0x5, 0x1, 0x0, 0x3124, 0x10, 0x4, 0x1, 0xfb, 0x7a, 0xc, 0x2, 0x3ff, 0xffffffff, 0x10001, 0x200000, 0xff, 0xe24, 0x8, 0x0, 0x40000000, 0x4, 0x78, 0xa, 0x9, 0x3, 0x6], [0x2, 0x1, 0xa000, 0x0, 0x9, 0x10001, 0x997f, 0x8, 0x80000001, 0x7, 0x22, 0x9, 0x40b1, 0xfffffff8, 0x0, 0x8, 0x4fef, 0xffff25a3, 0x7ff, 0x9, 0x3, 0x9, 0x1, 0x7, 0xee1, 0x7, 0x8001, 0x5, 0x7, 0x2, 0x200, 0x8d, 0x0, 0xa, 0x6, 0xfffffffc, 0x9, 0xfffffff9, 0xfff, 0x8, 0xdf, 0x1f3c, 0x3, 0x2, 0x1, 0x1, 0xfffffffb, 0xbbad, 0x0, 0x10000, 0x4, 0x7, 0xfffffe01, 0xbfe, 0x7fff, 0x9, 0x9, 0x4, 0x5b58, 0x1, 0x10, 0x4, 0x6, 0x5], [0x8, 0x5, 0x7, 0x530b93b0, 0x1000, 0x2, 0x6, 0x1ff, 0x0, 0x2, 0x8001, 0x6, 0xf, 0x6, 0x1, 0x1, 0x9e24, 0x3, 0x1, 0x9, 0x8, 0x100, 0x9, 0x4, 0x7, 0x2, 0x1d6, 0x3, 0x8, 0x3, 0x0, 0x3, 0x9, 0x6, 0x5, 0x80000000, 0x2546, 0x0, 0x0, 0x0, 0x1, 0xfe1d, 0xd9, 0x5d1a, 0x101, 0x10000, 0xb, 0x4c6, 0x5, 0x0, 0x2, 0x3, 0x40, 0x2, 0x1, 0x3, 0xd73, 0x10000, 0x1000, 0xf, 0x7, 0xfffffffa, 0x5, 0x5], [0x8, 0x7c7, 0x4, 0x8, 0xea, 0xffffff7f, 0xa08, 0x3, 0x10, 0x7, 0x0, 0x7f, 0x2, 0x3, 0x5, 0x5, 0x3ff, 0x3af9, 0xe9bf, 0x8, 0x37, 0x1, 0x3, 0x2, 0x8, 0x7ff, 0x5, 0x7, 0xff, 0x3, 0x15e1, 0x7, 0x5, 0x0, 0x9, 0x6, 0x7, 0xdc, 0x0, 0x8, 0xc, 0x60, 0xb, 0x6, 0x81, 0x70, 0x2d79, 0x4, 0x6, 0x8001, 0xb, 0x0, 0x9, 0x5, 0x2, 0x6, 0x800, 0x4, 0x8, 0x9, 0x7, 0x2, 0x2, 0x5]}, 0x45c) sendmsg$nl_generic(r5, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000f00)={0x11a4, 0x2e, 0x800, 0x70bd2a, 0x25dfdbfb, {0x8}, [@generic="6595c0c13e50b82e775ec2d5e3163d54c1a4a88d29d184bf0e6153fda4c932a620e8d41993d62446d2171826d2450a0e5bc4c7888817a3bf6e8a6898500e0ee7ef33a5136e9f2c2c17c59cf88d4ed05f50d7c6caf0313efa2e72927181dcae4861a34ddfeba1a4d71253efa9b1fcb5bcaff93605cc4611c8385dd85e3bf8c3d8761ccb698e206b78c848c98977732f6feb66a4164e5f33b4358b938080dfd60c52a6441a51f44429efba480613b4b506aefb8e559a6f26f988652b7fe4d2d8f97a5ef29382f56de8213923f44fa0d8ea5b5bb92bd006c309f04dee", @generic="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", @generic="0e2fe4d7722e5e2707cac7e6c619c7fa5f17fa83dc17adc8681543cc4bddbc240048c95f95259d622be565dd3992f57d76d42f3090e77cc53f20a3cff25305282cde477c5a0ce314a19419c6541f1477b7e42b1a9336433e35d9e66179ce151bb841ae3590e4df5e0e9d0d6ba2b0da65ace5957680ec4bd13e56b9b6c408337a6388469568caa889c1b432ff68464f5674745cd53d5c3144cb2b08b13113fbb84d442f38fe21c5", @typed={0xc, 0x8c, 0x0, 0x0, @u64=0xfffffffffffffff1}]}, 0x11a4}, 0x1, 0x0, 0x0, 0x40}, 0x10000) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000200)="66b870950b650f23d80f21f86635800000900f23f80f01c42e0f01cf660ff7e2f30f0966b9a60800000f32bad00466edf30fc7724166b9800000c00f326635010000000f300f20c06635010000000f22c0", 0x51}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x24, r6, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x18) 2m47.661438176s ago: executing program 4 (id=7117): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007", @ANYRES32, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x4, 0xc5, 0x2, 0x2, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x20, 0x20, 0x0, 0x5}}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@bridge_getvlan={0x20, 0x72, 0x301, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x12}]}, 0x20}, 0x1, 0xf00}, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@sha1={0x1, "8ddf94406ca5350cda959a2431225d1ce837b310"}, 0x15, 0x2) mount(0x0, &(0x7f0000000040)='./file1/../file0\x00', 0x0, 0x1004803, 0x0) linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x1400) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) wait4(r4, 0x0, 0x0, &(0x7f0000000500)) unlink(&(0x7f00000002c0)='./file0\x00') 2m47.540257494s ago: executing program 4 (id=7118): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000080)=@security={'security\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x218, 0x0, 0xf8, 0xffffffff, 0xffffffff, 0x368, 0x368, 0x368, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x0, 'wg2\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x1d, 0x0, 0x4}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0xf, '`<', 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x1, 0x4, 0x3, 0x4, 0x2], 0x3, 0x2}, {0x4, [0x4, 0x7, 0x5, 0x2, 0x4, 0x7], 0x5, 0x7}}}}, {{@ip={@loopback, @empty, 0xff000000, 0xff000000, 'tunl0\x00', 'pim6reg\x00', {}, {0xff}, 0x2, 0x3, 0xa}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ah={{0x30}, {[0x80000000, 0x9], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x9, 0x4, 0x2, 0x0, 0x6], 0x5, 0x3}, {0x0, [0x3, 0x9, 0x3, 0x2, 0x4], 0x6, 0x5}}}}, {{@uncond, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8}}, @common=@ah={{0x30}, {[0x1, 0x4]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x5, 0x2, 0x4, 0x2, 0x3], 0x4, 0x1}, {0x2, [0x0, 0x1, 0x4, 0xd, 0x4, 0x1], 0x1, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000000500)={0x28, r0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x1}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20044040}, 0x0) 2m47.222460592s ago: executing program 4 (id=7120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x3, 0x8, @l2={'eth', 0x3a, 'syz_tun\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0xc0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delneigh={0x30, 0x1a, 0x1, 0x9, 0x25dfdb7c, {0x1c, 0x0, 0x0, 0x0, 0x1, 0x50, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x30}}, 0x40440) 2m47.095365925s ago: executing program 43 (id=7120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x3, 0x8, @l2={'eth', 0x3a, 'syz_tun\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0xc0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delneigh={0x30, 0x1a, 0x1, 0x9, 0x25dfdb7c, {0x1c, 0x0, 0x0, 0x0, 0x1, 0x50, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x30}}, 0x40440) 2m34.631091165s ago: executing program 2 (id=7312): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000003000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m34.625661891s ago: executing program 2 (id=7313): syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @random="7f9cc9043860", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "199646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x203}}}}}}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000100)={r0, r0, 0x4, 0xcc, &(0x7f0000000000)="0cf24240752bd15e0cf38d75de9d2eae3ccaeb91a5a94ca9492c51f8390ee9d02a1884195a33d44746a44940791573d511badca52cd8f72cf656e2f825edc742269087246a7e638d0c8695799bc53b7b638b420c2f6b0273463d40b5e0aeb73c954759baf3b673040b6f202e47fa5ed116be72c65eeb808cdbcec306d5bd5f5ddf1a23d88cc0bb834d3290a46dd553fd4d94399525eeef93cd36a0c5773cacd763d224e4626aa6602feb26de5e5cfe43afdb8a517d98aee0234371ac3e5c974eb39066d5643fe38833ff8aac", 0x0, 0x0, 0x7, 0x0, 0x4, 0x1, 0xfffffffe, 'syz1\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @random="7f9cc9043860", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "199646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x203}}}}}}}, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000100)={r0, r0, 0x4, 0xcc, &(0x7f0000000000)="0cf24240752bd15e0cf38d75de9d2eae3ccaeb91a5a94ca9492c51f8390ee9d02a1884195a33d44746a44940791573d511badca52cd8f72cf656e2f825edc742269087246a7e638d0c8695799bc53b7b638b420c2f6b0273463d40b5e0aeb73c954759baf3b673040b6f202e47fa5ed116be72c65eeb808cdbcec306d5bd5f5ddf1a23d88cc0bb834d3290a46dd553fd4d94399525eeef93cd36a0c5773cacd763d224e4626aa6602feb26de5e5cfe43afdb8a517d98aee0234371ac3e5c974eb39066d5643fe38833ff8aac", 0x0, 0x0, 0x7, 0x0, 0x4, 0x1, 0xfffffffe, 'syz1\x00'}) (async) 2m34.549999237s ago: executing program 2 (id=7314): r0 = creat(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001200)={0x0, 0x0, "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", "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"}) (async, rerun: 32) r2 = socket$rds(0x15, 0x5, 0x0) (rerun: 32) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_dest={0x18, 0x114, 0x2, {0x5}}], 0x18}, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000003c0)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000002200)={r1, r3, "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", "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"}) (async) r4 = fanotify_init(0xf00, 0x0) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x12}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100098026"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r6, @ANYBLOB="05002abd7000fddbdf2501000000060006004e240000fc0908802804008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0004098070000003060001000a00000014000200fe80000000000000000000000000000a0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000a0000080060001000a0000001400020000000000000000000000ffff640101010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fc00000000000000000000000000000105000300020000000600010002000000080002000a0101020500030001000000d0000080060001000200000008000200ac1e01010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000200000008000200ac1414bb0500030006000000060001000a00000014000200fe8000000000000000000000000000420500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002007f0000010500030002000000060001000200000008000200000000000500030002000000ac000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fc00000000000000000000000000000005000300020000000600010002000000080002000a01010105000300000000000600010002000000080002007f0000010500030001000000060001000200000008000200e00000010500030001000000060001000a0000001400020020010000000000000000000000000001050003000200000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000200000008000200ac1414aa05000300000000000c010080060001000200000008000200000000000500030001000000060001000a00000014000200fe8000000000000000000000000000410500030003000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fc0100000000000000000000000000010500030000000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a00000014000200fe80000000000000000000000000002b050003000200000040000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300030000008c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000040500807002098094000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a000000140002000000000000000000000000000000000105000300010000004c000080060001000200000008000200ac1414bb0500030002000000060001000200000008000200640100fe0500030001000000060001000200000008000200ac1414bb0500030002000000e8000080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200e00000010500030003000000060001000a00000014000200200100000000000000000000000000020500030001000000880000800600010002000000080002000000000005000300000000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000200000008000200ac14142d05000300010000001c000080060001000200000008000200ffffffff0500030003000000080003000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221c02098058000080060001000200000008000200000000000500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe880000000000000000000000000101050003000100000040000080060001000200000008000200ac1e00010500030001000000060001000a0000001400020000000000000000000000ffff0a010102050003000300000000010080060001000200000008000200ac1e00010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000200000008000200000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200200100000000000000000000000000010500030003000000060001000200000008000200e000000105000300000000000600010002000000080002007f00000105000300020000000600010002000000080002000a010100050003000000000064000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a000000140002002001000000000000000000000000000205000300010000001c000080060001000200000008000200ac141416050003000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e08000100", @ANYRES32=r8, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010101, @in6=@empty, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x3c, 0x4, 0x0, 0x2e00, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) fanotify_mark(r4, 0x105, 0x40009975, r0, 0x0) (async) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) 2m34.471556285s ago: executing program 2 (id=7315): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000240)={0xa, 0x0, 0x2, {0x4000046, 0xffffffe6, 0xfffb, 0xf7168000}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@printk={@lx, {0x3, 0x3, 0x3, 0xa, 0x0}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {}, {0x85, 0x0, 0x0, 0x8d}}]}, &(0x7f0000000300)='GPL\x00', 0x1}, 0x94) r2 = dup(r0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000840)={&(0x7f0000000580)="913c0cef1d1f9171fa5053a8b2d0ea8d7bd23e897e63d137600a87a1c06ee9eb6ee548aa51f7c509d0dfe440583a3f26279c2345abb5225f734dd9f36a53f01fdee43b8e14448b823e38d537ae957ac5325d75adbb4916a3efc58ea4f22a83c10000b1", &(0x7f0000000600)=""/91, &(0x7f0000000680)="ed12643c6290cfbf7bb7b7f2685039192593897f86d0cd90d05c866b621f425efca08c1b4ba8c65ccd713e9862cea3ec0106a414abe31eb76e82b480316b2dc3bb245f18d2ace2794481790de5c6fc899a6e05937aecb681f717175f6d34b2e1cc19adf932fd73d641da118f5917c01ea3e2fa3a38c41668d3bade77040f324a0fef2a292a0e12fd9fb4098fe22b355c85b2f1ec7f608ed54d3f53985d2e24f3259f7767dadf9f8c3da06ec385903e6ab738728344c37e0b5d784ee055bddf1850df2d25ee5abe7c6f50aa20d31342736f84a3743c974c9549cffde58ae036d3ec3aec888d8a30fe25e5f237a5a4", &(0x7f0000000780)="b62f0fa7df3f66fc71d402dfc35c2b2b8dbca32d7656ad5008b514e2b0d5dd4d1acf7d07e9c68db107f2034d9c614f980309dcc296f5a2758e20f7cf430bf6507f3b25c0a8a53f85395d26749ded67a903ca0024477a29de6e08c44549dd8daa8c28f8f7a31370eb24e55619e16c4f01e7fadb21d6b51881a8a5d20c091bb6fbb11219b3467d10aca9510d038f48e8ba2d3c18a268efdca0d6aa1015a138d5a6a3d4b054ea", 0x4, r2}, 0x38) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000540)={0x2, 0x1, [0x0, 0x80, 0xd5e4, 0x1, 0x0, 0x0, 0x4, 0x1]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x1, 0x2, 0x2}], "a77818"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "c9"}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x44, 0x0, 0x1}, 0x28) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x7fffffff, 0xb0841) ioctl$TCXONC(r2, 0x540a, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_GET_XCRS(r6, 0x8188aea6, &(0x7f0000000180)) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000180)={0x1, 0x2, 0x1000, 0xcd, &(0x7f0000000340)="54ad97962a2a6ff77d036875ae594a44697adf5df10869bcf2418f407c7c0290293ebafd346f47367cad7029ab6361d36771acf8bce71eda92f3937ee2a50f57d65a0de1efd5a5842eecd490016b6276821b7c6a9fa4bf33e35c0d6e2132daa0df2a137378ec1394233640df4700b6a9915f8027667d59d8f84ac4a1ca135f55247a46883cc82efe3a4cd3ec500703a60a55d8f75e2cbc18ca8736bef18b3b4c5b3410157fde7552421024d4e4bdc47163e0ebb4f2839a99a55dfc79286bebe7db3a1fc4bd02c45c109b970a27", 0x10, 0x0, &(0x7f0000000080)="c5187260e7d00398ded1678e72df64dc"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) ioctl$FE_READ_BER(r3, 0x80046f46, &(0x7f0000000040)) r7 = getgid() bind$802154_dgram(r2, &(0x7f0000000880)={0x24, @short={0x2, 0x2, 0xaaa1}}, 0x14) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25031100800c0002"], 0x114}], 0x1}, 0x40014) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x1000000, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r7}}, {@cache_none}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, '/'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@context={'context', 0x3d, 'user_u'}}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@pcr={'pcr', 0x3d, 0x1}}]}}) socket$netlink(0x10, 0x3, 0x6) 2m34.352151474s ago: executing program 2 (id=7318): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'dac02\x00', [0x10003c4, 0xd, 0x2, 0xa, 0x0, 0x0, 0xfffffffc, 0x2, 0xffd, 0x20007ffe, 0x4, 0x9, 0x400, 0x7, 0x13, 0x0, 0xfefffea7, 0x100000d, 0x59, 0x1, 0x402, 0x9, 0x1f7, 0xe2df, 0xaa14, 0x1, 0x6, 0x7, 0x7, 0x0, 0x6]}) 2m34.029767361s ago: executing program 2 (id=7320): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xca7, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0x6}}]}}]}, 0x3c}}, 0x84) (async) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x55ce29afe10411a5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r12, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r13, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f00000001c0)={'gre0\x00', r9, 0xffc1, 0x10, 0x4, 0x45, {{0x12, 0x4, 0x0, 0x7, 0x48, 0x64, 0x0, 0x9, 0x2f, 0x0, @multicast1, @remote, {[@end, @rr={0x7, 0x7, 0x5a, [@dev={0xac, 0x14, 0x14, 0x40}]}, @lsrr={0x83, 0x23, 0x38, [@local, @remote, @multicast2, @local, @multicast1, @empty, @multicast1, @rand_addr=0x64010101]}, @noop, @end, @lsrr={0x83, 0x3, 0xd5}, @ra={0x94, 0x4}]}}}}}) r14 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r14, &(0x7f0000000080)={0x1d, r15, 0x2, {0x1}}, 0x18) (async) r16 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r16, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r17, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) 2m33.964887549s ago: executing program 44 (id=7320): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xca7, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0x6}}]}}]}, 0x3c}}, 0x84) (async) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x55ce29afe10411a5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r12, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r13, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f00000001c0)={'gre0\x00', r9, 0xffc1, 0x10, 0x4, 0x45, {{0x12, 0x4, 0x0, 0x7, 0x48, 0x64, 0x0, 0x9, 0x2f, 0x0, @multicast1, @remote, {[@end, @rr={0x7, 0x7, 0x5a, [@dev={0xac, 0x14, 0x14, 0x40}]}, @lsrr={0x83, 0x23, 0x38, [@local, @remote, @multicast2, @local, @multicast1, @empty, @multicast1, @rand_addr=0x64010101]}, @noop, @end, @lsrr={0x83, 0x3, 0xd5}, @ra={0x94, 0x4}]}}}}}) r14 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r14, &(0x7f0000000080)={0x1d, r15, 0x2, {0x1}}, 0x18) (async) r16 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r16, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r17, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) 2m20.666224909s ago: executing program 8 (id=7572): r0 = syz_clone(0x43b53000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0x800000002590f588) 2m20.592101167s ago: executing program 8 (id=7573): ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) listen(0xffffffffffffffff, 0x5) syz_emit_ethernet(0x3a, &(0x7f00000005c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x2, 0x0, 0xe7, {[@fastopen={0x22, 0x2}]}}}}}}}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b15, &(0x7f0000000000)={'wlan1\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0x1, 0x4, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x7fffffffffffffff, 0x0, 0x10000, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m20.398984304s ago: executing program 8 (id=7577): r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x2a615293b57fc4a5}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) chroot(&(0x7f0000000100)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', 0x0) 2m20.32127879s ago: executing program 8 (id=7580): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvfrom(r1, 0x0, 0x0, 0x40010021, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000080)='\x00', 0x0, r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70107c05219d040000e2040000000600010005000000080009"], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 2m20.081041374s ago: executing program 8 (id=7585): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) inotify_init() ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000140)) 2m20.012040246s ago: executing program 8 (id=7586): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/51, 0x33}], 0x1, 0x16, 0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x80000001) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x3501, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="4d67726f75f05f69643d4cba625b8ab5e3d7b390552b59212e7d6c01e50d46d8b0f09e2bbace0121d7c2f96833c95b9b33a83b361adb61205ff0e469746037d1583157f78345900bd2c9b75493ee0ff2629740c929e2276355cb20935a0b90faf8350fe4f63e94760d9a9ca171091f93d121e5c156289a42b4a765ba090728a3ec60a01981b01f49d59d2afd0f52725490ad76566c0b97f71525eb64eed0e5b7fb7f8473f0a3d3e3cb1fbe145a8f03bb6cffcb6c0a6ca2da814927676e14f209d16f18604a1e014264db0ba312f3a30cf2e3a5cbcf197c064b8cdebd36f2fb0ef44d4975377eec2aa6", @ANYRESDEC=0x0]) ioctl$XFS_IOC_FSGROWFSRT(r1, 0x40105870, &(0x7f0000000240)={0x5, 0x80}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) bind$inet6(r3, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) chdir(&(0x7f0000000c80)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x181083) 1m54.304792139s ago: executing program 45 (id=7586): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/51, 0x33}], 0x1, 0x16, 0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x80000001) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x3501, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="4d67726f75f05f69643d4cba625b8ab5e3d7b390552b59212e7d6c01e50d46d8b0f09e2bbace0121d7c2f96833c95b9b33a83b361adb61205ff0e469746037d1583157f78345900bd2c9b75493ee0ff2629740c929e2276355cb20935a0b90faf8350fe4f63e94760d9a9ca171091f93d121e5c156289a42b4a765ba090728a3ec60a01981b01f49d59d2afd0f52725490ad76566c0b97f71525eb64eed0e5b7fb7f8473f0a3d3e3cb1fbe145a8f03bb6cffcb6c0a6ca2da814927676e14f209d16f18604a1e014264db0ba312f3a30cf2e3a5cbcf197c064b8cdebd36f2fb0ef44d4975377eec2aa6", @ANYRESDEC=0x0]) ioctl$XFS_IOC_FSGROWFSRT(r1, 0x40105870, &(0x7f0000000240)={0x5, 0x80}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) bind$inet6(r3, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) chdir(&(0x7f0000000c80)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x181083) 1m41.140844324s ago: executing program 7 (id=7938): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8}, @RTA_DST={0x8, 0x1, @multicast1}]}, 0x2c}}, 0xea5bc50b6199d77e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r3 = syz_pidfd_open(r1, 0x0) waitid$P_PIDFD(0x3, r3, 0x0, 0x4, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x7df101, 0x0) write$FUSE_GETXATTR(r4, &(0x7f0000002300)={0x18}, 0x18) 1m40.900345538s ago: executing program 7 (id=7940): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000002100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 1m40.896918648s ago: executing program 7 (id=7942): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f00000000c0)={0x8, "a5497074f68ebb2c"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0x70bd29, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x6, 0x1}, 0x0, 0x0, 0x4, 0x2, 0xffffffffffff8000, 0x4, 0x4b}}], 0x58}, 0x0) recvfrom(r0, &(0x7f0000000280)=""/141, 0x8d, 0x2001, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x1, 0x4, {0xa, 0x4e23, 0x3, @remote, 0x7ff}}}, 0x80) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'rose0\x00', 0x2}, 0x18) 1m40.681996678s ago: executing program 7 (id=7946): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000800)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x9, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x0, 0x0, 0xffffffff, 0x240, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1001, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1f, @local, @broadcast, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) 1m40.678527245s ago: executing program 