last executing test programs: 3m55.194697029s ago: executing program 32 (id=265): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000c, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000c, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x80015b12, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000080)={0x1, "cc2b20d017bbf2bd1632992e8c5c357cb8505e8dfa0a347a2852e54a325474ca", 0x1, 0x9, 0x20000100, 0x3000000, 0x8}) (async) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000080)={0x1, "cc2b20d017bbf2bd1632992e8c5c357cb8505e8dfa0a347a2852e54a325474ca", 0x1, 0x9, 0x20000100, 0x3000000, 0x8}) futex(&(0x7f00000002c0), 0x8c, 0x0, 0x0, &(0x7f00000000c0), 0x0) remap_file_pages(&(0x7f00000a1000/0x2000)=nil, 0x2000, 0xb, 0xfc20, 0x0) 3m42.37864614s ago: executing program 33 (id=455): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) sendmmsg$inet(r3, &(0x7f000001dac0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x40}}], 0x1, 0x44008004) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) write$nci(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="4a040201400903"], 0x7) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x29, 0xe9, 0x4, 0x0, 0x17, @mcast1, @private1, 0x40, 0x8, 0xd, 0x1}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'veth1_macvtap\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r9], 0x50}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x7800, 0x700, 0x9, 0x800, {{0x45, 0x4, 0x3, 0x8, 0x114, 0x68, 0x0, 0x8, 0x2f, 0x0, @local, @remote, {[@timestamp_prespec={0x44, 0x14, 0x98, 0x3, 0x8, [{@empty}, {@multicast2, 0x4}]}, @rr={0x7, 0xb, 0x8a, [@loopback, @empty]}, @end, @rr={0x7, 0xb, 0x7, [@local, @local]}, @rr={0x7, 0x7, 0x2a, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x4f, 0x2, [{0x6, 0x7, "d6b227d42b"}, {0x2, 0x7, "eb5df9865e"}, {0x7, 0x7, "6e4692d938"}, {0x0, 0x9, "94f6061c646bc1"}, {0x6, 0xa, "077f5f40c1f71b1d"}, {0x5, 0x4, "e89d"}, {0x0, 0x5, "17867d"}, {0x7, 0x4, "f375"}, {0x1, 0x8, "cdfefe4dd4b8"}, {0x2, 0xc, "848c360a46ced254dfa8"}]}, @cipso={0x86, 0x52, 0x3, [{0x0, 0x5, "829806"}, {0x6, 0x8, "da93008d9739"}, {0x0, 0x3, 'H'}, {0x0, 0xb, "3c48724c4d693a32ed"}, {0x6, 0x11, "01999b9c03f8bf99538ee1eb029e7f"}, {0x2, 0x9, "a2433e9a6ea3c1"}, {0x0, 0xc, "65dfe5657f748419f01f"}, {0x5, 0xb, "2e968c1b66066d8246"}]}, @cipso={0x86, 0x2b, 0x2, [{0x6, 0x6, "fdb648b1"}, {0x6, 0x12, "82d82bcd0608188b987880e862d69d72"}, {0x5, 0xd, "7605e15798b7f397e551a7"}]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, r7, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3m24.512834683s ago: executing program 34 (id=786): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x8, 0x1, 0x0, "d2ea61bf62041dae026e9e8203614554307c83d774dfc0fb62602f9a84c3bbe4", 0x32315559}) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x480000}}, './file0\x00'}) mknod(&(0x7f0000000180)='./bus\x00', 0xc000, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) readlinkat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/105, 0x69) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) mount(&(0x7f0000000040)=@filename='./bus\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='romfs\x00', 0x4800, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, &(0x7f00000000c0)={0x50000, 0x0, 0x66b5, r3, 0x0, 0x0}) 2m53.257160503s ago: executing program 4 (id=1276): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1ffffe, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b38b000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef6a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) (async) r3 = dup(r2) read$FUSE(r3, &(0x7f0000003c40)={0x2020}, 0xffffff0a) r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) 2m53.136781367s ago: executing program 4 (id=1277): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_xfrm(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000001300)=@getsadinfo={0x1a8, 0x23, 0x400, 0x70bd2a, 0x25dfdbfb, 0x0, [@srcaddr={0x14, 0xd, @in=@multicast1}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd26, 0xcc}}, @algo_comp={0xea, 0x3, {{'lzs\x00'}, 0x510, "b1cada8e0568023bde2fc3e6db390713fdc63190e105715edd94fb661f54807697515a7ee0e74e8d872a9ffcffa31e3d2e33326def2992104add7dba0b3c662e6302e1fe5cc1a1f2276877d0345ad81a9573fd9178a333049f31fa80b146ce35d7afdb4c0be3796d46875c88e3254b1d17db22a5f98000fe0ce220b500912f999b188a0cb52c7e6ffced426426269ce32f66ca03b6419c27490c58320b7d32698189"}}, @replay_thresh={0x8, 0xb, 0xaa}, @address_filter={0x28, 0x1a, {@in=@loopback, @in6=@private0, 0x2, 0x9, 0x2}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @sec_ctx={0x1f, 0x8, {0x1b, 0x8, 0x0, 0x5, 0x13, "9c67e56ff4eb646ca67f2e8f7d0ef7a62c3cb9"}}, @lifetime_val={0x24, 0x9, {0x1, 0x4, 0x380, 0xf}}]}, 0x1a8}}, 0x4040) (async, rerun: 32) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async, rerun: 32) socket(0xa, 0x6, 0x87) (async, rerun: 32) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12121, 0x0) (async, rerun: 32) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1586dd6003136c00188700fc0200000000000000000000000000fdff0200000000000000000000000000013b"], 0x0) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x20}, [@NHA_ID={0x8, 0x6}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004080) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x801, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0x5016, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) (async) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='binfmt_misc\x00', 0x8000, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x4681) r4 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) (rerun: 32) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x10000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xb}}, 0x0, 0x800000, 0x5, 0xfffffff8, 0x7}, &(0x7f0000000040)=0x98) keyctl$assume_authority(0x10, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmmsg(r6, &(0x7f0000000fc0)=[{{&(0x7f0000000380)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ecb-des3_ede-asm,blake2s-224-arm)\x00'}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000400)="d0d9b735ff3036b9c0a5a0f97f0a28f0c1b881d2db6eb549193cf95b967ee20def23fd6fe3eae3639b1e9b3f5b", 0x2d}], 0x1, &(0x7f00000006c0)=[{0x20, 0x10d, 0x2, "d0b10c6031286bc1e357ee804c269e5a"}, {0x28, 0x0, 0x2, "5ab5db4d33daedbf818a02860e02987938583d"}, {0xb8, 0x116, 0x64, "8cd25dc71261813bd6ab9fa53539eefc2bda82dad02e8f28a7145939ec3f6e9a57d82fcc403cbf5fb6d4429a16967e5501cf982f582639cc6f5ecae4bf93de43bedee71a6d4f0590e4bb992a5bd8e91af74f30c1d3fdc6d2c483bd45580fd826dc1a89751dec5f750228059ec474333a03aa5fa443484c3fb16fdf28ba8d37cedecaf819bd4a16d3a6c914eb7b406e39bd708599cc56f55079fcf23ed211f4df1a"}, {0x68, 0x115, 0x7, "d29b4cdb084daac936be4669774141d8d0b07b8808ae82d69041da6fbfb9be6275ba7369a1d2109c1ade910561f36a5d869acd0b667101683976b23495d9d4959fe6765da22a00094e63e74dfa9d9bf01af2b41f"}, {0x80, 0x111, 0xb, "1499b999d4c3ac19bf9bc9d9c3f2dc67ac4e1c787e7762684c0d61cd878fdc0c74bf584575691fdd28f3867fd0f34790a031eaec5ace8a9ae289978ddfea70dffd5156d2fb6de511985c7e5fd1a126dbfbae2daaf929a35c8e094ae33cbe1b42458749c7320b666a75f1357afd438f"}], 0x1e8}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)="c83c0d68762aeb94cd577507722d39d22953191e3ce765935d6ea546effbdae273f10e6c19b80c0168470342da97bac5a2418d4a5065c3a9945a620fe74623a3b2c54a164e8b26fb7d8f68d2dc84615857fd52d1fdf88e1f53c590d92bef5c4403d4784b5a9641d66bd868ea26c89de51ea60099703073da35d3549fc8", 0x7d}, {&(0x7f0000000600)="24fddc7803ac008af3f8326ffdffa44220ddda6b4317", 0x16}], 0x2, &(0x7f00000008c0)=[{0xf0, 0x20e, 0x3, "77883961cf50e899340027b2c59d4d14e57a58cf1ffa2a5bcd743e517e4916af3383669326c888b9701292e77dbf6776c1f85fcecaad24faddba367c41cc11349c2ad5d3ac7d2cbd98728b5118552f84f5e31e0b3a33aab2b09430d28529c9a5f3efc74d606c668fb0f75af2983c349a5171f7b0106e866e4278494ef799001fd816d132a3b2e26adf8bd184258c5c52b3be97df2bb7ab37afdbc6d199f926831b80264e126a8d5e9acad86a5cb72260135240224f170f1b14cc34e868b00c1999291ab4886e44a150e6bad25e173bfc1ba8b813c0773f34fc8a144a89"}], 0xf0}}, {{&(0x7f0000000a80)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000b00)="c7328c562655ed07f227e9c0b1022354f12a8395e9def93bca09c79bcdc9d9fc476583c47187a559d96d5e11a9c711da42983bcbce57f15c13877bbf8f3a8f09579158201096bb0be88a48edd3a0ac12e4ed1a2eac1aa2373cf88b8e8a1f02675e8d1487c96a4d3de96227313181887762265bb3924ebd52e843f5fd1d8fe1cbd2958e8b6c4cdeddc2a8ca05cd1319702af2472ec9d23f758f31bb2c4e1c49ecc66a14a519e5c9fe4aa0a9e0b1ad1f5584a8", 0xb2}], 0x1, &(0x7f0000001740)=[{0x1010, 0x117, 0xff, "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"}, {0x1010, 0x10, 0xf58d, "6f91b1c7b62e16e9bccbdefa1a2141efa5813ee15b2e307246ff29daff4431d4b122417443ff4b2ba52636f529b2a09f4b0c26bd562bc2acc3c4996c7a249608d2da7ecd6a3eaa7609338919d5a2098c299325311451637002d20edaf8bf9a9bc76dd4f5d49899bafccd0a779c070d887e74809bec5ed032dd5dadcecfecdafebb32d9d3513e41aa287bb4704935855e53ef6bdffc13ceadd62cc1f83f5e7f2965f1692929506f26eaeca56279862700d5df0f0dc26278680904edfff738747930a87a8318ecd640946904b21862265edec772bd6d2618c7997dd59a1d8a411c47bd5b14f656ab6caa0f2e6dca1123683efb0a5068e27152abcdd7860dc5d63f13ca9fbf16166828d673b429a823d1542efc49831f3418df673ae7e7d28a484b08c370a2e9dd2a566ffd1889c995c798300d2b8dda58609820387986232dc119cf8fb691ee54ef977ba8680d4067c8af22c89f6bdcfec97727ed66a8f0447bf6888a7cd941ce3fe34f9b4e7fb88a1f2e0bfb570d890fc727e1f0724941339fd2a19ffeee26d9f36bfe79d0ad7de5dcb4583299f81749339f77aaff8544845ef2279eb3f382136ccc2970475b70918da56acf9500a4f593dd1e0f1705ac0e06230499dcacc9b2f50c15613b93bcba5d417a9fc9de36229316c067245c3add7adc47262544717fc7162c3ec668d4cc5143ffd68f2475bfb79159250fb9d22dea1335656e1b47e9a620ce7aac4a205096938bba02739d9d91edd2f800a6ac386afc5aa61c2235c65e305a7b272d71e54009870f2e658f38c56f0db03a6ee73d1c188a4a80aa930cd46201b93a3a735f9efa5118575100820734862f9cdd546a843740d3905699f2e8854305e781ca32342077c76bd808714085e279764dc3ea5ed0514c709b0dd43b6c4d17e59cfce1d2eadfc85d541ae885b63098e54ad213edae8ed6ff0337c1bf3dd300c4d5284d1088864dd0c745e6846f9f384b401a0b2c54133fc56a993eb090aa2886b30cba9684978535c90b9ae4d369c2300b8097b8187453721a1d77cdbb9174d86e92bf3bcecbb2052158402d9d43ed3605c654f6b6346800b974e4e6a17efe878840f92ebff24472307dc052af24bc79a38294c9c73c053e1a5f74de2556d6aa1808d39649c4cd6489494e8ef8ae2f1545b8b30287c6e32424bb3ba56f7f3b1e05800ba55a13949ae88c045e8030d84048004a9fb2c5f1d86d6869abdea83b59450026bfb3348a57af8ab2d250c02bedb90b127d3de4e76955b532c8b082fb023fe38a838edd7cd94af46d6d5ba5c79e08cabefba17a96594ca90a80015e98a525b29bc310772e42db020039e62a39a8b41aa34399120327119684c9d40aedb704ca393937506b4d4e7a606591801d72c8e6ac8c382496745ba3fe06e34c3970adf05c4b114b0d4c8a635117446691fa1cf2f0b2636d7fa68835c40d560e8a49a79653fa6186ca69a4af07c104b195043397461c3259cff13ce373cc67106050365ee0d6446705e4753df38a9e8d7b33e4f683afde6fe912d5091065ba367598ea1209f6015e560799e473cdfe948ef5f0326a1edac082b0e2d232242dfadc22609897dd2a6dc764750bf9567dd6a8e1057d6b23195a51ad8d75e9e32ccbe7585f9f4c1c054d124df98d7ba2d660bd69ea7c00a30dd85d266c56c8d06e15e002126868b84dbad1e75aceb03e0730fb76fa9037d204e30784dcceea867ceb11ba73e74ec4ba607edb2f83d70aac4d813b7bef28098a83c0065a23b5cdb2a966b96faab9976c0182eb8e4429b4367b328442c1de0bdae84b11834c238eea442b672269027939b03d47ec6fb934ac8e5aca63b2c3a80da14b3402e35f986b2d384911ee2ecbb4b78f99fcd6c846352a416bd0cd17f94a98d91f01ec0aaf1c1365e9c5a432527b91750a6a1536aea8a76d7a5e3e08c02b6a5f107c7dca144bfd1c1735ea602a111f32b22ea325e249e9747fa5f5625f1930abe1c4e9e91fad5480c1ead914b4e7e7bfdbf6db04e1925ce12d1012a2d3e2e87136093533ea21127ec2eaf5225bb6a27346b270b54900475528025c071a7d3e933f4fc3798ee742894077204feb078e3bb60e8ea03a46a7d9cbc686648ba9a2cad391614c878ca750c01f0672b7e7065d0bfbc89011727a486f832da55b11025ace9499c42a13cf205836dd84ee83082a2613848509b824ede081c6ad9c8c3cd84edd71398d3f9a465e959debfbf979ee99af6348f11888a00030be7b67ef4b2cea3dfaddab936f9bee5c2d19284458e4648352044e15ae0d81dbb65695bffa37fd3f2f228dbc32f01511b2386a46f5d303bf843fcec6e10250af7c079383e1106f96a26f8df3a939aadd86cba6c61f14201fb77487ac298764b76e88f223d1f994e50640bf1807f4cb3f1a09a33239f00a1b7c02327faf076ff45414fc1b39525618e595e243dc6ab5c09a3a328745a3084a491af7658f238fbee3436945593cc82cf772cd062dff386b12a26ad9bbf0c4610c0322e74a113b3d1fa97f8f452cca62c499fe26527c5ad7ece6f315e2eab59d44d7cb5a0f461ae86db088d28b8c06f5fe0a01f5cadf60c7cf8a67fc0a1707d2b47be5dbc0d5c14dbea7757eba8049bd6530fb9b7f420fabe955e7687236ba2f66af1327c5f3deaf3a39f3108f6968b0a6e0ee93411630ebde2f9046fc42246df963cf1b17fd54c7d55a460b922ad6e61e1caafcfe2a143edd47bb4b127b0d455fe8a5b734150a78f480163ea03f160d2967919a11124c09e9c0048398db63aa1bb5e8668582530947db350e91496c88e5914d309cc73d59557f251c4deb80f93ec8decbb75c0faa23f95462332767f23368c84be5510e68d2982b50043532a431d80429e75a104b0de684524af2f9f994f62435660cfb305f7a6022038bdf3a170d99457b7b7eb7de076431a822397817d3be0ee450be3b3858b8170d419a95963850a9ce96a5e62c5b340ac7dda9691f3b088d2b80f5c7bf758f7cdcc57b124d76a375e3eec63c504466eac340ca53f490c3e3471d2abc3328bdfb3bb67ded36b09912802197f6987abccc1e4b1f95a686a269617593f2b3d054bff92cda392f1035339cff5ad2ba44370677fdb807230a7c1553227237911dc56e2304c26811787d40a893ed025f7f7fffbb961b92cca9721b579a940542b1222ae19508f0c7b4572f32ec76b960e902062dbd822269cbbb880561399676c9c0737754461f67bb15f1d24a097cf1c5bcfc49991a39e4f0f10b1eb2992b55b118be43550d75fbc776d43dd60050445c95997459a4c5cffa5076af313b18f1118fa9d5b16c83930e384e32730ea17ea29e1153d66e9107633f7ea90701b7899635effa8b3fb56c4223529e66be14713f05d4a8a6273fab4c9cf6f13ec5b223435949d478dd0f2bc0ebd2296206976cbbfb488741ac7bf737a664f1e1e867810077c6e4251ed4108c62623f23c3519a294f0e4043e93f6a2aabb476acaa4327a1ada93d322c1eb73632410931d2ac71852e55d88cb56949000bbe56d87ecc32f0c57b41df0415f69cc48919ac62696088bcb455b77c270d72b0565a462b54011c3415813a03e10b0f82f09d0fd92e178d0861b28d617086f85626031f53f33cf54954d8ad4336eecd57768e71bce1078abfaa07afddf30749f7129c7a2f56cf6a78e385f553e28daec507d2bfdb5f124673c2d03ca4a0eb5c591ea040dce139aaf2a347857a9f6a0c8d26d9ba520f9e0de87fe2f384d3ac91778a5e9a971d8fd161086088e13f4c4591187170f5a4b98775026b0ef0f5e3eacecf22e79d3ff025d2098a22d642b448e175fa97c814c3b50a3ea48d8f3d1019198de334ea83c629a52bd3bb5537b50da08fa23ce8fb888e8c70ea078621af7a1a795f33ed05d52e81690b5579eb1ae3138cdfedcf1746eebce4c76075aa9c990526feac9f1639b448b6e02ff1ab3742a54d56b519e5983923ac133a4226ec8724d6130f476b4cdcfc2b6575f673e80339febaf122b372bbf404ebf44010df60e9af112277ff9329b5a1400fa0a4a75f7829ff1234903fd271a5a10718bcad4936ca690c565228d2b9eb17175c0c5b004d2c68a9bccda7f6a73c3c61bf5f8f5b17acd973e5a8c0b6cb2bd4ef69809b2266b4605febdc7a256bd662044db1399dbb4149ac89e7b648314ab4d89184031c39004331891ce18f3726dff8b3dea6f3c78a7cfb4f51abf8a505cae343fb7f346bb8f3a2495cc3cbfe4ed2fbfb0183520391cd68ee0c3fe1d860e8c817b2e19a4d43dc66cb5ac1d07609aab8d17123c047056ec7555017bdb5a10ae5358637fefc4549c2fd393f89c388faca6f5bd6e2f71bf900f8418746e260df4058f95d1ec92e07e5bcb8f17a31d4b81bdf4073f4c18fd739bd54a3383736e4f00936ada4e9035b748bd88850dd0a59bc36ad1657b5d2702b6636ac74e7f3dfa4e924cb303ad4da433b6ddf31336c797887e305b127514bbc9df9c3f04a7fe98097ae2de7d2a51e9654ec328061d3dbb2e271c99235022f90b6bb46f209f0cbb5e7db5fffa58d01240c9b2d290b018759787de05c3ad9401f13c3c6d3327eab5a981eea331aa044cf0bed5f947887f94fb7ef8df6beca528bbfd92e24d45ed6b33a4746156a7401c30da893b4e4436fd9bdfa9caf6a6f2b79a5bc8094d9012b81fb85b90436419c36dc180622fc5a2f9922459f508bdf7a3446c463e5b496444f01256876719a57e2fb80cf13b6cc686561087477982961f5eb91e772e33d2a3107f9238681a17ca65004435f1cfe975a9aa5cfb2cae8affb8ac58dd006be3a4a686ef0bca50b878910ff6fd020fa2d21cad5acf0064de421af8749db5d99e26fec70e63eb0e1436e6f0fb4b8f436742991760e1696e4c89595e715e721a1e37c578ad042bc34156320f58db898aaf8e471942596ca0e9a5777356ee7152218e465d37e2e89a383fdecbab96e0f6fdf6bb9287a02e0f4132a77cba42bc04c7763cf5212f4ab1e2a3e6739fe99fb3662246473e50156b3218baac3f1c4ff991b015ec016d5b0ada1b596864bb7bab9f9df60a179808eb23deb888711ab28c73e7295a1790b087f81c3900990613386923f5084776b083f0246ee3b62a8749f957f1742a3c1bb748f2d50ad625e7b8ef5fca22aba6b8cef68d2f668c2f90127e3cce0d1a4cbf814abad35c94e50590088aaa53e51e7d89e0c80cb98455230ff3a861b27f3751e0e33a0daa0017bb015b5c1b06064a8cd871b01c21248eceed9267e5f3e1bf819f259536e1e38f3f27b5e1a296de285142c5f7b99cd6975ab784ee1083dc55f6aa452d5c45666a2538e9ba0c76a85a580d55f20f6b0aa04eef8f07719e60f4ca8fe8b6816aa4c05fe9bff5ad499e548f6daafe0f9ae2c078ac7ec4a00c4728a8f58d82d26d7edfcc687f2947e3f1d51aff1ccb4795d5a7e36661392fd4bd59421d28248d8e71b89322116f562239838d65b0a419cbf2e65bf0a3acc87979ae1e00a0210ee82f047ebe478527ab4f20d30e7ee35e9d0423b5fa710f0815c2ff0ac282545eafc8bbe5330c0061280222fab7249f17298af03e79e508acf0eb5c281308008019aacfc1f98659c8e8f9e8c9f80041f32c112e5b8db47bcbbd4e7e5494a2e6b05067265ea8533c1232ff1e6e1c9ede318fbee3eb22dc5c6881a2a87919cb6707b089d8a70d99918b7b42eccac4ec5015c0e32c43c35fe8810ada83687c443ce30ab689f3b622281ee28fda531709321502c916ea7e11756e4a4dba17c0b3ecfd68766c4b282"}, {0x60, 0x114, 0x7, "6295be021fdf6b5767fc6da6f432eeb96e32cb6aed16d2cdba784db58834fdfa147c13dbd6a984e64875174456009a727b9b58299b222f9f406c98f0940195add3e046f0e007e5d612918aa2bbd19c"}, {0x110, 0x1, 0xfffffffa, "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"}, {0x98, 0x10a, 0x3, "15e116b2bf6308ec84bb678ffe902633ec95e984dad49c88057940c46186ba6fd2992867baedc4466538a9275ac8049465f133ab2e0514069232d03f8140ef6496250ed07f35839f59461666eb9bfaf807215f8653a44dd46494b5f7a75b447ee9bc5c6a33e690c5a679bb9c8332a6a61e1cb5bd7966ef47ee44de37c9cddfff2161b34341be"}, {0x20, 0x10a, 0x7ff, "53dd81dcad2304b1b2ef02e0"}, {0x70, 0x112, 0x7fffffff, "ee4dbb8c854d02e03aca6dead6191b68ca703113a7eb5c82d88d74488f428fe06b232ab3bf228290d2b8721c85607c13b170f6674735ed4037cf2af48f2be8fd5bcf3a1a5dd5b71b866d55659ce64b54bef08f52f8bc925143c3fc"}, {0x1010, 0x108, 0x1, "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"}, {0x28, 0x102, 0xc, "7445d3f692f1815faec0f215fa344459a887"}], 0x32f0}}, {{&(0x7f0000000bc0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c40)="068626f030d2fac1e9caacf3625c2a55e2332abace6db103f1e19c4a1e097569a2d64593bee7741e8bd9f4827d116b03837b7abfed39ff37070cebf64d92a4f5ec9c6084114d20206baf2a21e1b2cbc8ff908035c74346c2383b0d87", 0x5c}, {&(0x7f0000000cc0)="8e14bab68a16e575a6fbedb44ddd38e3151948b2ce76c0aa496b658e9f7184479c69da9843640a30cd2885c5bda28fc6e00361c1140fbd5e436af12a9e03d457f29e98ea5bba30cbfcc70a52528b5d7624f7463501714bff9979efc7c4a7e9df7d110153dd25ffa0f92abf6bcab11f218182c41a8997908ebf064df90c0bc54837069789d1a569e02202aa3003d794c11cded798cbdc4c51970be2c87b961f297c8b6a483e9e2806f2bf0bb3d35abec1d06969ad47af507501ff8c19bbf1d809d2f7ce1270659832cbb09366f5fd6efa9bd960e91ddca925b981ac6098567ebe1f4e5e0e8208504fc6b545d292", 0xed}, {&(0x7f0000000dc0)="c9a83a3d8a2a5719b3a1878705ca7ba2dcb864", 0x13}, {&(0x7f0000000e00)="050831dddddc810389c1fdbef3fda13c0c1024b1", 0x14}, {&(0x7f0000000e40)="956b6212e742a996e6a88d341f9534c8864d3d91bbd0c428a84c036ffc505c713a2a786ab79c6fcb7f39f573f4a19848064b4bbf822ffebc3c23dea1501a2503fb19a99e286b9152527cc52a5265ffda96f8918c87111b6b668431f81a29abfdc0499c9b3d8f0e7fd0f0c77cc58b8f3cf2eade2121e1acfd98061af30a6f1594b1437f8aff5867cf96da84a2b0de8c1abfb3e97f5e68a83636b5b08ca018c84d2406d9c4c99bb38d891c1b580073f539c3ab1a1d77c08a2fbbf688618529a6db3ad1648d8d5bc097ddcfbf20eec606081f8fccc8c23e94407a97e738919451d97f2fbf1a50cf2a6d5c2519027e4e7ae961f4", 0xf2}], 0x5}}], 0x4, 0x800) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001700)=@newtfilter={0x24, 0x2c, 0xb08, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x10, 0xfff3}, {}, {0x7, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x20000000) (async) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r8, 0x2, 0x6, @local}, 0x10) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r9, 0x29, 0x3, 0x0, &(0x7f00000001c0)) (async) r10 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x0, 0x40000) ioctl$SNDRV_PCM_IOCTL_PREPARE(r10, 0x4140, 0x0) 2m53.132894882s ago: executing program 4 (id=1279): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wg0\x00'}) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x10000, 0x5fa, 0x8, 0x7, 0x0, [{0x6d, 0x6, 0x3, '\x00', 0xa}, {0x6, 0xb, 0x72}, {0x1, 0xfe, 0x9, '\x00', 0x40}, {0x81, 0x4, 0x8, '\x00', 0x5}, {0xb, 0x6, 0x80, '\x00', 0x8}, {0x0, 0x4, 0x6, '\x00', 0x8}, {0x6, 0x7, 0x8, '\x00', 0xa}, {0x7, 0x7, 0xb, '\x00', 0x9}, {0x2, 0x9, 0x0, '\x00', 0xa}, {0x7, 0x5, 0x0, '\x00', 0x6}, {0xc0, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x1, 0x19, '\x00', 0xff}, {0x1, 0x86, 0xc, '\x00', 0xfb}, {0x5, 0x4f}, {0x4, 0x4, 0x96, '\x00', 0x3}, {0xb, 0x0, 0x7, '\x00', 0x7f}, {0x10, 0x5, 0x1, '\x00', 0x3}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x5, 0x9e, 0xc0, '\x00', 0x86}, {0x3e, 0x4c, 0xb, '\x00', 0x3}, {0x9, 0x1, 0x3, '\x00', 0x1}, {0x3, 0x0, 0x6, '\x00', 0x86}, {0x80, 0x4, 0x4, '\x00', 0xe9}, {0x3, 0x81, 0xdf, '\x00', 0x1}]}}) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x21, 0x0, "a386bcb957f6ee650a88e8065cb3b0852da5b6b12cf609fdffffff0f392be7125c3883ab738100ed0700001400000000de12709700"}, 0xd8) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000740)={"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"}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000000c0)='fd', 0x0, r4) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000000)='fd', 0x0, r4) (async) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x5, 0x40, 0x7, 0x1, 0x1, 0xe, 0x9, 0xfd, 0xa, 0x7f, 0x5, 0x2, 0xf, 0x6, 0x0, 0x9}}) (async) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendmmsg$inet(r0, &(0x7f00000005c0)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000cc0)="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", 0x179}, {&(0x7f0000003380)="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", 0x114}, {&(0x7f0000000c80)="331e8c48b2ab8236fae299aaccebe171a2f9d28c12776d4c6a9fd8f28ae9a98c16964f5ce289f029d188f72f8eced9", 0x2f}], 0x3}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="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", 0x31f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000000c0)="71939b2854be8c442319927625bb62c62e234d2a8598c1e2b07ca9cdfd9d69894243a74d053733a57bf2757792f898a5c42acb3ebdb0400a5bcbdc9b2a8c7f6a6161516dd17e11a412944312065776f70669132419a3e7dbecbf372843fe9d2387769c0c4b89072046e7fb71a04d489b69843301c2035f1c52e8eded16222b057ef2a4994a404a3c9ba6b1f23a65f59bf5b3e0b73b6ee46c7f3268b24d81eca8", 0xa0}], 0x1}}], 0x5, 0x2000c048) 2m52.977000269s ago: executing program 4 (id=1281): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) (async) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) r5 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x22020400) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) (async) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f000000ac40)={0x2020}, 0x2020) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$TUNSETOWNER(r7, 0x400454cc, r8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="000096000a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="000096000a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$nci(r2, &(0x7f00000003c0)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x1, 0x3, 0x6, 0x3, {0x1, [{0x3, 0x1}]}}, 0x6) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x14, r11, 0x200, 0x170bd2b, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x8000) (async) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x14, r11, 0x200, 0x170bd2b, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x8000) 2m52.075223707s ago: executing program 4 (id=1290): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) close(r0) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000380)=@bcast) 2m51.49536794s ago: executing program 4 (id=1304): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r2, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="ddc937981007901a80379c3e0800", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 2m51.438842719s ago: executing program 35 (id=1304): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r2, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="ddc937981007901a80379c3e0800", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 2m16.203248589s ago: executing program 5 (id=2036): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r3 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/155, 0x6210}, {0x0, 0x30}], 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r5, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x36}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4801}, 0x20048004) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r8], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0xb4, r9, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x88, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '/\xdd\\.