7 (id=7949): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757811"], 0x65) sendfile(r0, r0, &(0x7f0000000040)=0xe000000000, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, 0xffffffffffffffff, 0x2f}, 0x14) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r5, &(0x7f0000000740)=[{&(0x7f00000008c0)="581a17919cc7749e9438c65fb6", 0xd}], 0x1) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{0x304}, "9821e506947acc8f", "e2ef993c345ffba03c22bc932446d041", "930fb040", "c4c800f52155c4e1"}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000006"], 0x0) readv(r5, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x2000080, &(0x7f00000002c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r8, 0x810c9365, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x300, 0x0, 0x25dfdbfa, {0x0, 0x0, 0x0, r4, {0xffe0, 0xfff1}, {0xffff, 0x6}, {0x0, 0x5}}}, 0x24}}, 0x8000) 1m40.601469853s ago: executing program 7 (id=7951): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0xf, [0xfffffff1, 0x9, 0x9, 0x4, 0x7, 0x8, 0x4, 0x7, 0x5, 0x1, 0x0, 0x0, 0xc, 0xffff, 0x101, 0x1000, 0x2, 0x6, 0x1, 0xfffffff6, 0x2, 0x1000, 0x80000001, 0x8418, 0x0, 0x173, 0x6, 0x9, 0x8001, 0x80000001, 0x5, 0x0, 0x26d, 0x0, 0x8, 0x8000, 0x2, 0x58c, 0x9, 0x401, 0x4, 0x300000, 0x0, 0x7, 0x6f, 0x2, 0x9, 0x100, 0x2, 0x5, 0xdaa, 0x3, 0x1, 0x7, 0x3, 0xe48d, 0x7, 0x100, 0x0, 0x5cba063c, 0x40, 0x7, 0x200, 0x7, 0x40, 0x5, 0xfff, 0x80000001, 0x0, 0x80, 0x9, 0x0, 0xf389, 0x5, 0x9, 0xe, 0x8, 0x6, 0x6, 0x7fff, 0x6, 0x4, 0x3, 0x8, 0xfffffffb, 0x3, 0x8, 0xab, 0x2, 0x7f, 0x98f6, 0xd066, 0x101, 0x8, 0xfffffff2, 0x10, 0x0, 0x6, 0x86bf, 0xb56, 0x80000000, 0x7fffffff, 0x7, 0x2, 0x1000, 0x5, 0x2, 0x4, 0x80000001, 0x18, 0x9, 0x4, 0xffff, 0x7fff, 0x9, 0x9277, 0x5c, 0x5, 0xa29, 0x10001, 0x9, 0xdd15, 0x400, 0x1, 0x4b14, 0x80000001, 0xffffffff, 0x5]}}) (async) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000040)=""/185) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000040)=@x86={0x6, 0xa, 0x21, 0x0, 0x0, 0x1, 0x3, 0x1, 0x7, 0xff, 0x83, 0xb, 0x0, 0x0, 0x4, 0x0, 0x9, 0xd, 0x2, '\x00', 0x88, 0x1}) (async) ioctl$KVM_SET_GUEST_DEBUG_x86(r7, 0x4048ae9b, &(0x7f00000010c0)={0x140002, 0x0, {[0x0, 0x6, 0x4, 0x5, 0x5, 0x3, 0x5, 0x9]}}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x51a1, 0x0, 0x0, 0x0, 0xb5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) 1m25.56097428s ago: executing program 46 (id=7951): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0xf, [0xfffffff1, 0x9, 0x9, 0x4, 0x7, 0x8, 0x4, 0x7, 0x5, 0x1, 0x0, 0x0, 0xc, 0xffff, 0x101, 0x1000, 0x2, 0x6, 0x1, 0xfffffff6, 0x2, 0x1000, 0x80000001, 0x8418, 0x0, 0x173, 0x6, 0x9, 0x8001, 0x80000001, 0x5, 0x0, 0x26d, 0x0, 0x8, 0x8000, 0x2, 0x58c, 0x9, 0x401, 0x4, 0x300000, 0x0, 0x7, 0x6f, 0x2, 0x9, 0x100, 0x2, 0x5, 0xdaa, 0x3, 0x1, 0x7, 0x3, 0xe48d, 0x7, 0x100, 0x0, 0x5cba063c, 0x40, 0x7, 0x200, 0x7, 0x40, 0x5, 0xfff, 0x80000001, 0x0, 0x80, 0x9, 0x0, 0xf389, 0x5, 0x9, 0xe, 0x8, 0x6, 0x6, 0x7fff, 0x6, 0x4, 0x3, 0x8, 0xfffffffb, 0x3, 0x8, 0xab, 0x2, 0x7f, 0x98f6, 0xd066, 0x101, 0x8, 0xfffffff2, 0x10, 0x0, 0x6, 0x86bf, 0xb56, 0x80000000, 0x7fffffff, 0x7, 0x2, 0x1000, 0x5, 0x2, 0x4, 0x80000001, 0x18, 0x9, 0x4, 0xffff, 0x7fff, 0x9, 0x9277, 0x5c, 0x5, 0xa29, 0x10001, 0x9, 0xdd15, 0x400, 0x1, 0x4b14, 0x80000001, 0xffffffff, 0x5]}}) (async) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000040)=""/185) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000040)=@x86={0x6, 0xa, 0x21, 0x0, 0x0, 0x1, 0x3, 0x1, 0x7, 0xff, 0x83, 0xb, 0x0, 0x0, 0x4, 0x0, 0x9, 0xd, 0x2, '\x00', 0x88, 0x1}) (async) ioctl$KVM_SET_GUEST_DEBUG_x86(r7, 0x4048ae9b, &(0x7f00000010c0)={0x140002, 0x0, {[0x0, 0x6, 0x4, 0x5, 0x5, 0x3, 0x5, 0x9]}}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x51a1, 0x0, 0x0, 0x0, 0xb5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) 3.790622729s ago: executing program 0 (id=9223): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) socket$kcm(0x2, 0x5, 0x106) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="20000000f100000002"], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 3.710798505s ago: executing program 0 (id=9225): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='lock io'], 0xc) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000300)=""/89, 0x59}], 0x1, 0x4, 0xe10a64d) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000380)='Y', 0x1}], 0x1}, 0x240400d0) 3.710431679s ago: executing program 0 (id=9226): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 3.590663369s ago: executing program 0 (id=9228): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)="8c") ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x12) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0xdf, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f00000022c0)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x54000, {}, 0x1, 0x32}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000a00)=[@text64={0x40, &(0x7f0000004340)="66470fc7355c55f0fc66440f3ace2b00c4437d09faa1f04681a50070465222220000b9230a0000ebb80b00130000000000000f30c4a1fa2c5d00b9da0b0000b8f48f0000ba000000000f3045d8ec2e360fab95ea0000003664360f01ca", 0x5d}], 0x1, 0xf, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b7be00212ba0d8105040a0a3f00fe0f040b067c55a1bc0009001e0006990300000015000500fec0000a000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x40080c4) setsockopt(r1, 0x84, 0x82, &(0x7f00000000c0)='n\x00\x00\x00\x00\x00\x00\x00', 0x8) 1.530612639s ago: executing program 1 (id=9266): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="7301000000000000010600000000000019a14366f193343ef8554e14fa23b68e2e7511c50ee60d2057891aa04513dcc99c5e2a10d4f534"], 0x10) sendto$inet6(r0, &(0x7f0000000400)="2ae0", 0x2, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x1}, 0x1c) 1.528959847s ago: executing program 1 (id=9268): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f00000002c0)=""/29, 0xfffffe19, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x7487e478, 0xc8000) 1.279879264s ago: executing program 6 (id=9272): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006000600800a000008000100", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = syz_io_uring_setup(0x6b2, &(0x7f0000000080)={0x0, 0xdfbe, 0x200, 0x3, 0x2fb, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140)) poll(&(0x7f00000001c0)=[{r0, 0x8000}, {r0, 0x641}, {r1, 0x4000}, {r0, 0x8000}, {r0, 0x5118}], 0x5, 0xf9) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001000390400000000fbdbdf2500000000", @ANYRES32=r4, @ANYBLOB="01980400419a04001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000200)=0x4, 0x4) 1.199980156s ago: executing program 6 (id=9273): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x801) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) ioctl$DRM_IOCTL_PANTHOR_GROUP_SUBMIT(r0, 0xc0186449, &(0x7f00000004c0)={0x0, 0x0, {0x28, 0x0, 0x0}}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x204, &(0x7f0000000040)={0x0}) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) writev(r4, &(0x7f0000000b00)=[{&(0x7f0000000140)='\r', 0x1}], 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0xfffffdee) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='veno', 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}}) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r9) sendmsg$DEVLINK_CMD_SB_GET(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x14, r10, 0xf81, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000010) syz_io_uring_submit(r7, r8, &(0x7f00000003c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x10, 0x6000, @fd=r0, 0x8, 0x0, 0x0, 0x1, 0x0, {0x2}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r6, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100), &(0x7f00000001c0)=0x32c411baf8f45ea7) 1.130047962s ago: executing program 6 (id=9274): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x4f, 0x86, 0xfffffffffffffffe, 0x5, 0x7, 0x40000000a, 0x651, 0x100000004, 0x9657, 0x0, 0x7ffffffd, 0x0, 0xf3, 0xc, 0x8000000000000000, 0xcc3, 0x1, 0x1, 0x94d6, 0x5, 0xfffffffd, 0x8, 0x8, 0xfffffffffffffffa, 0x5, 0x6}) ptrace(0x11, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r1, 0x1, r0, 0x400}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r1, 0x1, r0, 0x400}) 950.800483ms ago: executing program 6 (id=9275): openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1100, 0x40}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1000, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000bc0), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) 653.195404ms ago: executing program 1 (id=9276): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x200000, 0xeeef0000, 0x8, 0x7, 0xfb, 0x9, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0x5000, 0x2, 0x3, 0x0, 0x7, 0x45, 0x79, 0x6, 0x1, 0x3, 0x3, 0xa6}, {0xeeef0003, 0x10000, 0xe, 0x0, 0x3, 0x7, 0x0, 0x9, 0x1, 0x5, 0x5, 0x81}, {0x3000, 0xd000, 0xc, 0x1, 0x8, 0x42, 0xb, 0xff, 0x6, 0x7, 0xe}, {0x11f6593269eab9dc, 0x2, 0xb, 0x3, 0x15, 0x19, 0xab, 0x7f, 0x7, 0x83, 0x8, 0x83}, {0x70000, 0x0, 0xc, 0xa3, 0xad, 0xcc, 0x1, 0x9e, 0x48, 0xf, 0x2}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x5, 0x9, 0x3, 0x5, 0x81, 0xff, 0x6d}, {0x100000, 0x1, 0xe, 0x5, 0xf, 0x7, 0xfe, 0x34, 0x2, 0xb, 0xb0, 0x9}, {0xa000, 0x30}, {0x100000, 0x107}, 0x80000031, 0x0, 0x8000000, 0x2424, 0x8000000003, 0x8000, 0xeeee8000, [0x6800000000000000, 0x4, 0x61, 0x4]}) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f01) close_range(r0, r0, 0x0) 640.372239ms ago: executing program 1 (id=9277): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) (fail_nth: 1) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x200000, 0xeeef0000, 0x8, 0x7, 0xfb, 0x9, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0x5000, 0x2, 0x3, 0x0, 0x7, 0x45, 0x79, 0x6, 0x1, 0x3, 0x3, 0xa6}, {0xeeef0003, 0x10000, 0xe, 0x0, 0x3, 0x7, 0x0, 0x9, 0x1, 0x5, 0x5, 0x81}, {0x3000, 0xd000, 0xc, 0x1, 0x8, 0x42, 0xb, 0xff, 0x6, 0x7, 0xe}, {0x11f6593269eab9dc, 0x2, 0xb, 0x3, 0x15, 0x19, 0xab, 0x7f, 0x7, 0x83, 0x8, 0x83}, {0x70000, 0x0, 0xc, 0xa3, 0xad, 0xcc, 0x1, 0x9e, 0x48, 0xf, 0x2}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x5, 0x9, 0x3, 0x5, 0x81, 0xff, 0x6d}, {0x100000, 0x1, 0xe, 0x5, 0xf, 0x7, 0xfe, 0x34, 0x2, 0xb, 0xb0, 0x9}, {0xa000, 0x30}, {0x100000, 0x107}, 0x80000031, 0x0, 0x8000000, 0x2424, 0x8000000003, 0x8000, 0xeeee8000, [0x6800000000000000, 0x4, 0x61, 0x4]}) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f01) close_range(r0, r0, 0x0) 552.482134ms ago: executing program 5 (id=9279): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002c00000018000180140002006e657464657673696d30"], 0x2c}}, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x1e) (async) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x1e) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x5277a0205003e35e}) r10 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r10, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r10, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x75, "8000"}, 0x0, 0x2, {}, 0x20800}) r11 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)=""/219, 0xdb}, {&(0x7f0000000440)=""/72, 0x48}, {&(0x7f0000000580)=""/153, 0x99}], 0x3, &(0x7f0000000800)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x138}, 0x40000000) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, r12, 0x1, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0xc0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) syz_fuse_handle_req(r0, &(0x7f00000083c0)="c91443d5daaf04b192358b692f84d66c60492a57cffd585b0068ccde45d94ded1e86d3670791c21f8e0b2153d10d45d37b72ee2fa06ad61b0a9354045a8dae1bd1cfb49f3c11fe54c17eee632d95574681e6c472eb8a1beaf3a4b88561847a0a0f05fa4a26639d7e74a0c1c2790d6a59d4073b1c55539b7c21b8550efbd5f835c56642f4be57d170e36a6bf3a995f418554f0cab342769089d0777b28daad5c0c4ba56a0bd6c0515d9bf488fdcf49a9a7bbfcf5ad78733f8119f2568daefbd0985a9916c0d048e38765cc7bb1c82e0f3c81d98e7179ec782331bc3cfb2caf58a99668420795e6a00ef41dcf5283bbb61ebaedbb7a675be4fb2d11c31f9b76936d1112c68978c73f42e145b094490d748c1456a14c23fe25e2fdaeaaa7dc0d35dcc9bbfe86361f99f4d04090d1e66aa9714ee9f4608ad66c60f500bf06a1b5b90fbe2f6c42c4b5f337393b0bb201473712c48f898c514fff84c46b50d3aaf44578f41d312bb5a73526db7818617dcb938ebdb17f92423ca2cf7ea2c611483e0baff012fd97e28558317049e4fe2d27f72796d7260b33900cd61f984c087d3c54f6aa11e389a49069ef99ca86c279598b42dd3485f09fc7e119f707438498316cf2f2bc8a293eeb1a35635989327d4f6c9ba6b2d5b9b8ee89a1e13d538b954479663223bb704af6a63ee497734410ea43bfdb0ad3708cb7155df2432c44e8468a7b77b807d345c9b94fedadfdeba12f4b6d11d16fd6dd5fff6cf896d0f40785ffca538dae61d8a5ffee814e96628cd945553e788b8d915762ca3b40124149b3c186ddd5f7af5b75f4725444f2f7e54b999c93e8c5fd4d4fbd7a3b3d7e85df3053c866f1dd247cac6912ed8b0e491101ca5a0b999a21014b573ba3996c76065c9d8bebf431f8be6435837193efd6e5a565b2ced30d04355435f166b09f9dc91ee50412d0daf72b28ec14c505cb155de1a46362f140ac2b633fa42b12109f0a29fa8ba271d6fc2a77af3b16032ee46b3ddead76a481ef52f6bd25cab4494681f0abc2ffc60ebb36cffcc058a067fcdae6c9de670cd6fde6eb8086a65fc05df17cf69f654516ba30ee04a1427b40fb8e81fe46787d557046854ad342442bacd781c7a6063892402fb0d765397448991206b28193e20f285e50d9219ace39b311e572ebcd80702164315656e7fa92960d0fd28c6489406f0b3061218417548e7e78b8aaaf5a623eb47c92aebfebd1c78343bc781f184e0122a28f56b18832da5646ee8405fa2fc040ab30377c447b42d0bfdddc65e064ccdf1ad52a94309a819caeb523e22b25d1ba288b7f2c726290d50021b9839c5d3c471aadb08025d97619935a9880942cf653508a0b2c43838e5aada8b84d22042928dd372dedec14672266ddceb0744c7464ab282d7fbfb2767e891832aa25d1425b33a60c6894a8d5292fdd73e05a868b8e50cb1a412d1249a77ccfc3d3eb35a67221f80bb8960fd93ceb74e102f2a6946b50caae3ccb86a8ec441d6e58dbf24b3eb962c8a28cffeded9b7cf4a54f524a1ef49fbdc91e125aad65a54df6a0f10cd8799f48aa144f7aec977b4a347c5c9628c4805ecf71f305adc9e5ca7c1f313f9ea3e99b3590efd94d831e1ff5cd7a26b72281109547facfa3abac2cfc9177b117a3757b778e95b5069236abb25d8fb032c38d296f87388fdd364b491cb828732177a2c6bcaaf831d138c898bb60c0d9d8a02d8b4b8e7efa87d3ed66221ac52e31ba9c2da488b999eaf82994bc8f1ac29d5e60b8b1cdc30a1c9829aca1cd7881c8aaac9ede0f5d8b85538d2b13751cfc6b37587b0223b9f6b6dd9340753106b1eecdf4f63c51cc2c63a1f86235bad7602e115d1e0ed78a6b170b88eb9584d2098b187695627612189998171d245797391b2b79bb690a79dac4b769e3f18c4d49359f7b460d997c03c793f51a830d5b21faed2ae1c3eb0fce0cdadde3c789ec931b6397c2a2fb2eda87756fec031e5f50f07619130f8e39f1e00004a1f204e5d87780542bdedf0b1ca5168779ad7cb2ebf27e0a5d760a2492b4d92eab24f2bc9af0a3e51140c415a6f885d0faa38ee6dcffc41652b28e628b859db0e7a0f961e37c5806df137e68c5316667f36051eb05c971e208721fdb8a49b8c49f85114be9dd7288f4e95c5f6fb8c1bc1bc7d79f32ba5419d90130a0328ba70d10c770a1540718f7d890dba9c39a116623d492275a1268c91149bfe026ca1c6a458449d4004d653f4b0a234eacd1f4da495fd1f936b4b335f64514fc8091b1dab132f599e26cb127e25011efa30a922b5a3e8807db9a00a9cc732fd323708767c905c8a3cd53e2e8d377d3b43cb971cbd0e66e2e47f3d601d49e29941b2ea4d3c8b7f5698e1a633ebba00f6c178d6d04b9f1544f04cd173e2d49f129a8725a647e1a9e798b5581c6a461b585012a302353178188e55f8102a49343c9c370ee505d09e4be8580d95f5bf39267b00e93adb6b52b2029160d78ac271e4e0c70ed835484e80302b93efd599707d4d22c806476fd04d18ebd6a9bf88c11dc2c96041ac8c3e04ac0aa5d2ac6740972717b543fb871884a7a0434a433571fd621977777984ea9c06914be966da9f349cb1ef3a116c49f0c716eae1df118cd3d5b350b917c06d853c1e1514213f5a29071e42eecee264ff20529c53c3a060a18a680ade2a08b4549e6998f06e61e4f4c36d578e9ad83dd38d1eeb100e7ab023edb38426d5165b867b9507a6b644aa0322da335b208105f2e74a9841ea7c629ea20cef740f6364e9d84a4485d3bb6b5f4e14c7764f78b65c0647870638a8f618381ec0823faed0424a448f753a59fb22e5138e0ca537b6935befb99fc6eea2d9457c01345afbbaaf3a7a96a39478b222af322f86730d137c3f570b38c7363bb9a89bb4b3b8979b9afd232927becbc91c8d4a276febe47bacd4a84c0bfdd54e685080f2c3be0b1e37bc6d21b13b7b1bfd507880f6ad7fa39bf99eaf6b7088d758d9383e38326381088e9e3e792f75d682cf61cf1176953960b0e160b2a535495d52c28f14fa45ed7a3f91e219dcd05afdda2b7e6c1b742b29f6c5f62a040a5fe6606433fce7de757ed76372dfc0b1af9af10c0128bcd335eff1c6c9660b0893730c3ef8de6e50dba419b35d1766eb9a5dce4c2fa518f8e3e2a27855e04d06b89e97578a4406ac03f3314575143db5e43ae3d03a7e90a590b4c188a5acbe1cf23cd4cf60ca98248d4e740122a55ac6e463511b4c4cd47040aafc0bed7878348a4caad4d977671cf4ac319773767ee28f8ccc4c9deae531b029eff5345470f20865549b2f2c4089306304e13e42ca37fbca6839bbcd2f10bd20c81d44ab73ad5ffcc55f51b53efb00d3c68d8d8505e005247ba23e86a803b199f36447fd01f192994b2fa27c9db59ae66b56b30c1ae5cd717407068a9b13ca941b82db254f4ecdbd1751a3f8f1061031bb41af5c04a33ffc98509f456830cf3c94c14451f04d84844e41c618e82958710d07daeba666329b914f2cc7c1d34ffbf6b50620b7c78c25c5d82a5aadcc4d824b3b68c34231fa7c0befe5241c447f90111c55848feed9d1ee67f61095ec2c0b4ac82f5cf169201516082a804c9d1775990d430d21bc65877041905caf385918f44191c134e493d960724b28f01e79fbf3b99eac1e75fbc8ab8dcfdd98b573fa6d7e6a6ead6b15ed78e2a8d564f61d8c52be8104306c104146696e16c9e9bff79a5fc1d92326cf0f2ff5e5c5c252773f2bd2c554bc409aaec03055f71d439daebc1d8b06c9ca0e1fe4729e8e6119616e8fb861b1e2694d1df267cbc496ba4a87013c3317a16b4c1e369748507794a20ad06aad20e4dbfc1834d789d2a8e9395ddad33a74c6c7cf54e61e533cae228909536eba8020f0c3845d2063270cae4d8e8dd8cfe3f112c46751444546ced9f6434741656dcda2185be13eebcc0392c256f384fc16353e89cbdeef8fb2e3cadc1ed2142f3b6485dc2d540fe799d027413128f624aaf8bc1933d3a0e6a954931bfc914921dec7ec822a31ebb652d4f312ab4068cedc6203b0de98e60c5f82296a3482132b288ba0a8eabdd8ac40faf145928e7563dbcb14d0625c92b542860993bb0388d8390dae727ae4086d4de1b7fea9d79f4844374bcd67fa5e1a3a28cd6d8da3f171fcf9d13062bb149fde18917c6650cdfa2be8de33b556ad34fad454db13a446e8a7c40167117e884d874c786768975df0b201ea0077ba735d31d65a832dc122d13c6559601b83899af1f14808f55f077ad465ed61378c63abff3ad742691168fe1e31bfd0dbb9f43d364ddf0bb185f69e69110c9eb1ab808354fdd2cf571838d5ec63bac3d70ca40878dc3c3cea26adffd5a197206d7c80d6a86c202338e72f17dc7185e1df0cfefa9475a2156738f90c6410c1698d1a160fd396548323c796ec5dca3cd59e468ff6a14caf34b4fdb16f1c92acb6bff2e859f9de1266dea0d1828598319b40a3edef657be02188fc94490c1da088d3ec2f315d6b5bb2f262764b67ba321379f4c93bb3ef9bc7db0c0e5f1e680ebfa84463e904d5351ecf25d1d22a98f81f7a1fc4c4fee3934b7672661f0bcd94109706644d0fdac4b7933b5db2acf39b98c0a8106a7a757408404a4c299a077379458e2118fb0a53b798adc1b85d3eb20b539e572741b9855e44a545809f897dde06730145b5caefe9db1c321783450d25d38834532c3e372fa92a53ac9cb4330eaaf65fe1b69a66459058e02d20c6641b7d8edfa8e356baaeb011b61208ef36ed33235144c86d6ce65da89d66da06291d4acc05e3136559ab77a7c4ad229c5307b48ed642d96c28cd06c82dedd4a16ed90bceda81292120438fd5c47b7b41b2646fe0899643f896ddb2d11e7311f8a0cbb9bfa38106507e06f35b3052ad6b6a11ac5f0129bedc59d04aee3737ebbf10f97c80f1a4e3f51ac8ac4488ad9e3f685a7c0dd4074b07774f4efe4b9f2cba400ef49f73b12fc7d96d8f3283a1eaf8c003931fc24a9248e201ac31bb49226c37d535592e00308d86ba0765a7eda13b72686101d352fb959598038b8dec44a0f18e5c8ec089912d325880390ce5186d4585df46e5662987c164f0ccfb8f12f6144f91349051d3ffa35ba597d2b5920e279ca8e139dfe2ba9923c0190fd444c8bf12a627618791a8781d6b54470777e6a5dac8cb505ae1e534b0c3af7db010dd602b1459964e1e15a812f3b4c8038e6bc1dc568ba482ee4944582abeeda1ed012391706ddb1e0ce60efd15acde8283d3612de5d0cf76185ad3a1ce89488e1cea4009573b55a2766d100ecefc5d53c99876cfec65daea82f55cf9687ec70e45cfdba9fe69fc3a822c29ff4be34857bdcd4313fb23d1d01d8a79cbd0057eeb5c1c0b39f75d5a753a2e10bd0ebb91dab1312bdf1a984332d566ab56dfd838d285995bec8726c5d1358fe10b0b6aaa99b9d9b08894c1dbd06356e5c693ddebb9d8b306062defb160db9d8f02ae3df59697866f5adeb34c8c5b27b63b09675030f344197b3bff097b996819dec9059aaf5ec1a6c585a86d16528091543a9e6bca4d850b7963fd1e7d981814dedb165c1a6444ec0a21743a4de8845b386ad4e1e9c9f2873f6a353487d9a8f8f56ae1d0f69124ee56b5c2b2a48c78cc6ba6b313b889adf0acfaebb4e2dc71054a4992366a2b6ff1f5972d7d2f0e9e3b17d7fbe931f43871819dc6e6040ba239ebce2cfa424ff7344b8a880040321909dcd16956594f5d99fdd39ea5d7209b906d2601572c56c72db899f986185194fe5aab45f27d9ac12aa8600b3c2728ef2e589a6886d711edf4d7f95b2e10d9adde3009560ad754f9e7a52808720a973dc475f8177fd5b199b69925f03a44a8bd9f3c3369861802ce5ca4b40cb47d19e2e1bda1b054f16b66ac7b7c0e5205112e011d6957f1df50505003544631ff4385d8128d46838338930aebc0496348045a7c05abd7a56e1079947d3eb1c50e4d8be001d03d8973f8f08f2f21a415174173ccb90f7ab615be5036947e164a434c059637bfeebb8b9f2e87b9774a4595c71122c9fac74347488b9a054e2e7b9c45b7b12fcca0fe789db614c70d4149d44e50fb64aabccee7447288a5b865a60c2640171f89afecda2cb18b7ecea214bd32f43d5ff66e90741697d085f3ee9bfd8662a3cc570999bb151090160d3bf5bf1d85e896d66276cba7ed97f341f595b13c02ac2a1352aec7a5980de2c8f9d890951108947b7602dcf2bdd2aef680667572b87aadf7c54338492eae763df73e89e3c438c196da83d98bc65233a242e08894f2390d8714f0abb801d9e5c42f169555284b6cf079005b373e9938db71a93ee5945c2a43a06e3df580d372318b3d203503c6e968206d7db8116cca2f2a1fae7f5b5195bea92914d66516bc3ceb2d9dc4de59d0d52ab80910aba7ebb696c7deaddcf0fedf56e2a88c3496bb79897c6420a0ef1b03ad89c76b24f67ffd41c9227d464565457bb25f0b32c83e676b0a3284f2acbed39c6875871c5e866a8284f12e383f87f12dd9bbe3078c68b3711eaa9bc17a7ac8413a8ef486922eddf43f01625671b7c3d0a4c6c2dc38217b4135c8cb46df7d936aabfd253e95e0816dd1f92b257e2f96d2a259a320756ba77d99b709711326f2ea42def974d60f817a1f6779121dd32a1cb194c7809e4c8fd052ba357323436491ec45a49fa601ed373aadd2199e4483704fb2f4edd7bf2815b552fb84d09094cab9700b5125887ee508570217c16799bc11d9e3658de8d9812f30dc8078bbecaf887a6527686b026eea70229df1e61759adf19c1b96673419decb382ae29bd685c5f32120b2d56d3e97c9ef00a2c0598c2181b8fa53172312590a9549ff55dffb9070b042c74654b2ae56371b2a6bac8e2808a40fd5d6d0af184c035101394e347521467e0ddb962e0d63614cf1461ac7b9d744084e9f6f26c88d515dbb1b7392b8e9384b81f186224d5c09e266682d8044d8afb1bd6483962b03ed6884759d2647b8f174a6695a437a1f1aac3e6a2f8ca658ee8a8ae44a77393cec61a9f335a1e859825e73df4125828fbde19d3695125992ddb2826ffbc6c7cfbfdbae19ba864c4170c79cce408e8b280a7632c855d802029ebac8627fbd6fec1c3bd858411c969ca035992f2ab909c423158dffd0dd5a407b3e0c2d9b180440996e09e15f17b4e42f365371d9dd58c4609455253c44c2ba73f592e360ab5fcccdb6e90ae0c60ada9325c4824242c0d866e7dfbefe091067d5c7ff0432814f733591eb0096659738b34cfa8c6c988ec628f34fe08f31dc0156dc39866412932d045168f4f3a48f24fb3b884be1384845d496c3009626f1c41b0189e95c9055d24eb5a0390596f6ccf50d3727e607875a3b2cf076a277e12ac07ddc59da78ee16e1952706ac6a1a9ade80b867d889789c935d196cc4da67aa35ba80ef2077ee4dd69c5f31a0410f7fd0739303ddcdbff2f53e0a44ec5de0f062e533444bd946959a1d9c25b297b6fc7675ca4add9e24e8ff390e0375f3b15e1d3e8129007d743e384659f191bd23ffe02140fa64d5c6d75937b28d51afcaa9d207f57c878f2f54493025e9eff5b5ce0c997d11c9690262e38e1e83c7f1a0ed3f200d9d0472739d59dea3cc6e8783758e3e3201731cf27211267702594356345449b42fa64b64c6f00a8f26665524fe2208b1a7c5fbdc822ea611c1811526471e4f52ab5e3a43de8fd4eba2fb2796a206e348de9b0be78ded78204dc82d9e9adccbe408d7ff538aab3d663eab189927a9cd597388e8dc5063d2db42cd65415fa32d20288da017c9f94e788dfe7cc3a0f6b6ab06116ed3f72f3c048cb1e51abf308ed7169908d1ad5b7ab3a86a3316d164084f8d88c6f96142d888ccb158efa586015914c116db114aa82c44a55d4c33bd901dc34e820d3120d57def03ea4f01b263913cc02ca586b208506d149ef03a706fd5360a12b83acb7bf97ac1f1f85389d4fbfdcf38551e9dbce760a05e8e4023d85038570d3697b3e7de73aac9c7feb39b6ccd1a775c8ce01b08d7190e28866aa7bb8d0cff0fc45b452fcb6a290f98f4b5ec125224c8a93918b1f2888befba6de3d294ee1f13a9c56e92eaac0b8e6c6905e77a60ea7e1d1ed979b6b2606652e7d75750a065c57c7efb1ef5708719ef04e354bd861b15e0a1cbc7cfe65c8a3d9a2b790260d6e6eb60bd4e0fb3f040dfa27fa00797664122add0750a23a8b20fcd68b6be1e21620dda4bf0561f4c5ed74f41612a0676dcdbf669df3436cbf2ce253e69319e3ab36e6e6314f11e0d0882ee3d7f3d3b3dcfe3cd7f061e301369207545676e09801f9bc4bc4c3dcaf48e5320a4b3211051a7525868a0ac1278ed6fc9531ed89cf4205458acc05d5351bcab7ea50250b6cb4c6fdd0cd96f30cdc9a820f495d0a3e14eb6c493a85a87e3b7fb8e5f23431c3c5359f5802f1fc11ff71c3172c6b57b5587ab38579b79e328792edb7a81d60762bc6c88693a00712f811cab9b075a97535c904396dbd2fa0994ba9c9b06fe9c042cb6860d22844b94863bf7b68a1ab8639e4487b38d48e40da4a98dedd7d73ca4b575bf4c604a364a9247c2ea5e3b127ff42f9bce1d3d37c2428edab1708ebd71ac0e4a408a9c6eb97407a4a8b5e912e2c63fadd1abad9a772a96fc4666f7d2b604adbde6f1136de2adfe38994491ab0f34ff1fd20cb8034ad39aae4c5c0076da2e7a157764b770e1c5f35b6f323ce809b2e92be1345204021d74712368e0ef77056afd85f065bba085793c9b6950d3c3fc6c445afbdd5a80cf7b0bb13055fd486700be1500bdf8771e286a63962e56d4771ed5eefbf111ba7380f02d6f96eed174246820b73bd772689c072bb3d8e43ef96f5466dce5c9392e34b7176821d2f4df3dab4c6ef5e0238ffe61582812fdacc987fbb6d98cad5a2d7af0e4c8dd3f800cd75c38a515d4d4c7118c5f81c6f7504e7ae452370c56c4b7fb4daa65bf26919c12081485d09e9d142965320211f483ed2a0a6836fa2488a878eaf9653b0528c3680b75a1920a25b5c5c17548c7ceb9a1656a0cf6a404aec14f7ed8a1dcf8ed32e1cf94dc2f60b65aa102650b7a22d9e708c606ce8403ceb81434bd9938b2c4e5a8530a156a1df7d143b2da54071ba3e673ce11760f72c32273b7bcd9a48da2a6caeb4b782cf1c3a044c1731f3ad61ce32bbd0b52cbb187cb3ecc1e85a67ffe27cf86769a0d69fe293dd30f060b8a0f26ccd0287d0b8d941ee7410a7c6aa430add67c2dd60db292e24f294ce80b0321aaa4d054a6f5d9981e1d5e859b454f5005be082bd59baca5775eedb7994333c62c452ef7b2893e4d03a28c0e368928b4bdd6e31f52a83cd7e162975405fd128321e0a8e3e77fd93257b0c46b309e16203974382ced818faac3a02e74141e9ea36c4a1b98bd859fafce43b2984d856c832f61b1ca562cee96f5843adc14b35bec1ccdafedd214f1a344345373f3c9eccee8324950a23c3e77d55dbde9a7ac1b7804927affb8b0e1488dcd8919d227bd1f50a35abf25e3f120c25b0dfb4d85b4c2a2c69cf7047c76c45e4e901e7396140496f9a322c2c2ac777a27adff5a6daf32e852b1bac89f1086739a603cf0f6838f792351c08e38ab130e5a83aa5a4f2da19df131770a308d810eed0059a2e5546a2169b9d0119f6df7c18981f4b4f119c76fdaac031ce7551f25678b5c4d8815a7ea9565e63389fca6ea0bcd40e71ac72124113dc0041ce26a0c9979ff76d7f1f2c0cd2c16d8c7a36930b909ed7e2d4adfa8352b12b99bdcbc25b485f652539fab7ac983c1ae925967c15ba2345e45d6bafe13b3e9d7acf1a592422ea09c3a45f7fe24e235bd70b106cdaa665584e74cdaf9f39b804bc6c4e7f0bf572225acd4dfe010081b91c2d5970d4f43d2e1a0e05f84baaf50642991b3704034aed74572e6a4715b79276432d06660b39c989570fc0d5d0071a7c690658caee447370d3295db3b5dc625e697e1ca2675b5430b9969024835c7d001fbce86c5165c4fe8f2d46b883daaa3fbf42dc5cf61209379013896df740b9cc32638358ea8079a33f04197f650471086e67e5cf9779268d7973c73bbbde2f1c11e1a8e2b154aaa8b4b74f8a03f14ceb7afc4ba35e6620b7af89c969021d20cb260c1868f3fa432ce7e509db06001ae6540531b126c1e3a851acbf0a9c1354bece05c094d69d9bd87f99391e23306911383d2082997339daebd67d8a707c9b496a309b7921696f39a07864f31208802db7188881e346b41c34f4129fca9c6a13172a4dabfe791584d240fc03685057d53c08737aa1d486233318eb4545f2e8d18087705b9d3a7658564592f56aea3aee53d66c249988bf353853728553a1577062e24af533f47dc012ae90c5c085babc121be2993c063e203ab949a088041271ac0527c56edd4b7a87e98323a0137cd493aa05fe38d02754a66d89348b119e6200d5919bc366788eb67115fc57c4c1a9dd42c7411d6709ad82de8662a1849445b39beb2ba8f894860e41a054f61337179a9214b0884f3964c95ed2a4ab37de8038566bba76fbaa7502c0460558ff4bf4793ca68d78e50f384a81da4cfa23723747e906b82290e0b8ea07e3404bee0915800d4c3c07f94c43e7aafbc7a44d923de97963d0d1586bee06fc90aadbe5758fb9933ff7df346d62e082223741f5cb26ef953ca654ab983a72b30b296891c9e3f1ed5216b0e588eb25f5d4ccad6f96973cc2d26196bbd37c83266473071ccd84d9e3c74f22621e8bd60afa4bcad6c853c7591fe5d4298a954ea5006f682a7a65aeb26b230f3866a28a58bf532aca8fd5eaec64f442ac510a7df4114f00fd6ff7e02d77f8e72797222556959958c4c4d166c5af18a6e25588cac9871a3d5bb453889ff8d13db22024a997bf97a5afdf698b1deaff3101e27868d2de47b92c403ce82e15f3239d8923e8ca0c01e3781b5dd6121f57d2238dc3ff8a1bde3e371efd33838c552e43588042b360f55d7ca92f11987630364b263428e18601d7bf23f6432b3a9aa2c500cd9ac5f73cbe309443858a2806956b0cdcfc19904567bb1703641017c6199e768410e03d8ba603eb34249d567370202f39639ae8f6d52d9d5dbfc544c5b85ac8187095c63f1f613fe4af179fc5c837e6e0ccc21e62ac22ac045c4ac3b1ca6a4cbdbe29ea465240fc0aed1f0e086d7580bcf81d4e2a4d55a8e3bc57110e7cf1e1895df07974f0686dd2ea2b12bbfd64e7a9d0c62c662f0370e6ed495eeb2ee5029042147a1f2e5fcd6068b06567be893cb80e2cbb5fbb12847313811c13cf685698d5e2175959579e510279b9e959ac2c3f94fec653c6b521f8909d633ccedbc1109285ecbd52d27cd2891eaf354db2c966d1e3086718848433c12658fe7f6fbfef930b963139a63f6c4caee5a1964d3a038dd0db403c0a251d702c07a0fba4a3576ec6668a78e9e26efc6ad83a670a47608bf4207979bf196b3160c95e7ccc6406d46f529d34676b76d72396262e1448df051130a21484e0e977df1f7f0a259ac762eef9506877498b9998e1286d6294cf60b95352e81c3", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x1f0, 0x0, 0x3, [{{0x4, 0x3, 0x28000, 0x3, 0x9, 0x10001, {0x6, 0x9, 0x4, 0xb, 0x6, 0x0, 0x6, 0x1, 0x6, 0x8000, 0xde, 0x0, 0x0, 0x8001, 0x80000000}}, {0x1, 0x1, 0x1, 0x32540194, '\x00'}}, {{0x4, 0x0, 0x4, 0x0, 0xfff, 0xf4, {0x4, 0x7, 0x7, 0xfffffffffffffff9, 0x0, 0x80000000, 0x8, 0x806, 0x5, 0xa000, 0x33c1bc78, 0x0, r7, 0x1fd}}, {0x6, 0xe6, 0x2, 0x7, 'fd'}}, {{0x4, 0x3, 0x7ff, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x3, 0x9, 0x3, 0x6, 0x5, 0x2, 0x2, 0x6, 0x7, 0x8000, 0x0, r6, r7, 0x1, 0x3}}, {0x0, 0x7, 0x1, 0x300, '\x00'}}]}, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x1f0, 0x0, 0x3, [{{0x4, 0x3, 0x28000, 0x3, 0x9, 0x10001, {0x6, 0x9, 0x4, 0xb, 0x6, 0x0, 0x6, 0x1, 0x6, 0x8000, 0xde, 0x0, 0x0, 0x8001, 0x80000000}}, {0x1, 0x1, 0x1, 0x32540194, '\x00'}}, {{0x4, 0x0, 0x4, 0x0, 0xfff, 0xf4, {0x4, 0x7, 0x7, 0xfffffffffffffff9, 0x0, 0x80000000, 0x8, 0x806, 0x5, 0xa000, 0x33c1bc78, 0x0, r7, 0x1fd}}, {0x6, 0xe6, 0x2, 0x7, 'fd'}}, {{0x4, 0x3, 0x7ff, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x3, 0x9, 0x3, 0x6, 0x5, 0x2, 0x2, 0x6, 0x7, 0x8000, 0x0, r6, r7, 0x1, 0x3}}, {0x0, 0x7, 0x1, 0x300, '\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r9, 0x0, 0x0) (async) getdents64(r9, 0x0, 0x0) 550.206728ms ago: executing program 1 (id=9280): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x201, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0xfffffffe) 537.194167ms ago: executing program 0 (id=9281): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfa, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40880) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000240)={0x0, 0x401, 0x2f}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000000)={0xf0f027, 0x2}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000001c0)={{0x200000, 0xeeef0000, 0x8, 0x7, 0xfb, 0x9, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0x5000, 0x2, 0x3, 0x0, 0x7, 0x45, 0x79, 0x6, 0x1, 0x3, 0x3, 0xa6}, {0xeeef0003, 0x10000, 0xe, 0x0, 0x3, 0x7, 0x0, 0x9, 0x1, 0x5, 0x5, 0x81}, {0x3000, 0xd000, 0xc, 0x1, 0x8, 0x42, 0xb, 0xff, 0x6, 0x7, 0xe}, {0x11f6593269eab9dc, 0x2, 0xb, 0x3, 0x15, 0x19, 0xab, 0x7f, 0x7, 0x83, 0x8, 0x83}, {0x70000, 0x0, 0xc, 0xa3, 0xad, 0xcc, 0x1, 0x9e, 0x48, 0xf, 0x2}, {0x3000, 0x8000000, 0x4, 0x2, 0x7, 0x5, 0x9, 0x3, 0x5, 0x81, 0xff, 0x6d}, {0x100000, 0x1, 0xe, 0x5, 0xf, 0x7, 0xfe, 0x34, 0x2, 0xb, 0xb0, 0x9}, {0xa000, 0x30}, {0x100000, 0x107}, 0x80000031, 0x0, 0x8000000, 0x2424, 0x8000000003, 0x8000, 0xeeee8000, [0x6800000000000000, 0x4, 0x61, 0x4]}) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f01) close_range(r0, r0, 0x0) 536.870893ms ago: executing program 1 (id=9282): getsockopt$inet_mreqn(0xffffffffffffffff, 0x6a, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x4f, 0x94) recvmmsg(r0, &(0x7f0000000000)=[{{&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000140)=""/201, 0xc9}, {&(0x7f0000000240)=""/132, 0x84}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/84, 0x54}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/210, 0xd2}, {&(0x7f0000002480)=""/153, 0x99}], 0x7, &(0x7f00000025c0)=""/152, 0x98}, 0x3}], 0x1, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) 390.513612ms ago: executing program 5 (id=9283): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000600)={0x79, 0x0, 0x427}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, 0x0) (async) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, 0x0) (async) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x2000000000007448, 0x0, 0x2, 0xffffffffffffffff], 0xfffa7000, 0x20682}) ioctl$KVM_RUN(r3, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) close_range(r9, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 320.914719ms ago: executing program 0 (id=9284): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="742bdc", 0x3}, {&(0x7f00000000c0)="90ece871e8523f15adfc0237b58d998185ad026dc66f8b220e4a3f684eaf3b526bf73b2b2f09463b2d9bbf5256bf4b85ab4eb24e5961394ee3f01a03b876f44a05a347963ce51b52398654f2dbb76f2196bd23c4df6f161cc363adbcd12e87daae9db782123c2969b778deaec881fd339ac9b7e138ac5c0ce8050fd0295f73b093df19db7fb20eccef78291824e47bdc4a457305e14e604f", 0x98}, {&(0x7f0000000440)="bad3422890249a925387053a6fb5938f2e74d116e32329f2edcdf742b42b78ffa885642951a163147a4f2bc6b9fd654c200b5dc1ffde0ef422a518bfc03300d585f6f9c6d57a1f5a25986a3c24897cc8e5cc9336f13fe97c1474f9af1cfe3eb51e1b147040829b76fb3e5ab3ac13bd21f6b68ea1bb481bf070e68e375f24dd59688a951a638c5031cc4f181e40fa804b9da049b248aae104dad876601a7fb9c889f5d16536b10383f2d72c011add443469c6864197a4ee55a6b7f7d3559067c78130562cea4926ae69311bd64b65ce5fad8833456721234ba3cafba0000000000000000000b6bedb3e72bd7b929c3e52d8893162aa0eb1d67ce080b21cbd8324b1f23c606dd8593be2851c409a1954b9f2601ce419abe41ad10abeae76b28f7452967522e93c798090219d4429c16c3d9ec0fe0034601e894f9476a6fe1cdc1625", 0x141}, {&(0x7f00000001c0)="b9", 0x1}], 0x4) setsockopt$inet_mreqsrc(r0, 0x0, 0x3, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x28}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18060300000020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000cd76d514d8a84cc4f3b14900000600"/64], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8}, 0x94) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r1, r5) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r4], 0x9) r6 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x800, 0x1000, 0x400c}}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={r4, 0x80}, 0x8) sendto$inet6(r1, &(0x7f0000000340)="8e20ef2b8aa0ba48075119bab5b468f0ac6dd84a78f9750d7f668789bd7ac32e723607405979d58d52ea622531f97e559102a37b5e363392ba54e046bd991d3266bc84d17742dc9761574dfda4309b6fbded034f2d87a8dc333d99dba3e33f347c8057fd2d360d5364772ab2745da58387ce8791fe69f4c361e12674790bef4fa6ef94105b1a5bf06ca7bbde592681d2f055d0ebc39bd9b4e9642f314d75ebb332fc759d69a079c6d2148439b1af3af66b21db3405798ad68fd119914e9e3eceb31e71d499c9402593e929a2341d2227466f8e2d162730b52bf2aaa94682bf050bb1b1a4a24c6183b9d76f0967b9cf8e4077a9", 0xf3, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x6, @private2, 0x1f}, 0x1c) 129.787603ms ago: executing program 5 (id=9285): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000540001002ebd70000400000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="00010400e000230100000000000000000000000008000000e358b92701dc88d7169d49a2084fe42e14afda3eb7f875ce80d7fdf0b6481f0f16e9f4eb3be996a83c6f9abdd20b4a2c52870d694e5a548c4824aee2084dc069ad40d70bddd1601bc9efa5fcc361f7fcbc95457e0f17dc55be9f8fc338569edd33af8bec6864c6"], 0x38}}, 0x20000000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000200), 0x4) read$FUSE(r3, &(0x7f0000004200)={0x2020}, 0x2020) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000080)={0x0, @bt={0x8, 0x1, 0x1, 0x2, 0x7, 0x1, 0x9, 0x6, 0x2, 0x80000001, 0x3, 0x5, 0xfffff6d0, 0x80000001, 0x0, 0x2, {0x2, 0x4}, 0x5, 0x6}}) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @void}}}]}) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f00000002c0)={0x7d2b, 0x67ac, 0xa6, 0x5c, 0x7, "4817716f7cdde382ca60983ac8188b5379c438", 0x1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000540001002ebd70000400000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="00010400e000230100000000000000000000000008000000e358b92701dc88d7169d49a2084fe42e14afda3eb7f875ce80d7fdf0b6481f0f16e9f4eb3be996a83c6f9abdd20b4a2c52870d694e5a548c4824aee2084dc069ad40d70bddd1601bc9efa5fcc361f7fcbc95457e0f17dc55be9f8fc338569edd33af8bec6864c6"], 0x38}}, 0x20000000) (async) userfaultfd(0x801) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000200), 0x4) (async) read$FUSE(r3, &(0x7f0000004200)={0x2020}, 0x2020) (async) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000080)={0x0, @bt={0x8, 0x1, 0x1, 0x2, 0x7, 0x1, 0x9, 0x6, 0x2, 0x80000001, 0x3, 0x5, 0xfffff6d0, 0x80000001, 0x0, 0x2, {0x2, 0x4}, 0x5, 0x6}}) (async) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @void}}}]}) (async) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f00000002c0)={0x7d2b, 0x67ac, 0xa6, 0x5c, 0x7, "4817716f7cdde382ca60983ac8188b5379c438", 0x1, 0x1}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) (async) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) (async) 128.696256ms ago: executing program 5 (id=9286): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003280)=@delchain={0x24, 0x65, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xa, 0xfff2}, {0xf, 0xfff1}, {0xc, 0xfff2}}}, 0x24}}, 0x24040084) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x0, 0x20, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x14, 0x80, 0x3, 0x7, 0x0, 0x0, 0x8, 0x9}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x0, 0x16, 0x175}, @FRA_DST={0x0, 0x1, @rand_addr=0x64010100}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x0, 0x4, 0x10000}, @FRA_TUN_ID={0x0, 0xc, 0x1, 0x0, 0x67df8a60}, @FRA_DST={0x0, 0x1, @dev={0xac, 0x14, 0x14, 0xf}}]}, 0x48}, 0x1, 0x4801000000000000}, 0x4000004) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003280)=@delchain={0x24, 0x65, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xa, 0xfff2}, {0xf, 0xfff1}, {0xc, 0xfff2}}}, 0x24}}, 0x24040084) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x0, 0x20, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x14, 0x80, 0x3, 0x7, 0x0, 0x0, 0x8, 0x9}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x0, 0x16, 0x175}, @FRA_DST={0x0, 0x1, @rand_addr=0x64010100}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x0, 0x4, 0x10000}, @FRA_TUN_ID={0x0, 0xc, 0x1, 0x0, 0x67df8a60}, @FRA_DST={0x0, 0x1, @dev={0xac, 0x14, 0x14, 0xf}}]}, 0x48}, 0x1, 0x4801000000000000}, 0x4000004) (async) 128.13231ms ago: executing program 6 (id=9287): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00') r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) recvmmsg(r1, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe63}, 0xe6}], 0x1, 0x12103, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000140)=0x40, 0x4) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) fanotify_mark(r3, 0x0, 0x2000, r0, &(0x7f0000000100)='./file0\x00') setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)={'U+', 0xe}, 0x16, 0x0) 70.43849ms ago: executing program 5 (id=9288): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r4, 0x223, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r4, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x5, 0x5, 0x44f, 0x7f]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x5, 0xf, 0x5, 0x6]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x801) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x488, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r1, {0x0, 0x7}, {0x0, 0x4}, {0x5}}, [@filter_kind_options=@f_route={{0xa}, {0x450, 0x2, [@TCA_ROUTE4_POLICE={0x43c, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xd51}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_RATE64={0xc, 0x8, 0x590}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0xff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xdb, 0x101, 0x0, 0x8, 0x0, 0xd, 0x10000, 0x8, 0x0, 0x3, 0xfffffffb, 0xa1, 0x9, 0xf1, 0xc, 0x101, 0x9, 0x2, 0x7, 0x3, 0x5, 0x401, 0xd, 0x8, 0x0, 0x8, 0x7, 0x7, 0x3, 0x7, 0x6, 0x5, 0x360a, 0x7, 0x3, 0x2, 0x2, 0x4, 0xa, 0x7, 0x2, 0x4, 0x8001, 0x9, 0xffff245a, 0x837, 0x6, 0x236, 0xb0, 0x8a4, 0x0, 0x3ff, 0x54d7, 0x0, 0x3, 0x80, 0x101, 0x5, 0x10001, 0x6, 0xc8e3, 0x2, 0x7, 0xa, 0x7, 0x9, 0xfffffffc, 0x6, 0x0, 0x21, 0x0, 0x4, 0x800, 0x7, 0x7, 0xfff, 0xea, 0x5, 0x8, 0x67, 0x2, 0xb064, 0x5, 0x6, 0x5, 0x9, 0x9, 0xd7f, 0x6, 0x3, 0x2, 0x6d6, 0x9, 0x3, 0x0, 0xffff, 0x6, 0x2, 0xa889, 0x401, 0xffffffff, 0x7, 0x1, 0x101, 0x8, 0x10000, 0x779, 0xa9a2, 0x1, 0xcaf, 0x1, 0x6, 0xa, 0x6, 0x0, 0x495, 0x4e5, 0x5, 0x5, 0x7fff, 0x1, 0x4, 0x1ff, 0x8, 0x0, 0xfffffff7, 0xb, 0x3, 0xfffffe0e, 0x4, 0x8001, 0x8, 0xfa2, 0x9a2, 0x5c6c, 0x7, 0x7, 0x0, 0x401, 0x8, 0x2, 0x7, 0x80000000, 0x3, 0x2be, 0x4, 0x2, 0x8000, 0x54, 0xff, 0x0, 0x5412, 0x4, 0x4, 0xf, 0x2, 0x6, 0x3, 0xfffffffd, 0x9, 0x2, 0xc45d, 0x68f, 0x7, 0xf, 0x0, 0x0, 0x8001, 0x3, 0x10000, 0x12, 0xfffffff7, 0xfffffffb, 0x7fffffff, 0x0, 0x4, 0x7, 0x7, 0x173a, 0x8, 0x8, 0xe, 0x7, 0xf, 0xb3, 0x800, 0x0, 0xfffffffc, 0x2, 0x5, 0x17, 0x3, 0x1, 0x10001, 0x6, 0x209, 0xfffffffd, 0xffffffff, 0x3ec5cbfa, 0x4, 0xc7c, 0xf, 0xf, 0xfbaf, 0x1, 0x7, 0x2, 0x0, 0xffffffff, 0xffff1c95, 0x0, 0x5, 0x8, 0x7fff, 0x800, 0x9, 0x3, 0x9, 0x4, 0x2, 0x6, 0x4, 0x1, 0xe97, 0x10001, 0x10000, 0xff, 0x2, 0x5, 0x10000, 0x7c3a7cad, 0xd0a, 0x0, 0x2, 0x6, 0x10000, 0x1, 0xf8d1d29, 0x0, 0x1, 0x1b65, 0x8, 0xd, 0xfa0, 0xffffffff, 0xffffffff, 0x580, 0x4, 0xfffffff7, 0x10000, 0x9, 0x21, 0x1b1, 0x1, 0x200, 0x8]}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff3, 0x4}}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x10}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}]}, 0x488}, 0x1, 0xf0ffffffffffff}, 0x0) 69.823529ms ago: executing program 6 (id=9289): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x2, 0x7, 0x7, 0x2e, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, @in6={0xa, 0x4e22, 0xbc, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffff}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0x7, @private0, 0x3}, @in6={0xa, 0x4e22, 0xa5, @local, 0x4}}, @sadb_x_sec_ctx={0x1a, 0x18, 0x2, 0xb, 0xc2, "bb88a05d68f5fbd7d0f057c39d6623d650ea3579ad59f070bfada6f8e2417b80a1a304089131cc6ceb4d30bb1337c749c7cb712e956fd8bb40f13a0dd5aacd692c8727a532daee71f6853ac67d4a104a2861e1b2dcf15fdba62f412c0035bc304111d525458646a4d15f2489a2bda75ffb4d8a57de2b8bdc48ccecf8e226874bbea2901ffea1c4404920effc496d2c3ef6f261141dc1161443290a2315294431ec87977f1f9833c1ab66550fcd188dedaa79e84f1537d2f41ea681f75151118beff4"}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d4}]}, 0x170}}, 0x4008080) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @broadcast}, 0x10) 0s ago: executing program 5 (id=9290): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac0000000000000007000000"], 0x40}}, 0x0) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='nfs\x00', 0x1218081, 0x0) sendto$packet(r0, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df75e3ffe46630d4a1741b1554dd5a55e66eaecea76d5d174c21eea8e02493ac4beba5ab57d22b47f9e9db8fb29de336d8af9753fcd0c84", 0x6a, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 5 (id=9291): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x12080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x4b564d04, 0x0, 0x5}]}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x8080000, 0x8, 0xb, 0x3, 0xd0, 0x42, 0x7, 0x0, 0x34, 0x19}, {0x10000, 0x2, 0x0, 0x2, 0x43, 0x7, 0x7f, 0x6, 0x2, 0x7, 0x3}, {0xdddd0000, 0x4000, 0x9, 0x5, 0x1, 0x7, 0x10, 0x9, 0x7, 0x8, 0x8, 0x81}, {0x6000, 0x8000000, 0xa, 0x6, 0x3, 0x2, 0xfd, 0xf8, 0xa, 0x9, 0x9, 0xf1}, {0x4000, 0x2000, 0x8, 0x3, 0x5, 0x2, 0xab, 0x7f, 0xf, 0x83, 0xf7, 0x6}, {0x1000, 0xd000, 0xc, 0x9, 0xb5, 0x6, 0x1, 0xa, 0x80, 0x13, 0x5, 0x2}, {0x6000, 0x1, 0xb, 0x5, 0x0, 0x2, 0x4, 0x3, 0x3, 0x7d, 0x2, 0x70}, {0x80a0000, 0xeeef0000, 0x8, 0x5, 0x81, 0x7, 0x4, 0xe2, 0x2, 0x8, 0xf0, 0x9}, {0xeeef0000, 0x29ad}, {0x3000, 0x2}, 0x80000035, 0x0, 0xeeef0000, 0x2024, 0x400000005, 0x4801, 0x3000, [0xa4, 0xd48f, 0x40000000005f, 0x6]}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendfile(r7, r0, 0x0, 0x2) kernel console output (not intermixed with test programs): 7354): avc: denied { watch_with_perm } for pid=983 comm="syz.0.8199" path="/10/bus" dev="tmpfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 778.213183][ T991] fuse: Unknown parameter 'nd' [ 778.222094][ T991] binder: 989:991 ioctl c0306201 200000000340 returned -14 [ 778.317934][ T1008] syz_tun: left promiscuous mode [ 778.320604][ T1008] team0: left promiscuous mode [ 778.322979][ T1008] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 778.377348][ T1014] netlink: 'syz.5.8207': attribute type 10 has an invalid length. [ 778.607333][ T1031] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 778.609426][ T1032] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 778.617663][ T1031] can0: slcan on ttyS3. [ 778.640314][ T1034] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 778.706595][ T1031] can0 (unregistered): slcan off ttyS3. [ 778.759420][ T1048] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8217'. [ 778.763701][ T1048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8217'. [ 778.782080][ T1049] xfrm0 speed is unknown, defaulting to 1000 [ 778.789396][ T1049] wg1 speed is unknown, defaulting to 1000 [ 778.798080][ T1051] netlink: 'syz.1.8219': attribute type 9 has an invalid length. [ 778.882454][ T1059] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8220'. [ 778.958372][ T5991] usb 11-1: new high-speed USB device number 85 using dummy_hcd [ 779.114274][ T5991] usb 11-1: device descriptor read/64, error -71 [ 779.365256][ T5991] usb 11-1: new high-speed USB device number 86 using dummy_hcd [ 779.374062][ T1094] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 779.384706][ T1094] macsec1: entered promiscuous mode [ 779.386594][ T1094] macsec1: entered allmulticast mode [ 779.506336][ T5991] usb 11-1: device descriptor read/64, error -71 [ 779.532280][ T1112] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8230'. [ 779.535779][ T1112] unsupported nlmsg_type 40 [ 779.625324][ T5991] usb usb11-port1: attempt power cycle [ 779.895136][T31660] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 779.985122][ T5991] usb 11-1: new high-speed USB device number 87 using dummy_hcd [ 780.006150][ T5991] usb 11-1: device descriptor read/8, error -71 [ 780.045194][T31660] usb 5-1: Using ep0 maxpacket: 32 [ 780.048887][T31660] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 780.053976][T31660] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 780.057630][T31660] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.060469][T31660] usb 5-1: Product: áºç¨ªé£¡æ¶ë°€ê¥¤ç˜´åŒ—㞔抺ࡹ䥞˅⫅王諆è˜â¸äž«è¨‹ä¼¼èŸ™æ‚묯◗ꅤ蜤é뵈הּꚈî ï½¤å‚“힦äˆìµž×žï±œæ¸œê„‹äƒ’㽄î…斅륺ä´â˜ï¸šá»ê‡’ᑈ䭯牪å´î›€åª¢â¨®ãŒ’ቀ챦è­ê‘Ÿ [ 780.067864][T31660] usb 5-1: Manufacturer: 《 [ 780.069875][T31660] usb 5-1: SerialNumber: syz [ 780.079738][ T1130] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 780.084575][ T1132] netlink: 504 bytes leftover after parsing attributes in process `syz.1.8234'. [ 780.148582][ T1138] xfrm0 speed is unknown, defaulting to 1000 [ 780.152332][ T1138] wg1 speed is unknown, defaulting to 1000 [ 780.178667][ T1140] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8235'. [ 