+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+$+:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10f17bbf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0xb4}}, 0x0) 2m16.134115587s ago: executing program 5 (id=2041): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) (async) r0 = creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000380)="02b2", 0x2}], 0x1, 0x1dad, 0x80) chdir(&(0x7f00000001c0)='./bus\x00') (async) chdir(&(0x7f00000001c0)='./bus\x00') open$dir(&(0x7f0000001640)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x7, 0x3, 0x70, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x40, 0x8, 0x5}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000200)=@framed={{0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x71, 0x11, 0x48}, [@ldst={0x0, 0x0, 0x3, 0x6, 0x9, 0xfffffffffffffff4, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40002}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r1, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000200)=@framed={{0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x71, 0x11, 0x48}, [@ldst={0x0, 0x0, 0x3, 0x6, 0x9, 0xfffffffffffffff4, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40002}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r1, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) 2m16.057979397s ago: executing program 5 (id=2045): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[0x4, 0x2, 0x80, 0x5, 0x6, 0x7a, 0x4232, 0x4000000000000000, 0x5, 0xb0, 0xc, 0x1003, 0x719, 0x4db6, 0x2, 0xfffffdfffffffffd], 0x9000, 0x112800}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x12c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in6=@local}}, &(0x7f0000000000)=0xe8) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}], [{@uid_gt={'uid>', r4}}, {@subj_role={'subj_role', 0x3d, '\x98'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>', r4}}]}) listxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=""/72, 0x48) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000080)=""/17, &(0x7f00000000c0)=0x11) 2m15.809500412s ago: executing program 5 (id=2054): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2c, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2c, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 2m15.710056852s ago: executing program 5 (id=2055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) syz_clone(0x91a0200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)="24ab3f9fadf08a2bff49ec2208104e0c6339b39cda51a6b76683d93f1ad6a9b71cb8184fda55f020976ab9417b4afb12") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001380)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad000008"], 0x125) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x1f, 0x1, 0x0, "8ba95d994d1ec2da0c001800", 0x584e4f53}) ioctl$CDROMREADRAW(r1, 0x5314, &(0x7f0000000540)={0x0, 0x0, 0x98, 0xff, 0x2, 0x7}) futex_waitv(&(0x7f0000001b00)=[{0xfff, &(0x7f0000000340)=0xfffffffffffff697, 0x6}], 0x1, 0x0, 0x0, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2}}, @NFT_MSG_DELFLOWTABLE={0x98, 0x16, 0xa, 0x101, 0xb00, 0x0, {0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}]}]}]}], {0x14, 0x10}}, 0xf0}}, 0x0) 2m15.630785321s ago: executing program 5 (id=2056): syz_emit_ethernet(0xf1e, &(0x7f0000000580)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3e, 0xf10, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @echo={0x8, 0x0, 0x0, 0x6b11, 0x4, "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"}}}}}, 0x0) (fail_nth: 1) 2m15.590946681s ago: executing program 36 (id=2056): syz_emit_ethernet(0xf1e, &(0x7f0000000580)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3e, 0xf10, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @echo={0x8, 0x0, 0x0, 0x6b11, 0x4, "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"}}}}}, 0x0) (fail_nth: 1) 1m58.110119764s ago: executing program 6 (id=2064): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x141a82, 0x12) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}}) sendfile(r1, r0, 0x0, 0x8000fffffffe) 1m58.109372429s ago: executing program 6 (id=2066): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x30, r3, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_deladdrlabel={0x4c, 0x49, 0x1, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x20, 0x0, 0x0, 0xfff}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008090}, 0x20040010) 1m58.106620331s ago: executing program 6 (id=2067): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000000)='8', 0x1}], 0x1) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x1060, 0x1, 0x5, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [{{0x254, 0x1, {{0x1, 0x2}, 0x6, 0x6, 0x9, 0xd8df, 0xc, 'syz1\x00', "266f3c6eb7784a5a28675f2c098d8ff38dd9489717679ae36129691a7ac9ee6d", "bce3582db188d96f3ed2053919827684127be972d0cf794cb19554cd4da4255a", [{0xb, 0xffff, {0x0, 0x1}}, {0x23a1, 0x2a6, {0x1, 0x6}}, {0xe, 0x8, {0x3}}, {0xffff, 0x1, {0x2, 0xffffffe8}}, {0x1, 0x9c96, {0x2, 0x800}}, {0x40, 0x0, {0x0, 0x9}}, {0x6, 0x7868, {0x1, 0x5}}, {0x40, 0x4, {0x2, 0x6}}, {0x4ff, 0x100, {0x2da1a986723f267b, 0x5}}, {0x6, 0x4, {0x0, 0x2}}, {0x7fff, 0xffff, {0x1, 0x8}}, {0xffab, 0x81, {0x3, 0x7}}, {0x400, 0x1f2, {0x2, 0x400}}, {0x4, 0x0, {0x0, 0x7510}}, {0x8000, 0x5, {0x2, 0x7}}, {0x0, 0x9, {0x2, 0xfffffff6}}, {0x6, 0x200, {0x1, 0x167c}}, {0x2, 0x4e3f, {0x3, 0x5}}, {0x3d8, 0x24f5, {0x1, 0x2}}, {0x4, 0x1ff, {0x0, 0x7fff}}, {0x9, 0xac, {0x0, 0x1}}, {0x8, 0x9, {0x2, 0x5}}, {0x0, 0x1ff, {0x2, 0x200}}, {0x40, 0xe38d, {0x2, 0x80000000}}, {0x4, 0xc8, {0x2, 0x8c}}, {0x8, 0x3, {0x3, 0x6}}, {0x200, 0x6, {0x3, 0x8}}, {0x3, 0xb2ca, {0x1, 0x56}}, {0x4, 0xb29, {0x0, 0x2ed5}}, {0x1, 0x8, {0x2, 0xe5e}}, {0x2, 0x9, {0x0, 0x9}}, {0x0, 0x4, {0x2, 0x6}}, {0x1ff, 0x2, {0x2, 0x4}}, {0x894, 0x2, {0x2, 0xe}}, {0x8000, 0x8, {0x3, 0x1}}, {0xca73, 0x9, {0x0, 0x40}}, {0x8, 0xff77, {0x2, 0x401}}, {0xa, 0x1000, {0x0, 0x7}}, {0x9, 0x3, {0x0, 0x2}}, {0x5, 0x8000, {0x0, 0x6}}]}}}, {{0x254, 0x1, {{0x1, 0xdd2}, 0x3, 0x9, 0x3, 0x1, 0xd, 'syz1\x00', "7b6189d0c719cfffbfc16d6ee17825d0068048de488eec2281fd569a67d0e551", "f031667388c2263ebe015417f4ad2a9b9022a6f244ee425bc9bfa48a95858824", [{0x40, 0x1, {0x1, 0x40}}, {0x6, 0x3ff, {0x2, 0x1dc1}}, {0xe, 0x3, {0x3, 0xffff4f33}}, {0x3, 0x2, {0x1, 0x6}}, {0x6, 0x8, {0x0, 0x10}}, {0xf1d, 0x6, {0x0, 0x4}}, {0x7ff, 0x9, {0x2}}, {0xffcb, 0x5, {0x0, 0x2}}, {0xde, 0x6, {0x2, 0xffff}}, {0x1, 0x81, {0x2, 0x5}}, {0x4, 0xefb1}, {0x1, 0x6300, {0x0, 0x3}}, {0x2, 0x7f, {0x2, 0x9}}, {0x3ff, 0x5, {0x3, 0x6}}, {0x49, 0x0, {0x2, 0x4}}, {0x2, 0xb, {0x3, 0xaac}}, {0x3, 0x1000, {0x2, 0x3}}, {0x7, 0x7, {0x0, 0x8000}}, {0x7ff, 0x5, {0x1, 0x8}}, {0xa, 0x4, {0x0, 0x9}}, {0x401, 0x4, {0x0, 0x6}}, {0x3, 0x7, {0x1, 0x8}}, {0x2, 0x8, {0x2}}, {0x2, 0x72, {0x3, 0xffff}}, {0xb7e1, 0x2, {0x1, 0x8}}, {0x5, 0x9, {0x0, 0x100}}, {0x0, 0x1, {0x2, 0x1c}}, {0x4, 0xff, {0x1, 0x7}}, {0x1, 0x7, {0x0, 0x8517}}, {0x2, 0x5, {0x2, 0x8000}}, {0xfff7, 0xfffc, {0x1, 0x5}}, {0x8, 0x3, {0x1, 0x9}}, {0x3, 0x80, {0x3, 0x8}}, {0x8, 0xfb47, {0x1, 0x1}}, {0x9, 0x81, {0x0, 0x5}}, {0x6, 0x6, {0x0, 0x1}}, {0x0, 0x1, {0x2, 0xfffffaf3}}, {0xff, 0x7, {0x0, 0x2a30dd10}}, {0x9e81, 0x5f11, {0x1, 0x5}}, {0x4, 0x8, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{0x1, 0x6}, 0x4, 0x88, 0x8001, 0x2, 0x8, 'syz0\x00', "e69819dc22f2526f67d8336413d5dfd8fa4fd9541cfd154119d70ca7da15bae9", "fbd3608f5d644198470856fd4fe3c0ce10ed4d0d0119b5ddedd91b1f198680d3", [{0x1, 0x5, {0x3, 0x35c}}, {0xc7, 0x73, {0x0, 0x7fffffff}}, {0x2, 0x5, {0x2, 0x4}}, {0x3, 0x1, {0x1, 0x80000000}}, {0x7, 0xbfbf}, {0x40, 0xe018, {0x1, 0x1}}, {0x400, 0x6, {0x0, 0x7}}, {0x3, 0x4, {0x2, 0xd}}, {0x1, 0x82e, {0x0, 0x4}}, {0x7, 0x7fff, {0x3, 0x1c00}}, {0x5, 0x1, {0x0, 0x9}}, {0xfff8, 0x1, {0x2, 0x3}}, {0x7ff, 0x6a4e, {0x0, 0x5f0}}, {0x2, 0x2, {0x1, 0x5c7}}, {0x401, 0x6, {0x0, 0x8}}, {0x0, 0x6, {0x1, 0x4}}, {0x5, 0x1, {0x3, 0x7}}, {0x1, 0xe3, {0x1, 0x1}}, {0x6716, 0x3, {0x3, 0x7ff}}, {0x0, 0x8001, {0x1, 0x1}}, {0x9, 0x7, {0x3, 0x1}}, {0x100, 0x0, {0x2, 0xfffffffd}}, {0x80, 0xfb, {0x0, 0x4}}, {0x0, 0x3, {0x0, 0x1}}, {0x8, 0x5, {0x3, 0xffe00000}}, {0x7, 0x3, {0x2}}, {0x4, 0x6, {0x3, 0x9}}, {0x7, 0x1, {0x1, 0x6}}, {0x539, 0x7fff, {0x2, 0x2}}, {0x7, 0xf932, {0x3, 0x1000}}, {0x4, 0xf, {0x0, 0x6}}, {0x8, 0x2, {0x2, 0x40}}, {0xfff9, 0x2916, {0x1, 0xc8}}, {0x8000, 0x8, {0x3, 0x3}}, {0x35d, 0x800, {0x2, 0x7fff}}, {0xc8, 0x1ff, {0x0, 0x1}}, {0x1ff, 0x79, {0x1, 0x4}}, {0x9, 0x9, {0x3, 0x1}}, {0xfeff, 0xfffe, {0x2, 0x7}}, {0x8a82, 0x1, {0x0, 0x9}}]}}}, {{0x254, 0x1, {{0x0, 0x5}, 0xba, 0xb, 0x5, 0x9d, 0x24, 'syz0\x00', "037de85a6eafdc446379a252b82568aa638cebe3b2ada6059c91cecba48e8987", "0e483cca28ece24e1ac87c48c510f7433c34e6704f6bedf6b5cddfc80ae6ad8d", [{0xbc7, 0x81, {0x3, 0x6}}, {0x501, 0xcdc, {0x2, 0xaab8}}, {0xa3a, 0x2, {0x1, 0x99f}}, {0x4, 0x2f4, {0x0, 0xffffff94}}, {0x1, 0x0, {0x2, 0x9}}, {0x4, 0x9, {0x0, 0xb3bf}}, {0x8, 0x401, {0x3, 0x4}}, {0xaff3, 0x6, {0x1, 0x3}}, {0x3, 0x5, {0x1, 0x5}}, {0xb, 0x3, {0x1, 0x8}}, {0x800, 0x8001, {0x2, 0x80000000}}, {0x8000, 0x8}, {0x9e, 0x401, {0x0, 0x2}}, {0x7ff, 0x800, {0x2, 0x9}}, {0x4, 0x2, {0x2, 0x6}}, {0x1ff, 0x0, {0x2, 0x5}}, {0x2, 0xa4a, {0x0, 0x6}}, {0x4, 0x2, {0x1, 0x6}}, {0xb, 0x2, {0x0, 0x5}}, {0x62, 0x6, {0x2, 0x7}}, {0x3, 0x0, {0x3, 0x1}}, {0x0, 0x8, {0x1, 0x8}}, {0x6, 0x5, {0x0, 0x8}}, {0x1000, 0x400, {0x0, 0x5}}, {0xfff, 0x7ff, {0x3, 0x7}}, {0x1, 0x200, {0x3, 0x4}}, {0x6, 0x2, {0x3, 0xcd78}}, {0x6, 0xd, {0x3}}, {0x0, 0xe, {0x2, 0x8}}, {0x1ff, 0xf36, {0x1, 0x6}}, {0x200, 0x7, {0x1, 0x342617e8}}, {0x10, 0xcc3, {0x0, 0x2}}, {0x6, 0x401, {0x1, 0x4}}, {0x7ff, 0xc0, {0x2, 0x6}}, {0x3, 0x5cd, {0x0, 0x1d0}}, {0x5, 0x1, {0x2, 0xf8e5}}, {0x1ff, 0x4, {0x0, 0x1}}, {0xfc01, 0x101, {0x0, 0xffff}}, {0xd, 0x0, {0x1}}, {0x6d, 0x4, {0x0, 0x5}}]}}}, {{0x254, 0x1, {{0x2, 0xd6f}, 0x6, 0x3d, 0x7a, 0x100, 0x22, 'syz1\x00', "fe834b5f9a39f00230d8de92e150bd2742310df2487ecaa19f2f5555fec79b77", "9ea865f3939890a6fc611a3621ab5ee28ab4626755b0e37b28dcf4a48b7827cc", [{0x4, 0xf4, {0x1, 0x6}}, {0xdaf3, 0x39, {0x0, 0x10001}}, {0x800, 0x7, {0x3, 0x2}}, {0x0, 0x7f, {0x1, 0x2}}, {0x5, 0x4, {0x3, 0x8}}, {0x400, 0x6, {0x0, 0x400}}, {0x2, 0xff7f, {0x3, 0x7fffffff}}, {0x40, 0x5, {0x2, 0x3}}, {0x426, 0x8001, {0x3, 0xffff}}, {0xfffe, 0x1400, {0x1, 0x1}}, {0x7fff, 0xfbff, {0x0, 0x3}}, {0x4, 0xd, {0x1, 0x1c0}}, {0x800, 0xff, {0x0, 0x280000}}, {0x9, 0x6, {0x3, 0x7ff}}, {0x3, 0x8, {0x1, 0x3}}, {0x6, 0x5f81, {0x1, 0x9}}, {0x10, 0x6, {0x3, 0x8}}, {0xe7d, 0x80a8, {0x2, 0x7f}}, {0x5, 0x2, {0x3}}, {0xda2, 0x5, {0x3, 0x8}}, {0x3, 0xffff, {0x0, 0x272}}, {0x5, 0xfffb, {0x3, 0x8}}, {0x0, 0x3, {0x3, 0x1}}, {0x81, 0x9, {0x3, 0x1ff}}, {0x8, 0x8, {0x2, 0xf}}, {0x8001, 0x1, {0x0, 0x1}}, {0xba, 0xf, {0x1, 0x3}}, {0xfff2, 0x9, {0x3, 0x9}}, {0x4, 0x1, {0x1, 0x1d200}}, {0x5, 0x0, {0x0, 0x3}}, {0x2588, 0x4, {0x3, 0x9}}, {0x185, 0x9, {0x2, 0x1}}, {0x4, 0x8, {0x0, 0x2}}, {0x3, 0x7f, {0x1, 0x8}}, {0x7, 0x6, {0x3, 0x8}}, {0x8001, 0x4, {0x1}}, {0x35, 0x8000, {0x2, 0x10000}}, {0x5, 0x101, {0x0, 0x3}}, {0x4, 0x2, {0x0, 0x9}}, {0x7, 0xfffa, {0x2, 0x4}}]}}}, {{0x254, 0x1, {{0x1, 0x6}, 0x2, 0x12, 0x3ff, 0x1, 0x21, 'syz1\x00', "4e081862701d25d882e0017ebf96ee2dc05ce952e4e3310e634f7d29fd30510d", "fe33e0ea8141d17b9e5779a11fc3951bce27baf6d83c3a5bfd25d8b2fc0b9350", [{0x1, 0x0, {0x1, 0x7}}, {0x5, 0x0, {0x2}}, {0x8, 0xfffe, {0x3, 0x43}}, {0x7, 0x2, {0x3, 0xff}}, {0x2, 0x3, {0x1, 0x6e7}}, {0x4, 0x7fff, {0x3, 0x5}}, {0x7f, 0x6, {0x2, 0xbe}}, {0x4, 0x4, {0x2, 0x3}}, {0x8, 0x800, {0x2, 0x4}}, {0x9, 0x3, {0x2, 0x4}}, {0xe82, 0xfb8c, {0x3, 0x4}}, {0xbcb, 0x9, {0x0, 0x7}}, {0x9cde, 0x1, {0x3}}, {0x3, 0x4, {0x1, 0x302}}, {0x101, 0x2, {0x2, 0x1}}, {0x41a, 0xffc0, {0x3, 0x3}}, {0x1, 0x5, {0x3, 0xe96}}, {0xd19d, 0xe, {0x3, 0xfd}}, {0x2, 0x3, {0x1, 0x2}}, {0x7, 0x200, {0x3, 0x7}}, {0x6, 0x4, {0x1, 0x4}}, {0x6, 0x7, {0x2, 0x7fff}}, {0x6, 0x6, {0x3}}, {0x4, 0xb, {0x3, 0x94}}, {0xffff, 0x4, {0x3, 0x8}}, {0x0, 0xff, {0x0, 0x8}}, {0x5, 0x3, {0x2, 0x8001}}, {0x7, 0x9, {0x0, 0x9675}}, {0x9, 0x5, {0x0, 0x3}}, {0x8, 0x3, {0x1, 0xa}}, {0xae, 0x2, {0x3, 0x4}}, {0x4, 0x3, {0x3, 0x2}}, {0x1000, 0x2, {0x2, 0x9}}, {0x3, 0xa9f, {0x0, 0xbf}}, {0xe341, 0x7, {0x3, 0x1}}, {0x8, 0x8001, {0x2, 0x31aa}}, {0x9, 0x5, {0x3, 0xfffff5aa}}, {0x724, 0xfff8, {0x0, 0xffff8001}}, {0x1, 0xf, {0x3, 0xed}}, {0x1, 0x80, {0x3, 0xd3bb}}]}}}, {{0x254, 0x1, {{0x3, 0x3}, 0x2, 0xfe, 0x800, 0x6, 0xc, 'syz1\x00', "10e22bf9d63e921c528199ca68f9bbd4acfa01841e7dd956a15cc948d8880635", "04f3618fdf717071a5d9c99eb0ee2845159d26ff6c25b58b85d8c48856a689a9", [{0x8001, 0x3, {0x0, 0x5}}, {0x2, 0x3, {0x0, 0x3}}, {0x3, 0xbb, {0x2, 0x5}}, {0x7, 0x8, {0x2, 0x8}}, {0xff, 0x0, {0x1, 0x7ff}}, {0x5499, 0x471, {0x0, 0x4}}, {0x60c9, 0x7, {0x1, 0x6}}, {0x0, 0x5, {0x2, 0x7}}, {0x1, 0x5, {0x3, 0xcb7}}, {0x5, 0xc79, {0x2, 0x6}}, {0x7e69, 0xff66, {0x5, 0x9}}, {0x8, 0xffff, {0x2, 0x9}}, {0x80, 0x4, {0x1, 0x6}}, {0xd0b6, 0x7, {0x2, 0x1000}}, {0x100, 0xb6fd, {0x3, 0x9}}, {0x2, 0xc000, {0x2, 0xd}}, {0xba, 0xfff0, {0x3, 0x8}}, {0x4, 0x8, {0x1, 0xf}}, {0x3, 0x6, {0x2, 0xfffffba6}}, {0x8, 0x0, {0x1}}, {0xc, 0x27, {0x3, 0x7fc0000}}, {0x1, 0x3ff, {0x2, 0xfffffe01}}, {0xfffa, 0xf, {0x3, 0x390}}, {0x5, 0x7, {0x2, 0x8}}, {0x6, 0x6, {0x1}}, {0x0, 0x4, {0x3, 0x2}}, {0x40, 0x400, {0x2, 0x80}}, {0x8, 0x5, {0x3, 0x2}}, {0xfff9, 0x9, {0x1, 0x5}}, {0x9, 0x5, {0x2, 0x8}}, {0x200, 0x5, {0x0, 0xe}}, {0x9602, 0x6, {0x3, 0x7}}, {0xae, 0xa6, {0x0, 0x4}}, {0xfffc, 0x3, {0x0, 0x6}}, {0x9, 0xd7, {0x0, 0x5}}, {0x4, 0x5, {0x2, 0x3}}, {0x40, 0x0, {0x3, 0xef44}}, {0x2, 0x4f1, {0x2}}, {0x80, 0x4, {0x2, 0x7}}, {0x0, 0x6, {0x3, 0x8}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x800}, 0x8800) 1m58.099892918s ago: executing program 6 (id=2069): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x240000, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x20040084) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0x3}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local}) r11 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB="580000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1414000021200000300012800c0001006d6163766c616e0020000280080003000000000008000100100000000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r14], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r15 = socket(0x10, 0x3, 0x0) sendmmsg(r15, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'rose0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}) r16 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r16, 0xc0045005, &(0x7f0000000080)=0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 1m57.807458803s ago: executing program 6 (id=2079): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r1, 0x0, 0x18, 0x0, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x44822, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r5 = dup(r4) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x0}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d05, 0x0, 0x80}]}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34424752, 0x0, 0x1, [{}, {}, {0x0, 0x2000}, {}, {}, {}, {0x87f}], 0x0, 0x94}}) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x97f, 0x680000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e0000000400000008000000f2ffffffffffffff0e4fa5309be891f643c68bbd84feb66586cb0d73f4c10ab3b51811d9efed97f10705daf32e3fdf20bbcc85dbbfefc16d72928ce6e4118f26e9b76a27486cbc867e4c211bdc35fc9114964860d05a96c75b91d8c727718921115b31b634bdfe566e8199898e7d36e45d4ec8b62d6f1792b5247c101f61343b5d040a819ed41eab48bdbab7a2abd231b6706ea9d910b7c46f7d937e07c07266368ad7f1c92857429bcb146cfc1a9d1effbb3c8138d9107917b13a312a117951e8ef4d27e5c141ca4ba581840b97850725a22d47ddfc20b0af777970e5e70f1953f3ecb3f84d2be50fd6d1d4465990d3fbb1f6d8b89aabee286c6bcc15f7e9d78320c87073c4810bcc5ad99c5d13ca2bf92d26ff7292cdd70890440645d8c6d2f6612c246278dbd76c6505d8000000000000000000000000020000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000700)={r8, 0x0, 0x0}, 0x20) ioctl$LOOP_SET_FD(r7, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r9, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r9, &(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r10 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r10, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) clock_adjtime(0x6, &(0x7f00000001c0)={0x4008b8d, 0x44, 0xb, 0x0, 0x8, 0x1, 0x0, 0xfffffffffffffffd, 0xc4ed, 0xffffffffffffffff, 0xf423f, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0xe5a, 0x6, 0x20000000000000, 0x3, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x400000}) 1m57.690235576s ago: executing program 6 (id=2081): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x9}, {0x10000002, 0x0, 0x0, 0x4}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x4, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff2}, {0x7, 0xfff3}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a00)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bc0900000000000055090100000000009500000000000000bd90000000000000b7020000000000008500000007000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x2000000, 0xf, 0x0, 0x0, 0x23}, 0x94) ioctl$CDROM_DEBUG(r4, 0x5330, 0x0) 1m54.047819616s ago: executing program 0 (id=2165): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5, 0x400, 0x2, {0x0, 0xea60}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "8d416cfa6fc2313e"}}, 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000000200df000700000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="040000200100000000000040070100000680a685a169ba1b"], 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x4) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r5, 0x103, 0x3, 0x0, &(0x7f00000000c0)) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="41000000010007", 0x7) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000580)="e6baf80c48b8844fdc8787ed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x52}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, 0x8}, 0x1c) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x7b) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x6, @private=0xa010102}, 0x2, 0x0, 0x1}}, 0x26) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)='v', 0x1}, {&(0x7f0000000280)="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", 0x5a4}], 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m53.839513329s ago: executing program 0 (id=2168): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10004, 0x0, 0x8000000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000), &(0x7f00000000c0)=@v2={0x6, 0x3, 0x0, 0x0, 0x1, 'b'}, 0xa, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0xc0) 1m53.759436167s ago: executing program 0 (id=2170): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7) (async) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1m53.759159558s ago: executing program 0 (id=2171): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000140)) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfc, 0x800}, 0xc) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000000)={0x1, 0x8}) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000001c0), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da5397", 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c5645", 0x0, 0x8000}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x0, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r8, r9, 0x501, 0xe87}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r6, &(0x7f0000000440)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r10 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x80084d17, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@loopback}, {@in=@initdev={0xac, 0x1e, 0x80, 0x0}, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x80}, {0xc, 0x402, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, 0x0, 0x4000000, 0x2, 0x0, 0x0, 0xea}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x40}}, @tfcpad={0x8, 0x16, 0x4000001}]}, 0x144}, 0x1, 0x0, 0x0, 0x44800}, 0x20008800) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000180)=0x1b27, 0x4) connect$inet(r3, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000380)='P', 0x1, 0x40800, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)='}', 0x1) 1m53.630712814s ago: executing program 0 (id=2172): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x72, 0x9, 0x28, @local, @private2, 0x7, 0x8000, 0x55829c49, 0x5}}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@typedef={0x1, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x5f, 0x30, 0x2e, 0x2e, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x5f]}}, &(0x7f0000000580)=""/20, 0x30, 0x14, 0x1, 0x3}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0x1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)='%pK \x00'}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) read(r7, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8], 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x18, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @jmp={0x5, 0x1, 0x1, 0x0, 0x4, 0x58, 0x381ceae068711cac}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x200, 0x1f, &(0x7f0000000240)=""/31, 0x40f00, 0x13, '\x00', r4, 0x1a, r5, 0x8, &(0x7f0000000640)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x4, 0x7, 0x4}, 0x10, 0x4b15, 0xffffffffffffffff, 0x1, &(0x7f0000000780)=[r6, r7, r8], &(0x7f00000007c0)=[{0x1, 0x1, 0x2, 0xb}], 0x10, 0xa}, 0x94) chdir(&(0x7f0000000100)='./file0\x00') r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000005c0)={'#! ', './file0'}, 0xb) ftruncate(r9, 0x5) 1m53.377313209s ago: executing program 0 (id=2173): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000480)={0x0, &(0x7f0000000000)=[@nested_load_code={0x12e, 0x60, {0x3, "26400f78440000c4820dbcdaf3420f201d66b853000f00d066baf80cb88acded8cef66bafc0c66b8b5d366ef66b858008ee0b9920a00000f320f350f23ae66bad00466b888df66ef"}}, @code={0xa, 0x56, {"660f388147b966baa100ed0fc719470f3248b8f9178fb6a954de240f23d00f21f835000000080f23f8b8010000000f01d966b8d0008ee03666460fc7b22e3e00000f08d9f0"}}, @nested_vmresume={0x130, 0x18}, @nested_load_code={0x12e, 0x7b, {0x2, "0f78600d400fe49d994300000f01cfc421735a150b00000066baf80cb86c810d8eef66bafc0ced44d1a600000100400fc732c7442400cc000000c74424029f000000c7442406000000000f6a0124c744240056000000c74424020c000000ff2c24f26d"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x5c3, 0x49, 0x2, 0x9e17}}, @nested_vmresume={0x130, 0x18}, @cpuid={0x64, 0x18, {0x5, 0x400}}, @uexit={0x0, 0x18}, @wr_crn={0x67, 0x20, {0x0, 0xe}}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0x80000001}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @wr_crn={0x67, 0x20, {0x8}}, @enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18, 0x3}, @set_irq_handler={0xc8, 0x20, {0x57, 0x1}}, @nested_load_code={0x12e, 0x5b, {0x0, "26440f2000650f01cf42d9cef347ad66baf80cb81044e38fef66bafc0cb805000000ef670f08660f38816df50f01cfb981020000b80c000000ba000000000f30673c02"}}, @in_dx={0x69, 0x20, {0x2d2f}}, @enable_nested={0x12c, 0x18}, @nested_load_code={0x12e, 0x55, {0x1, "660f38f15a09b9800000c00f3235000400000f300fc76e9966ba6100ec410f01c9c4c125fd76b30f08440f01d50f20c035010000000f22c0f30fc77600"}}, @nested_vmresume={0x130, 0x18}, @wrmsr={0x65, 0x20, {0x2be, 0x3ffc}}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x8, 0x7}}, @nested_load_code={0x12e, 0x64, {0x3, "66ba210066b8210066ef410f01cb48b8b5110000000000000f23d80f21f835400000b00f23f826f040087abc66ba4000ec410f01c9c4814df1b5bb000000f30fc732f3430fc7300f1a5c3e78"}}], 0x45d}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r3 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000340)='smaps\x00') pread64(r4, &(0x7f0000000140)=""/15, 0xf, 0x4) ioctl$KVM_RUN(r1, 0xae80, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000001800), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000480)={0x0, &(0x7f0000000000)=[@nested_load_code={0x12e, 0x60, {0x3, "26400f78440000c4820dbcdaf3420f201d66b853000f00d066baf80cb88acded8cef66bafc0c66b8b5d366ef66b858008ee0b9920a00000f320f350f23ae66bad00466b888df66ef"}}, @code={0xa, 0x56, {"660f388147b966baa100ed0fc719470f3248b8f9178fb6a954de240f23d00f21f835000000080f23f8b8010000000f01d966b8d0008ee03666460fc7b22e3e00000f08d9f0"}}, @nested_vmresume={0x130, 0x18}, @nested_load_code={0x12e, 0x7b, {0x2, "0f78600d400fe49d994300000f01cfc421735a150b00000066baf80cb86c810d8eef66bafc0ced44d1a600000100400fc732c7442400cc000000c74424029f000000c7442406000000000f6a0124c744240056000000c74424020c000000ff2c24f26d"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x5c3, 0x49, 0x2, 0x9e17}}, @nested_vmresume={0x130, 0x18}, @cpuid={0x64, 0x18, {0x5, 0x400}}, @uexit={0x0, 0x18}, @wr_crn={0x67, 0x20, {0x0, 0xe}}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0x80000001}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @wr_crn={0x67, 0x20, {0x8}}, @enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18, 0x3}, @set_irq_handler={0xc8, 0x20, {0x57, 0x1}}, @nested_load_code={0x12e, 0x5b, {0x0, "26440f2000650f01cf42d9cef347ad66baf80cb81044e38fef66bafc0cb805000000ef670f08660f38816df50f01cfb981020000b80c000000ba000000000f30673c02"}}, @in_dx={0x69, 0x20, {0x2d2f}}, @enable_nested={0x12c, 0x18}, @nested_load_code={0x12e, 0x55, {0x1, "660f38f15a09b9800000c00f3235000400000f300fc76e9966ba6100ec410f01c9c4c125fd76b30f08440f01d50f20c035010000000f22c0f30fc77600"}}, @nested_vmresume={0x130, 0x18}, @wrmsr={0x65, 0x20, {0x2be, 0x3ffc}}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x8, 0x7}}, @nested_load_code={0x12e, 0x64, {0x3, "66ba210066b8210066ef410f01cb48b8b5110000000000000f23d80f21f835400000b00f23f826f040087abc66ba4000ec410f01c9c4814df1b5bb000000f30fc732f3430fc7300f1a5c3e78"}}], 0x45d}) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async) fchdir(r2) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) (async) syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) (async) syz_open_procfs(r3, &(0x7f0000000340)='smaps\x00') (async) pread64(r4, &(0x7f0000000140)=""/15, 0xf, 0x4) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000001800), 0x4) (async) 1m53.32464604s ago: executing program 37 (id=2173): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000480)={0x0, &(0x7f0000000000)=[@nested_load_code={0x12e, 0x60, {0x3, "26400f78440000c4820dbcdaf3420f201d66b853000f00d066baf80cb88acded8cef66bafc0c66b8b5d366ef66b858008ee0b9920a00000f320f350f23ae66bad00466b888df66ef"}}, @code={0xa, 0x56, {"660f388147b966baa100ed0fc719470f3248b8f9178fb6a954de240f23d00f21f835000000080f23f8b8010000000f01d966b8d0008ee03666460fc7b22e3e00000f08d9f0"}}, @nested_vmresume={0x130, 0x18}, @nested_load_code={0x12e, 0x7b, {0x2, "0f78600d400fe49d994300000f01cfc421735a150b00000066baf80cb86c810d8eef66bafc0ced44d1a600000100400fc732c7442400cc000000c74424029f000000c7442406000000000f6a0124c744240056000000c74424020c000000ff2c24f26d"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x5c3, 0x49, 0x2, 0x9e17}}, @nested_vmresume={0x130, 0x18}, @cpuid={0x64, 0x18, {0x5, 0x400}}, @uexit={0x0, 0x18}, @wr_crn={0x67, 0x20, {0x0, 0xe}}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0x80000001}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @wr_crn={0x67, 0x20, {0x8}}, @enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18, 0x3}, @set_irq_handler={0xc8, 0x20, {0x57, 0x1}}, @nested_load_code={0x12e, 0x5b, {0x0, "26440f2000650f01cf42d9cef347ad66baf80cb81044e38fef66bafc0cb805000000ef670f08660f38816df50f01cfb981020000b80c000000ba000000000f30673c02"}}, @in_dx={0x69, 0x20, {0x2d2f}}, @enable_nested={0x12c, 0x18}, @nested_load_code={0x12e, 0x55, {0x1, "660f38f15a09b9800000c00f3235000400000f300fc76e9966ba6100ec410f01c9c4c125fd76b30f08440f01d50f20c035010000000f22c0f30fc77600"}}, @nested_vmresume={0x130, 0x18}, @wrmsr={0x65, 0x20, {0x2be, 0x3ffc}}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x8, 0x7}}, @nested_load_code={0x12e, 0x64, {0x3, "66ba210066b8210066ef410f01cb48b8b5110000000000000f23d80f21f835400000b00f23f826f040087abc66ba4000ec410f01c9c4814df1b5bb000000f30fc732f3430fc7300f1a5c3e78"}}], 0x45d}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r3 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000340)='smaps\x00') pread64(r4, &(0x7f0000000140)=""/15, 0xf, 0x4) ioctl$KVM_RUN(r1, 0xae80, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000001800), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000480)={0x0, &(0x7f0000000000)=[@nested_load_code={0x12e, 0x60, {0x3, "26400f78440000c4820dbcdaf3420f201d66b853000f00d066baf80cb88acded8cef66bafc0c66b8b5d366ef66b858008ee0b9920a00000f320f350f23ae66bad00466b888df66ef"}}, @code={0xa, 0x56, {"660f388147b966baa100ed0fc719470f3248b8f9178fb6a954de240f23d00f21f835000000080f23f8b8010000000f01d966b8d0008ee03666460fc7b22e3e00000f08d9f0"}}, @nested_vmresume={0x130, 0x18}, @nested_load_code={0x12e, 0x7b, {0x2, "0f78600d400fe49d994300000f01cfc421735a150b00000066baf80cb86c810d8eef66bafc0ced44d1a600000100400fc732c7442400cc000000c74424029f000000c7442406000000000f6a0124c744240056000000c74424020c000000ff2c24f26d"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x5c3, 0x49, 0x2, 0x9e17}}, @nested_vmresume={0x130, 0x18}, @cpuid={0x64, 0x18, {0x5, 0x400}}, @uexit={0x0, 0x18}, @wr_crn={0x67, 0x20, {0x0, 0xe}}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0x80000001}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @wr_crn={0x67, 0x20, {0x8}}, @enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18, 0x3}, @set_irq_handler={0xc8, 0x20, {0x57, 0x1}}, @nested_load_code={0x12e, 0x5b, {0x0, "26440f2000650f01cf42d9cef347ad66baf80cb81044e38fef66bafc0cb805000000ef670f08660f38816df50f01cfb981020000b80c000000ba000000000f30673c02"}}, @in_dx={0x69, 0x20, {0x2d2f}}, @enable_nested={0x12c, 0x18}, @nested_load_code={0x12e, 0x55, {0x1, "660f38f15a09b9800000c00f3235000400000f300fc76e9966ba6100ec410f01c9c4c125fd76b30f08440f01d50f20c035010000000f22c0f30fc77600"}}, @nested_vmresume={0x130, 0x18}, @wrmsr={0x65, 0x20, {0x2be, 0x3ffc}}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x8, 0x7}}, @nested_load_code={0x12e, 0x64, {0x3, "66ba210066b8210066ef410f01cb48b8b5110000000000000f23d80f21f835400000b00f23f826f040087abc66ba4000ec410f01c9c4814df1b5bb000000f30fc732f3430fc7300f1a5c3e78"}}], 0x45d}) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async) fchdir(r2) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) (async) syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) (async) syz_open_procfs(r3, &(0x7f0000000340)='smaps\x00') (async) pread64(r4, &(0x7f0000000140)=""/15, 0xf, 0x4) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000001800), 0x4) (async) 1m49.376261222s ago: executing program 9 (id=2218): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000007000000000000000000000000000000f9d3e48b339a756c27317f50222168d68f2990a341766a47a62414418f98d95ebefe003f98256a33b60621e36d18a837", @ANYRES32=r2, @ANYBLOB="00000000000000000c001a800400048004000580"], 0x2c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, 0x0, 0x0) unshare(0x66000080) socket$netlink(0x10, 0x3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) dup3(r5, r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) unshare(0x20000400) r7 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xe133, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000009c0)=@IORING_OP_UNLINKAT={0x24, 0xe, 0x0, r7, 0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x200}) io_uring_enter(r7, 0x7a98, 0x0, 0x0, 0x0, 0x0) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @main=@item_012={0x1, 0x0, 0x9, 'a'}, @global=@item_012={0x1, 0x1, 0x1, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) r11 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r11, 0xc00c4809, &(0x7f0000000040)={0x2, 0x100000103, 0x7ff}) r12 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$CDROMREADRAW(r12, 0x5314, &(0x7f0000000540)={0x0, 0x0, 0x98, 0xff, 0x2, 0x7}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000580)="b3185d7bb56f70f00336"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000900)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000880)={@flat=@handle={0x66646185, 0x10a, 0x1}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1m46.358310963s ago: executing program 9 (id=2239): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0xb0, 0x180, 0xb0, 0x2b0, 0x218, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {0xff}, 0xc, 0x2, 0x41}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xa, 0x0, @ipv6=@remote}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, 0xff000000, 0x0, 'veth0_virt_wifi\x00', 'pim6reg0\x00', {0x9fdd64a54f9cf415}, {0xff}, 0x1, 0x2, 0xf}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x2, 0x2, 0x4, 0x1, 0x2], 0x2, 0x1}, {0x2, [0x7, 0x6, 0x0, 0x3, 0x3, 0x2], 0x2, 0x4}}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xb78e19162b0a7f00, 0xffff00, 'pimreg1\x00', '\x00', {}, {0xff}, 0x0, 0x0, 0x10}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0xf}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'ip_vti0\x00', 'wg2\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x400, 0x6, @broadcast, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) 1m46.27025103s ago: executing program 9 (id=2240): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) write$binfmt_script(r2, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x2c, &(0x7f0000000040)=[@in6={0xa, 0x71e3, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, @in={0x2, 0x6, @loopback}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x2c, &(0x7f0000000040)=[@in6={0xa, 0x71e3, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, @in={0x2, 0x6, @loopback}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={r4, 0x2, 0x7ff, 0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r3, 0x40046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x300}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) socket$can_j1939(0x1d, 0x2, 0x7) (async) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6}, 0x18) (async) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd29, 0x100000, {0x0, 0x0, 0x74, r6, {0xa, 0x9}, {0xb, 0xfff3}, {0xffff, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040840}, 0x240000c0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000400)={r10, 0x0, 0x0, 0x0, 0x0, [], [], [0x1000], [0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff]}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000400)={r10, 0x0, 0x0, 0x0, 0x0, [], [], [0x1000], [0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x0, 0xb0b0b0b0}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000540)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0xcccccccc}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r13 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r13, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r13, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r13, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r14}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r13, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r13, 0xc03864bc, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000180)=[r16], &(0x7f00000000c0)=[0x2], &(0x7f0000000580)=[r15], &(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000640)={0x401, 0x1, &(0x7f00000002c0)=[r10], &(0x7f0000000300)=[0x9fe2], &(0x7f0000000580)=[r11, r12, r15, 0x0], &(0x7f00000005c0)=[0x3, 0x8, 0x0, 0x129], 0x0, 0x80}) 1m44.781398978s ago: executing program 9 (id=2243): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0:,:\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, r3, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000001000)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cecb8010000000f01d966b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4f}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1043, 0x200000000006, 0x0, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x1], 0x8080000, 0x42590}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m44.630766376s ago: executing program 9 (id=2244): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x100, 0x80) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000040)=0x3ff) (async, rerun: 64) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x2, @pix_mp={0x7, 0x7, 0x41416770, 0x4, 0x5, [{0x5, 0x7}, {0x3, 0x2}, {0x9, 0x2}, {0x5, 0x81}, {0xb6d, 0x3}, {0x7fff, 0x1}, {0x4, 0x4}, {0x113, 0x5}], 0x5, 0xc, 0x2, 0x2, 0x5}}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000200), 0xfff, 0x101) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80184132, &(0x7f0000000240)) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) (async) fchmod(r0, 0x2b) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x5809) (async) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$PTP_PIN_GETFUNC2(r4, 0xc0603d0f, &(0x7f00000002c0)={'\x00', 0x3, 0x1, 0x3b88}) (async, rerun: 64) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r3, 0x4122, 0x0) (rerun: 64) r5 = openat$cgroup(r1, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) (async) lseek(r2, 0x0, 0x1) (async, rerun: 64) io_setup(0x13cab7d9, &(0x7f0000000380)=0x0) (rerun: 64) io_cancel(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x4, r1, &(0x7f00000003c0)="93fb2d6671866a14b0d80411465581861fd99caf445b05", 0x17, 0x0, 0x0, 0x2, r1}, &(0x7f0000000440)) ioctl$CEC_ADAP_G_CAPS(r1, 0xc04c6100, &(0x7f0000000480)) (async) sendmmsg$alg(r1, &(0x7f0000001600)=[{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000500)="9c0c41df79c08e529fb345aa396463e92f39f40c691eb47d711441bfa42ff2318dc1b91b1ec1d51e3e25e69f415c40230aae47392f6051167946c6b0d7a79ac86dfe9c402efd7ae39a87b2304e7e6a1a481be24d3176fff26ff93052e5a054b7f003c06a7c5707d4c6e3a7af5e3bb6365cb0118d7f276f3ba39f591cfd0e78bb54e756741c88a351233b3b73f2c9cd49f9956f3bd6c63bb58c8c67d080857739daf4ca43f6fa91a9338944ee3eb6cf6a689996dbcd195216c7d1dd7f7521ae", 0xbf}, {&(0x7f00000005c0)="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", 0x1000}], 0x2, 0x0, 0x0, 0x4}], 0x1, 0x8000) sendfile(r5, r5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001700)={'syztnl2\x00', &(0x7f0000001680)={'syztnl2\x00', 0x0, 0x2f, 0x81, 0x9, 0x9, 0x0, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x20, 0x40, 0x4}}) sendmsg$nl_route_sched(r7, &(0x7f0000001800)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)=@delchain={0x70, 0x65, 0x800, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xf, 0x1}, {0x8, 0xfff1}, {0xffe0, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x6}, @TCA_U32_DIVISOR={0x8, 0x4, 0xe}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0xf67}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24008094}, 0x0) (async, rerun: 32) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000001840), 0x206000, 0x0) (rerun: 32) ioctl$FIOCLEX(r9, 0x5451) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000018c0), r1) (rerun: 32) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000001a80)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x92cf165b353a1236}, 0xc, &(0x7f0000001a40)={&(0x7f0000001900)={0x10c, r10, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffeffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'nicvf0\x00'}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_team\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x25}, 0x11) (async, rerun: 64) socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 64) 1m44.627276654s ago: executing program 9 (id=2245): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2, 0x3, 0xff) sendmsg$inet(r0, &(0x7f0000000a40)={&(0x7f0000000680)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_retopts={{0x10}}], 0x10}, 0x24000000) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) close_range(r4, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '$[}#^\x15'}}]}}) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r3], 0x15) 1m42.545673064s ago: executing program 38 (id=2081): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x9}, {0x10000002, 0x0, 0x0, 0x4}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x4, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff2}, {0x7, 0xfff3}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a00)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bc0900000000000055090100000000009500000000000000bd90000000000000b7020000000000008500000007000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x2000000, 0xf, 0x0, 0x0, 0x23}, 0x94) ioctl$CDROM_DEBUG(r4, 0x5330, 0x0) 1m29.312037567s ago: executing program 39 (id=2245): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2, 0x3, 0xff) sendmsg$inet(r0, &(0x7f0000000a40)={&(0x7f0000000680)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_retopts={{0x10}}], 0x10}, 0x24000000) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) close_range(r4, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '$[}#^\x15'}}]}}) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r3], 0x15) 1m29.269927326s ago: executing program 8 (id=2356): write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="3a2f080000030300010000000000450a00280068000005069078ac1e0301ffffffff4e204e21", @ANYRES32=0x41424344], 0xfce) (async) syz_emit_ethernet(0xb4, &(0x7f0000000080)=ANY=[@ANYBLOB="5bb86bfbe4bbaaaaaaaaaa29080503032732697453e698e62a34bc00f12c556e67fb1cdeaa94391e0d372fc9c280cf3651ef8275c7aefd07da30ae420d371c6741fa2e6eb4097604ef4dcc4e9aa573b4e503e0cf7f5543361689ff2c3f46bf7496608057a5374711a50ad37aa3df04af508b5fe83a0938a75bdc922863a02a4b7b323ea2e38584e871830aeeb992e67165f06413d43ed391bdab8aef4011ddefaa488aa5aabe190de45eabffb8e1b2245d5f"], 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x2, 0x0, {0xa, 0x4e21, 0x2000, @empty, 0x9}}}, 0x3a) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000500)="8564307533f69a6eadfedaf4cf4e654b664ff282dbe20223e8dcb4e3c9776796bcd986f31c6a34739ad35acbda3404c8c02161171181e3e78b8769bc50e94286eaddece71bee8e3e7bbc19c9c886ccd8f7608626985c4645249da799aadc91103720f8bb9d8d0a58995f7067e5485a9aba00000000000000", 0x78}], 0x1, &(0x7f0000000e80)=ANY=[@ANYRESOCT=r2], 0x330}}], 0x1, 0x810) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x260702, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r3], 0xa8}, 0x1, 0x0, 0x0, 0x400c8d0}, 0x20000000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b1bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007900)={0x0, 0x0, &(0x7f0000007840)=[{&(0x7f0000000000)={0x10, 0x1000, 0x100, 0x70bd27, 0x25dfdbfd}, 0x10}], 0x1, 0x0, 0x0, 0x40040}, 0x800) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) r10 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) 1m29.260354514s ago: executing program 8 (id=2358): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2008002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x0) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./bus\x00') 1m29.168098984s ago: executing program 8 (id=2359): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000000180)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x20, 0x8, 0x8001, 0x2, {{0x13, 0x4, 0x1, 0x5, 0x4c, 0x68, 0x0, 0x40, 0x4, 0x0, @loopback, @loopback, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0xd2, 0x0, 0x7, [0x65]}, @rr={0x7, 0x1b, 0xb3, [@multicast2, @empty, @multicast2, @rand_addr=0x64010102, @broadcast, @multicast1]}, @timestamp={0x44, 0x10, 0xc5, 0x0, 0x8, [0x180, 0xfffffb97, 0x100]}]}}}}}) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000600)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0xb8, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x7, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x7}}, @filter_kind_options=@f_route={{0xa}, {0x80, 0x2, [@TCA_ROUTE4_ACT={0x7c, 0x6, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x2}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) (async, rerun: 64) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf250200000050000180140002006261746164765f736c6176655f3100001400020000000000000000000000000000000000140002006c6f0000000000000000000000000000080003000200000008000100", @ANYRES32=r2, @ANYBLOB="44000180140002006261746164763000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020067656e6576653100000000000000000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="1c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000000800030003000000"], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x800) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) r9 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32=r9], 0x7) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r10, 0x80045301, &(0x7f0000000540)) r11 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) (rerun: 32) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x5c, r11, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r12}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x5c}, 0x1, 0xf000, 0x0, 0x4044040}, 0x0) 1m29.059199006s ago: executing program 8 (id=2363): pipe2(0x0, 0x4800) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e24, @multicast1}, 