780.255145][ T5991] usb 11-1: new high-speed USB device number 88 using dummy_hcd [ 780.276089][ T5991] usb 11-1: device descriptor read/8, error -71 [ 780.319036][T31660] usb 5-1: USB disconnect, device number 19 [ 780.333870][ T1147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8237'. [ 780.388252][ T1154] tls_set_device_offload_rx: netdev not found [ 780.391576][ T1154] tmpfs: Bad value for 'mpol' [ 780.393244][ T40] audit: type=1400 audit(1771988518.149:7355): avc: denied { mounton } for pid=1146 comm="syz.1.8237" path="/syzcgroup/unified/syz1" dev="configfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 780.395330][ T5991] usb usb11-port1: unable to enumerate USB device [ 780.841366][T24010] Bluetooth: hci8: Unknown advertising packet type: 0x70 [ 780.841422][T24010] Bluetooth: hci8: Malformed LE Event: 0x0d [ 780.844271][ T1170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8242'. [ 781.516573][ T1184] binder: BINDER_SET_CONTEXT_MGR already set [ 781.518860][ T1184] binder: 1183:1184 ioctl 4018620d 200000000200 returned -16 [ 781.588740][ T40] audit: type=1800 audit(1771988519.349:7356): pid=1186 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.8247" name="bus" dev="overlay" ino=165 res=0 errno=0 [ 781.744702][ T1191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8251'. [ 781.787943][ T1198] vcan1: entered allmulticast mode [ 781.894558][ T1214] CIFS mount error: No usable UNC path provided in device string! [ 781.894558][ T1214] [ 781.898381][ T1214] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 781.901891][ T40] audit: type=1400 audit(1771988519.659:7357): avc: denied { remove_name } for pid=1213 comm="syz.0.8256" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 781.919885][ T40] audit: type=1400 audit(1771988519.659:7358): avc: denied { unlink } for pid=1213 comm="syz.0.8256" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 782.015750][ T40] audit: type=1400 audit(1771988519.779:7359): avc: denied { audit_read } for pid=1218 comm="syz.1.8259" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 782.094010][ T1228] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 782.402589][ T1248] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20003 [ 782.565185][ T6172] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 782.718193][ T6172] usb 6-1: Using ep0 maxpacket: 16 [ 782.721484][ T6172] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 782.726882][ T6172] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 782.732053][ T6172] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 782.736055][ T6172] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.739691][ T6172] usb 6-1: Product: syz [ 782.741771][ T6172] usb 6-1: Manufacturer: syz [ 782.743860][ T6172] usb 6-1: SerialNumber: syz [ 783.070482][ T1272] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 783.085295][ T1268] netlink: 'syz.5.8272': attribute type 2 has an invalid length. [ 783.088711][ T1268] __nla_validate_parse: 1 callbacks suppressed [ 783.088723][ T1268] netlink: 244 bytes leftover after parsing attributes in process `syz.5.8272'. [ 783.250876][ T6172] usb 6-1: 0:2 : does not exist [ 783.291693][ T6172] usb 6-1: USB disconnect, device number 76 [ 783.293891][ T1300] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8278'. [ 783.335441][ T948] udevd[948]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 783.385767][ T1245] comedi comedi2: reset error (fatal) [ 783.458175][ T1317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8283'. [ 783.478895][ T1317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=1317 comm=syz.0.8283 [ 783.539308][ T1330] 9pnet_virtio: no channels available for device syz [ 783.565367][ T40] audit: type=1400 audit(1771988521.319:7360): avc: denied { accept } for pid=1331 comm="syz.0.8288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 783.572865][ T1332] (syz.0.8288,1332,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 783.664229][ T1348] netlink: 136 bytes leftover after parsing attributes in process `syz.6.8293'. [ 783.668932][ T1348] openvswitch: netlink: Flow key attr not present in new flow. [ 783.669315][ T1346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 783.680928][ T1350] sctp: [Deprecated]: syz.5.8294 (pid 1350) Use of struct sctp_assoc_value in delayed_ack socket option. [ 783.680928][ T1350] Use struct sctp_sack_info instead [ 783.685109][ T1348] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 783.688742][ T1348] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 783.696012][ T1348] vhci_hcd vhci_hcd.0: Device attached [ 783.700191][ T1353] usbip_core: unknown command [ 783.701795][ T1353] vhci_hcd: unknown pdu 0 [ 783.703227][ T1353] usbip_core: unknown command [ 783.705791][T16009] vhci_hcd vhci_hcd.6: stop threads [ 783.707624][T16009] vhci_hcd vhci_hcd.6: release socket [ 783.709369][T16009] vhci_hcd vhci_hcd.6: disconnect device [ 783.771102][ T1364] netlink: 596 bytes leftover after parsing attributes in process `syz.6.8293'. [ 783.927906][ T1376] overlayfs: failed to resolve './file0': -2 [ 783.947531][ T40] audit: type=1400 audit(1771988521.709:7361): avc: denied { recv } for pid=5834 comm="sshd-session" saddr=10.0.2.2 src=42240 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 783.958793][ T40] audit: type=1400 audit(1771988521.709:7362): avc: denied { write } for pid=1377 comm="syz.0.8304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 783.960560][ T1378] netlink: zone id is out of range [ 783.967126][ T40] audit: type=1400 audit(1771988521.709:7363): avc: denied { connect } for pid=1377 comm="syz.0.8304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 783.967997][ T1378] netlink: zone id is out of range [ 783.968038][ T1378] netlink: zone id is out of range [ 783.977205][ T40] audit: type=1400 audit(1771988521.709:7364): avc: denied { name_connect } for pid=1377 comm="syz.0.8304" dest=19995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 783.980555][ T1378] netlink: zone id is out of range [ 783.990740][ T40] audit: type=1400 audit(1771988521.709:7365): avc: denied { recv } for pid=1377 comm="syz.0.8304" saddr=::1 daddr=::1 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 783.990789][ T40] audit: type=1400 audit(1771988521.719:7366): avc: denied { getopt } for pid=1377 comm="syz.0.8304" laddr=::1 lport=34052 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 783.990826][ T40] audit: type=1400 audit(1771988521.719:7367): avc: denied { write } for pid=1377 comm="syz.0.8304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 784.025045][ T40] audit: type=1400 audit(1771988521.779:7368): avc: denied { read write } for pid=28176 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 784.026727][ T1378] netlink: zone id is out of range [ 784.037729][ T1378] netlink: zone id is out of range [ 784.039516][ T1378] netlink: zone id is out of range [ 784.041376][ T1378] netlink: zone id is out of range [ 784.043897][ T40] audit: type=1400 audit(1771988521.779:7369): avc: denied { open } for pid=28176 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 784.058116][ T1388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8307'. [ 784.086526][ T1389] netlink: 'syz.5.8306': attribute type 322 has an invalid length. [ 784.087222][ T1392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8308'. [ 784.502690][ T1429] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 784.511136][ T1429] bridge0: port 2(ipvlan2) entered blocking state [ 784.513446][ T1429] bridge0: port 2(ipvlan2) entered disabled state [ 784.517556][ T1429] ipvlan2: entered allmulticast mode [ 784.519284][ T1429] bridge0: entered allmulticast mode [ 784.522031][ T1429] ipvlan2: left allmulticast mode [ 784.523732][ T1429] bridge0: left allmulticast mode [ 784.703586][ T1444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8323'. [ 784.909957][ T1475] tmpfs: Cannot change global quota limit on remount [ 785.095489][ T10] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 785.137486][ T1506] xfrm0 speed is unknown, defaulting to 1000 [ 785.142333][ T1506] wg1 speed is unknown, defaulting to 1000 [ 785.275108][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 785.278148][ T10] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 785.280829][ T10] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 785.284215][ T10] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 785.287575][ T10] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 785.290790][ T10] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 785.294959][ T10] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 785.298895][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.559319][ T1531] erspan1: entered promiscuous mode [ 785.649127][ T1537] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8346'. [ 785.775182][ T1551] netlink: 'syz.1.8351': attribute type 13 has an invalid length. [ 785.788207][ T1551] gretap0: refused to change device tx_queue_len [ 786.225589][T18686] usb 10-1: USB disconnect, device number 83 [ 786.363382][ T1607] 9pnet_virtio: no channels available for device syz [ 786.616020][ T1638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8374'. [ 786.647862][ T1638] hsr_slave_1 (unregistering): left promiscuous mode [ 786.953068][T24010] Bluetooth: hci9: unexpected event for opcode 0x0404 [ 787.595311][ T5991] usb 10-1: new high-speed USB device number 84 using dummy_hcd [ 787.761743][ T5991] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.765486][ T5991] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.768744][ T5991] usb 10-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 787.771779][ T5991] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.777467][ T5991] usb 10-1: config 0 descriptor?? [ 787.819431][ T1698] netlink: 'syz.1.8394': attribute type 4 has an invalid length. [ 787.825622][ T1698] netlink: 'syz.1.8394': attribute type 4 has an invalid length. [ 788.153883][ T5991] usbhid 10-1:0.0: can't add hid device: -71 [ 788.154610][ T1713] ./bus: Can't lookup blockdev [ 788.158934][ T5991] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 788.166066][ T5991] usb 10-1: USB disconnect, device number 84 [ 788.642384][ T40] kauditd_printk_skb: 149 callbacks suppressed [ 788.642396][ T40] audit: type=1400 audit(1771988526.399:7519): avc: denied { create } for pid=1725 comm="syz.6.8401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 788.643024][ T1729] Invalid source name [ 788.644545][ T40] audit: type=1400 audit(1771988526.399:7520): avc: denied { map } for pid=1725 comm="syz.6.8401" path="socket:[189291]" dev="sockfs" ino=189291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 788.650878][ T1729] UBIFS error (pid: 1729): cannot open "ubifs", error -22 [ 788.675128][ T40] audit: type=1400 audit(1771988526.399:7521): avc: denied { read accept } for pid=1725 comm="syz.6.8401" path="socket:[189291]" dev="sockfs" ino=189291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 788.701156][ T40] audit: type=1400 audit(1771988526.459:7522): avc: denied { ioctl } for pid=1732 comm="syz.6.8404" path="socket:[191603]" dev="sockfs" ino=191603 ioctlcmd=0x5871 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 788.768154][ T40] audit: type=1400 audit(1771988526.529:7523): avc: denied { create } for pid=1742 comm="syz.1.8408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 788.776221][ T40] audit: type=1400 audit(1771988526.539:7524): avc: denied { ioctl } for pid=1742 comm="syz.1.8408" path="socket:[189312]" dev="sockfs" ino=189312 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 788.776595][ T1745] __nla_validate_parse: 35 callbacks suppressed [ 788.776608][ T1745] netlink: 148 bytes leftover after parsing attributes in process `syz.5.8407'. [ 788.797031][ T1745] IPv6: NLM_F_CREATE should be specified when creating new route [ 788.799657][ T1745] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 788.802083][ T1745] IPv6: NLM_F_CREATE should be set when creating new route [ 788.804984][ T40] audit: type=1400 audit(1771988526.559:7525): avc: denied { write } for pid=1741 comm="syz.5.8407" name="ip_vs_stats_percpu" dev="proc" ino=4026535463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 788.819270][ T1745] : entered promiscuous mode [ 788.871608][ T40] audit: type=1400 audit(1771988526.629:7526): avc: denied { read } for pid=1757 comm="syz.6.8412" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 788.877280][ T1760] net_ratelimit: 50 callbacks suppressed [ 788.877322][ T1760] openvswitch: netlink: Unknown key attributes 2 [ 788.891372][ T40] audit: type=1400 audit(1771988526.629:7527): avc: denied { open } for pid=1757 comm="syz.6.8412" path="/dev/ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 788.902608][ T40] audit: type=1400 audit(1771988526.639:7528): avc: denied { ioctl } for pid=1757 comm="syz.6.8412" path="/dev/ptp1" dev="devtmpfs" ino=1288 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 788.924399][ T1766] netlink: 'syz.6.8415': attribute type 4 has an invalid length. [ 789.217031][ T1807] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8430'. [ 789.220474][ T1805] netlink: 'syz.5.8429': attribute type 10 has an invalid length. [ 789.223454][ T1805] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8429'. [ 789.227327][ T1805] batadv0: entered promiscuous mode [ 789.229078][ T1805] batadv0: entered allmulticast mode [ 789.231616][ T1805] bridge0: port 2(batadv0) entered blocking state [ 789.244122][ T1805] bridge0: port 2(batadv0) entered disabled state [ 789.248541][ T1805] team0: entered promiscuous mode [ 789.308774][ T1815] netlink: 'syz.5.8433': attribute type 1 has an invalid length. [ 789.325178][ T1815] 8021q: adding VLAN 0 to HW filter on device bond3 [ 789.337959][ T1815] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 789.356415][T15996] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 789.359584][T15996] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 789.387354][ T1825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8435'. [ 789.565140][ T1840] usb usb8: usbfs: process 1840 (syz.5.8438) did not claim interface 0 before use [ 789.734938][ T1855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=1855 comm=syz.5.8442 [ 789.740971][ T1855] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8442'. [ 789.744772][ T1855] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8442'. [ 789.750070][ T1855] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8442'. [ 789.754066][ T1855] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8442'. [ 789.827658][ T1860] Cannot find del_set index 4 as target [ 789.852597][ T1860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 790.107354][ T1885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8452'. [ 790.119141][ T1885] ip6gre1: entered promiscuous mode [ 790.120903][ T1885] ip6gre1: entered allmulticast mode [ 790.124674][ T1885] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 790.125060][T15984] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 790.132771][ T1890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8453'. [ 790.133019][T15984] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 790.145316][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 790.147285][ T1883] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 790.169838][ T1890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1890 comm=syz.0.8453 [ 790.176998][ T1890] netlink: 'syz.0.8453': attribute type 1 has an invalid length. [ 790.268255][ T1905] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 790.325379][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 790.365479][ T1920] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 790.553029][ T1932] x_tables: duplicate underflow at hook 2 [ 790.591322][ T1932] xfrm0 speed is unknown, defaulting to 1000 [ 790.594909][ T1932] wg1 speed is unknown, defaulting to 1000 [ 790.616748][ T1937] netlink: 'syz.0.8466': attribute type 5 has an invalid length. [ 790.955468][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 791.059283][ T1966] mac80211_hwsim hwsim75 wlan1: entered allmulticast mode [ 791.084323][ T1966] xfrm0 speed is unknown, defaulting to 1000 [ 791.087212][ T1966] wg1 speed is unknown, defaulting to 1000 [ 791.314930][ T1967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 791.328659][ T1982] ISOFS: Unable to identify CD-ROM format. [ 791.386870][ T1966] bridge_slave_0: left allmulticast mode [ 791.388812][ T1966] bridge_slave_0: left promiscuous mode [ 791.390722][ T1966] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.399528][ T1966] bridge_slave_1: left allmulticast mode [ 791.401967][ T1966] bridge_slave_1: left promiscuous mode [ 791.404104][ T1966] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.412408][ T1966] bond0: (slave bond_slave_0): Releasing backup interface [ 791.419368][ T1966] bond0: (slave bond_slave_1): Releasing backup interface [ 791.431319][ T1966] team0: Port device team_slave_0 removed [ 791.438420][ T1966] team0: Port device team_slave_1 removed [ 791.441425][ T1966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 791.444131][ T1966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 791.451146][ T1966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 791.454182][ T1966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.459201][ T1966] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 791.529035][ T2001] trusted_key: encrypted_key: insufficient parameters specified [ 791.877021][ T2037] netlink: 'syz.0.8494': attribute type 25 has an invalid length. [ 791.891296][T15977] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 791.891361][ T2037] netlink: 'syz.0.8494': attribute type 25 has an invalid length. [ 791.894793][T15977] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 791.894818][T15977] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 791.894836][T15977] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 792.063056][ T2060] 9pnet_virtio: no channels available for device syz [ 792.227071][ T2076] bridge3: entered promiscuous mode [ 792.229173][ T2076] bridge3: entered allmulticast mode [ 792.575681][ T2096] 9pnet_virtio: no channels available for device syz [ 792.580430][ T2096] 9pnet_virtio: no channels available for device syz [ 792.802783][ T2112] netlink: 'syz.6.8517': attribute type 10 has an invalid length. [ 792.806876][ T2107] bond0: (slave bond_slave_0): Releasing backup interface [ 792.811477][ T2107] bond0: (slave bond_slave_1): Releasing backup interface [ 792.814718][ T2107] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 792.822931][ T2112] bond0: (slave ): Enslaving as an active interface with an up link [ 792.917353][ T2121] netlink: 'syz.6.8519': attribute type 13 has an invalid length. [ 792.953210][ T39] libceph: connect (1)[c::]:6789 error -101 [ 792.956501][ T39] libceph: mon0 (1)[c::]:6789 connect error [ 792.995397][ T29] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 793.168554][ T29] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 793.172458][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.176376][ T29] usb 5-1: Product: syz [ 793.178187][ T29] usb 5-1: Manufacturer: syz [ 793.180197][ T29] usb 5-1: SerialNumber: syz [ 793.186501][ T29] usb 5-1: config 0 descriptor?? [ 793.192008][ T29] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 793.202036][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 793.206948][ T29] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 793.210885][ T29] usb 5-1: media controller created [ 793.215420][ T24] libceph: connect (1)[c::]:6789 error -101 [ 793.222601][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 793.225331][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 793.273699][ T29] DVB: Unable to find symbol mt352_attach() [ 793.315204][ T29] DVB: Unable to find symbol nxt6000_attach() [ 793.317858][ T29] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 793.361092][ T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input105 [ 793.369657][ T2136] openvswitch: netlink: Duplicate key (type 6). [ 793.377373][ T29] dvb-usb: schedule remote query interval to 1000 msecs. [ 793.380344][ T29] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 793.384617][ T29] dvb-usb: bulk message failed: -22 (7/0) [ 793.389942][ T29] dvb-usb: bulk message failed: -22 (7/0) [ 793.425476][ T2110] netlink: 'syz.0.8516': attribute type 1 has an invalid length. [ 793.430227][ T2110] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 793.433960][ T2110] dvb-usb: bulk message failed: -22 (7/0) [ 793.457079][ T24] usb 5-1: USB disconnect, device number 20 [ 793.508698][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 793.533360][ T2143] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 793.537913][ T2147] fuse: Bad value for 'fd' [ 793.558122][ T2143] 8021q: adding VLAN 0 to HW filter on device bond4 [ 793.562943][ T2143] bond0: (slave bond4): Enslaving as an active interface with a down link [ 793.735681][ T24] libceph: connect (1)[c::]:6789 error -101 [ 793.738181][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 793.748956][ T2121] ceph: No mds server is up or the cluster is laggy [ 793.786747][ T40] kauditd_printk_skb: 94 callbacks suppressed [ 793.786767][ T40] audit: type=1400 audit(1771988531.549:7623): avc: denied { create } for pid=2167 comm="syz.5.8530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 793.805250][ T40] audit: type=1400 audit(1771988531.559:7624): avc: denied { sys_admin } for pid=2167 comm="syz.5.8530" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 793.875556][ T40] audit: type=1400 audit(1771988531.639:7625): avc: denied { execute } for pid=2180 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 793.895382][ T40] audit: type=1400 audit(1771988531.639:7626): avc: denied { execute_no_trans } for pid=2180 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 793.966031][T24010] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 793.972221][T24010] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 793.979600][T24010] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 793.982770][T24010] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 793.992832][T24010] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 794.004543][ T40] audit: type=1400 audit(1771988531.759:7627): avc: denied { mounton } for pid=2182 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 794.022438][ T2182] xfrm0 speed is unknown, defaulting to 1000 [ 794.025609][ T2182] wg1 speed is unknown, defaulting to 1000 [ 794.134506][ T2186] random: crng reseeded on system resumption [ 794.139167][ T40] audit: type=1400 audit(1771988531.889:7628): avc: denied { write } for pid=2185 comm="syz.0.8537" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 794.169241][ T40] audit: type=1400 audit(1771988531.889:7629): avc: denied { open } for pid=2185 comm="syz.0.8537" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 794.235289][ T29] usb 10-1: new low-speed USB device number 85 using dummy_hcd [ 794.323685][ T2194] can0: slcan on pty20. [ 794.330681][ T40] audit: type=1400 audit(1771988532.089:7630): avc: denied { read } for pid=5637 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 794.342016][ T2182] chnl_net:caif_netlink_parms(): no params data found [ 794.389459][ T29] usb 10-1: unable to get BOS descriptor or descriptor too short [ 794.399142][ T29] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 794.401829][ T29] usb 10-1: can't read configurations, error -71 [ 794.440036][ T2182] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.443166][ T2182] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.446643][ T2190] can0 (unregistered): slcan off pty20. [ 794.450490][ T2182] bridge_slave_0: entered allmulticast mode [ 794.454686][ T2182] bridge_slave_0: entered promiscuous mode [ 794.469284][ T2182] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.472488][ T2182] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.477346][ T2182] bridge_slave_1: entered allmulticast mode [ 794.481414][ T2182] bridge_slave_1: entered promiscuous mode [ 794.505144][ T2182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 794.511720][ T2182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 794.529135][ T40] audit: type=1400 audit(1771988532.289:7631): avc: denied { read } for pid=2198 comm="syz.0.8539" name="usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 794.534217][ T2182] team0: Port device team_slave_0 added [ 794.537170][ T40] audit: type=1400 audit(1771988532.289:7632): avc: denied { open } for pid=2198 comm="syz.0.8539" path="/dev/usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 794.541101][ T2182] team0: Port device team_slave_1 added [ 794.555205][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 794.570457][ T2182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 794.573451][ T2182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.584771][ T2182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 794.589687][ T2182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 794.592104][ T2182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.600844][ T2182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 794.634591][ T2182] hsr_slave_0: entered promiscuous mode [ 794.637531][ T2182] hsr_slave_1: entered promiscuous mode [ 794.640477][ T2182] debugfs: 'hsr0' already exists in 'hsr' [ 794.642655][ T2182] Cannot create hsr debugfs directory [ 795.146933][ T2217] md: md2 stopped. [ 795.244304][ T2220] macsec2: entered promiscuous mode [ 795.247570][ T2220] macsec2: entered allmulticast mode [ 795.360958][ T2224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2224 comm=syz.5.8546 [ 795.423238][ T2232] __nla_validate_parse: 13 callbacks suppressed [ 795.423256][ T2232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8547'. [ 795.492028][ T2239] overlayfs: conflicting lowerdir path [ 795.576041][T16025] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.579311][T16025] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.583960][ T2182] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 795.597505][T16025] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.604585][T16025] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.610937][ T2182] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 795.623939][ T2182] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 795.630334][ T2182] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 795.722518][ T2182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.728908][ T2268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8557'. [ 795.738179][ T2182] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.749735][T16025] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.752725][T16025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.762938][T15982] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.766150][T15982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.906572][T18686] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 795.935238][ T2182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.065795][T18686] usb 5-1: Using ep0 maxpacket: 8 [ 796.075171][T24010] Bluetooth: hci7: command tx timeout [ 796.080525][T18686] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 796.084173][T18686] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 796.091139][T18686] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 796.097658][T18686] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 796.101730][T18686] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 796.108307][T18686] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 796.112164][T18686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.123300][ T2182] veth0_vlan: entered promiscuous mode [ 796.132315][ T2182] veth1_vlan: entered promiscuous mode [ 796.148571][ T2182] veth0_macvtap: entered promiscuous mode [ 796.153101][ T2182] veth1_macvtap: entered promiscuous mode [ 796.163035][ T2182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.173092][ T2182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.183558][T15999] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.195358][T15999] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.199148][T15999] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.202791][T15999] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.246647][ T2288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8560'. [ 796.289966][ T2288] bond3: entered promiscuous mode [ 796.291977][ T2288] 8021q: adding VLAN 0 to HW filter on device bond3 [ 796.313571][T15999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.324979][ T2288] 8021q: adding VLAN 0 to HW filter on device bond3 [ 796.328224][T15999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.328546][ T2288] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 796.333869][T18686] usb 5-1: GET_CAPABILITIES returned 0 [ 796.336723][ T2288] bond3: (slave vcan1): Error -95 calling set_mac_address [ 796.338009][T18686] usbtmc 5-1:16.0: can't read capabilities [ 796.396984][T15999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.400361][T15999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.751373][ T2308] netlink: 'syz.6.8567': attribute type 1 has an invalid length. [ 796.797661][ T2319] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8569'. [ 796.905472][ T2326] netlink: 80 bytes leftover after parsing attributes in process `syz.6.8571'. [ 797.085903][ T2333] netlink: 'syz.5.8572': attribute type 1 has an invalid length. [ 797.200777][ T2348] netlink: 'syz.5.8576': attribute type 1 has an invalid length. [ 797.256645][ T2350] PKCS7: Unknown OID: [4] 0.38.35.36.951720.33.17 [ 797.259371][ T2350] PKCS7: Only support pkcs7_signedData type [ 797.262941][ T2350] netlink: 'syz.6.8574': attribute type 1 has an invalid length. [ 797.265537][ T2350] netlink: 224 bytes leftover after parsing attributes in process `syz.6.8574'. [ 797.279980][ T2351] ubi: mtd0 is already attached to ubi31 [ 797.286342][ T2350] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8574'. [ 797.289162][ T2351] bond5: (slave ip6gretap3): Enslaving as a backup interface with an up link [ 797.289223][ T2350] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8574'. [ 797.310889][ T2351] veth7: entered promiscuous mode [ 797.314882][ T2351] bond5: (slave veth7): Enslaving as a backup interface with a down link [ 797.645692][ T5991] usb 5-1: USB disconnect, device number 21 [ 797.843780][ T2377] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8584'. [ 798.064333][ T2387] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8587'. [ 798.155443][T24010] Bluetooth: hci7: command tx timeout [ 798.362768][ T2403] mac80211_hwsim hwsim57 : renamed from wlan1 [ 798.367964][ T2403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=2403 comm=syz.5.8591 [ 798.515151][T18686] usb 11-1: new high-speed USB device number 89 using dummy_hcd [ 798.677862][T18686] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 798.681446][T18686] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.684967][T18686] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.689430][T18686] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 798.699900][T18686] usb 11-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 798.704112][T18686] usb 11-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 798.708115][T18686] usb 11-1: Manufacturer: syz [ 798.713510][T18686] usb 11-1: config 0 descriptor?? [ 798.849150][ T2425] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3606970776 (7213941552 ns) > initial count (2982298368 ns). Using initial count to start timer. [ 798.857932][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 798.857947][ T40] audit: type=1400 audit(1771988536.619:7670): avc: denied { map } for pid=2424 comm="syz.0.8597" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 798.868109][ T2430] 9pnet_virtio: no channels available for device syz [ 798.871627][ T40] audit: type=1400 audit(1771988536.619:7671): avc: denied { getopt } for pid=2427 comm="syz.5.8598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 798.918210][ T40] audit: type=1400 audit(1771988536.679:7672): avc: denied { create } for pid=2431 comm="syz.5.8600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 798.986869][ T2438] libceph: secret too big 289 [ 799.036176][ T40] audit: type=1400 audit(1771988536.799:7673): avc: denied { ioctl } for pid=2439 comm="syz.0.8603" path="socket:[195115]" dev="sockfs" ino=195115 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 799.044150][ T40] audit: type=1400 audit(1771988536.799:7674): avc: denied { map } for pid=2439 comm="syz.0.8603" path="/proc/336/task/337" dev="proc" ino=195117 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 799.056405][ T2434] fuse: Bad value for 'fd' [ 799.124488][T18686] hid_parser_main: 18 callbacks suppressed [ 799.124502][T18686] appleir 0003:05AC:8243.0033: unknown main item tag 0x0 [ 799.138474][T18686] appleir 0003:05AC:8243.0033: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 799.155355][ T2451] overlayfs: failed to clone upperpath [ 799.249379][ T40] audit: type=1400 audit(1771988537.009:7675): avc: denied { create } for pid=2462 comm="syz.1.8610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 799.269218][ T40] audit: type=1400 audit(1771988537.029:7676): avc: denied { write } for pid=2464 comm="syz.0.8611" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 799.278307][ T40] audit: type=1400 audit(1771988537.029:7677): avc: denied { create } for pid=2464 comm="syz.0.8611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 799.293918][ T40] audit: type=1400 audit(1771988537.049:7678): avc: denied { write } for pid=2464 comm="syz.0.8611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 799.388143][T18686] usb 11-1: USB disconnect, device number 89 [ 799.464187][ T2477] overlayfs: failed to clone upperpath [ 799.568801][ T2485] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 799.569784][ T40] audit: type=1400 audit(1771988537.329:7679): avc: denied { mounton } for pid=2482 comm="syz.0.8618" path="/119/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 799.572265][ T2485] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 799.582781][ T2485] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 799.886445][ T2484] syz.0.8618 (2484): drop_caches: 1 [ 799.978083][ T2484] syz.0.8618 (2484): drop_caches: 1 [ 800.020788][ T2500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2500 comm=syz.6.8624 [ 800.033011][ T2498] xfrm0 speed is unknown, defaulting to 1000 [ 800.038089][ T2498] wg1 speed is unknown, defaulting to 1000 [ 800.193080][ T2514] overlayfs: failed to clone upperpath [ 800.235650][T24010] Bluetooth: hci7: command tx timeout [ 800.252927][ T2521] netlink: 'syz.1.8630': attribute type 1 has an invalid length. [ 800.264277][ T2521] 8021q: adding VLAN 0 to HW filter on device bond4 [ 800.272011][ T2521] vlan2: entered promiscuous mode [ 800.273727][ T2521] bond4: entered promiscuous mode [ 800.276391][ T2521] vlan2: entered allmulticast mode [ 800.278105][ T2521] bond4: entered allmulticast mode [ 800.613177][ T2541] 9pnet_virtio: no channels available for device syz [ 800.664509][ T2547] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 800.667703][ T2547] overlayfs: failed to set xattr on upper [ 800.670138][ T2547] overlayfs: ...falling back to redirect_dir=nofollow. [ 800.672513][ T2547] overlayfs: ...falling back to metacopy=off. [ 800.674817][ T2547] overlayfs: ...falling back to index=off. [ 800.677483][ T2547] overlayfs: ...falling back to uuid=null. [ 800.884083][ T2565] overlayfs: failed to clone upperpath [ 800.941518][ T2572] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 801.118660][ T2604] overlayfs: failed to clone upperpath [ 801.158223][ T2605] __nla_validate_parse: 3 callbacks suppressed [ 801.158236][ T2605] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8648'. [ 801.190238][ T2623] fuse: Bad value for 'fd' [ 801.310129][ T2652] 9p: Bad value for 'version' [ 801.317441][ T2652] wg1: entered promiscuous mode [ 801.320529][ T2652] wg1: entered allmulticast mode [ 801.354308][ T2659] overlayfs: failed to clone upperpath [ 801.455891][ T2676] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8662'. [ 801.509818][ T2687] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 801.528239][ T2687] cramfs: wrong magic [ 801.560165][ T2703] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8669'. [ 801.640261][ T2705] Invalid ELF header magic: != ELF [ 801.802663][ T2721] netlink: 'syz.0.8672': attribute type 4 has an invalid length. [ 801.806448][ T2721] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8672'. [ 801.812979][ T2721] `: renamed from bond0 (while UP) [ 802.315151][T24010] Bluetooth: hci7: command tx timeout [ 802.471801][ T2737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8675'. [ 802.474594][ T2739] netlink: 'syz.0.8676': attribute type 1 has an invalid length. [ 802.475333][ T2737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8675'. [ 802.483286][ T2737] xt_bpf: check failed: parse error [ 802.503728][ T2739] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 802.506246][ T2742] program syz.6.8677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 802.527738][ T2739] veth3: entered promiscuous mode [ 802.532880][ T2739] bond0: (slave veth3): Enslaving as a backup interface with a down link [ 802.540175][ T2739] netlink: 'syz.0.8676': attribute type 1 has an invalid length. [ 802.542869][ T2739] netlink: 'syz.0.8676': attribute type 7 has an invalid length. [ 802.545568][ T2739] netlink: 'syz.0.8676': attribute type 8 has an invalid length. [ 802.548260][ T2739] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8676'. [ 802.570397][ T2750] securityfs: Unknown parameter 'discard' [ 802.593927][ T2753] pim6reg: entered allmulticast mode [ 802.667719][ T2768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8685'. [ 802.930750][ T2771] 8021q: VLANs not supported on ip_vti0 [ 803.019796][ T2775] openvswitch: netlink: Duplicate or invalid key (type 0). [ 803.022993][ T2775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 803.064313][ T2782] 9pnet_virtio: no channels available for device syz [ 803.071006][ T2782] netlink: 124 bytes leftover after parsing attributes in process `syz.1.8689'. [ 803.074956][ T2782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8689'. [ 803.080532][ T2784] autofs4:pid:2784:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 803.159195][ T2797] kAFS: unparsable volume name [ 803.259030][ T2807] 9pnet_virtio: no channels available for device syz [ 803.310881][ T2814] 9pnet_virtio: no channels available for device syz [ 803.317346][ T2814] nfs4: Unknown parameter '9p' [ 803.383995][ T2819] syzkaller0: entered promiscuous mode [ 803.386236][ T2819] syzkaller0: entered allmulticast mode [ 803.392955][T15977] syzkaller0: tun_net_xmit 48 [ 803.395828][T15977] syzkaller0: tun_net_xmit 1 [ 803.445461][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 804.345256][ T6053] usb 11-1: new high-speed USB device number 90 using dummy_hcd [ 804.495230][ T6053] usb 11-1: Using ep0 maxpacket: 8 [ 804.499563][ T6053] usb 11-1: config 179 has an invalid interface number: 65 but max is 0 [ 804.503221][ T6053] usb 11-1: config 179 has no interface number 0 [ 804.506165][ T6053] usb 11-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 804.511080][ T6053] usb 11-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 804.517025][ T6053] usb 11-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 804.521827][ T6053] usb 11-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 804.525909][ T6053] usb 11-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 804.530245][ T6053] usb 11-1: config 179 interface 65 has no altsetting 0 [ 804.532541][ T6053] usb 11-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 804.535531][ T6053] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.540298][ T2837] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 804.548662][ T6053] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:179.65/input/input106 [ 804.595391][ T5319] input input106: unable to receive magic message: -110 [ 804.623058][ T5319] input input106: unable to receive magic message: -32 [ 804.641976][ T948] input input106: unable to receive magic message: -32 [ 804.672406][ T5319] input input106: unable to receive magic message: -32 [ 804.680611][ C0] xpad 11-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 804.692761][ T5319] input input106: unable to receive magic message: -32 [ 804.700398][ C0] xpad 11-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 804.717971][ T5319] input input106: unable to receive magic message: -32 [ 805.511790][ T2829] veth1_to_batadv: entered promiscuous mode [ 805.548375][ T6053] usb 11-1: USB disconnect, device number 90 [ 805.550383][ C0] xpad 11-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 805.573817][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 805.573834][ T40] audit: type=1400 audit(1771988543.329:7703): avc: denied { watch_mount } for pid=2838 comm="syz.1.8707" path="/325" dev="tmpfs" ino=1839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 805.731188][ T2854] F2FS-fs: Conflicting test_dummy_encryption options [ 805.737003][ T40] audit: type=1400 audit(1771988543.499:7704): avc: denied { read } for pid=2851 comm="syz.0.8710" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 806.095940][ T40] audit: type=1400 audit(1771988543.859:7705): avc: denied { connect } for pid=2862 comm="syz.1.8713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 806.190219][ T2878] __nla_validate_parse: 1 callbacks suppressed [ 806.190233][ T2878] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8717'. [ 806.226045][ T2878] 9p: Could not find request transport: virtko [ 806.313211][ T40] audit: type=1400 audit(1771988544.069:7706): avc: denied { bind } for pid=2886 comm="syz.0.8718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 806.335243][ T40] audit: type=1400 audit(1771988544.069:7707): avc: denied { name_bind } for pid=2886 comm="syz.0.8718" src=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 806.350706][ T40] audit: type=1400 audit(1771988544.069:7708): avc: denied { node_bind } for pid=2886 comm="syz.0.8718" src=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 806.357554][ T2892] syz_tun: entered allmulticast mode [ 806.362957][ T2892] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 806.367164][ T2892] mroute: pending queue full, dropping entries [ 806.378228][ T2888] syz_tun: left allmulticast mode [ 806.425257][ T2901] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.8722'. [ 806.544619][ T2915] IPv6: sit1: Disabled Multicast RS [ 806.546947][ T2915] sit1: entered allmulticast mode [ 806.621995][ T40] audit: type=1400 audit(1771988544.379:7709): avc: denied { read } for pid=2917 comm="syz.6.8727" path="socket:[196844]" dev="sockfs" ino=196844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 806.700422][ T40] audit: type=1400 audit(1771988544.459:7710): avc: denied { mounton } for pid=2923 comm="syz.6.8729" path="/32/bus/file0" dev="tmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 806.749527][ T40] audit: type=1400 audit(1771988544.509:7711): avc: denied { setopt } for pid=2925 comm="syz.6.8730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 807.416562][ T2937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8733'. [ 807.473230][ T2943] bond2 (unregistering): Released all slaves [ 807.495585][ T2946] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8736'. [ 807.692777][ T40] audit: type=1400 audit(1771988545.449:7712): avc: denied { create } for pid=2966 comm="syz.0.8741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 807.747875][ T2973] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8740'. [ 807.751541][ T2973] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8740'. [ 807.756691][ T2973] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8740'. [ 807.767371][T15977] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 807.767501][ T2973] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8740'. [ 807.771773][T15977] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 807.775183][ T2973] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8740'. [ 807.775214][ T2973] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8740'. [ 807.779638][T15977] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 807.790327][T15977] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 807.846557][ T2975] netlink: 'syz.6.8742': attribute type 4 has an invalid length. [ 807.921859][ T2986] mac80211_hwsim hwsim80 wlan1: entered allmulticast mode [ 807.985528][ T2986] bridge_slave_0: left allmulticast mode [ 807.987598][ T2986] bridge_slave_0: left promiscuous mode [ 807.989606][ T2986] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.996532][ T2986] bridge_slave_1: left allmulticast mode [ 807.998355][ T2986] bridge_slave_1: left promiscuous mode [ 808.000331][ T2986] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.010466][ T2986] bond0: (slave bond_slave_0): Releasing backup interface [ 808.014887][ T2986] bond0: (slave bond_slave_1): Releasing backup interface [ 808.031323][ T2986] team0: Port device team_slave_0 removed [ 808.034555][ T3005] netlink: 'syz.6.8745': attribute type 10 has an invalid length. [ 808.036444][ T2986] team0: Port device team_slave_1 removed [ 808.041361][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.043965][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 808.048779][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.051257][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 808.054781][ T2986] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 808.063632][ T3005] mac80211_hwsim hwsim80 wlan1: left allmulticast mode [ 808.070737][ T3005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.075204][ T3005] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 808.136348][ T3019] block nbd0: NBD_DISCONNECT [ 808.168437][ T3025] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 