0x2, 0x0, 0x4}}, 0x2e) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) (async) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x100000) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r7, 0xc0305616, &(0x7f0000000180)={0x0, {0x9, 0x4}}) (async) process_vm_readv(0xffffffffffffffff, &(0x7f00000018c0)=[{&(0x7f0000000340)=""/160, 0xa0}], 0x1, &(0x7f0000001dc0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 1m28.920721355s ago: executing program 8 (id=2367): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x66102bdc, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}}, [0x3, 0xef6, 0x6, 0x1, 0x0, 0x1, 0x1, 0x8c74, 0x0, 0xfffffffffffffffe, 0x8, 0x401, 0x5, 0x3, 0x3]}, &(0x7f0000000140)=0x100) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000001c0)={r1, 0x7ff}, &(0x7f0000000200)=0x8) r3 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad000008b9"], 0x125) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={r1, 0x0, 0x10}, 0xc) 1m28.919495283s ago: executing program 8 (id=2369): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000c000000080000000200000000000000", @ANYRES32, @ANYBLOB="00800000000000000000000000000000000030a9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4840, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2000000}, 0x10}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) unshare(0x42000000) (rerun: 64) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x32a, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1}) (async) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0xfffe, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x10, 0x2}) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) (async) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = getpid() socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = syz_pidfd_open(r2, 0x0) (rerun: 64) setns(r3, 0x24020000) (async) syz_clone(0x30288000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m13.911520158s ago: executing program 40 (id=2369): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000c000000080000000200000000000000", @ANYRES32, @ANYBLOB="00800000000000000000000000000000000030a9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4840, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2000000}, 0x10}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) unshare(0x42000000) (rerun: 64) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x32a, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1}) (async) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0xfffe, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x10, 0x2}) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) (async) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = getpid() socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = syz_pidfd_open(r2, 0x0) (rerun: 64) setns(r3, 0x24020000) (async) syz_clone(0x30288000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.566298833s ago: executing program 7 (id=3171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="58000000020603000000000000000000000009000000000000001140000000000500010006000000050005000200000005000400000000001200031a686173683a6e65742c706f72740000000900020073797a3200000000"], 0x58}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x8003, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0xffffffffffffff50, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3710618e5b065bb4e567ae2daaa9d2dd364095b3c85eb40121a5df720089b74a02889eb4ad5389101e4fa30af49dabd81c8f4fb05694de54d3ffe4fd8277d490e1929e30c248b60091168551d1c2e7743b227092b385acc88fba367a4b1788916d64186d5ac2de9ec50124d9be8ed9ed848cb06c92ef7dcec77c047e8bb754bf4acef3cf813e4d9f0796a0d9166495b0db94b0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000060000000000000000000000000000000000000001000000000000000000000000000000000000000000ffffffe700000000000000000000000000000000000000000000df000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000800)={0x1, 0x0, [{0xd, 0x8, 0x0, 0xfffffbff, 0xde, 0x5, 0x4}]}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r9, 0x80487436, &(0x7f0000000180)) r10 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc4c85512, &(0x7f0000000280)={{0x9}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 3.456328352s ago: executing program 2 (id=3172): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000010651fbe347b322b00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x8000000) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000640)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000440)={0xfffa, [0x0, 0xffffffff]}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x3, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.455400942s ago: executing program 3 (id=3173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r3) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r4, 0x301, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x8000) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="ec0d0ee8055a7a54ea782d2c07ae13f6e9aba7d79a937824bccbda4a5cb9cad5bc4038058c402a881b0775908a5b36d2a681198bebfd87ae615841cecf3c65afb76bd38911bffdf8167193acd3f8920f4ada853f610fb20d0ba3e3cd49e5ca683ac81d2252c0ec0bb06205398bc0bd", @ANYRES16=r4, @ANYBLOB="10002cbd7000fedbdf250c000000080004000500000034000180080005000100000008000900540000000800050001000000060001000200000008000900330000000600020033000000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r5 = socket(0x10, 0x2, 0x1) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x14}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d117"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.892119378s ago: executing program 3 (id=3174): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r2, 0x80044d76, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000}) 2.89178001s ago: executing program 2 (id=3175): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='nilfs2\x00', 0x8080, &(0x7f0000000100)='discard') write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000100)=ANY=[], 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x7], 0x0, 0x0, 0x1, 0x1}}, 0x40) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r3, &(0x7f0000001240)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x10000, 0x1) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ppoll(&(0x7f0000000100)=[{r4, 0x281}], 0x1, 0x0, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000001280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r5 = syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) move_pages(r5, 0x2, &(0x7f0000000040)=[&(0x7f000095d000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil], &(0x7f0000000140)=[0x5, 0x8, 0x1, 0x5a0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0xc) 2.891467155s ago: executing program 3 (id=3176): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) lstat(&(0x7f0000001100)='./file1\x00', 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x2200}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0xf}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10001}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x3, 0x9, 0x98, 0x537}, {0x6, 0x0, 0x7, 0x7}, {0x5a29, 0x10, 0x2, 0x200}, {0xa, 0x7, 0x5, 0x7}, {0x465c, 0x0, 0x5}]}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="92e25ee8", @ANYRES16=r2, @ANYBLOB="000300000000000080003d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0082006c325f64726f7073000000000500870000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x8) 2.891161806s ago: executing program 7 (id=3177): socket$inet_tcp(0x2, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = syz_io_uring_setup(0x1458, &(0x7f00000003c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xf, &(0x7f00000002c0)=r3, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x31, &(0x7f0000000640)=r3, 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x31, &(0x7f0000000000), 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000800) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r0, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f0000000840)) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r11 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r11, 0xc0884113, &(0x7f0000000380)={0x1, 0x20, 0xfffffd0a, 0x10001, 0x0, 0xa, 0x4, 0x0, 0xfbfffffffffffffd, 0x9, 0xffffffbb, 0x1}) clock_gettime(0x7, &(0x7f00000003c0)) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r11, 0xc0984124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 2.890286373s ago: executing program 7 (id=3178): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1b0000001c0001000000000004086aa42d"], 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000001f80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r4, &(0x7f00000000c0)='./file0\x00') socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1b0000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1) (async) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001f80)={0x2020}, 0x2020) (async) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r4, &(0x7f00000000c0)='./file0\x00') (async) 2.251006613s ago: executing program 7 (id=3179): syz_open_dev$midi(&(0x7f0000000040), 0xb6, 0x48801) (async) r0 = syz_open_dev$midi(&(0x7f0000000040), 0xb6, 0x48801) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x4, 0x6}, 0x6) (async) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x4, 0x6}, 0x6) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x7) ioctl$TCSETA(r2, 0x8924, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffd}) ppoll(&(0x7f0000000000)=[{r0, 0x1100}, {r0, 0xc169}], 0x2, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000040)=0x83, 0x5, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x101, 0x4) (async) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x101, 0x4) recvfrom$inet(r5, 0x0, 0x0, 0x700, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newtfilter={0xdc, 0x2c, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x6}, {0xa, 0xffe0}, {0xf, 0x5}}, [@f_rsvp={{0x9}, {0xac, 0x2, [@TCA_RSVP_ACT={0xa8, 0x6, [@m_nat={0xa4, 0x4, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x8, 0x3, 0x1, 0x8}, @private=0xa010101, @rand_addr=0x64010100, 0x100000001}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x0, 0x10, 0x8f}, @local, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x3, 0x0, 0xb, 0xa26f526}, @rand_addr=0x64010100, @empty, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0xdc}}, 0x0) (async) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newtfilter={0xdc, 0x2c, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x6}, {0xa, 0xffe0}, {0xf, 0x5}}, [@f_rsvp={{0x9}, {0xac, 0x2, [@TCA_RSVP_ACT={0xa8, 0x6, [@m_nat={0xa4, 0x4, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x8, 0x3, 0x1, 0x8}, @private=0xa010101, @rand_addr=0x64010100, 0x100000001}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x0, 0x10, 0x8f}, @local, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x3, 0x0, 0xb, 0xa26f526}, @rand_addr=0x64010100, @empty, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0xdc}}, 0x0) recvmmsg(r6, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/232, 0xe8}], 0x1}, 0x9}], 0x1, 0x2023, 0x0) (async) recvmmsg(r6, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/232, 0xe8}], 0x1}, 0x9}], 0x1, 0x2023, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r7, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) setsockopt$inet_tcp_int(r3, 0x6, 0x8, &(0x7f00000001c0)=0xffffbffd, 0x4) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x8, &(0x7f00000001c0)=0xffffbffd, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='dctcp', 0x5) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) 2.132124048s ago: executing program 3 (id=3180): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040)={0x0, 0x2}, 0x2) close_range(r0, r0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x9, 0x9, 0x8, 0x10000}, {0x2, 0x1, 0x9, 0x45362ed0}, {0xc, 0xf7, 0x8, 0xe}]}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) rt_sigqueueinfo(r2, 0x27, &(0x7f0000000140)={0x2d, 0x7, 0x3}) r3 = accept4$netrom(r0, &(0x7f00000001c0)={{0x3, @bcast}, [@remote, @bcast, @null, @default, @netrom, @remote, @remote, @rose]}, &(0x7f0000000240)=0x48, 0x80000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000280)={"2126a114f5c2da866be7f4d3f9f4773f", 0x0, 0x0, {0x1, 0x80}, {0xe, 0x9}, 0xffff, [0x80, 0xdd9, 0x3c, 0x40, 0x3, 0x9ba, 0x7, 0x7ff, 0xffffffffffffffff, 0x7, 0x0, 0x40, 0x9, 0x8000000000000000, 0x4, 0x8]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000440)={{r0}, r4, 0x2, @inherit={0x90, &(0x7f0000000380)={0x1, 0x9, 0x1000, 0xc, {0x8, 0x3, 0x1, 0x0, 0xfffffff000000000}, [0xe54, 0x10001, 0x7, 0x0, 0x8000, 0x8000000000000001, 0x7ac100000000, 0x6, 0x758]}}, @subvolid=0x7fffffff}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000001440)=""/22) pipe2$9p(&(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$FITHAW(r5, 0xc0045878) clock_gettime(0x3, &(0x7f00000014c0)) recvmmsg(r3, &(0x7f0000002d80)=[{{&(0x7f0000001500)=@sco, 0x80, &(0x7f0000001940)=[{&(0x7f0000001580)=""/165, 0xa5}, {&(0x7f0000001640)=""/19, 0x13}, {&(0x7f0000001680)=""/148, 0x94}, {&(0x7f0000001740)=""/148, 0x94}, {&(0x7f0000001800)=""/217, 0xd9}, {&(0x7f0000001900)=""/48, 0x30}], 0x6, &(0x7f00000019c0)=""/4096, 0x1000}, 0x5}, {{&(0x7f00000029c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002a40)=""/162, 0xa2}], 0x1, &(0x7f0000002b40)=""/50, 0x32}, 0x4}, {{&(0x7f0000002b80)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002c00)=""/137, 0x89}], 0x1, &(0x7f0000002d00)=""/95, 0x5f}, 0x400}], 0x3, 0x40000000, &(0x7f0000002e40)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002e80)={'veth0_macvtap\x00'}) bind$rxrpc(r0, &(0x7f0000002ec0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x24) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000002f00)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r7, 0x21, &(0x7f0000002f40)={0x0, 0xfff, 0x2000, 0x0, 0xab, 0x0, r7}, 0x1) ioctl$sock_bt_bnep_BNEPCONNDEL(r7, 0x400442c9, &(0x7f0000002fc0)={0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}) r8 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000003000)={0x1, 0xd, 0x5, 0x4880, 0xffffffffffffffff}) ppoll(&(0x7f0000003040)=[{r8, 0x1480}, {r9, 0x8100}, {r6, 0x1000}, {r3, 0x400}], 0x4, &(0x7f0000003080), &(0x7f00000030c0)={[0x4]}, 0x8) recvmmsg(r0, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003100)=""/89, 0x59}, {&(0x7f0000003180)=""/4096, 0x1000}], 0x2, &(0x7f00000041c0)=""/120, 0x78}, 0x8000}, {{&(0x7f0000004240)=@caif=@util, 0x80, &(0x7f0000006640)=[{&(0x7f00000042c0)=""/132, 0x84}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/162, 0xa2}, {&(0x7f0000005440)=""/153, 0x99}, {&(0x7f0000005500)=""/209, 0xd1}, {&(0x7f0000005600)=""/4, 0x4}, {&(0x7f0000005640)=""/4096, 0x1000}], 0x7, &(0x7f00000066c0)=""/134, 0x86}, 0x4ce3486d}, {{0x0, 0x0, &(0x7f0000006840)=[{&(0x7f0000006780)=""/145, 0x91}], 0x1, &(0x7f0000006880)=""/71, 0x47}, 0x9}, {{0x0, 0x0, &(0x7f0000006b00)=[{&(0x7f0000006900)=""/157, 0x9d}, {&(0x7f00000069c0)=""/226, 0xe2}, {&(0x7f0000006ac0)=""/54, 0x36}], 0x3}}], 0x4, 0x2012, 0x0) r10 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x31) ioctl$VT_DISALLOCATE(r10, 0x5608) r11 = syz_open_dev$hidraw(&(0x7f0000006c40), 0xd559, 0x1) ioctl$BTRFS_IOC_SET_FEATURES(r11, 0x40309439, &(0x7f0000006c80)={0x1, 0x6, 0x4}) io_setup(0x6, &(0x7f0000006cc0)=0x0) io_pgetevents(r12, 0x34, 0xa, &(0x7f0000006d00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000006e80)={&(0x7f0000006e40)={[0x5b2c]}, 0x8}) write$P9_RRENAMEAT(r0, &(0x7f0000006ec0)={0x7, 0x4b, 0x2}, 0x7) 1.972803522s ago: executing program 2 (id=3181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) (async) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) r5 = socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r7) sendmsg$TIPC_NL_KEY_FLUSH(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, r8, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYRESHEX=r0, @ANYRES64=0x0, @ANYRESOCT, @ANYRES32=r5, @ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRES8=r3, @ANYRESOCT=0x0, @ANYRESDEC=r7], 0x38}, 0x1, 0x0, 0x0, 0x2004c091}, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="630000004ec6"}) r10 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001680), 0x180, 0x0) ioctl$CDROMPLAYTRKIND(r10, 0x5304, &(0x7f0000000100)={0x9, 0x0, 0x77, 0x40}) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) (async) ioctl$CDROM_SEND_PACKET(r10, 0x5393, &(0x7f0000000140)={"1cc82fe338b5b272e2156c5a", &(0x7f0000000040)="64aba56b0b0ed077d49fc51667045d233d12319e39f8cb6816b7e109", 0x1c, 0x800, &(0x7f0000000080)={0x6, 0x0, 0x8, 0x6, 0x0, 0x0, 0x0, "e43bd995", 0x7, "1fb226b9", 0xfd, 0xaf, 0x4, "6972d4", "75185d3971cedd0fea35e29cb7a76e5934f3b5ea49f32dc0e01ced53cb0db55fd16caaf0197434a210f1dffcea8a"}, 0x3, 0x0, 0x200000, &(0x7f00000000c0)}) r13 = dup(r12) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$CDROMPLAYTRKIND(r13, 0x5304, &(0x7f0000000000)={0x2, 0x6, 0x7, 0x5}) 1.805698591s ago: executing program 2 (id=3182): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0x7fff, 0x36b4}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000100)="b8", 0x1, 0x2000c841, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbfe, {0x60, 0x0, 0x0, 0x0, {0xb, 0x3}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.696271157s ago: executing program 3 (id=3183): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000540), 0x0, 0x1, 0x0, 0x0, r1}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000040)={0x3, r2, r1}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000440)={@void, @void, @eth={@multicast, @remote, @val={@val={0x88a8, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x4, 0x28, 0x68, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010100, @broadcast}, "e8a6647b41d5d17c8224497e20aeaf10ffb6df27"}}}}}, 0x3e) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000540), 0x0, 0x1, 0x0, 0x0, r1}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000040)={0x3, r2, r1}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r5) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r4, &(0x7f0000000440)={@void, @void, @eth={@multicast, @remote, @val={@val={0x88a8, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x4, 0x28, 0x68, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010100, @broadcast}, "e8a6647b41d5d17c8224497e20aeaf10ffb6df27"}}}}}, 0x3e) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) (async) 1.695780777s ago: executing program 2 (id=3184): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) mount(0x0, &(0x7f0000000300)='./file3\x00', &(0x7f00000000c0)='pvfs2\x00', 0x0, &(0x7f0000000380)='acl') bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="2153c9300980ffff", 0x8) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x5, &(0x7f00000007c0)=0x9, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0xb5315258}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x3, 0x71, 0x11, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 816.574325ms ago: executing program 1 (id=3191): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r0, 0x4188aec6, &(0x7f0000000a80)={0x0, [{0x0, 0x1a0, 0x1000, &(0x7f0000000140)="c15cad42c200f9a054cd6cf8f20f0f6c1237b54c83420568777c3277c525c0fa2cdf16b00f26627e5e1f5e548efafa84871ef783"}, {0x1, 0x600, 0x0, &(0x7f00000002c0)="bbc663ca777a0050ec077544225e46dc2574d5e988537623fcefa7b81b19b7f0662e249d7969379930150d01f360212544dcbb238441794f51160e8085f0fdc3f35fb7218a0fedf6bd747b864dc0b0f65f6cac448f8eec497f65bc598b51f4e08571aab4122322fc5c7ac65999363b7f42d7a05b70e08b9651157905d2186c8016d1a5ed467d42069f1648fd6bb603f8c6bf962e57490913d85e9c8b0e7512ef0670b7e0f1301ba531dcdcb7e5a0998db9e7c1b9eb043d01f673da19fb6fd457"}, {0x2, 0x90, 0x8c2, &(0x7f0000000180)="17c1affedc4b70dc02ffb0b7cd63bdd77445"}, {0x1, 0x3d8, 0x80, &(0x7f0000000380)="1917f908074e23f258b4430d5b6a95513ec4105f082328a4b65547a2469ebf8244126f187af9267c76675eae6b96cd3f1f8b9606c21740bddaaf901ffc6b4143ae07613ac7d3104336f6a586761d832a1307540f1e84997d1d6a7dbc1211c6fe1621ba11ab55731ec100365f671071da9158772e132cf8299eddc3"}, {0x2, 0x4f0, 0x6, &(0x7f0000000400)="98f370e7f4682ea32de4e5dd18e5a340b450b2291bbf769a86b6facc7cd3bb152ee91af034aa58b5535a364eb4641ddece8644c15abeb016db643c2dcd7eac92a2dd03ff0f0fa63050f214ad396f05e429a4608d450f4f0d91c0adb44005c84f89bd303332c46d0e50d091a002de6cb50664b78548c76b83b60df9d5bbb004d4cefbf2078993474e4f9bb63d68b482e44f06f7060e550ae91fabbc036e17"}, {0x5, 0x0, 0x37, &(0x7f00000001c0)}, {0x0, 0x2f0, 0x7, &(0x7f00000004c0)="d1b7c211d1fffd5970fef11ed3171a7c98327dcb76a2914066456687eafb06c9722dc40d6384ef24d4d8d1470b0aa7667921744d1e6e7b98e7d1b976a996797135299d953b92f8ab927104562560a1606b2bd896999f20fdf6b8aaabc01a"}, {0x0, 0x668, 0x59ab, &(0x7f0000000540)="5512cd2090e8eaa09c20a5269f313b4a4668f1de42ffe5ea2ca97482f1458d51add0663b1219ef72feabe93b8ee48e1963e6ef5c39c3b517b856f974102563e012402dad4986a378fa6eed2671714c046d7a2ae812d12b855ce8db335a4ffef722695b7ce286dff568120e5151ba7e89e8e728bdd4c41e166b864c48a3ca9503d49abc4ffe7a034fb4ce4ddc9da065b83763b921df96a387e63ca8a2b0c27809cf4099256520dab56a86430ab5da94425d97277984bc5a2181cbea33860504e9cbfd6b1e436b534183cbe39e90"}, {0x0, 0x188, 0x10000, &(0x7f0000000240)="28cefe9a955213fd24b1f7b439083ae1cc31377e21b0f42f692db5b07ef0c556b3041cdd10077fa9c2e1d4fd1eaacaec88"}, {0x3, 0x1f8, 0x4, &(0x7f0000000640)="7ae4f29e9c8b7fadaa1c968ad9778483201a5b775974317e91b54454f7bc30274e5d13574d5a299f1ae0bbd90d7fcb46a170e9a9ba7d19346c767b62aea381"}, {0x0, 0x688, 0x3, &(0x7f0000000680)="b757b5907ebe2739ebda4369f62f47147e08b6528cc41f0c729b96600a8c1aa995ddfed98d6e9f29b6807b6737a353a52b5c51dce6b9551985d225640ce86f455c8fdc909b7856e12eaf2b4409c7586af6d78e19a3be04707d49180ae57d6108542be89c4c95fded6cb618d20c3ae84387a05c7e5fa79d11e350735f80d36ee577c5ade62c290dfa01e99f23073c9d410fc96bfc190be0c98aa87d12cec84683a94de3fcbc3bf845448322768e6aa4c8ab472ae3b72e7078c1a6d8cd27803d0515031da80afe82bb13cbc458133416261c"}, {0x3, 0x7c8, 0xfff, &(0x7f0000000780)="1a438c8d3513a7d41b67e6353fec0188d32c018c07634c4f3fa1eba752e0bb7b67ccd1aff9579b7baa689bbcdc20d0bba3ffae509022a6c48a7008470180257a6e720a05cea0b4f045c4999ec6a5de4749e3815275e3f554e027433ff74371697963992d6e610816f761311489fe2a3b2b30b3e6d95e6e0f0bd113c1cf039794ce658ac628ef07b2b71b4a351080add5e0d5a492851a60ce1476eaee80f1d817b7362806575c516e1366b59cb2ac172cd67c376774e945b1839124d33f8211552b5f6efd2e0a3d1d3d07e378cb8827605a670fe6efb27e243af9541652117fdd8f18ddb23e947fd932cc8155a81dd85538e50eda555afa083b"}, {0x2, 0x128, 0x3, &(0x7f0000000880)="5b5c4baabbfc1889abdfde935db839e6311f6134e682b6fec1c344618eba85de45ef6c3b28"}, {0x3, 0x4f0, 0x3, &(0x7f00000008c0)="4fdb4e198853c5dfdb1f7f36e63583478123f77bb65afcb52486769b61daf2c02764d54a4a1af1e3ffdfc63d304c0c58f3f5598240aebc9d2bea322e1844ae57300e24ae77fa67c4017c7652e1d1cab078b85129850101e4610119242dfbbd13e5fdc187fc92b7e3e8f7cac4f49564c7f6b5df8540730ef68d8d04b5f40f6dec4a688fb734b399e6cb56d21b2b7499919e9462489eefb0436e1226c24cdc"}, {0x1, 0x370, 0x992, &(0x7f0000000980)="f677002b89f19c7194b36dcd717c869e7048d2ebb64f84a85fb48e960c04d579dfbefe47e271ec97ba1b69ce43e34acd51a29e02a1524f2e3a28614381357b962fc3afe62f935a27d563d11634a7332422e7a048f691a61588d886b03ae71d1c75704909f7247d4361600273c618"}, {0x1, 