808.201329][ T3030] ` (unregistering): Released all slaves [ 808.243501][ T3032] netlink: 'syz.1.8755': attribute type 64 has an invalid length. [ 808.247119][ T3032] netlink: 'syz.1.8755': attribute type 4 has an invalid length. [ 808.252361][ T3036] bond1: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 808.257599][ T3037] bond1: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 808.261904][ T3036] bond1: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 808.266913][ T10] usb 10-1: new high-speed USB device number 87 using dummy_hcd [ 808.357925][ T3050] netlink: 'syz.1.8760': attribute type 2 has an invalid length. [ 808.403105][ T3052] fuse: Bad value for 'fd' [ 808.405928][ T3052] netlink: 'syz.1.8761': attribute type 10 has an invalid length. [ 808.411180][ T3052] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.414402][ T3052] bridge_slave_1: left allmulticast mode [ 808.419025][ T3052] bridge_slave_1: left promiscuous mode [ 808.420934][ T3052] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.426405][ T10] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 808.426706][ T3052] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 808.430013][ T10] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 808.437271][ T10] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 808.441506][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.446992][ T2998] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 808.451786][ T10] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 808.516937][ T3060] team0: Mode "" not found [ 808.561946][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 808.653398][ T10] usb 10-1: USB disconnect, device number 87 [ 808.717787][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 808.721410][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 808.724722][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 808.730652][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 808.733845][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.737144][ T24] usb 5-1: Product: syz [ 808.738648][ T24] usb 5-1: Manufacturer: syz [ 808.740344][ T24] usb 5-1: SerialNumber: syz [ 808.750624][ T24] hub 5-1:1.0: bad descriptor, ignoring hub [ 808.752735][ T24] hub 5-1:1.0: probe with driver hub failed with error -5 [ 808.957358][ T24] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 809.239323][ T3084] lo speed is unknown, defaulting to 1000 [ 809.246579][ T3084] lo speed is unknown, defaulting to 1000 [ 809.249151][ T3084] lo speed is unknown, defaulting to 1000 [ 809.329296][ T3084] infiniband syU×: set active [ 809.331035][ T6053] lo speed is unknown, defaulting to 1000 [ 809.332977][ T3084] infiniband syU×: added lo [ 809.348559][ T3084] RDS/IB: syU×: added [ 809.350321][ T3084] smc: adding ib device syU× with port count 1 [ 809.352432][ T3084] smc: ib device syU× port 1 has no pnetid [ 809.356380][ T6053] lo speed is unknown, defaulting to 1000 [ 809.361796][ T3084] lo speed is unknown, defaulting to 1000 [ 809.444927][ T3084] lo speed is unknown, defaulting to 1000 [ 809.566076][ T3084] lo speed is unknown, defaulting to 1000 [ 809.599006][ T3091] overlay: Bad value for 'workdir' [ 809.673664][ T3084] lo speed is unknown, defaulting to 1000 [ 809.758097][ T3084] lo speed is unknown, defaulting to 1000 [ 809.850981][ T3084] lo speed is unknown, defaulting to 1000 [ 809.875113][ T3044] usb 5-1: reset high-speed USB device number 22 using dummy_hcd [ 809.935153][ T3084] lo speed is unknown, defaulting to 1000 [ 810.018373][ T3084] lo speed is unknown, defaulting to 1000 [ 810.027446][ T3044] usb 5-1: device firmware changed [ 810.030376][ T24] usb 5-1: USB disconnect, device number 22 [ 810.036263][ T24] usblp0: removed [ 810.038967][ T3111] blktrace: Concurrent blktraces are not allowed on sg0 [ 810.090849][ T3113] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=72 sclass=netlink_tcpdiag_socket pid=3113 comm=syz.6.8780 [ 810.119616][ T3084] lo speed is unknown, defaulting to 1000 [ 810.185145][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 810.205412][ T3084] lo speed is unknown, defaulting to 1000 [ 810.286831][ T3084] lo speed is unknown, defaulting to 1000 [ 810.336807][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 810.340251][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 810.343394][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 810.358383][ T24] usb 5-1: string descriptor 0 read error: -22 [ 810.360482][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 810.363397][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.379615][ T24] hub 5-1:1.0: bad descriptor, ignoring hub [ 810.381471][ T24] hub 5-1:1.0: probe with driver hub failed with error -5 [ 810.471246][ T3138] netlink: 'syz.6.8789': attribute type 1 has an invalid length. [ 810.484358][ T3138] 8021q: adding VLAN 0 to HW filter on device bond2 [ 810.593045][ T24] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 810.638162][ T24] usb 5-1: USB disconnect, device number 23 [ 810.641820][ T24] usblp0: removed [ 810.650932][ T3138] vlan2: entered promiscuous mode [ 810.653054][ T3138] bond2: entered promiscuous mode [ 810.656254][ T3138] vlan2: entered allmulticast mode [ 810.658503][ T3138] bond2: entered allmulticast mode [ 810.661789][ T3140] tipc: Started in network mode [ 810.663816][ T3140] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 810.672500][ T3140] tipc: Enabled bearer , priority 10 [ 810.680177][ T3141] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 810.685252][ T3141] bond2: (slave batadv1): making interface the new active one [ 810.688302][ T3141] batadv1: entered promiscuous mode [ 810.690773][ T3141] batadv1: entered allmulticast mode [ 810.694154][ T3141] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 810.747170][ T3148] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 810.799523][ T3156] netlink: 'syz.6.8793': attribute type 39 has an invalid length. [ 810.870731][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 810.870749][ T40] audit: type=1400 audit(1771988548.629:7721): avc: denied { ioctl } for pid=3158 comm="syz.5.8794" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 810.885752][ T3159] binder: 3158:3159 ioctl c0306201 0 returned -14 [ 810.889924][ T40] audit: type=1400 audit(1771988548.629:7722): avc: denied { set_context_mgr } for pid=3158 comm="syz.5.8794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 810.898757][ T40] audit: type=1400 audit(1771988548.649:7723): avc: denied { map } for pid=3158 comm="syz.5.8794" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 811.017336][ T40] audit: type=1400 audit(1771988548.779:7724): avc: denied { connect } for pid=3155 comm="syz.6.8793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 811.199512][ T3165] syzkaller0: entered promiscuous mode [ 811.201535][ T3165] syzkaller0: entered allmulticast mode [ 811.805449][ T5991] tipc: Node number set to 4269801494 [ 811.864040][ T3178] openvswitch: netlink: Key 25 has unexpected len 4980 expected 16 [ 811.975125][ T5991] usb 11-1: new full-speed USB device number 91 using dummy_hcd [ 812.047149][ T3182] netlink: 'syz.5.8801': attribute type 1 has an invalid length. [ 812.050411][ T3182] __nla_validate_parse: 12 callbacks suppressed [ 812.050426][ T3182] netlink: 228 bytes leftover after parsing attributes in process `syz.5.8801'. [ 812.050443][ T3182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8801'. [ 812.137574][ T5991] usb 11-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 812.141373][ T5991] usb 11-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 812.145453][ T5991] usb 11-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 812.149058][ T5991] usb 11-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 156, setting to 64 [ 812.152666][ T5991] usb 11-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 812.160401][ T5991] usb 11-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 812.163496][ T5991] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.166499][ T5991] usb 11-1: Product: syz [ 812.167913][ T5991] usb 11-1: Manufacturer: syz [ 812.169461][ T5991] usb 11-1: SerialNumber: syz [ 812.173005][ T3169] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 812.177196][ C3] imon 11-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 812.182633][ T5991] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/input/input108 [ 812.325203][T17772] usb 10-1: new high-speed USB device number 88 using dummy_hcd [ 812.381138][ T40] audit: type=1400 audit(1771988550.139:7725): avc: denied { setopt } for pid=3191 comm="syz.0.8805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 812.385360][ T3192] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8805'. [ 812.395298][ T5991] imon 11-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 812.405450][ T5991] (id 0x00) [ 812.455126][ T5991] rc_core: IR keymap rc-imon-pad not found [ 812.457454][ T5991] Registered IR keymap rc-empty [ 812.459192][ T5991] imon 11-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 812.462617][ T5991] imon 11-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 812.475250][T17772] usb 10-1: Using ep0 maxpacket: 32 [ 812.480005][T17772] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 812.483590][T17772] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 812.488361][T17772] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 812.492322][T17772] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 812.496580][T17772] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 812.500559][T17772] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 812.505167][T17772] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 812.511308][T17772] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 812.516897][T17772] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 812.520688][T17772] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.528913][T17772] usb 10-1: config 0 descriptor?? [ 812.529492][ T3198] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8807'. [ 812.531929][ T3184] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 812.545761][ T3198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 812.554355][ T3198] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 812.560132][ T3198] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 812.565484][ T3198] bond0 (unregistering): Released all slaves [ 812.582485][ T40] audit: type=1400 audit(1771988550.339:7726): avc: denied { getopt } for pid=3197 comm="syz.1.8807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 812.596490][ T5991] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/rc/rc0 [ 812.602588][ T5991] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/rc/rc0/input109 [ 812.610125][ T5991] imon 11-1:155.0: iMON device (15c2:ffdc, intf0) on usb<11:91> initialized [ 812.671554][ T3201] ALSA: seq fatal error: cannot create timer (-19) [ 812.716805][ T3210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 812.740168][T17772] usblp 10-1:0.0: usblp1: USB Bidirectional printer dev 88 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 812.781877][T17772] usb 11-1: USB disconnect, device number 91 [ 813.086940][ T40] audit: type=1400 audit(1771988550.849:7727): avc: denied { getopt } for pid=3219 comm="syz.0.8812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 813.163866][T24010] Bluetooth: hci6: unexpected event for opcode 0x2010 [ 813.194466][ T40] audit: type=1400 audit(1771988550.949:7728): avc: denied { listen } for pid=3230 comm="syz.0.8816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 813.227722][ T3235] fuse: Bad value for 'user_id' [ 813.229350][ T3235] fuse: Bad value for 'user_id' [ 813.303528][ T3246] xfrm0 speed is unknown, defaulting to 1000 [ 813.310874][ T3246] wg1 speed is unknown, defaulting to 1000 [ 813.316428][ T3250] ALSA: mixer_oss: invalid OSS volume 'IGAgN' [ 813.320214][ T3250] ALSA: mixer_oss: invalid OSS volume 'IM' [ 813.336129][ T3250] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 813.339941][ T3250] overlayfs: missing 'lowerdir' [ 813.390022][T17772] usb 10-1: USB disconnect, device number 88 [ 813.428064][T17772] usblp1: removed [ 813.472678][ T3246] lo speed is unknown, defaulting to 1000 [ 814.053707][ T3312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3312 comm=syz.0.8839 [ 814.065644][ T3312] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8839'. [ 814.105139][ T40] audit: type=1400 audit(1771988551.859:7729): avc: denied { view } for pid=3309 comm="syz.6.8838" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 814.298287][ T3338] 9pnet_virtio: no channels available for device syz [ 814.301124][ T3336] fuse: Bad value for 'fd' [ 814.302471][ T3335] netlink: 11 bytes leftover after parsing attributes in process `syz.6.8844'. [ 814.302909][ T3336] fuse: Bad value for 'fd' [ 814.307825][ T3336] fuse: Bad value for 'fd' [ 814.309532][ T3336] fuse: Bad value for 'fd' [ 814.311135][ T3336] fuse: Bad value for 'fd' [ 814.312744][ T3336] fuse: Bad value for 'fd' [ 814.314337][ T3336] fuse: Bad value for 'fd' [ 814.315083][ T3335] netlink: 11 bytes leftover after parsing attributes in process `syz.6.8844'. [ 814.317012][ T3336] fuse: Bad value for 'fd' [ 814.325472][ T3336] fuse: Bad value for 'fd' [ 814.327182][ T3336] fuse: Bad value for 'fd' [ 814.328805][ T3336] fuse: Bad value for 'fd' [ 814.330488][ T3336] fuse: Bad value for 'fd' [ 814.370534][ T3344] overlayfs: failed to clone upperpath [ 814.395535][ T40] audit: type=1400 audit(1771988552.159:7730): avc: denied { read } for pid=3340 comm="syz.0.8846" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 814.581361][ T3365] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8854'. [ 814.584298][ T3365] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8854'. [ 814.646708][ T3374] ip6tnl1: entered promiscuous mode [ 814.669532][ T3374] xfrm0 speed is unknown, defaulting to 1000 [ 814.672389][ T3374] wg1 speed is unknown, defaulting to 1000 [ 814.702947][ T3375] 9pnet_virtio: no channels available for device syz [ 814.750427][ T3374] lo speed is unknown, defaulting to 1000 [ 815.098802][ T3397] cgroup: noprefix used incorrectly [ 815.158088][ T3398] CIFS mount error: No usable UNC path provided in device string! [ 815.158088][ T3398] [ 815.161987][ T3398] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 815.308098][ T3406] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 815.345228][ T3417] netlink: 'syz.5.8870': attribute type 1 has an invalid length. [ 815.348902][ T3417] netlink: 'syz.5.8870': attribute type 2 has an invalid length. [ 815.383377][ T3423] openvswitch: netlink: Key 6 has unexpected len 28 expected 2 [ 815.398117][ T3426] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8873'. [ 816.098878][ T3455] netlink: 'syz.0.8882': attribute type 15 has an invalid length. [ 816.261235][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 816.261247][ T40] audit: type=1400 audit(1771988554.019:7740): avc: denied { read write } for pid=3456 comm="syz.0.8883" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 816.261432][ T3460] netlink: ct family unspecified [ 816.263434][ T40] audit: type=1400 audit(1771988554.019:7741): avc: denied { open } for pid=3456 comm="syz.0.8883" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 816.312845][ T40] audit: type=1400 audit(1771988554.069:7742): avc: denied { setopt } for pid=3468 comm="syz.0.8885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 816.551084][ T40] audit: type=1400 audit(1771988554.309:7743): avc: denied { kexec_image_load } for pid=3483 comm="syz.5.8888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 817.469825][ T3488] ata1.00: invalid multi_count 128 ignored [ 817.533208][ T40] audit: type=1400 audit(1771988555.289:7744): avc: denied { append } for pid=3486 comm="syz.5.8889" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 817.543075][ T40] audit: type=1400 audit(1771988555.289:7745): avc: denied { open } for pid=3486 comm="syz.5.8889" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 817.798398][ T40] audit: type=1400 audit(1771988555.559:7746): avc: denied { getopt } for pid=3499 comm="syz.5.8893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 817.853265][ T3503] __nla_validate_parse: 3 callbacks suppressed [ 817.853278][ T3503] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8894'. [ 818.336206][ T3411] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 818.426194][ T40] audit: type=1400 audit(1771988556.189:7747): avc: denied { name_bind } for pid=3518 comm="syz.1.8899" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 818.435256][ T40] audit: type=1400 audit(1771988556.199:7748): avc: denied { name_connect } for pid=3518 comm="syz.1.8899" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 818.508007][ T3526] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8902'. [ 818.512134][ T40] audit: type=1400 audit(1771988556.269:7749): avc: denied { map } for pid=3527 comm="syz.0.8903" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 818.513363][ T3526] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8902'. [ 818.536088][ T3528] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 818.549063][ T3530] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8904'. [ 818.588017][ T3532] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 818.590960][ T3532] SELinux: failed to load policy [ 818.642691][ T3553] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8909'. [ 818.721181][ T3566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8912'. [ 819.435328][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 819.622327][ T3585] 9pnet_virtio: no channels available for device syz [ 819.645078][ T10] usb 11-1: new high-speed USB device number 92 using dummy_hcd [ 819.667665][ T3588] netlink: 'syz.0.8920': attribute type 1 has an invalid length. [ 819.670153][ T3588] netlink: 'syz.0.8920': attribute type 3 has an invalid length. [ 819.672720][ T3588] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8920'. [ 819.805101][ T10] usb 11-1: Using ep0 maxpacket: 8 [ 819.810419][ T10] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 819.814439][ T10] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 819.815089][ T3593] netlink: 'syz.0.8921': attribute type 10 has an invalid length. [ 819.818927][ T10] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 819.821098][ T3593] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8921'. [ 819.824772][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.838526][ T10] usb 11-1: config 0 descriptor?? [ 820.050414][ T10] iowarrior 11-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 820.248541][ T3576] iowarrior 11-1:0.0: Error -90 while submitting URB [ 820.252997][ T7402] usb 11-1: USB disconnect, device number 92 [ 820.418679][ T3626] fuse: Bad value for 'fd' [ 820.494619][ T3630] 9pnet_virtio: no channels available for device syz [ 820.856549][ T3645] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8940'. [ 820.864876][ T3645] gtp3: entered promiscuous mode [ 820.954396][ T3649] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8942'. [ 821.101560][ T10] IPVS: starting estimator thread 0... [ 821.103652][ T3660] sctp: [Deprecated]: syz.1.8946 (pid 3660) Use of int in maxseg socket option. [ 821.103652][ T3660] Use struct sctp_assoc_value instead [ 821.112877][ T3659] netlink: 'syz.1.8946': attribute type 10 has an invalid length. [ 821.116149][ T3659] syz_tun: entered promiscuous mode [ 821.186994][ T59] usb 11-1: new high-speed USB device number 93 using dummy_hcd [ 821.205103][ T3661] IPVS: using max 43 ests per chain, 103200 per kthread [ 821.298668][ T3671] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 821.313912][ T3671] team0: Mode changed to "loadbalance" [ 821.327863][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 821.327878][ T40] audit: type=1400 audit(1771988559.089:7764): avc: denied { ioctl } for pid=3670 comm="syz.0.8950" path="socket:[199182]" dev="sockfs" ino=199182 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 821.348193][ T59] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 821.352037][ T59] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 821.356135][ T59] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 821.360091][ T59] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 821.368043][ T59] usb 11-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 821.372223][ T59] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.380372][ T59] usb 11-1: Product: syz [ 821.381790][ T59] usb 11-1: Manufacturer: syz [ 821.383414][ T59] usb 11-1: SerialNumber: syz [ 821.385099][ T40] audit: type=1326 audit(1771988559.139:7765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3675 comm="syz.5.8951" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa687b9c629 code=0x0 [ 821.394535][ T40] audit: type=1400 audit(1771988559.149:7766): avc: denied { mount } for pid=3678 comm="syz.0.8952" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 821.395900][ T3679] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 821.411911][ T59] usb 11-1: config 0 descriptor?? [ 821.437871][ T40] audit: type=1400 audit(1771988559.199:7767): avc: denied { unmount } for pid=545 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 821.500497][ T3687] netlink: 'syz.1.8955': attribute type 1 has an invalid length. [ 821.523818][ T3689] netlink: 'syz.0.8954': attribute type 7 has an invalid length. [ 821.527862][ T3689] netlink: 'syz.0.8954': attribute type 8 has an invalid length. [ 821.528990][ T3687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 821.554554][ T3687] bond0: (slave geneve3): making interface the new active one [ 821.558408][ T3687] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 821.605255][ T3694] fuse: Bad value for 'fd' [ 821.634587][ T59] adutux 11-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 821.648001][ T3698] netlink: 'syz.1.8958': attribute type 11 has an invalid length. [ 821.834015][ T3653] usb 11-1: Couldn't submit interrupt_out_urb -90 [ 821.838089][ T10] usb 11-1: USB disconnect, device number 93 [ 821.993441][ T3713] netlink: 'syz.0.8963': attribute type 1 has an invalid length. [ 821.998205][ T40] audit: type=1400 audit(1771988559.759:7768): avc: denied { bind } for pid=3712 comm="syz.0.8963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 822.043112][ T40] audit: type=1400 audit(1771988559.799:7769): avc: denied { listen } for pid=3718 comm="syz.0.8964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 822.305117][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 822.469863][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 822.474462][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 822.481396][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 822.485315][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.496678][ T3719] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 822.503405][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 822.567849][ T3730] geneve2: entered promiscuous mode [ 822.570142][ T3730] geneve2: entered allmulticast mode [ 822.573840][ T3740] netem: incorrect ge model size [ 822.584779][ T3740] netem: change failed [ 822.731895][ T3719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.736480][ T3719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.753848][ T40] audit: type=1400 audit(1771988560.509:7770): avc: denied { wake_alarm } for pid=3755 comm="syz.1.8978" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 822.761538][ T5991] usb 5-1: USB disconnect, device number 24 [ 823.055257][ T24] usb 11-1: new full-speed USB device number 94 using dummy_hcd [ 823.078024][ T3763] __nla_validate_parse: 11 callbacks suppressed [ 823.078044][ T3763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8981'. [ 823.084784][ T3763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8981'. [ 823.088681][ T3763] netlink: 'syz.1.8981': attribute type 7 has an invalid length. [ 823.092065][ T3763] netlink: 'syz.1.8981': attribute type 13 has an invalid length. [ 823.206557][ T24] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 823.209478][ T24] usb 11-1: config 0 has no interface number 0 [ 823.211619][ T24] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 823.215667][ T24] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 823.219434][ T24] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 823.223048][ T24] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 823.226851][ T24] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 823.231066][ T24] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 823.234124][ T24] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.239274][ T24] usb 11-1: config 0 descriptor?? [ 823.241895][ T3756] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 823.246830][ T24] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 823.328214][ T3769] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 823.330814][ T3769] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 823.333532][ T3769] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 823.336245][ T3769] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 823.341640][ T40] audit: type=1400 audit(1771988561.099:7771): avc: denied { cmd } for pid=3768 comm="syz.0.8983" path="socket:[200900]" dev="sockfs" ino=200900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 823.442120][ T3774] xfrm0 speed is unknown, defaulting to 1000 [ 823.449577][ T3774] wg1 speed is unknown, defaulting to 1000 [ 823.582272][ T3774] lo speed is unknown, defaulting to 1000 [ 823.730318][ T3787] block nbd5: NBD_DISCONNECT [ 823.739179][ T3787] bond0: entered promiscuous mode [ 823.742898][ T3787] bond0: left promiscuous mode [ 823.953204][ T3796] xfrm0 speed is unknown, defaulting to 1000 [ 823.957073][ T3796] wg1 speed is unknown, defaulting to 1000 [ 823.983773][ T40] audit: type=1400 audit(1771988561.739:7772): avc: denied { ioctl } for pid=3798 comm="syz.0.8991" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 823.993224][ T40] audit: type=1400 audit(1771988561.749:7773): avc: denied { read } for pid=3798 comm="syz.0.8991" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 824.017488][ T3799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=3799 comm=syz.0.8991 [ 824.209746][ T3814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8997'. [ 824.305288][ T3796] lo speed is unknown, defaulting to 1000 [ 824.311138][ T3814] netlink: 'syz.0.8997': attribute type 39 has an invalid length. [ 825.433688][ T3829] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.9001'. [ 825.437393][ T3829] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 825.440843][ T3829] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.9001'. [ 825.444062][ T3829] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 825.449687][ T3829] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.9001'. [ 825.453648][ T3829] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 825.457463][ T3829] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.9001'. [ 825.460654][ T3829] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 825.464298][ T3829] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.9001'. [ 825.468212][ T3829] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 825.472025][ T3829] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.9001'. [ 825.475488][ T3829] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 825.479244][ T3829] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.9001'. [ 825.482290][ T3829] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 825.486087][ T3829] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 825.490434][ T3829] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 825.728167][ T3840] FAT-fs (sr0): unable to read boot sector [ 825.841160][ T6172] usb 11-1: USB disconnect, device number 94 [ 825.852187][ T6172] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 826.009196][ T3855] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 826.338636][T24010] Bluetooth: hci9: unexpected event 0x2f length: 509 > 260 [ 826.408318][T24010] Bluetooth: hci9: Unknown advertising packet type: 0x70 [ 826.411528][T24010] Bluetooth: hci9: adv larger than maximum supported [ 826.414536][T24010] Bluetooth: hci9: Malformed LE Event: 0x0d [ 826.462986][ T3870] netlink: 'syz.6.9016': attribute type 1 has an invalid length. [ 826.544723][T24010] Bluetooth: hci7: hcon ffff888038cd4000 sent 1 < count 2 [ 826.548827][T24010] Bluetooth: hci7: hcon ffff888013c18000 sent 1 < count 121 [ 826.552617][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 826.552630][ T40] audit: type=1400 audit(1771988564.309:7779): avc: denied { ioctl } for pid=3874 comm="syz.6.9017" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 ioctlcmd=0x1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 826.830795][ T40] audit: type=1400 audit(1771988564.589:7780): avc: denied { append } for pid=3883 comm="syz.0.9021" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 826.840337][ T3884] usb usb8: usbfs: process 3884 (syz.0.9021) did not claim interface 0 before use [ 826.871173][ T3886] mac80211_hwsim hwsim75 wlan1: entered promiscuous mode [ 826.873566][ T3886] mac80211_hwsim hwsim75 wlan1: left allmulticast mode [ 826.889457][ T3886] net_ratelimit: 56 callbacks suppressed [ 826.889471][ T3886] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 826.895189][ T59] usb 11-1: new high-speed USB device number 95 using dummy_hcd [ 826.903120][ T3886] netlink: 'syz.0.9022': attribute type 10 has an invalid length. [ 826.908717][ T3886] mac80211_hwsim hwsim75 wlan1: left promiscuous mode [ 827.046354][ T59] usb 11-1: Using ep0 maxpacket: 32 [ 827.049432][ T59] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 827.053225][ T59] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.055057][ T40] audit: type=1400 audit(1771988564.809:7781): avc: denied { accept } for pid=3894 comm="syz.0.9026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 827.056623][ T59] usb 11-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 827.075117][ T59] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.083965][ T59] usb 11-1: config 0 descriptor?? [ 827.202447][ T40] audit: type=1400 audit(1771988564.959:7782): avc: denied { write } for pid=3905 comm="syz.1.9030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 827.279766][ T3915] 9pnet_virtio: no channels available for device syz [ 827.301009][ T3882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.311301][ T3882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.335907][ T59] usbhid 11-1:0.0: can't add hid device: -71 [ 827.338388][ T59] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 827.345739][ T59] usb 11-1: USB disconnect, device number 95 [ 827.480347][ T3938] mac80211_hwsim hwsim77 wlan0: entered promiscuous mode [ 827.480659][ T3934] 9p: Could not find request transport: virto [ 827.547065][ T40] audit: type=1400 audit(1771988565.309:7783): avc: denied { write } for pid=3946 comm="syz.1.9043" path="socket:[200407]" dev="sockfs" ino=200407 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 827.677341][ T59] usb 11-1: new high-speed USB device number 96 using dummy_hcd [ 827.825951][ T59] usb 11-1: Using ep0 maxpacket: 8 [ 827.832011][ T59] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 827.835800][ T59] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.848487][ T59] pvrusb2: Hardware description: Terratec Grabster AV400 [ 827.851240][ T59] pvrusb2: ********** [ 827.852853][ T59] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 827.860313][ T3971] xfrm0 speed is unknown, defaulting to 1000 [ 827.862953][ T3971] wg1 speed is unknown, defaulting to 1000 [ 827.865079][ T59] pvrusb2: Important functionality might not be entirely working. [ 827.868214][ T59] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 827.872611][ T59] pvrusb2: ********** [ 827.938716][ T3971] lo speed is unknown, defaulting to 1000 [ 828.066182][ T3921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.070066][ T3921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.074424][ T2486] pvrusb2: Invalid write control endpoint [ 828.131967][ T2486] pvrusb2: Invalid write control endpoint [ 828.134428][ T2486] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 828.140047][ T2486] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 828.143304][ T2486] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 828.148079][ T2486] pvrusb2: Device being rendered inoperable [ 828.151064][ T2486] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 828.154079][ T2486] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 828.159746][ T2486] pvrusb2: Attached sub-driver cx25840 [ 828.162295][ T2486] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 828.168901][ T2486] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 828.274942][ T3995] syz.0.9053: vmalloc error: size 4183572480, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset= [ 828.277614][ T3921] pvrusb2: Attempted to execute control transfer when device not ok [ 828.284565][ T3995] /,mems_allowed=0-1 [ 828.286581][ T3995] CPU: 3 UID: 0 PID: 3995 Comm: syz.0.9053 Tainted: G L syzkaller #0 PREEMPT(full) [ 828.286599][ T3995] Tainted: [L]=SOFTLOCKUP [ 828.286603][ T3995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 828.286611][ T3995] Call Trace: [ 828.286644][ T3995] [ 828.286649][ T3995] dump_stack_lvl+0x100/0x190 [ 828.286844][ T3995] warn_alloc.cold+0x95/0x1c1 [ 828.286907][ T3995] ? __pfx_warn_alloc+0x10/0x10 [ 828.286966][ T3995] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 828.287117][ T3995] ? lockdep_hardirqs_on+0x78/0x100 [ 828.287129][ T3995] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 828.287151][ T3995] ? kasan_save_stack+0x3f/0x50 [ 828.287188][ T3995] ? kasan_save_stack+0x30/0x50 [ 828.287203][ T3995] ? kasan_save_track+0x14/0x30 [ 828.287223][ T3995] ? vb2_vmalloc_alloc+0x135/0x410 [ 828.287339][ T3995] __vmalloc_node_range_noprof+0x1252/0x1530 [ 828.287352][ T3995] ? __x64_sys_ioctl+0x18e/0x210 [ 828.287369][ T3995] ? do_syscall_64+0x106/0xf80 [ 828.287380][ T3995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.287396][ T3995] ? vb2_vmalloc_alloc+0x135/0x410 [ 828.287417][ T3995] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 828.287438][ T3995] ? vb2_vmalloc_alloc+0x135/0x410 [ 828.287452][ T3995] vmalloc_user_noprof+0x9e/0xe0 [ 828.287465][ T3995] ? vb2_vmalloc_alloc+0x135/0x410 [ 828.287479][ T3995] vb2_vmalloc_alloc+0x135/0x410 [ 828.287493][ T3995] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 828.287508][ T3995] __vb2_queue_alloc+0x8d5/0x1160 [ 828.287564][ T3995] vb2_core_create_bufs+0x5fa/0xa30 [ 828.287584][ T3995] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 828.287602][ T3995] ? lock_acquire+0x1cf/0x380 [ 828.287649][ T3995] vb2_create_bufs+0x40c/0x830 [ 828.287664][ T3995] ? __pfx_vb2_create_bufs+0x10/0x10 [ 828.287677][ T3995] ? __video_do_ioctl+0x43e/0xdc0 [ 828.287709][ T3995] ? v4l_sanitize_colorspace+0x220/0x410 [ 828.287727][ T3995] vb2_ioctl_create_bufs+0x244/0x3e0 [ 828.287741][ T3995] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 828.287760][ T3995] vidioc_create_bufs+0x7d/0xf0 [ 828.287823][ T3995] v4l_create_bufs+0x17d/0x270 [ 828.287842][ T3995] __video_do_ioctl+0xaf8/0xdc0 [ 828.287856][ T3995] ? __might_fault+0xc5/0x140 [ 828.287871][ T3995] ? __pfx___video_do_ioctl+0x10/0x10 [ 828.287889][ T3995] video_usercopy+0x47a/0x1740 [ 828.287902][ T3995] ? __pfx___video_do_ioctl+0x10/0x10 [ 828.287919][ T3995] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 828.288053][ T3995] ? __pfx_video_usercopy+0x10/0x10 [ 828.288075][ T3995] v4l2_ioctl+0x1bd/0x250 [ 828.288087][ T3995] ? __pfx_v4l2_ioctl+0x10/0x10 [ 828.288100][ T3995] __x64_sys_ioctl+0x18e/0x210 [ 828.288118][ T3995] do_syscall_64+0x106/0xf80 [ 828.288130][ T3995] ? clear_bhb_loop+0x40/0x90 [ 828.288144][ T3995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.288156][ T3995] RIP: 0033:0x7f8d8459c629 [ 828.288166][ T3995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.288178][ T3995] RSP: 002b:00007f8d85520028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 828.288209][ T3995] RAX: ffffffffffffffda RBX: 00007f8d84816090 RCX: 00007f8d8459c629 [ 828.288220][ T3995] RDX: 0000200000000000 RSI: 00000000c100565c RDI: 0000000000000009 [ 828.288227][ T3995] RBP: 00007f8d84632b39 R08: 0000000000000000 R09: 0000000000000000 [ 828.288234][ T3995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 828.288240][ T3995] R13: 00007f8d84816128 R14: 00007f8d84816090 R15: 00007ffea6a8b018 [ 828.288255][ T3995] [ 828.288259][ T3995] Mem-Info: [ 828.293669][ T3990] SELinux: failed to load policy [ 828.301255][ T59] usb 11-1: USB disconnect, device number 96 [ 828.302308][ T3995] active_anon:57072 inactive_anon:19968 isolated_anon:0 [ 828.302308][ T3995] active_file:4776 inactive_file:13404 isolated_file:0 [ 828.302308][ T3995] unevictable:1768 dirty:168 writeback:0 [ 828.302308][ T3995] slab_reclaimable:10292 slab_unreclaimable:111916 [ 828.302308][ T3995] mapped:55982 shmem:68195 pagetables:6882 [ 828.302308][ T3995] sec_pagetables:328 bounce:0 [ 828.302308][ T3995] kernel_misc_reclaimable:0 [ 828.302308][ T3995] free:312272 free_pcp:4122 free_cma:0 [ 828.307373][ T3996] netlink: 'syz.1.9055': attribute type 39 has an invalid length. [ 828.431325][ T3995] Node 0 active_anon:197084kB inactive_anon:80112kB active_file:2004kB inactive_file:52156kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:63732kB dirty:668kB writeback:0kB shmem:241180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:20096kB pagetables:24828kB sec_pagetables:1308kB all_unreclaimable? no Balloon:0kB [ 828.443270][ T3995] Node 1 active_anon:51740kB inactive_anon:0kB active_file:17632kB inactive_file:168kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:176564kB dirty:4kB writeback:0kB shmem:51192kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:224kB pagetables:2700kB sec_pagetables:4kB all_unreclaimable? no Balloon:0kB [ 828.454661][ T3995] Node 0 DMA free:5380kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1104kB inactive_anon:32kB active_file:116kB inactive_file:1476kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:208kB local_pcp:8kB free_cma:0kB [ 828.464975][ T3995] lowmem_reserve[]: 0 1231 1231 1231 1231 [ 828.479101][ T3995] Node 0 DMA32 free:38232kB boost:0kB min:27476kB low:34344kB high:41212kB reserved_highatomic:0KB free_highatomic:0KB active_anon:196020kB inactive_anon:80152kB active_file:1888kB inactive_file:49820kB unevictable:3536kB writepending:668kB zspages:20kB present:2080628kB managed:1260988kB mlocked:0kB bounce:0kB free_pcp:4128kB local_pcp:332kB free_cma:0kB [ 828.493695][ T3995] lowmem_reserve[]: 0 0 0 0 0 [ 828.496348][ T3995] Node 1 Normal free:1176956kB boost:0kB min:39760kB low:49700kB high:59640kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53972kB inactive_anon:0kB active_file:17632kB inactive_file:168kB unevictable:3536kB writepending:4kB zspages:15552kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:19000kB local_pcp:892kB free_cma:0kB [ 828.510453][ T3995] lowmem_reserve[]: 0 0 0 0 0 [ 828.512473][ T3995] Node 0 DMA: 14*4kB (U) 28*8kB (UM) 22*16kB (UM) 20*32kB (UM) 20*64kB (UM) 8*128kB (U) 1*256kB (M) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 5368kB [ 828.530725][ T3995] Node 0 DMA32: 485*4kB (UM) 200*8kB (UM) 610*16kB (UM) 400*32kB (UME) 191*64kB (UME) 34*128kB (UE) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 42676kB [ 828.537635][ T3995] Node 1 Normal: 5*4kB (UE) 165*8kB (UE) 666*16kB (U) 555*32kB (UME) 568*64kB (UME) 479*128kB (UE) 421*256kB (UE) 295*512kB (U) 174*1024kB (UME) 19*2048kB (UM) 140*4096kB (UM) = 1176764kB [ 828.544719][ T3995] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 828.547849][ T3995] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 828.550723][ T3995] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 828.553735][ T3995] Node 1 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 828.556892][ T3995] 89249 total pagecache pages [ 828.558377][ T3995] 2592 pages in swap cache [ 828.559823][ T3995] Free swap = 0kB [ 828.561156][ T3995] Total swap = 124996kB [ 828.562682][ T3995] 1048443 pages RAM [ 828.564276][ T3995] 0 pages HighMem/MovableOnly [ 828.566319][ T3995] 283885 pages reserved [ 828.567631][ T3995] 0 pages cma reserved [ 828.810768][ T4002] __nla_validate_parse: 61 callbacks suppressed [ 828.810787][ T4002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9057'. [ 828.876197][ T4017] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 828.880215][ T4016] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nbd0": -EINTR [ 828.997214][ T4029] program syz.6.9065 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 829.020324][ T4029] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9065'. [ 829.140997][ T40] audit: type=1400 audit(1771988566.899:7784): avc: denied { getopt } for pid=4040 comm="syz.6.9070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 829.195662][ T40] audit: type=1400 audit(1771988566.919:7785): avc: denied { create } for pid=4040 comm="syz.6.9070" name="#12d" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 829.202938][ T40] audit: type=1400 audit(1771988566.919:7786): avc: denied { link } for pid=4040 comm="syz.6.9070" name="#12d" dev="tmpfs" ino=620 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 829.206661][ T4043] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9071'. [ 829.206674][ T4044] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9071'. [ 829.211661][ T40] audit: type=1400 audit(1771988566.919:7787): avc: denied { rename } for pid=4040 comm="syz.6.9070" name="#12e" dev="tmpfs" ino=620 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 829.238687][ T4046] binder: BINDER_SET_CONTEXT_MGR already set [ 829.241982][ T4046] binder: 4045:4046 ioctl 4018620d 200000000200 returned -16 [ 829.265173][ T4032] nbd0: detected capacity change from 0 to 64 [ 829.376446][ T5284] Bluetooth: hci6: unexpected event for opcode 0x2006 [ 829.395120][ T4027] nbd2: detected capacity change from 0 to 63 [ 829.401606][ T5932] block nbd2: Receive control failed (result -104) [ 829.401875][T24010] block nbd0: Receive control failed (result -104) [ 829.483762][ T4062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9075'. [ 829.487083][ T4062] team0: Device is already in use. [ 829.563171][ T4065] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9076'. [ 829.583079][ T4070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9078'. [ 829.689689][ T4080] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9081'. [ 829.693606][ T4080] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9081'. [ 829.700538][ T4082] sctp: [Deprecated]: syz.1.9082 (pid 4082) Use of int in maxseg socket option. [ 829.700538][ T4082] Use struct sctp_assoc_value instead [ 829.776560][ T4091] netlink: 'syz.1.9085': attribute type 10 has an invalid length. [ 829.935276][ T59] usb 10-1: new high-speed USB device number 89 using dummy_hcd [ 830.071014][ T4113] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9093'. [ 830.085119][ T59] usb 10-1: Using ep0 maxpacket: 16 [ 830.090323][ T59] usb 10-1: config index 0 descriptor too short (expected 9, got 0) [ 830.094125][ T59] usb 10-1: can't read configurations, error -22 [ 830.152626][ T4127] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 830.225469][ T59] usb 10-1: new high-speed USB device number 90 using dummy_hcd [ 830.374914][ T4149] FAT-fs (sr0): unable to read boot sector [ 830.376121][ T59] usb 10-1: Using ep0 maxpacket: 16 [ 830.387444][ T59] usb 10-1: config index 0 descriptor too short (expected 9, got 0) [ 830.390968][ T59] usb 10-1: can't read configurations, error -22 [ 830.394118][ T59] usb usb10-port1: attempt power cycle [ 830.486732][T24010] Bluetooth: hci8: hcon ffff8880442b4000 sent 1 < count 4 [ 830.489855][T24010] Bluetooth: hci8: hcon ffff888013558000 sent 1 < count 9 [ 830.493051][T24010] Bluetooth: hci8: hcon ffff888013558000 sent 0 < count 65535 [ 830.534426][T24010] Bluetooth: hci8: hcon ffff888013558000 sent 0 < count 9 [ 830.537896][T24010] Bluetooth: hci8: hcon ffff8880442b4000 sent 0 < count 8 [ 830.542552][T24010] Bluetooth: hci8: hcon ffff888013558000 sent 0 < count 4 [ 830.545749][T24010] Bluetooth: hci8: hcon ffff8880442b4000 sent 0 < count 3 [ 830.548806][T24010] Bluetooth: hci8: hcon ffff8880442b4000 sent 0 < count 129 [ 830.551880][T24010] Bluetooth: hci8: hcon ffff888013558000 sent 0 < count 2 [ 830.632525][ T4173] No such timeout policy "syz1" [ 830.755302][ T59] usb 10-1: new high-speed USB device number 91 using dummy_hcd [ 830.760880][ T4187] netlink: 'syz.0.9103': attribute type 7 has an invalid length. [ 830.775762][ T59] usb 10-1: Using ep0 maxpacket: 16 [ 830.787984][ T59] usb 10-1: config index 0 descriptor too short (expected 9, got 0) [ 830.790683][ T59] usb 10-1: can't read configurations, error -22 [ 830.916057][ T59] usb 10-1: new high-speed USB device number 92 using dummy_hcd [ 830.935885][ T59] usb 10-1: Using ep0 maxpacket: 16 [ 830.946813][ T59] usb 10-1: config index 0 descriptor too short (expected 9, got 0) [ 830.949443][ T59] usb 10-1: can't read configurations, error -22 [ 830.951865][ T59] usb usb10-port1: unable to enumerate USB device [ 830.986019][ T40] audit: type=1400 audit(1771988568.749:7788): avc: denied { nlmsg_write } for pid=4213 comm="syz.6.9109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 831.138455][ T4220] mkiss: ax0: crc mode is auto. [ 831.410929][ T4229] netlink: 'syz.6.9114': attribute type 29 has an invalid length. [ 831.413502][ T4229] netlink: 'syz.6.9114': attribute type 3 has an invalid length. [ 831.587435][ T4235] tmpfs: Bad value for 'mpol' [ 831.769998][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 831.770013][ T40] audit: type=1400 audit(1771988569.529:7792): avc: denied { map } for pid=4245 comm="syz.0.9120" path="/dev/video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 831.821208][ T4248] SELinux: Context system_u:object_r:tmpfs_t:s0 is not valid (left unmapped). [ 