0x3f0, 0x0, &(0x7f0000000a00)="7b8a2ed9ec292c28ae985831913fdf43f074a23660452f7daa7c97b87dc80778f2c23bec7f98708fc00234aad876e4d9b6e241676df300854f7724202a0118ebfeee2bf6091e63f231e10f39274d6c649c98d6c9b5de7184de36f441fadb88ed7e0eee6660841a3f737537ed3074caa43c269cad3a5d9662c94988747be7"}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0x6804, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b7000000000000004e00000000000000870a00000000000095000000000c000026e1cd0bef5dc2eec87f979f205a355188cc0dc897cbb266b0cdc6429a84d7f00c11821f92cb581543330650512f0cd0183ef42629a2f5dcf115c230f8d5637385ab7caecf94abdd29f1a1c82f41ea62464d442c83400ff6fadf22d1d25b9f63f3b5945c6258b59319d9282e0ab499d7914801fcd4a00e00"/163], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="001000ffff25bd7028a32f1a3000000000000000", @ANYRES32=0x0, @ANYBLOB="2402000000200500280012800b00010065727370616e0000180002800400120006001800050000000500160002000000"], 0x48}}, 0x8000) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) (async) ioctl$KVM_X86_SET_MSR_FILTER(r0, 0x4188aec6, &(0x7f0000000a80)={0x0, [{0x0, 0x1a0, 0x1000, &(0x7f0000000140)="c15cad42c200f9a054cd6cf8f20f0f6c1237b54c83420568777c3277c525c0fa2cdf16b00f26627e5e1f5e548efafa84871ef783"}, {0x1, 0x600, 0x0, &(0x7f00000002c0)="bbc663ca777a0050ec077544225e46dc2574d5e988537623fcefa7b81b19b7f0662e249d7969379930150d01f360212544dcbb238441794f51160e8085f0fdc3f35fb7218a0fedf6bd747b864dc0b0f65f6cac448f8eec497f65bc598b51f4e08571aab4122322fc5c7ac65999363b7f42d7a05b70e08b9651157905d2186c8016d1a5ed467d42069f1648fd6bb603f8c6bf962e57490913d85e9c8b0e7512ef0670b7e0f1301ba531dcdcb7e5a0998db9e7c1b9eb043d01f673da19fb6fd457"}, {0x2, 0x90, 0x8c2, &(0x7f0000000180)="17c1affedc4b70dc02ffb0b7cd63bdd77445"}, {0x1, 0x3d8, 0x80, &(0x7f0000000380)="1917f908074e23f258b4430d5b6a95513ec4105f082328a4b65547a2469ebf8244126f187af9267c76675eae6b96cd3f1f8b9606c21740bddaaf901ffc6b4143ae07613ac7d3104336f6a586761d832a1307540f1e84997d1d6a7dbc1211c6fe1621ba11ab55731ec100365f671071da9158772e132cf8299eddc3"}, {0x2, 0x4f0, 0x6, &(0x7f0000000400)="98f370e7f4682ea32de4e5dd18e5a340b450b2291bbf769a86b6facc7cd3bb152ee91af034aa58b5535a364eb4641ddece8644c15abeb016db643c2dcd7eac92a2dd03ff0f0fa63050f214ad396f05e429a4608d450f4f0d91c0adb44005c84f89bd303332c46d0e50d091a002de6cb50664b78548c76b83b60df9d5bbb004d4cefbf2078993474e4f9bb63d68b482e44f06f7060e550ae91fabbc036e17"}, {0x5, 0x0, 0x37, &(0x7f00000001c0)}, {0x0, 0x2f0, 0x7, &(0x7f00000004c0)="d1b7c211d1fffd5970fef11ed3171a7c98327dcb76a2914066456687eafb06c9722dc40d6384ef24d4d8d1470b0aa7667921744d1e6e7b98e7d1b976a996797135299d953b92f8ab927104562560a1606b2bd896999f20fdf6b8aaabc01a"}, {0x0, 0x668, 0x59ab, &(0x7f0000000540)="5512cd2090e8eaa09c20a5269f313b4a4668f1de42ffe5ea2ca97482f1458d51add0663b1219ef72feabe93b8ee48e1963e6ef5c39c3b517b856f974102563e012402dad4986a378fa6eed2671714c046d7a2ae812d12b855ce8db335a4ffef722695b7ce286dff568120e5151ba7e89e8e728bdd4c41e166b864c48a3ca9503d49abc4ffe7a034fb4ce4ddc9da065b83763b921df96a387e63ca8a2b0c27809cf4099256520dab56a86430ab5da94425d97277984bc5a2181cbea33860504e9cbfd6b1e436b534183cbe39e90"}, {0x0, 0x188, 0x10000, &(0x7f0000000240)="28cefe9a955213fd24b1f7b439083ae1cc31377e21b0f42f692db5b07ef0c556b3041cdd10077fa9c2e1d4fd1eaacaec88"}, {0x3, 0x1f8, 0x4, &(0x7f0000000640)="7ae4f29e9c8b7fadaa1c968ad9778483201a5b775974317e91b54454f7bc30274e5d13574d5a299f1ae0bbd90d7fcb46a170e9a9ba7d19346c767b62aea381"}, {0x0, 0x688, 0x3, &(0x7f0000000680)="b757b5907ebe2739ebda4369f62f47147e08b6528cc41f0c729b96600a8c1aa995ddfed98d6e9f29b6807b6737a353a52b5c51dce6b9551985d225640ce86f455c8fdc909b7856e12eaf2b4409c7586af6d78e19a3be04707d49180ae57d6108542be89c4c95fded6cb618d20c3ae84387a05c7e5fa79d11e350735f80d36ee577c5ade62c290dfa01e99f23073c9d410fc96bfc190be0c98aa87d12cec84683a94de3fcbc3bf845448322768e6aa4c8ab472ae3b72e7078c1a6d8cd27803d0515031da80afe82bb13cbc458133416261c"}, {0x3, 0x7c8, 0xfff, &(0x7f0000000780)="1a438c8d3513a7d41b67e6353fec0188d32c018c07634c4f3fa1eba752e0bb7b67ccd1aff9579b7baa689bbcdc20d0bba3ffae509022a6c48a7008470180257a6e720a05cea0b4f045c4999ec6a5de4749e3815275e3f554e027433ff74371697963992d6e610816f761311489fe2a3b2b30b3e6d95e6e0f0bd113c1cf039794ce658ac628ef07b2b71b4a351080add5e0d5a492851a60ce1476eaee80f1d817b7362806575c516e1366b59cb2ac172cd67c376774e945b1839124d33f8211552b5f6efd2e0a3d1d3d07e378cb8827605a670fe6efb27e243af9541652117fdd8f18ddb23e947fd932cc8155a81dd85538e50eda555afa083b"}, {0x2, 0x128, 0x3, &(0x7f0000000880)="5b5c4baabbfc1889abdfde935db839e6311f6134e682b6fec1c344618eba85de45ef6c3b28"}, {0x3, 0x4f0, 0x3, &(0x7f00000008c0)="4fdb4e198853c5dfdb1f7f36e63583478123f77bb65afcb52486769b61daf2c02764d54a4a1af1e3ffdfc63d304c0c58f3f5598240aebc9d2bea322e1844ae57300e24ae77fa67c4017c7652e1d1cab078b85129850101e4610119242dfbbd13e5fdc187fc92b7e3e8f7cac4f49564c7f6b5df8540730ef68d8d04b5f40f6dec4a688fb734b399e6cb56d21b2b7499919e9462489eefb0436e1226c24cdc"}, {0x1, 0x370, 0x992, &(0x7f0000000980)="f677002b89f19c7194b36dcd717c869e7048d2ebb64f84a85fb48e960c04d579dfbefe47e271ec97ba1b69ce43e34acd51a29e02a1524f2e3a28614381357b962fc3afe62f935a27d563d11634a7332422e7a048f691a61588d886b03ae71d1c75704909f7247d4361600273c618"}, {0x1, 0x3f0, 0x0, &(0x7f0000000a00)="7b8a2ed9ec292c28ae985831913fdf43f074a23660452f7daa7c97b87dc80778f2c23bec7f98708fc00234aad876e4d9b6e241676df300854f7724202a0118ebfeee2bf6091e63f231e10f39274d6c649c98d6c9b5de7184de36f441fadb88ed7e0eee6660841a3f737537ed3074caa43c269cad3a5d9662c94988747be7"}]}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async) openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0x6804, 0x0) (async) close(0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b7000000000000004e00000000000000870a00000000000095000000000c000026e1cd0bef5dc2eec87f979f205a355188cc0dc897cbb266b0cdc6429a84d7f00c11821f92cb581543330650512f0cd0183ef42629a2f5dcf115c230f8d5637385ab7caecf94abdd29f1a1c82f41ea62464d442c83400ff6fadf22d1d25b9f63f3b5945c6258b59319d9282e0ab499d7914801fcd4a00e00"/163], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9}, 0x94) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="001000ffff25bd7028a32f1a3000000000000000", @ANYRES32=0x0, @ANYBLOB="2402000000200500280012800b00010065727370616e0000180002800400120006001800050000000500160002000000"], 0x48}}, 0x8000) (async) 816.268933ms ago: executing program 1 (id=3192): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = io_uring_setup(0x22cc, &(0x7f0000000100)={0x0, 0x9b3b, 0xc000, 0x2, 0x2f7}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f00000000c0)=[0x4, 0xbb59], 0x2) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@cred={{0x1c}}], 0x20}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x1010401, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0xd0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x42000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000240)={0x3, 0x1ff, 0xf}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x9, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x10081, 0x692, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r3, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1ff, 0x1000) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205647, &(0x7f00000001c0)={0x4, 0x1, 0x8ad9, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980903, 0x4, '\x00', @ptr=0xe}}) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 736.645728ms ago: executing program 1 (id=3193): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = shmget(0x2, 0x1000, 0x10, &(0x7f00004aa000/0x1000)=nil) shmat(r0, &(0x7f00007de000/0x3000)=nil, 0x2000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r1 = syz_io_uring_setup(0x3179, &(0x7f0000000000)={0x0, 0x75da, 0x10000, 0x0, 0x303}, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x10010, r1, 0x8000000) 656.730149ms ago: executing program 1 (id=3194): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4001000010000100000000000000000000000000000000000000000000000000fe8000000b00000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000006c00000064010100000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000008000000000000000000000000000000ffffff7f00000000000000002dbd7000ff340000020004000000000000000000480003006465666c61746500"], 0x140}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000000000000000000000002fa7", @ANYRES32=r3, @ANYBLOB="56060900000000001c00128009000100626f6e64000000000c0002800800030008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x0) 516.496801ms ago: executing program 1 (id=3195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x20, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) (async, rerun: 64) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) (rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xfffffffffffffffd, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x10433}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x2}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x800}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) 126.603422ms ago: executing program 3 (id=3196): socket$netlink(0x10, 0x3, 0xc) (async) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x63, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x8}}}}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') writev(r2, &(0x7f0000001380)=[{&(0x7f0000000340)="f5", 0x1}], 0x1) (async) writev(r2, &(0x7f0000001380)=[{&(0x7f0000000340)="f5", 0x1}], 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0x100, r3}, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0x100, r3}, 0x0) landlock_restrict_self(r1, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) (async) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f00000002c0)={0x20, r5}, 0x0) landlock_restrict_self(r4, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) unshare(0x48020200) (async) unshare(0x48020200) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x200) (async) sendfile(r9, r9, 0x0, 0x200) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x88, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x66, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_ID={0x0, 0xc, 0x1, 0x0, 0x3}, @CTA_ZONE={0xff09, 0x12, 0x1, 0x0, 0x3}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$SW_SYNC_IOC_INC(r8, 0x40045701, &(0x7f0000000040)=0x3) 126.217883ms ago: executing program 7 (id=3197): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x2, 0x0, 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newnexthop={0x54, 0x68, 0x100, 0x70bd25, 0x25dfdbfd, {0xa, 0x0, 0x7, 0x0, 0xc}, [@NHA_GROUP={0x1c, 0x2, [{0x2, 0x7}, {0x2, 0x2}, {0x2, 0x37}]}, @NHA_GATEWAY={0x14, 0x6, @ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x7}]}]}, 0x54}}, 0x0) 125.92633ms ago: executing program 2 (id=3198): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="402205"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000005c0)={0x0, 0x2, 0x0, 0x0}) (async) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) 5.907412ms ago: executing program 7 (id=3199): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000016, 0x12, r0, 0xb0b77000) 0s ago: executing program 1 (id=3200): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/binder1\x00', 0xc00, 0x0) keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000200)='i\xacl*c\x822') syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x3) futex(&(0x7f000000cffc), 0x7, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f00000004c0), 0x4, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRESHEX, @ANYRES64=r1], 0x40}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2a, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0x0, 0x7ffe}, 0x80, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r2, 0x3ba0, &(0x7f0000000300)={0x48, 0xb, 0xffffffffffffffff, 0x0, r5}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYRESHEX=r3, @ANYRES32=r5], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000b80)='tlb_flush\x00', r7}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c00000000201010200000000000000000300000108000340000000041c0010800800024000000007080003400000000808000240000000030c001980"], 0xc0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) finit_module(r2, 0x0, 0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x4080) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 0s ago: executing program 1 (id=3201): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi0\x00', 0x143000, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x4000000, 0x19, 0x0, 0x0, 0x7}]}) kernel console output (not intermixed with test programs): b 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.640540][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.643186][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.646161][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.650004][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.653514][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.656035][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.658954][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.661755][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.664700][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.667727][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.671044][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.674703][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.677796][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.680588][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.683265][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.686091][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.689583][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.692183][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.695349][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.698285][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.701475][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.704274][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.707030][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.710213][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.713395][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.716420][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.719281][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.722216][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.724992][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.728014][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.731135][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.734086][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.736777][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.739732][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.742678][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.745639][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.748582][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.751393][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.754577][T13634] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.761220][T13633] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 231.767373][ T29] usb 12-1: USB disconnect, device number 8 [ 232.051558][ T8040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.057886][ T8040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.063458][ T8040] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 232.070294][ T8040] bond0 (unregistering): Released all slaves [ 232.078001][ T8040] bond1 (unregistering): Released all slaves [ 232.090613][ T8040] bond2 (unregistering): Released all slaves [ 232.101952][ T8040] bond3 (unregistering): Released all slaves [ 232.113367][ T24] xfrm0 speed is unknown, defaulting to 1000 [ 232.117027][ T24] syz1: Port: 1 Link DOWN [ 232.248531][T13595] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 232.258106][T13595] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 232.266443][T13595] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 232.271400][T13595] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 232.306554][T13688] binder: Unknown parameter 'fowner' [ 232.315839][T13595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.325279][T13595] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.336279][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.338687][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.342666][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.345241][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.352208][T13675] /dev/sr0: Can't open blockdev [ 232.401014][T13698] gfs2: gfs2 mount does not exist [ 232.423731][T13703] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2267'. [ 232.498585][ T5947] Bluetooth: hci4: command tx timeout [ 232.501070][T13595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.527348][T13595] veth0_vlan: entered promiscuous mode [ 232.539160][T13595] veth1_vlan: entered promiscuous mode [ 232.557828][T13595] veth0_macvtap: entered promiscuous mode [ 232.564290][T13595] veth1_macvtap: entered promiscuous mode [ 232.576325][T13595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.584950][T13595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.595390][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.598251][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.606959][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.610816][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.655284][ T8050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.657918][ T8050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.676653][ T8050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.680129][ T8050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.631620][ T6005] net_ratelimit: 13 callbacks suppressed [ 233.631634][ T6005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.487241][T13784] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 234.588773][ T5947] Bluetooth: hci4: command tx timeout [ 234.660559][ T6005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.706803][T13794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.710812][T13794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.714262][T13794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.717814][T13794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.721061][T13794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.724527][T13794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.727382][T13794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.732569][T13792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.811184][T13795] netlink: 'syz.7.2281': attribute type 63 has an invalid length. [ 234.814176][T13795] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2281'. [ 234.817235][T13795] gretap0: entered allmulticast mode [ 234.946167][T13808] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2287'. [ 235.035142][T13814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=13814 comm=syz.8.2290 [ 235.100152][T13815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=13815 comm=syz.8.2290 [ 235.906036][T13817] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1013 sclass=netlink_tcpdiag_socket pid=13817 comm=syz.8.2291 [ 236.035369][ T40] audit: type=1400 audit(1767924142.148:840): avc: denied { bind } for pid=13822 comm="syz.3.2294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 236.181124][T13823] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 236.658776][ T5947] Bluetooth: hci4: command tx timeout [ 237.136323][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053e45800: rx timeout, send abort [ 237.245929][ T40] audit: type=1400 audit(1767924143.358:841): avc: denied { write } for pid=13846 comm="syz.8.2300" path="socket:[54933]" dev="sockfs" ino=54933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 237.538283][T13856] FAT-fs (sr0): bogus number of reserved sectors [ 237.541722][T13856] FAT-fs (sr0): Can't find a valid FAT filesystem [ 237.635422][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053e72000: rx timeout, send abort [ 237.639205][ T40] audit: type=1400 audit(1767924143.758:842): avc: denied { setattr } for pid=13859 comm="syz.8.2304" name="pfkey" dev="proc" ino=4026534652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 237.641660][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053e45800: abort rx timeout. Force session deactivation [ 237.649083][ T40] audit: type=1400 audit(1767924143.758:843): avc: denied { ioctl } for pid=13859 comm="syz.8.2304" path="/dev/uhid" dev="devtmpfs" ino=1296 ioctlcmd=0x9403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 238.137954][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053e72000: abort rx timeout. Force session deactivation [ 238.418392][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053e70400: rx timeout, send abort [ 238.421270][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053e73400: rx timeout, send abort [ 238.424107][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888053e70400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 238.428675][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888053e73400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 238.529870][T13876] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2309'. [ 238.532617][T13876] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2309'. [ 238.535334][T13876] netlink: 'syz.8.2309': attribute type 7 has an invalid length. [ 238.738651][ T5947] Bluetooth: hci4: command tx timeout [ 238.832835][ T6005] net_ratelimit: 19 callbacks suppressed [ 238.832853][ T6005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.773317][T13897] PM: Enabling pm_trace changes system date and time during resume. [ 239.773317][T13897] PM: Correct system time has to be restored manually after resume. [ 239.811095][T13899] sctp: [Deprecated]: syz.3.2316 (pid 13899) Use of int in maxseg socket option. [ 239.811095][T13899] Use struct sctp_assoc_value instead [ 239.871166][ T6021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.879874][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2318'. [ 239.971271][T13907] netlink: 'syz.8.2319': attribute type 12 has an invalid length. [ 239.974523][T13907] netlink: 'syz.8.2319': attribute type 29 has an invalid length. [ 239.977667][T13907] netlink: 260 bytes leftover after parsing attributes in process `syz.8.2319'. [ 240.072778][T13915] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2322'. [ 240.234375][T13920] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2324'. [ 240.238193][T13920] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2324'. [ 240.353474][T13936] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2327'. [ 240.376022][T13936] macvlan2: entered promiscuous mode [ 240.377924][T13936] macvlan2: entered allmulticast mode [ 240.382404][T13936] bond2: entered promiscuous mode [ 240.384891][T13936] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 240.390154][T13936] bond2: left promiscuous mode [ 240.501638][T13943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.504922][T13943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.507717][T13943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.511278][T13943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.514260][T13943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.518059][T13943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.521775][T13943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.541606][ T40] audit: type=1400 audit(1767924146.658:844): avc: denied { listen } for pid=13944 comm="syz.7.2331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 240.548619][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.566596][ T40] audit: type=1400 audit(1767924146.678:845): avc: denied { accept } for pid=13944 comm="syz.7.2331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 240.621252][T13949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=13949 comm=syz.8.2330 [ 241.357034][T13963] random: crng reseeded on system resumption [ 241.394469][T13968] bridge0: port 3(veth0_to_bridge) entered blocking state [ 241.397076][T13968] bridge0: port 3(veth0_to_bridge) entered disabled state [ 241.400943][T13968] veth0_to_bridge: entered allmulticast mode [ 241.405157][T13968] veth0_to_bridge: entered promiscuous mode [ 241.407222][T13968] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 241.413025][T13968] bridge0: port 3(veth0_to_bridge) entered blocking state [ 241.415379][T13968] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 241.469750][T13970] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2337'. [ 241.514716][ T40] audit: type=1400 audit(1767924147.628:846): avc: denied { setattr } for pid=13978 comm="syz.8.2339" name="file1" dev="overlay" ino=558 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 241.580451][ T40] audit: type=1400 audit(1767924147.698:847): avc: denied { ioctl } for pid=13983 comm="syz.7.2341" path="socket:[59069]" dev="sockfs" ino=59069 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 241.590234][T13985] program syz.8.2342 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.972636][ T40] audit: type=1400 audit(1767924148.088:848): avc: denied { getattr } for pid=14003 comm="syz.8.2346" name="[io_uring]" dev="anon_inodefs" ino=55122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 242.436698][T14010] overlayfs: missing 'workdir' [ 242.782477][T14028] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2352'. [ 242.787003][T14030] SELinux: security policydb version 17 (MLS) not backwards compatible [ 242.787032][T14030] SELinux: failed to load policy [ 242.787167][T14031] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 242.787182][T14031] PKCS7: Only support pkcs7_signedData type [ 243.642082][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 243.646486][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 243.652539][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 243.656169][ T5944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 243.660230][ T5944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 243.678267][T14049] mmap: syz.3.2360 (14049): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 243.738233][T14056] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2359'. [ 243.746489][T14058] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 243.749522][T14051] ip6gretap1: entered promiscuous mode [ 243.751609][T14051] ip6gretap1: entered allmulticast mode [ 243.753010][T14058] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 243.758374][T14058] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 243.827484][ T40] audit: type=1400 audit(1767924149.938:849): avc: denied { search } for pid=14055 comm="syz.3.2362" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 243.835668][ T40] audit: type=1400 audit(1767924149.938:850): avc: denied { search } for pid=14055 comm="syz.3.2362" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 243.844017][ T40] audit: type=1400 audit(1767924149.938:851): avc: denied { search } for pid=14055 comm="syz.3.2362" name="/" dev="overlay" ino=2305843009213693954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 243.862088][T14045] chnl_net:caif_netlink_parms(): no params data found [ 243.886185][T14071] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 243.891179][T14071] overlayfs: failed to set xattr on upper [ 243.893253][T14071] overlayfs: ...falling back to redirect_dir=nofollow. [ 243.898581][T14071] overlayfs: ...falling back to index=off. [ 243.906775][T14071] overlayfs: ...falling back to uuid=null. [ 243.910305][T14071] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 243.941123][T14045] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.944024][T14045] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.946991][T14045] bridge_slave_0: entered allmulticast mode [ 243.950293][T14045] bridge_slave_0: entered promiscuous mode [ 243.954130][T14045] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.957149][T14045] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.960348][T14045] bridge_slave_1: entered allmulticast mode [ 243.963497][T14045] bridge_slave_1: entered promiscuous mode [ 243.980402][T14045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.987531][T14045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.016549][T14045] team0: Port device team_slave_0 added [ 244.025445][T14045] team0: Port device team_slave_1 added [ 244.031818][ T6021] net_ratelimit: 204 callbacks suppressed [ 244.031830][ T6021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.047583][T14045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.051305][T14045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.059765][T14045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.068809][T14045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.071191][T14045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.079754][T14045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.117186][T14045] hsr_slave_0: entered promiscuous mode [ 244.120765][T14045] hsr_slave_1: entered promiscuous mode [ 244.123593][T14045] debugfs: 'hsr0' already exists in 'hsr' [ 244.125716][T14045] Cannot create hsr debugfs directory [ 244.168359][T14099] nbd: socks must be embedded in a SOCK_ITEM attr [ 244.288764][ T7453] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 244.448805][ T7453] usb 12-1: Using ep0 maxpacket: 8 [ 244.452213][ T7453] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 244.454935][ T7453] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 244.459183][ T7453] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 244.463034][ T7453] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 244.466539][ T7453] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 244.470685][ T7453] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 244.473171][ T7453] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 244.476701][ T7453] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 244.480578][ T7453] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 244.484323][ T7453] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 244.488279][ T7453] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 244.490821][ T7453] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 244.494459][ T7453] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 244.498300][ T7453] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 244.502255][ T7453] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 244.507893][ T7453] usb 12-1: string descriptor 0 read error: -22 [ 244.510359][ T7453] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 244.513205][ T7453] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.520733][ T7453] adutux 12-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 244.737523][ T6021] usb 12-1: USB disconnect, device number 9 [ 244.866560][T14045] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 244.876473][T14045] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 244.883271][T14045] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 244.888154][T14045] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 244.972720][T14045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.978773][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.982615][T14045] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.991043][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.993444][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.000165][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.003135][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.061206][ T6005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.123471][T14045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.140742][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.147809][T14045] veth0_vlan: entered promiscuous mode [ 245.153348][T14045] veth1_vlan: entered promiscuous mode [ 245.169754][T14045] veth0_macvtap: entered promiscuous mode [ 245.174372][T14045] veth1_macvtap: entered promiscuous mode [ 245.185439][T14045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.193038][T14045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.201128][ T6677] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.203879][ T6677] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.207426][ T6677] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.212517][ T6677] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.254726][T11902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.266970][T11902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.280823][T14174] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2377'. [ 245.284049][ T6677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.286531][ T6677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.287980][T14174] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2377'. [ 245.368940][T14185] input: syz0 as /devices/virtual/input/input29 [ 245.698675][ T5947] Bluetooth: hci2: command tx timeout [ 245.698675][ T34] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 245.763352][ T40] audit: type=1400 audit(1767924151.878:852): avc: denied { append } for pid=14210 comm="syz.2.2384" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 245.848545][ T34] usb 12-1: Using ep0 maxpacket: 8 [ 245.852315][ T34] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 245.856389][ T34] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 245.860865][ T34] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 245.864653][ T34] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.870626][ T34] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 245.873938][ T34] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.993058][ T4837] IPVS: starting estimator thread 0... [ 246.025093][T14222] tipc: Started in network mode [ 246.027117][T14222] tipc: Node identity 84e, cluster identity 4711 [ 246.029855][T14222] tipc: Node number set to 2126 [ 246.078927][T14220] IPVS: using max 46 ests per chain, 110400 per kthread [ 246.081773][ T34] usb 12-1: GET_CAPABILITIES returned 0 [ 246.084316][ T34] usbtmc 12-1:16.0: can't read capabilities [ 246.100665][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.595995][T14225] netlink: 'syz.2.2389': attribute type 2 has an invalid length. [ 247.139287][ T6021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.511730][T14256] tipc: Enabled bearer , priority 0 [ 247.523286][T14254] tipc: Disabling bearer [ 247.649052][T14261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2400'. [ 247.676512][T14265] xt_l2tp: v2 sid > 0xffff: 1114112 [ 247.686324][T14265] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 247.689852][T14265] overlayfs: failed to set xattr on upper [ 247.692589][T14265] overlayfs: ...falling back to redirect_dir=nofollow. [ 247.695652][T14265] overlayfs: ...falling back to index=off. [ 247.698300][T14265] overlayfs: ...falling back to uuid=null. [ 247.701232][T14265] overlayfs: ...falling back to xino=off. [ 247.703832][T14265] overlayfs: conflicting lowerdir path [ 247.778655][ T5947] Bluetooth: hci2: command tx timeout [ 247.917849][T14288] cgroup: Setting release_agent not allowed [ 247.967663][T14291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2408'. [ 247.971068][T14291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2408'. [ 248.019362][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.100200][T14299] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2411'. [ 248.109521][T14299] syzkaller1: entered promiscuous mode [ 248.111598][T14299] syzkaller1: entered allmulticast mode [ 248.195699][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.468272][ T59] usb 12-1: USB disconnect, device number 10 [ 248.501038][ T40] audit: type=1400 audit(1767924154.618:853): avc: denied { setattr } for pid=14305 comm="syz.7.2413" name="L2CAP" dev="sockfs" ino=62802 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 248.726145][T14321] SELinux: failed to load policy [ 248.796145][T14332] bond0: entered promiscuous mode [ 248.798173][T14332] bond_slave_0: entered promiscuous mode [ 248.800813][T14332] bond_slave_1: entered promiscuous mode [ 248.807192][T14332] batadv0: entered promiscuous mode [ 248.810118][T14332] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 248.819988][T14332] bond0: left promiscuous mode [ 248.821729][T14332] bond_slave_0: left promiscuous mode [ 248.823727][T14332] bond_slave_1: left promiscuous mode [ 248.826260][T14332] batadv0: left promiscuous mode [ 249.088917][T14353] overlayfs: workdir and upperdir must be separate subtrees [ 249.151643][ T40] audit: type=1400 audit(1767924155.268:854): avc: denied { relabelfrom } for pid=14367 comm="syz.3.2433" name="" dev="pipefs" ino=60218 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 249.166291][T14368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2433'. [ 249.229469][T14379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14379 comm=syz.7.2437 [ 249.232449][ T6021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.236057][T14379] EXT4-fs (nbd7): unable to read superblock [ 249.447188][T14404] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2444'. [ 249.466184][T14406] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.524868][T14409] xt_hashlimit: invalid rate [ 249.563192][T14416] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 249.836931][ T40] audit: type=1400 audit(1767924155.948:855): avc: denied { validate_trans } for pid=14427 comm="syz.3.2453" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 249.848632][ T29] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 249.859891][ T5947] Bluetooth: hci2: command tx timeout [ 249.998746][ T29] usb 12-1: Using ep0 maxpacket: 16 [ 250.002569][ T29] usb 12-1: config index 0 descriptor too short (expected 65, got 36) [ 250.005578][ T29] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 250.010834][ T29] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 126, changing to 10 [ 250.015745][ T29] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 34720, setting to 1024 [ 250.020854][ T29] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.025490][ T29] usb 12-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 250.029609][ T29] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.035827][ T29] usb 12-1: config 0 descriptor?? [ 250.038893][T14418] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 250.044758][ T29] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/input/input30 [ 250.261833][ T6021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.269190][ T29] usb 12-1: USB disconnect, device number 11 [ 250.442914][T14438] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2456'. [ 250.447314][ T5947] Bluetooth: unknown link type 160 [ 250.447848][T14440] netlink: 'syz.2.2457': attribute type 1 has an invalid length. [ 250.449669][ T5947] Bluetooth: hci2: connection err: -111 [ 250.774121][T14455] syzkaller0: entered promiscuous mode [ 250.776169][T14455] syzkaller0: entered allmulticast mode [ 250.932335][ T40] audit: type=1800 audit(1767924157.048:856): pid=14462 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.2463" name="file0" dev="9p" ino=71827727 res=0 errno=0 [ 250.967786][ T40] audit: type=1400 audit(1767924157.078:857): avc: denied { remove_name } for pid=14461 comm="syz.7.2463" name="file0" dev="9p" ino=71827727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 250.975356][ T40] audit: type=1400 audit(1767924157.078:858): avc: denied { unlink } for pid=14461 comm="syz.7.2463" name="file0" dev="9p" ino=71827727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 250.983018][ T40] audit: type=1400 audit(1767924157.088:859): avc: denied { create } for pid=14461 comm="syz.7.2463" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 251.011069][ T40] audit: type=1400 audit(1767924157.118:860): avc: denied { rmdir } for pid=14461 comm="syz.7.2463" name="file0" dev="9p" ino=71827927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 251.058775][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.220314][ T29] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 251.304848][ T6021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.938565][ T5947] Bluetooth: hci2: command tx timeout [ 252.259850][ T29] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 252.350824][ T6021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.454453][T14475] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2467'. [ 252.472696][T14475] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2467'. [ 252.476434][T14475] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2467'. [ 252.635724][ T40] audit: type=1400 audit(1767924158.748:861): avc: denied { listen } for pid=14487 comm="syz.2.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 252.703709][T14495] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 252.736793][ T40] audit: type=1400 audit(1767924158.848:862): avc: denied { getopt } for pid=14496 comm="syz.7.2474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 252.742039][T14497] tmpfs: Invalid uid '0x00000000ffffffff' [ 252.775706][T14501] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 253.056250][T14510] bond3: option downdelay: invalid value (18446744073709551615) [ 253.058987][T14510] bond3: option downdelay: allowed values 0 - 2147483647 [ 253.063443][T14510] bond3 (unregistering): Released all slaves [ 253.148084][T14510] netlink: 'syz.7.2478': attribute type 1 has an invalid length. [ 253.150959][T14510] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2478'. [ 253.300233][ T29] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 253.364561][T14514] netlink: 'syz.7.2479': attribute type 29 has an invalid length. [ 253.380899][ T6021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.406809][T14517] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 253.440833][T14519] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2481'. [ 253.520414][T14521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=14521 comm=syz.7.2482 [ 253.731244][T14538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2486'. [ 253.840140][T14547] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 254.109418][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.257649][ C2] ata1: illegal qc_active transition (00000000->00400000) [ 254.349695][ T29] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.420634][ T6021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.580451][ T1113] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 254.583837][ T1113] ata1.00: configured for UDMA/100 [ 254.739514][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.824250][T14602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.824928][T14604] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2497'. [ 255.001439][T14623] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2506'. [ 255.018713][T14614] block nbd1: server does not support multiple connections per device. [ 255.021617][T14614] block nbd1: shutting down sockets [ 255.289327][T14644] 0xfffffffffffffffd-0x000000020000 : "" [ 255.292175][T14644] mtd: partition "" is out of reach -- disabled [ 255.298451][T14644] ftl_cs: FTL header not found. [ 255.379330][ T6020] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 255.379673][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 255.379683][ T40] audit: type=1400 audit(1767924161.498:867): avc: denied { write } for pid=14657 comm="syz.2.2516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 255.470529][ T6021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.486324][T14660] netlink: 'syz.7.2517': attribute type 3 has an invalid length. [ 255.544405][T14668] netlink: 'syz.2.2519': attribute type 3 has an invalid length. [ 255.546906][T14668] netlink: 'syz.2.2519': attribute type 1 has an invalid length. [ 255.551612][T14668] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2519'. [ 255.554760][T14668] NCSI netlink: No device for ifindex 813332851 [ 255.838199][T14697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2530'. [ 255.878047][T14700] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2531'. [ 256.068887][T14709] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2533'. [ 256.072687][T14709] netlink: Unknown conntrack attr (0) [ 256.192781][T14712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2534'. [ 256.195758][T14712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2534'. [ 256.199068][T14712] netlink: 'syz.3.2534': attribute type 13 has an invalid length. [ 256.240183][T14712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2534'. [ 256.243329][T14712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2534'. [ 256.246259][T14712] netlink: 'syz.3.2534': attribute type 13 has an invalid length. [ 256.419280][ T6020] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 256.511184][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.665626][ T34] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 257.139002][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.440807][T14732] input: syz0 as /devices/virtual/input/input31 [ 257.471170][ T29] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 257.528964][T14735] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 257.541055][ T6021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.720512][T14740] netlink: 'syz.7.2543': attribute type 10 has an invalid length. [ 257.890871][T14751] nfs: Unknown parameter '€' [ 257.949443][ T6676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.955257][ T6021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.317384][T14784] xt_cgroup: path and classid specified [ 258.393418][T14793] netlink: 'syz.3.2558': attribute type 11 has an invalid length. [ 258.511425][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 258.748976][T14756] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 258.751631][T14756] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 258.754468][T14756] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 258.758778][T14756] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 258.761090][T14756] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 