831.827477][ T40] audit: type=1400 audit(1771988569.589:7793): avc: denied { relabelto } for pid=4247 comm="syz.0.9121" name="file0" dev="tmpfs" ino=1587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tmpfs_t:s0" [ 831.836114][ T40] audit: type=1400 audit(1771988569.589:7794): avc: denied { associate } for pid=4247 comm="syz.0.9121" name="file0" dev="tmpfs" ino=1587 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tmpfs_t:s0" [ 831.851161][ T40] audit: type=1400 audit(1771988569.609:7795): avc: denied { unlink } for pid=545 comm="syz-executor" name="file0" dev="tmpfs" ino=1587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tmpfs_t:s0" [ 831.904672][ T4252] xfrm0 speed is unknown, defaulting to 1000 [ 831.908127][ T4252] wg1 speed is unknown, defaulting to 1000 [ 832.009589][ T4252] lo speed is unknown, defaulting to 1000 [ 832.232962][ T4264] random: crng reseeded on system resumption [ 832.253223][ T4264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4264 comm=syz.6.9125 [ 832.263662][ T40] audit: type=1400 audit(1771988570.009:7796): avc: denied { ioctl } for pid=4263 comm="syz.6.9125" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 832.698871][ T4287] 9pnet_virtio: no channels available for device syz [ 832.748619][ T4292] fuse: Unknown parameter '000000000000000001720x0000000000000003' [ 832.867263][ T4311] hsr_slave_0: left promiscuous mode [ 832.869842][ T4311] hsr_slave_1: left promiscuous mode [ 834.799358][ T2169] block nbd0: Connection timed out, retrying (0/1 alive) [ 834.804275][ T2169] block nbd0: Dead connection, failed to find a fallback [ 834.807736][ T2169] block nbd0: shutting down sockets [ 834.810250][ T2169] blk_print_req_error: 25 callbacks suppressed [ 834.810263][ T2169] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 834.816750][ T2169] buffer_io_error: 25 callbacks suppressed [ 834.816763][ T2169] Buffer I/O error on dev nbd0, logical block 0, async page read [ 834.824557][ T1306] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 834.828731][ T1306] Buffer I/O error on dev nbd0, logical block 0, async page read [ 834.831872][ T1306] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 834.834935][ T1306] Buffer I/O error on dev nbd0, logical block 0, async page read [ 834.837778][ T1306] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 834.840788][ T1306] Buffer I/O error on dev nbd0, logical block 0, async page read [ 834.843236][ T1306] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 834.846411][ T1306] Buffer I/O error on dev nbd0, logical block 0, async page read [ 834.848920][ T1306] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 834.851912][ T1306] Buffer I/O error on dev nbd0, logical block 0, async page read [ 834.854385][ T1306] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 834.857786][ T1306] Buffer I/O error on dev nbd0, logical block 0, async page read [ 834.860367][ T1306] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 834.863433][ T1306] Buffer I/O error on dev nbd0, logical block 0, async page read [ 834.866040][ T1306] ldm_validate_partition_table(): Disk read failed. [ 834.868238][ T1306] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 834.871301][ T1306] Buffer I/O error on dev nbd0, logical block 0, async page read [ 834.873845][ T1306] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 834.876946][ T1306] Buffer I/O error on dev nbd0, logical block 0, async page read [ 834.879529][ T1306] Dev nbd0: unable to read RDB block 0 [ 834.881511][ T1306] nbd0: unable to read partition table [ 834.889378][ T1306] ldm_validate_partition_table(): Disk read failed. [ 834.892416][ T1306] Dev nbd0: unable to read RDB block 0 [ 834.894904][ T1306] nbd0: unable to read partition table [ 835.752725][ T4292] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 835.930796][ T4346] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=58388 sclass=netlink_tcpdiag_socket pid=4346 comm=syz.1.9143 [ 836.066191][ T4362] __nla_validate_parse: 76 callbacks suppressed [ 836.066203][ T4362] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9151'. [ 836.111810][ T4369] openvswitch: netlink: IP tunnel dst address not specified [ 836.141452][ T40] audit: type=1400 audit(1771988573.899:7797): avc: denied { ioctl } for pid=4361 comm="syz.5.9152" path="socket:[203968]" dev="sockfs" ino=203968 ioctlcmd=0x583a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 836.144001][ T4372] netlink: 'syz.0.9154': attribute type 322 has an invalid length. [ 836.150141][ T40] audit: type=1401 audit(1771988573.899:7798): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 836.254629][ T40] audit: type=1400 audit(1771988574.009:7799): avc: denied { ioctl } for pid=4383 comm="syz.5.9158" path="socket:[202933]" dev="sockfs" ino=202933 ioctlcmd=0x942c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 836.302483][ T4386] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.9159'. [ 836.380953][ T4391] isofs_fill_super: bread failed, dev=sr0, iso_blknum=16, block=16 [ 836.477046][ T4397] fuse: Unknown parameter '0x000020000000140000000000000000000000' [ 836.513610][ T4403] openvswitch: netlink: Key type 51 is out of range max 32 [ 836.522490][ T4403] netlink: 'syz.1.9164': attribute type 10 has an invalid length. [ 836.566537][ T4409] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 836.692379][ T40] audit: type=1326 audit(1771988574.449:7800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4415 comm="syz.1.9170" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97c6b9c629 code=0x0 [ 836.763438][ T4420] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 836.821236][ T4426] autofs: Bad value for 'fd' [ 836.913600][ T40] audit: type=1400 audit(1771988574.669:7801): avc: denied { write } for pid=4432 comm="syz.6.9175" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 836.930518][ T4434] 9pnet_virtio: no channels available for device syz [ 836.978046][ T4442] dlm: non-version read from control device 0 [ 837.021421][ T4449] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 837.052488][ T40] audit: type=1400 audit(1771988574.809:7802): avc: denied { connect } for pid=4450 comm="syz.6.9181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 837.090923][ T4456] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 837.094599][ T4456] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 837.130179][ T4456] bond0: (slave nr0): Error: Device can not be enslaved while up [ 837.130181][ T40] audit: type=1400 audit(1771988574.889:7803): avc: denied { ioctl } for pid=4455 comm="syz.6.9182" path="socket:[203142]" dev="sockfs" ino=203142 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 837.152732][ T40] audit: type=1400 audit(1771988574.909:7804): avc: denied { unmount } for pid=2182 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 837.289747][ T4477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9189'. [ 837.323179][ T4474] F2FS-fs (nbd6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 837.328021][ T4474] F2FS-fs (nbd6): Can't find valid F2FS filesystem in 1th superblock [ 837.330705][ T4474] F2FS-fs (nbd6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 837.333381][ T4474] F2FS-fs (nbd6): Can't find valid F2FS filesystem in 2th superblock [ 837.376548][ T40] audit: type=1400 audit(1771988575.139:7805): avc: denied { setattr } for pid=4482 comm="syz.5.9192" path="socket:[204831]" dev="sockfs" ino=204831 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 837.395295][ T40] audit: type=1400 audit(1771988575.139:7806): avc: denied { create } for pid=4484 comm="syz.6.9193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 837.404874][ T40] audit: type=1400 audit(1771988575.149:7807): avc: denied { getopt } for pid=4484 comm="syz.6.9193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 837.412795][ T40] audit: type=1400 audit(1771988575.149:7808): avc: denied { ioctl } for pid=4484 comm="syz.6.9193" path="socket:[204318]" dev="sockfs" ino=204318 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 837.425307][ T40] audit: type=1400 audit(1771988575.149:7809): avc: denied { setopt } for pid=4484 comm="syz.6.9193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 837.445403][ T5605] block nbd2: Possible stuck request ffff888029610000: control (read@0,1024B). Runtime 8 seconds [ 837.451100][ T5605] block nbd2: Possible stuck request ffff888029610200: control (read@1024,1024B). Runtime 8 seconds [ 837.455265][ T5605] block nbd2: Possible stuck request ffff888029610400: control (read@2048,1024B). Runtime 8 seconds [ 837.459567][ T5605] block nbd2: Possible stuck request ffff888029610600: control (read@3072,1024B). Runtime 8 seconds [ 837.473172][ T4487] ntfs3(sr0): try to read out of volume at offset 0x0 [ 837.669459][ T4504] openvswitch: netlink: Flow actions attr not present in new flow. [ 837.672308][ T40] audit: type=1400 audit(1771988575.429:7810): avc: denied { setopt } for pid=4503 comm="syz.5.9200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 837.742739][ T4516] 9p: Unknown uid 00000000004294967295 [ 837.799842][T24010] Bluetooth: hci6: link tx timeout [ 837.802229][T24010] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 837.808117][T24010] Bluetooth: hci6: link tx timeout [ 837.809790][T24010] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 837.889816][ T4536] binder: 4535:4536 ioctl 4b47 200000000100 returned -22 [ 838.023990][ T4553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4553 comm=syz.1.9214 [ 838.030318][ T4553] netlink: 596 bytes leftover after parsing attributes in process `syz.1.9214'. [ 838.132071][ T4562] 9pnet_virtio: no channels available for device syz [ 838.188260][ T4574] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9220'. [ 838.264806][ T4581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4581 comm=syz.6.9222 [ 838.936751][ T4632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9239'. [ 838.943561][ T4632] netlink: 'syz.1.9239': attribute type 1 has an invalid length. [ 838.961874][ T4632] bond5: entered promiscuous mode [ 838.964445][ T4632] 8021q: adding VLAN 0 to HW filter on device bond5 [ 838.972536][ T4632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9239'. [ 838.977760][ T4632] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9239'. [ 838.997296][ T4639] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9242'. [ 839.002998][ T4639] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9242'. [ 839.009102][ T4640] program syz.5.9240 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 839.051371][ T4642] bond6: Removing last arp target with arp_interval on [ 839.238416][ T4661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 839.427364][ T4669] NILFS (nbd6): device size too small [ 839.675564][ T24] usb 11-1: new high-speed USB device number 97 using dummy_hcd [ 839.835277][ T5932] Bluetooth: hci6: command 0x0405 tx timeout [ 839.836299][ T24] usb 11-1: config 6 has an invalid interface number: 38 but max is 1 [ 839.841486][ T24] usb 11-1: config 6 has an invalid interface number: 44 but max is 1 [ 839.844688][ T24] usb 11-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 839.847758][ T24] usb 11-1: config 6 has no interface number 0 [ 839.849863][ T24] usb 11-1: config 6 has no interface number 1 [ 839.857811][ T24] usb 11-1: config 6 interface 44 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 839.861563][ T24] usb 11-1: config 6 interface 44 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 839.865544][ T24] usb 11-1: config 6 interface 44 altsetting 5 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 839.869276][ T24] usb 11-1: config 6 interface 44 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 839.872869][ T24] usb 11-1: config 6 interface 44 altsetting 5 bulk endpoint 0x6 has invalid maxpacket 32 [ 839.876811][ T24] usb 11-1: config 6 interface 38 has no altsetting 0 [ 839.879202][ T24] usb 11-1: config 6 interface 44 has no altsetting 0 [ 839.883643][ T24] usb 11-1: New USB device found, idVendor=0c45, idProduct=60c0, bcdDevice=d1.03 [ 839.888034][ T24] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.891142][ T24] usb 11-1: Product: syz [ 839.892574][ T24] usb 11-1: Manufacturer: 앛⽋섚㟄撡駚⪰䂫╖î¤è‘¯áœ–ꞑꨪ赞ㅷ袲◎甜Ғä©ä›ƒï°½à¹ƒî»½ê攇ƨã˜çŒ†ì™€è««ê¨Žé¯¤èŸµå“Ꙉ䓡٥㎊᚞黶â¦î…†Ì¡ã¹ä„¤ã¿’ä§é«ƒã©·ì¨¤ì’—ì»é‰®é¡¥è–”ê±ì¡²æ±¢å¹´ç‘£ì€íš”ç¯ä‘—嵦ꬠ噥楘뛔獵▮é—帶Ჯ酯Îퟳ嘑å»æª±Ç®í‘®ë¼„ [ 839.902127][ T24] usb 11-1: SerialNumber: syz [ 840.134644][ T24] usbhid 11-1:6.38: couldn't find an input interrupt endpoint [ 840.145599][ T24] usb 11-1: USB disconnect, device number 97 [ 840.813444][ T4739] openvswitch: netlink: Unknown key attributes 2 [ 841.035184][ T5932] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 841.041222][ T5932] Bluetooth: hci7: Injecting HCI hardware error event [ 841.046822][ T5932] Bluetooth: hci7: hardware error 0x00 [ 841.534896][ T4766] program syz.0.9281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 841.913569][ T4781] tmpfs: Bad value for 'mpol' [ 841.915179][ T5284] Bluetooth: hci6: command 0x0405 tx timeout [ 841.981333][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 841.981345][ T40] audit: type=1400 audit(1771988579.737:7821): avc: denied { read } for pid=4791 comm="syz.6.9287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 842.053210][ T4796] __nla_validate_parse: 2 callbacks suppressed [ 842.053229][ T4796] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9290'. [ 842.144903][ T4798] [ 842.145769][ T4798] ====================================================== [ 842.148108][ T4798] WARNING: possible circular locking dependency detected [ 842.150374][ T4798] syzkaller #0 Tainted: G L [ 842.152483][ T4798] ------------------------------------------------------ [ 842.155142][ T4798] syz.5.9291/4798 is trying to acquire lock: [ 842.157057][ T4798] ffff8880403d20a0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 842.159964][ T4798] [ 842.159964][ T4798] but task is already holding lock: [ 842.162389][ T4798] ffff888041b42468 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 842.165151][ T4798] [ 842.165151][ T4798] which lock already depends on the new lock. [ 842.165151][ T4798] [ 842.168515][ T4798] [ 842.168515][ T4798] the existing dependency chain (in reverse order) is: [ 842.171445][ T4798] [ 842.171445][ T4798] -> #3 (&pipe->mutex){+.+.}-{4:4}: [ 842.173875][ T4798] __mutex_lock+0x1a2/0x1b90 [ 842.175766][ T4798] anon_pipe_write+0x163/0x1d40 [ 842.177687][ T4798] __kernel_write_iter+0x6b2/0x920 [ 842.180041][ T4798] __kernel_write+0xf6/0x140 [ 842.182191][ T4798] autofs_notify_daemon+0x50d/0xd90 [ 842.184659][ T4798] autofs_wait+0x10fd/0x1b50 [ 842.186781][ T4798] autofs_mount_wait+0x132/0x3b0 [ 842.189043][ T4798] autofs_d_automount+0x490/0x950 [ 842.191360][ T4798] __traverse_mounts+0x1b9/0x8a0 [ 842.193628][ T4798] step_into_slowpath+0xb7e/0xf90 [ 842.195974][ T4798] path_lookupat+0x58b/0xc40 [ 842.198188][ T4798] filename_lookup+0x202/0x590 [ 842.200465][ T4798] user_path_at+0x3c/0x60 [ 842.202594][ T4798] __x64_sys_mount+0x1fb/0x310 [ 842.204833][ T4798] do_syscall_64+0x106/0xf80 [ 842.207033][ T4798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.209879][ T4798] [ 842.209879][ T4798] -> #2 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 842.213217][ T4798] __mutex_lock+0x1a2/0x1b90 [ 842.215432][ T4798] autofs_notify_daemon+0x4f8/0xd90 [ 842.217852][ T4798] autofs_wait+0x10fd/0x1b50 [ 842.220053][ T4798] autofs_mount_wait+0x132/0x3b0 [ 842.222456][ T4798] autofs_d_automount+0x490/0x950 [ 842.224579][ T4798] __traverse_mounts+0x1b9/0x8a0 [ 842.226644][ T4798] step_into_slowpath+0xb7e/0xf90 [ 842.228773][ T4798] path_lookupat+0x58b/0xc40 [ 842.230895][ T4798] filename_lookup+0x202/0x590 [ 842.233142][ T4798] kern_path+0x37/0x50 [ 842.235075][ T4798] lookup_bdev+0xd8/0x280 [ 842.237132][ T4798] resume_store+0x1d6/0x460 [ 842.239129][ T4798] kobj_attr_store+0x58/0x80 [ 842.241269][ T4798] sysfs_kf_write+0xf2/0x150 [ 842.243452][ T4798] kernfs_fop_write_iter+0x3e0/0x5f0 [ 842.245682][ T4798] vfs_write+0x6ac/0x1070 [ 842.247657][ T4798] ksys_write+0x12a/0x250 [ 842.249674][ T4798] do_syscall_64+0x106/0xf80 [ 842.251783][ T4798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.254294][ T4798] [ 842.254294][ T4798] -> #1 (&of->mutex){+.+.}-{4:4}: [ 842.257383][ T4798] __mutex_lock+0x1a2/0x1b90 [ 842.259585][ T4798] kernfs_seq_start+0x4f/0x2a0 [ 842.261801][ T4798] seq_read_iter+0x2c1/0x1270 [ 842.263976][ T4798] kernfs_fop_read_iter+0x46c/0x610 [ 842.266364][ T4798] copy_splice_read+0x4ba/0xb90 [ 842.268658][ T4798] do_splice_read+0x285/0x370 [ 842.270823][ T4798] splice_direct_to_actor+0x2a1/0xa30 [ 842.273277][ T4798] do_splice_direct+0x174/0x240 [ 842.275556][ T4798] do_sendfile+0xadc/0xe20 [ 842.277067][ T4798] __x64_sys_sendfile64+0x1d8/0x220 [ 842.278832][ T4798] do_syscall_64+0x106/0xf80 [ 842.280678][ T4798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.282775][ T4798] [ 842.282775][ T4798] -> #0 (&p->lock){+.+.}-{4:4}: [ 842.284960][ T4798] __lock_acquire+0x14b8/0x2630 [ 842.286614][ T4798] lock_acquire+0x1cf/0x380 [ 842.288394][ T4798] __mutex_lock+0x1a2/0x1b90 [ 842.290389][ T4798] seq_read_iter+0xe1/0x1270 [ 842.292419][ T4798] proc_reg_read_iter+0x220/0x310 [ 842.294553][ T4798] copy_splice_read+0x4ba/0xb90 [ 842.296393][ T4798] do_splice_read+0x285/0x370 [ 842.298232][ T4798] splice_file_to_pipe+0x82/0x120 [ 842.299974][ T4798] do_sendfile+0x366/0xe20 [ 842.301498][ T4798] __x64_sys_sendfile64+0x1d8/0x220 [ 842.303283][ T4798] do_syscall_64+0x106/0xf80 [ 842.304923][ T4798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.306964][ T4798] [ 842.306964][ T4798] other info that might help us debug this: [ 842.306964][ T4798] [ 842.310172][ T4798] Chain exists of: [ 842.310172][ T4798] &p->lock --> &sbi->pipe_mutex --> &pipe->mutex [ 842.310172][ T4798] [ 842.314104][ T4798] Possible unsafe locking scenario: [ 842.314104][ T4798] [ 842.316492][ T4798] CPU0 CPU1 [ 842.318236][ T4798] ---- ---- [ 842.320014][ T4798] lock(&pipe->mutex); [ 842.321389][ T4798] lock(&sbi->pipe_mutex); [ 842.323684][ T4798] lock(&pipe->mutex); [ 842.325833][ T4798] lock(&p->lock); [ 842.327101][ T4798] [ 842.327101][ T4798] *** DEADLOCK *** [ 842.327101][ T4798] [ 842.329695][ T4798] 1 lock held by syz.5.9291/4798: [ 842.331388][ T4798] #0: ffff888041b42468 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 842.334178][ T4798] [ 842.334178][ T4798] stack backtrace: [ 842.336072][ T4798] CPU: 0 UID: 0 PID: 4798 Comm: syz.5.9291 Tainted: G L syzkaller #0 PREEMPT(full) [ 842.336092][ T4798] Tainted: [L]=SOFTLOCKUP [ 842.336097][ T4798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 842.336104][ T4798] Call Trace: [ 842.336132][ T4798] [ 842.336137][ T4798] dump_stack_lvl+0x100/0x190 [ 842.336182][ T4798] print_circular_bug.cold+0x178/0x1c7 [ 842.336202][ T4798] check_noncircular+0x146/0x160 [ 842.336222][ T4798] __lock_acquire+0x14b8/0x2630 [ 842.336240][ T4798] ? mark_held_locks+0x40/0x70 [ 842.336256][ T4798] lock_acquire+0x1cf/0x380 [ 842.336272][ T4798] ? seq_read_iter+0xe1/0x1270 [ 842.336289][ T4798] ? __pfx___might_resched+0x10/0x10 [ 842.336303][ T4798] __mutex_lock+0x1a2/0x1b90 [ 842.336315][ T4798] ? seq_read_iter+0xe1/0x1270 [ 842.336332][ T4798] ? seq_read_iter+0xe1/0x1270 [ 842.336348][ T4798] ? __pfx___mutex_lock+0x10/0x10 [ 842.336364][ T4798] ? seq_read_iter+0xe1/0x1270 [ 842.336379][ T4798] seq_read_iter+0xe1/0x1270 [ 842.336398][ T4798] proc_reg_read_iter+0x220/0x310 [ 842.336416][ T4798] copy_splice_read+0x4ba/0xb90 [ 842.336428][ T4798] ? __pfx_copy_splice_read+0x10/0x10 [ 842.336441][ T4798] ? __fget_files+0x215/0x3d0 [ 842.336451][ T4798] ? __pfx_copy_splice_read+0x10/0x10 [ 842.336461][ T4798] do_splice_read+0x285/0x370 [ 842.336472][ T4798] splice_file_to_pipe+0x82/0x120 [ 842.336483][ T4798] do_sendfile+0x366/0xe20 [ 842.336501][ T4798] ? __pfx_do_sendfile+0x10/0x10 [ 842.336517][ T4798] ? __pfx___seccomp_filter+0x10/0x10 [ 842.336530][ T4798] __x64_sys_sendfile64+0x1d8/0x220 [ 842.336542][ T4798] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 842.336555][ T4798] do_syscall_64+0x106/0xf80 [ 842.336565][ T4798] ? clear_bhb_loop+0x40/0x90 [ 842.336578][ T4798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.336589][ T4798] RIP: 0033:0x7fa687b9c629 [ 842.336599][ T4798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.336609][ T4798] RSP: 002b:00007fa688a43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 842.336644][ T4798] RAX: ffffffffffffffda RBX: 00007fa687e15fa0 RCX: 00007fa687b9c629 [ 842.336652][ T4798] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 842.336659][ T4798] RBP: 00007fa687c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 842.336667][ T4798] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 842.336675][ T4798] R13: 00007fa687e16038 R14: 00007fa687e15fa0 R15: 00007ffc3dbce2d8 [ 842.336687][ T4798] [ 843.125506][ T5932] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 843.333854][T15982] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 843.338087][T15982] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.400314][T15982] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 843.404882][T15982] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.461306][T15982] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 843.465668][T15982] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.530509][T15982] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 843.534761][T15982] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.972536][T15982] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 843.978856][T15982] bond0 (unregistering): Released all slaves [ 843.983748][T15982] bond1 (unregistering): Released all slaves [ 843.990832][T15982] bond2 (unregistering): (slave batadv1): Releasing active interface [ 843.993246][T15982] batadv1: left promiscuous mode [ 843.995175][T15982] batadv1: left allmulticast mode [ 843.998639][T15982] bond2 (unregistering): Released all slaves [ 844.006421][T15982] bond3 (unregistering): Released all slaves [ 844.013013][T15982] bond4 (unregistering): Released all slaves [ 844.084275][T15982] tipc: Disabling bearer [ 844.086981][T15982] tipc: Left network mode [ 844.398016][T15982] hsr_slave_0: left promiscuous mode [ 844.400371][T15982] hsr_slave_1: left promiscuous mode [ 844.415242][T15982] veth1_macvtap: left promiscuous mode [ 844.417765][T15982] veth0_macvtap: left promiscuous mode [ 844.420243][T15982] veth1_vlan: left promiscuous mode [ 844.422655][T15982] veth0_vlan: left promiscuous mode [ 845.515137][ T5605] block nbd2: Possible stuck request ffff888029610000: control (read@0,1024B). Runtime 16 seconds [ 845.518742][ T5605] block nbd2: Possible stuck request ffff888029610200: control (read@1024,1024B). Runtime 16 seconds [ 845.522218][ T5605] block nbd2: Possible stuck request ffff888029610400: control (read@2048,1024B). Runtime 16 seconds [ 845.525802][ T5605] block nbd2: Possible stuck request ffff888029610600: control (read@3072,1024B). Runtime 16 seconds [ 851.435240][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!