258.763859][T14756] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 258.799089][ T6021] Process accounting resumed [ 258.821288][ T40] audit: type=1400 audit(1767924164.938:868): avc: denied { mounton } for pid=14800 comm="syz.3.2560" path="/87/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 258.821347][T14801] 9pnet_virtio: no channels available for device syz [ 258.834375][T14801] vivid-002: ================= START STATUS ================= [ 258.838064][T14801] vivid-002: Radio HW Seek Mode: Bounded [ 258.843917][T14801] vivid-002: Radio Programmable HW Seek: false [ 258.846423][T14801] vivid-002: RDS Rx I/O Mode: Block I/O [ 258.848193][T14801] vivid-002: Generate RBDS Instead of RDS: false [ 258.850475][T14801] vivid-002: RDS Reception: true [ 258.852096][T14801] vivid-002: RDS Program Type: 0 inactive [ 258.854143][T14801] vivid-002: RDS PS Name: inactive [ 258.856434][T14801] vivid-002: RDS Radio Text: inactive [ 258.858840][T14801] vivid-002: RDS Traffic Announcement: false inactive [ 258.861586][T14801] vivid-002: RDS Traffic Program: false inactive [ 258.863579][T14801] vivid-002: RDS Music: false inactive [ 258.865747][T14801] vivid-002: ================== END STATUS ================== [ 258.894161][T14798] Process accounting resumed [ 258.993105][T14809] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 258.993105][T14809] program syz.3.2563 not setting count and/or reply_len properly [ 259.010044][ T5944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 259.017391][ T5944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 259.024933][ T5944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 259.029475][ T5944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 259.032670][ T5944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 259.148558][ T6021] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 259.152902][ T59] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 259.162477][T14811] chnl_net:caif_netlink_parms(): no params data found [ 259.220470][ T8049] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 259.224688][T11902] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 259.246449][T14811] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.248934][T14811] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.251766][T14811] bridge_slave_0: entered allmulticast mode [ 259.254485][T14811] bridge_slave_0: entered promiscuous mode [ 259.257841][T14811] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.260402][T14811] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.262814][T14811] bridge_slave_1: entered allmulticast mode [ 259.265507][T14811] bridge_slave_1: entered promiscuous mode [ 259.283346][T14811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.288203][T14811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.291395][ T6021] usb 7-1: device descriptor read/64, error -71 [ 259.308761][ T59] usb 12-1: Using ep0 maxpacket: 8 [ 259.312237][T14811] team0: Port device team_slave_0 added [ 259.315862][T14811] team0: Port device team_slave_1 added [ 259.319324][ T59] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 259.321795][ T59] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 259.325426][ T59] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 259.329373][ T59] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 259.332825][ T59] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 259.337002][ T59] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 259.339903][ T59] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 259.340144][T14811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.343369][ T59] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 259.346386][T14811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.350471][ T59] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 259.350490][ T59] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 259.351298][ T59] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 259.361326][T14811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.364946][ T59] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 259.370830][T14811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.371348][ T59] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 259.375767][T14811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.379554][ T59] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 259.382548][T14811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.386299][ T59] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 259.410634][ T59] usb 12-1: string descriptor 0 read error: -22 [ 259.412689][ T59] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 259.415493][ T59] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.421700][ T59] adutux 12-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 259.426417][T14811] hsr_slave_0: entered promiscuous mode [ 259.429103][T14811] hsr_slave_1: entered promiscuous mode [ 259.431379][T14811] debugfs: 'hsr0' already exists in 'hsr' [ 259.433203][T14811] Cannot create hsr debugfs directory [ 259.529364][T14811] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.532842][T14811] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.539502][ T6021] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 259.629210][ T59] net_ratelimit: 4 callbacks suppressed [ 259.629227][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.653892][T14811] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.657478][T14811] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.668653][ T6021] usb 7-1: device descriptor read/64, error -71 [ 259.713201][T14806] netlink: 'syz.7.2564': attribute type 32 has an invalid length. [ 259.722384][T14811] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.725763][T14811] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.746911][T14806] bond3: Setting coupled_control to off (0) [ 259.751911][ T40] audit: type=1326 audit(1767924165.868:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14805 comm="syz.7.2564" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f620e78f7c9 code=0x0 [ 259.779169][ T6021] usb usb7-port1: attempt power cycle [ 259.802508][T14811] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.805877][T14811] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.906694][T14811] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 259.921614][T14811] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 259.926967][T14811] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 259.931817][T14811] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 259.949598][T14811] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.952217][T14811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.954683][T14811] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.957101][T14811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.988059][T14811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.997271][ T8056] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.001673][ T8056] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.011227][T14811] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.017577][ T8042] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.019953][ T8042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.026582][ T8056] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.029027][ T8056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.098652][ T5944] Bluetooth: hci4: command 0x0c1a tx timeout [ 260.118634][ T6021] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 260.139523][ T6021] usb 7-1: device descriptor read/8, error -71 [ 260.141615][T14811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.170234][T14811] veth0_vlan: entered promiscuous mode [ 260.175252][T14811] veth1_vlan: entered promiscuous mode [ 260.179827][ T8042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.184538][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.188508][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.191597][T14811] veth0_macvtap: entered promiscuous mode [ 260.200437][T14811] veth1_macvtap: entered promiscuous mode [ 260.210057][T14811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.216705][T14811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.223505][ T6676] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.226424][ T6676] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.231009][ T6676] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.233866][ T6676] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.274564][ T8042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.277141][ T8042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.292828][ T6676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.295503][ T6676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.339900][T14839] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 260.383391][T14839] syzkaller0: entered promiscuous mode [ 260.385158][T14839] syzkaller0: entered allmulticast mode [ 260.397868][T14839] tipc: Started in network mode [ 260.399861][T14839] tipc: Node identity be697919949a, cluster identity 4711 [ 260.402302][T14839] tipc: Enabled bearer , priority 0 [ 260.405242][T14839] netlink: 'syz.1.2565': attribute type 1 has an invalid length. [ 260.407873][T14839] __nla_validate_parse: 6 callbacks suppressed [ 260.407882][T14839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2565'. [ 260.408606][ T6021] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 260.416700][T14838] tipc: Resetting bearer [ 260.429068][ T6021] usb 7-1: device descriptor read/8, error -71 [ 260.429157][T14838] tipc: Disabling bearer [ 260.549305][ T6021] usb usb7-port1: unable to enumerate USB device [ 260.671374][ T6021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.828666][ T5944] Bluetooth: hci2: command 0x0c1a tx timeout [ 261.068844][ T5944] Bluetooth: hci3: command tx timeout [ 261.140958][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.143073][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.712801][ T6021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.930751][ T29] usb 12-1: USB disconnect, device number 12 [ 262.181680][ T5944] Bluetooth: hci4: command 0x0c1a tx timeout [ 262.231939][T14849] macvlan0: entered allmulticast mode [ 262.234310][T14849] veth1_vlan: entered allmulticast mode [ 262.239772][T14849] pim6reg: entered allmulticast mode [ 262.243658][T14849] veth1_vlan: left allmulticast mode [ 262.393880][T14851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2573'. [ 262.393903][T14852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2573'. [ 262.410844][T14849] macvlan0 (unregistering): left allmulticast mode [ 262.418148][ T40] audit: type=1400 audit(1767924168.528:870): avc: denied { read } for pid=14850 comm="syz.2.2573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 262.544524][ T40] audit: type=1400 audit(1767924168.658:871): avc: denied { accept } for pid=14871 comm="syz.1.2578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 262.584461][T14875] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2579'. [ 262.650160][T14883] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2581'. [ 262.714148][T14895] sp0: Synchronizing with TNC [ 262.719088][T14895] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2584'. [ 262.725683][T14895] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2584'. [ 262.739403][T14894] [U] è [ 262.744870][ T6021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.769537][T14899] F2FS-fs (nbd7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 262.772668][T14899] F2FS-fs (nbd7): Can't find valid F2FS filesystem in 1th superblock [ 262.775881][T14899] F2FS-fs (nbd7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 262.778384][T14899] F2FS-fs (nbd7): Can't find valid F2FS filesystem in 2th superblock [ 262.815258][T14904] netlink: 'syz.7.2588': attribute type 4 has an invalid length. [ 262.829688][T14897] dlm: no locking on control device [ 262.860581][T14904] XFS (nbd7): SB validate failed with error -5. [ 262.869025][T14913] xt_cgroup: invalid path, errno=-2 [ 262.900853][ T5944] Bluetooth: hci2: command 0x0c1a tx timeout [ 262.975781][T14924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2592'. [ 263.012450][T14927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2067 sclass=netlink_route_socket pid=14927 comm=syz.2.2594 [ 263.060382][ T40] audit: type=1804 audit(1767924169.178:872): pid=14929 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2595" name="/newroot/4/file0" dev="tmpfs" ino=40 res=1 errno=0 [ 263.094729][T14930] pim6reg9: entered allmulticast mode [ 263.139327][ T5944] Bluetooth: hci3: command tx timeout [ 263.232562][T14936] trusted_key: encrypted_key: insufficient parameters specified [ 263.260898][T14940] Malformed UNC in devname [ 263.260898][T14940] [ 263.263002][T14940] CIFS: VFS: Malformed UNC in devname [ 263.528613][ T40] audit: type=1400 audit(1767924169.648:873): avc: denied { read } for pid=14957 comm="syz.1.2604" dev="sockfs" ino=67637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 263.645084][T14914] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 263.647389][T14914] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 263.649761][T14914] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 263.652445][T14914] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 263.674502][T14914] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 263.699193][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 263.701645][ T8050] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 263.703623][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 263.708755][ T1143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 263.791235][T14966] kAFS: unable to lookup cell '~yz0' [ 263.851679][T14975] binder: Unknown parameter 'obj_user' [ 263.971368][T14985] netlink: 'syz.2.2612': attribute type 1 has an invalid length. [ 263.999678][T14985] 8021q: adding VLAN 0 to HW filter on device bond1 [ 264.027036][T14985] bond1: (slave geneve2): making interface the new active one [ 264.031843][T14985] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 264.181068][T15000] x_tables: ip6_tables: CT target: only valid in raw table, not syz1 [ 264.628291][T15022] netlink: 'syz.1.2622': attribute type 39 has an invalid length. [ 264.638607][ C1] net_ratelimit: 3917 callbacks suppressed [ 264.638621][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 264.644949][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 264.649206][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 264.653231][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 264.657247][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 264.661868][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 264.665966][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 264.670369][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 264.674849][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 264.679660][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 264.989780][ T8056] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 264.995363][ T6673] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 265.058819][ T5944] Bluetooth: hci4: command 0x0c1a tx timeout [ 265.163671][ T40] audit: type=1400 audit(1767924171.278:874): avc: denied { cmd } for pid=15033 comm="syz.7.2626" path="/344/file0" dev="tmpfs" ino=1846 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 265.189908][ T40] audit: type=1400 audit(1767924171.288:875): avc: denied { getopt } for pid=15035 comm="syz.2.2627" laddr=fe80::a8aa:aaff:feaa:aaaa lport=5424 faddr=ff04::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 265.240369][T15043] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2629'. [ 265.243415][T15043] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2629'. [ 265.319743][T15047] netlink: 'syz.2.2630': attribute type 11 has an invalid length. [ 265.482281][ T40] audit: type=1400 audit(1767924171.598:876): avc: denied { connect } for pid=15054 comm="syz.3.2633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 265.572874][T15062] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2631'. [ 265.698998][ T5944] Bluetooth: hci2: command 0x0c1a tx timeout [ 265.699120][ T5947] Bluetooth: hci3: command 0x0419 tx timeout [ 265.849573][T15056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.859115][T15056] batadv_slave_0: entered promiscuous mode [ 265.937608][ T40] audit: type=1400 audit(1767924172.048:877): avc: denied { bind } for pid=15086 comm="syz.2.2639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 265.958543][ T40] audit: type=1400 audit(1767924172.048:878): avc: denied { name_bind } for pid=15086 comm="syz.2.2639" src=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 265.980773][ T40] audit: type=1400 audit(1767924172.048:879): avc: denied { node_bind } for pid=15086 comm="syz.2.2639" src=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 266.304463][ T5947] Bluetooth: hci2: Malformed HCI Event [ 266.345013][T15121] could not open pipe file descriptor [ 266.734268][T15154] CIFS mount error: No usable UNC path provided in device string! [ 266.734268][T15154] [ 266.737773][T15154] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 266.770549][T15158] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 266.773907][T15158] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 266.779090][T15158] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 267.004909][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2663'. [ 267.485225][T15183] overlayfs: failed to resolve './file1': -2 [ 267.788835][ T5947] Bluetooth: hci3: command 0x0419 tx timeout [ 268.080788][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 268.080798][ T40] audit: type=1400 audit(1767924174.198:881): avc: denied { execute } for pid=15206 comm="syz.1.2675" path="/dev/comedi1" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 268.200186][T15223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2678'. [ 268.241130][T15220] random: crng reseeded on system resumption [ 268.248321][T15220] Restarting kernel threads ... [ 268.251085][T15220] Done restarting kernel threads. [ 268.508232][T15223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2678'. [ 268.719859][ T40] audit: type=1400 audit(1767924174.838:882): avc: denied { read } for pid=15233 comm="syz.3.2683" dev="sockfs" ino=65910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 268.887757][ T40] audit: type=1400 audit(1767924174.998:883): avc: denied { kexec_image_load } for pid=15240 comm="syz.3.2686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 268.939869][T15242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2686'. [ 268.974965][T15242] 8021q: adding VLAN 0 to HW filter on device bond2 [ 269.458824][ T62] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 269.462639][ T6673] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 269.648617][ C1] net_ratelimit: 27689 callbacks suppressed [ 269.648630][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 269.648693][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.651169][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 269.655193][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.658379][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 269.663149][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.665951][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 269.670119][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.673380][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 269.678101][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.860293][ T5947] Bluetooth: hci3: command 0x0419 tx timeout [ 269.934514][T15260] fuse: Bad value for 'fd' [ 270.260243][ T8050] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 270.487604][T15268] pimreg: entered allmulticast mode [ 270.536832][T15269] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2696'. [ 270.633037][ T40] audit: type=1400 audit(1767924176.748:884): avc: denied { create } for pid=15272 comm="syz.2.2698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 270.741639][ T6678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 270.843751][T15241] kexec: Could not allocate control_code_buffer [ 271.010715][T15286] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2702'. [ 271.019354][T15286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2702'. [ 271.277100][T15298] syz_tun: left allmulticast mode [ 271.302497][T15298] syz_tun: left promiscuous mode [ 271.304356][T15298] bridge0: port 3(syz_tun) entered disabled state [ 271.340063][T15298] bridge_slave_0: left allmulticast mode [ 271.341971][T15298] bridge_slave_0: left promiscuous mode [ 271.344042][T15298] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.348727][T15302] IPVS: set_ctl: invalid protocol: 44 172.20.20.12:21 [ 271.400505][T15298] bridge_slave_1: left allmulticast mode [ 271.408641][T15298] bridge_slave_1: left promiscuous mode [ 271.414137][T15298] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.597400][T15298] bond0: (slave bond_slave_0): Releasing backup interface [ 271.720607][T15298] bond0: (slave bond_slave_1): Releasing backup interface [ 271.855021][T15298] team0: Port device team_slave_0 removed [ 271.903530][T15298] team0: Port device team_slave_1 removed [ 271.906062][T15298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.909114][T15298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.938730][ T5947] Bluetooth: hci3: command 0x0419 tx timeout [ 271.997805][T15298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.001158][T15298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.179527][T15330] Cannot find map_set index 65532 as target [ 272.225295][ T40] audit: type=1400 audit(1767924178.338:885): avc: denied { accept } for pid=15327 comm="syz.1.2711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 272.287395][ T40] audit: type=1400 audit(1767924178.398:886): avc: denied { getopt } for pid=15327 comm="syz.1.2711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 272.518605][ T6021] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 272.643893][T15332] bond3: entered allmulticast mode [ 272.683634][ T6021] usb 12-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 272.693603][ T6021] usb 12-1: config 1 interface 0 has no altsetting 0 [ 272.734168][ T6021] usb 12-1: New USB device found, idVendor=046d, idProduct=4002, bcdDevice= 0.40 [ 272.742685][ T6021] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.752189][ T6021] usb 12-1: Product: ê¥ïš•㩜柎ãžá±¼ã¦»êƒ“é´¼ï­ë•šìŠ“ã‚¡ïž‹ä‘¸é¹å«“ç¥á¹µæ€—嗵銎ꔫᳮ筢䭴鑽 [ 272.758305][ T6021] usb 12-1: Manufacturer: 敖苩쑠ꠃꭜ튬ë‘ꌲ쨠ê”ﳟí¥ë“·Î›ã´¡ì´ˆâ€²ãªãµ«æ¿‡ï§ƒì¯î‚½ï äœâ¦Ÿç¦›è…ªäмë§áª¸ë¡â‚‹å¯¨è¢‰è£¦ã•ªå‡©ä·Ÿî«†Òꔶ렛ꃿ언碇៣꼰ᗄ១ⶊ⃺⅄滸釖麈䢵堚ᶺ㗻⟉냽㪋括í–俬 ᮄꔎퟛ༲ퟗ马兯ë†èŽŽé¶‚è›’ã¤¼é´ˆå§â»ªêš—æ—±ä½¿å¤Ÿï¬®å­žï¤®ë®§ìªâŸ¿è„⼌愌탹ì‹䭯溢걑抻쮌軔烫䭽锠⢻樛㓟 [ 272.779080][ T6021] usb 12-1: SerialNumber: syz [ 272.983949][T15335] netlink: 'syz.7.2714': attribute type 4 has an invalid length. [ 272.992075][T15352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.997424][T15352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.018973][T15355] netlink: 'syz.7.2714': attribute type 4 has an invalid length. [ 273.032599][ T6021] usbhid 12-1:1.0: can't add hid device: -71 [ 273.034658][ T6021] usbhid 12-1:1.0: probe with driver usbhid failed with error -71 [ 273.045116][ T6021] usb 12-1: USB disconnect, device number 13 [ 273.185667][T15360] vcan1: entered allmulticast mode [ 273.564750][T15367] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2724'. [ 273.637109][T15375] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2724'. [ 273.884132][T15387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2730'. [ 274.464433][T15411] kvm: user requested TSC rate below hardware speed [ 274.591335][T15419] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 274.593800][T15419] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 274.619492][T15419] vhci_hcd vhci_hcd.0: Device attached [ 274.658529][ C0] net_ratelimit: 51713 callbacks suppressed [ 274.658544][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.658672][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 274.658756][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.659533][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.660247][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.660676][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.660895][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.661638][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.662298][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.662958][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.705324][T15420] vhci_hcd: connection closed [ 274.708907][ T8060] vhci_hcd vhci_hcd.7: stop threads [ 274.713497][ T8060] vhci_hcd vhci_hcd.7: release socket [ 274.722260][ T8060] vhci_hcd vhci_hcd.7: disconnect device [ 274.753476][T15426] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2739'. [ 275.220566][ T8060] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 275.232774][ T8060] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 275.423252][T15439] fuse: Bad value for 'fd' [ 275.468966][T15441] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 275.502451][T15439] netlink: 'syz.2.2744': attribute type 8 has an invalid length. [ 275.530536][T15446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33296 sclass=netlink_route_socket pid=15446 comm=syz.7.2747 [ 275.548624][T15446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=15446 comm=syz.7.2747 [ 275.555399][T15445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2744'. [ 275.617275][T15450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=15450 comm=syz.7.2747 [ 276.034082][T15467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2756'. [ 276.053449][T15467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2756'. [ 276.261484][ T5947] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 276.264432][ T5944] Bluetooth: hci5: command 0x1003 tx timeout [ 276.344608][T15481] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2761'. [ 276.499492][ T4112] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.585327][ T40] audit: type=1400 audit(1767924182.698:887): avc: denied { read } for pid=15492 comm="syz.3.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 276.647099][ T6680] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.737901][T15502] xt_hashlimit: size too large, truncated to 1048576 [ 276.930501][T15510] overlayfs: failed to clone upperpath [ 277.178661][T15531] sp0: Synchronizing with TNC [ 277.220352][T15537] netlink: 'syz.7.2779': attribute type 9 has an invalid length. [ 277.263944][T15528] [U] è [ 278.064799][T15546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2781'. [ 278.177407][T15557] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2785'. [ 278.394778][T15566] 9pnet: Found fid 0 not clunked [ 278.489637][T15578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2791'. [ 278.636288][T15585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2792'. [ 278.772469][T15592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2795'. [ 278.850208][T15592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2795'. [ 278.921612][T15597] FAULT_INJECTION: forcing a failure. [ 278.921612][T15597] name failslab, interval 1, probability 0, space 0, times 1 [ 278.926870][T15597] CPU: 2 UID: 0 PID: 15597 Comm: syz.3.2797 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.926899][T15597] Tainted: [L]=SOFTLOCKUP [ 278.926903][T15597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 278.926909][T15597] Call Trace: [ 278.926914][T15597] [ 278.926918][T15597] dump_stack_lvl+0x16c/0x1f0 [ 278.926960][T15597] should_fail_ex+0x512/0x640 [ 278.926984][T15597] ? fs_reclaim_acquire+0xae/0x150 [ 278.927002][T15597] should_failslab+0xc2/0x120 [ 278.927017][T15597] __kmalloc_noprof+0xeb/0x910 [ 278.927034][T15597] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 278.927053][T15597] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 278.927067][T15597] tomoyo_realpath_from_path+0xc2/0x6e0 [ 278.927084][T15597] ? tomoyo_profile+0x47/0x60 [ 278.927102][T15597] tomoyo_path_number_perm+0x245/0x580 [ 278.927114][T15597] ? tomoyo_path_number_perm+0x237/0x580 [ 278.927128][T15597] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 278.927144][T15597] ? find_held_lock+0x2b/0x80 [ 278.927173][T15597] ? find_held_lock+0x2b/0x80 [ 278.927188][T15597] ? hook_file_ioctl_common+0x144/0x410 [ 278.927207][T15597] ? __fget_files+0x20e/0x3c0 [ 278.927224][T15597] security_file_ioctl+0x9b/0x240 [ 278.927239][T15597] __x64_sys_ioctl+0xb7/0x210 [ 278.927252][T15597] do_syscall_64+0xcd/0xf80 [ 278.927267][T15597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.927279][T15597] RIP: 0033:0x7f3353b8f7c9 [ 278.927288][T15597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.927298][T15597] RSP: 002b:00007f3354a45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.927309][T15597] RAX: ffffffffffffffda RBX: 00007f3353de5fa0 RCX: 00007f3353b8f7c9 [ 278.927315][T15597] RDX: 0000200000000540 RSI: 00000000000007a8 RDI: 0000000000000003 [ 278.927322][T15597] RBP: 00007f3354a45090 R08: 0000000000000000 R09: 0000000000000000 [ 278.927333][T15597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.927339][T15597] R13: 00007f3353de6038 R14: 00007f3353de5fa0 R15: 00007ffe989ee028 [ 278.927354][T15597] [ 278.927359][T15597] ERROR: Out of memory at tomoyo_realpath_from_path. [ 279.668599][ C0] net_ratelimit: 56222 callbacks suppressed [ 279.668609][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.668612][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 279.668657][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.668830][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 279.669052][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 279.669279][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 279.669491][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 279.669701][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 279.669926][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 279.670138][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 279.670470][T15621] pim6reg: entered allmulticast mode [ 279.734669][T15615] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.889446][T15615] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.902561][T15628] /dev/nullb0: Can't lookup blockdev [ 280.112457][T15615] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.159613][T15637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2807'. [ 280.260716][T15615] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.340606][ T6680] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 280.487580][ T6680] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.538589][ T6680] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.541272][ T6680] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.574326][ T6680] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.991112][ T8052] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.431979][T15674] xt_hashlimit: size too large, truncated to 1048576 [ 281.711214][ T6678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.922520][T15686] geneve2: entered promiscuous mode [ 281.925451][T15686] geneve2: entered allmulticast mode [ 281.929631][ T8052] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 281.938333][ T8052] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 281.950787][ T8052] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 281.960632][ T8052] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 282.049961][T15692] __nla_validate_parse: 1 callbacks suppressed [ 282.049973][T15692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2823'. [ 282.260612][ T8041] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.605328][T15703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=15703 comm=syz.1.2828 [ 282.614268][T15703] netlink: 'syz.1.2828': attribute type 1 has an invalid length. [ 282.643747][T15703] bond1: (slave geneve3): making interface the new active one [ 282.653873][T15703] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 282.656910][ T6680] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 282.661925][ T6680] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 282.676794][ T6680] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 282.694654][ T6680] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 282.815290][T15710] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2831'. [ 283.448484][ C3] sched: DL replenish lagged too much [ 284.678541][ C0] net_ratelimit: 56796 callbacks suppressed [ 284.678554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.678600][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 284.678661][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.679309][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.680014][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.680665][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.680950][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.681145][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.681376][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.681556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.759445][T15733] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2837'. [ 284.845502][T15733] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2837'. [ 285.275079][T15746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2842'. [ 285.282898][T15746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2842'. [ 285.733416][T15755] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2844'. [ 286.041535][T15774] mkiss: ax0: crc mode is auto. [ 286.056466][T15775] comedi comedi0: comedi_bond: 3:3 attached, 24 channels from 1 devices [ 286.305612][ T8041] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 287.206575][ T8041] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.215381][T15792] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2856'. [ 287.219795][ T8041] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.226877][ T8041] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.256115][ T8041] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.302640][T15799] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2858'. [ 287.404554][T15809] program syz.1.2861 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.493030][T15815] netlink: 'syz.7.2863': attribute type 7 has an invalid length. [ 287.495654][T15815] netlink: 'syz.7.2863': attribute type 8 has an invalid length. [ 287.553554][T15819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=15819 comm=syz.1.2862 [ 288.153872][ T40] audit: type=1400 audit(1767924194.268:888): avc: denied { getopt } for pid=15843 comm="syz.1.2872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 288.199450][T15846] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2873'. [ 288.213272][T15846] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2873'. [ 288.220472][T15846] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2873'. [ 288.226475][T15846] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2873'. [ 288.236611][T15846] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2873'. [ 288.239291][T15846] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2873'. [ 288.246740][T15846] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2873'. [ 288.253830][T15846] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2873'. [ 288.765369][T15863] team0 (unregistering): Port device team_slave_0 removed [ 288.796602][T15863] team0 (unregistering): Port device team_slave_1 removed [ 289.176726][T15874] tipc: Enabled bearer , priority 10 [ 289.688349][ C0] net_ratelimit: 56284 callbacks suppressed [ 289.688361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.688596][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 289.688795][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.689397][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.690021][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.690552][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.690604][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.691424][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.692117][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.692837][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.389646][T15916] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 290.420274][T15916] macsec1: entered promiscuous mode [ 290.424370][T15916] macsec1: entered allmulticast mode [ 290.430447][T15916] mac80211_hwsim hwsim35 wlan0: entered allmulticast mode [ 290.491561][T15921] xt_socket: unknown flags 0xe4 [ 290.744106][T15924] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 290.746347][T15924] overlayfs: failed to set xattr on upper [ 290.756619][T15924] overlayfs: ...falling back to redirect_dir=nofollow. [ 290.778163][T15924] overlayfs: ...falling back to index=off. [ 290.785100][T15924] overlayfs: ...falling back to uuid=null. [ 290.807637][T15924] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 290.822454][T15924] overlayfs: failed to set xattr on upper [ 290.824337][T15924] overlayfs: ...falling back to redirect_dir=nofollow. [ 290.827148][T15924] overlayfs: ...falling back to index=off. [ 290.850413][ T5947] Bluetooth: hci2: unexpected event for opcode 0x000b [ 290.853067][ T5947] Bluetooth: hci2: unexpected event for opcode 0x000b [ 290.855671][ T5947] Bluetooth: hci2: unexpected event for opcode 0x000b [ 290.863097][ T5947] Bluetooth: hci2: unexpected event for opcode 0x000b [ 290.865503][ T5947] Bluetooth: hci2: unexpected event for opcode 0x000b [ 290.868107][ T5947] Bluetooth: hci2: unexpected event for opcode 0x000b [ 290.870608][ T5947] Bluetooth: hci2: unexpected event for opcode 0x000b [ 290.873629][ T5947] Bluetooth: hci2: unexpected event for opcode 0x000b [ 290.875907][ T5947] Bluetooth: hci2: unexpected event for opcode 0x000b [ 290.883360][ T5947] Bluetooth: hci2: unexpected event for opcode 0x000b [ 290.885912][ T5947] Bluetooth: hci2: unexpected event for opcode 0x000b [ 290.889225][ T5947] Bluetooth: hci2: unexpected event for opcode 0x000b [ 290.898211][T15924] overlayfs: ...falling back to uuid=null. [ 290.908904][ T5947] Bluetooth: hci2: unexpected event for opcode 0x000b [ 291.088536][T15935] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 291.279660][T15947] geneve3: entered promiscuous mode [ 291.289615][T15947] geneve3: entered allmulticast mode [ 291.293366][T15934] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 291.324929][T15934] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 291.343822][T15934] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 291.690889][T15949] geneve3: entered promiscuous mode [ 291.692648][T15949] geneve3: entered allmulticast mode [ 293.136927][T15994] netlink: 'syz.1.2914': attribute type 10 has an invalid length. [ 293.307953][ T5947] Bluetooth: hci4: command 0x0c1a tx timeout [ 293.377798][ T5944] Bluetooth: hci2: command 0x0c1a tx timeout [ 293.379891][ T5947] Bluetooth: hci3: command 0x0419 tx timeout [ 293.995652][T16009] tipc: Enabling of bearer rejected, failed to enable media [ 294.133293][T16013] xt_l2tp: missing protocol rule (udp|l2tpip) [ 294.697522][ C1] net_ratelimit: 53476 callbacks suppressed [ 294.697535][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 294.697582][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.697784][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.698479][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.699173][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.699803][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 294.700015][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.700796][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.701547][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.702324][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.729408][ T40] audit: type=1400 audit(5303773101.481:889): avc: denied { read append } for pid=16021 comm="syz.3.2924" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 294.750000][ T40] audit: type=1400 audit(5303773101.501:890): avc: denied { open } for pid=16021 comm="syz.3.2924" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 294.759866][ T40] audit: type=1400 audit(5303773101.501:891): avc: denied { lock } for pid=16021 comm="syz.3.2924" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 294.898221][ T6005] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 295.049294][ T6005] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 295.052807][ T6005] usb 6-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 295.060867][ T6005] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 295.063935][ T6005] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 295.069370][ T6005] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 295.077146][ T6005] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 295.081608][ T6005] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 295.085540][ T6005] usb 6-1: Product: syz [ 295.087540][ T6005] usb 6-1: Manufacturer: syz [ 295.093529][ T6005] cdc_wdm 6-1:1.0: skipping garbage [ 295.096481][ T6005] cdc_wdm 6-1:1.0: skipping garbage [ 295.102614][ T40] audit: type=1326 audit(5303773101.851:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16026 comm="syz.2.2926" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92dff8f7c9 code=0x0 [ 295.113719][ T6005] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 295.115961][ T6005] cdc_wdm 6-1:1.0: Unknown control protocol [ 295.647536][T16039] 9p: Could not find request transport: unix$appraise [ 296.057952][T16059] pim6reg1: entered promiscuous mode [ 296.059815][T16059] pim6reg1: entered allmulticast mode [ 296.159017][T16059] netlink: 'syz.7.2935': attribute type 10 has an invalid length. [ 296.162098][T16059] __nla_validate_parse: 58 callbacks suppressed [ 296.162109][T16059] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2935'. [ 297.691558][ T24] usb 6-1: USB disconnect, device number 2 [ 297.858493][T16068] overlayfs: failed to clone upperpath [ 298.731674][ T6005] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 298.797137][T16117] netlink: 'syz.2.2950': attribute type 10 has an invalid length. [ 298.800165][T16117] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2950'. [ 298.820204][T16118] tmpfs: Bad value for 'mpol' [ 298.898862][ T6005] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 298.902493][ T6005] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 298.910154][ T6005] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 298.919827][ T6005] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 298.924651][ T6005] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 298.936429][ T6005] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 298.939816][ T6005] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.944356][ T6005] usb 6-1: config 0 descriptor?? [ 298.946747][T16097] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 299.045791][T16124] syzkaller0: entered promiscuous mode [ 299.051012][T16124] syzkaller0: entered allmulticast mode [ 299.284255][T16134] binder: Unknown parameter 'smackfstransmute' [ 299.359556][ T6005] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 299.373085][ T6005] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 299.452345][ T40] audit: type=1400 audit(5303773106.202:893): avc: denied { map } for pid=16136 comm="syz.7.2958" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 299.477380][T16143] tmpfs: Bad value for 'mpol' [ 299.536127][ T40] audit: type=1400 audit(5303773106.282:894): avc: denied { create } for pid=16147 comm="syz.2.2960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 299.706742][ C1] net_ratelimit: 54773 callbacks suppressed [ 299.706759][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 299.706839][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.706878][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.707107][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.707299][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.707522][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.707729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.707955][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.708133][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.708391][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.819213][ T6005] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 304.716028][ C1] net_ratelimit: 55713 callbacks suppressed [ 304.716041][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 304.716069][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.716292][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.717544][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.718191][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 304.718870][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.720234][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.721514][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.721969][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.722886][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.230362][T16141] netem: incorrect ge model size [ 305.232363][T16141] netem: change failed [ 305.357571][T16184] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 305.678929][T16197] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2974'. [ 305.797595][T16205] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2977'. [ 305.990170][T16211] pimreg: entered allmulticast mode [ 305.993802][T16211] pimreg: left allmulticast mode [ 306.127175][ T6021] usb 6-1: USB disconnect, device number 3 [ 307.260897][T16240] bond2: option downdelay: invalid value (18446744073709551615) [ 307.263409][T16240] bond2: option downdelay: allowed values 0 - 2147483647 [ 307.790571][T16240] bond2 (unregistering): Released all slaves [ 307.875603][T16244] fuse: Bad value for 'group_id' [ 307.877932][T16244] fuse: Bad value for 'group_id' [ 308.961909][T16255] netlink: 'syz.7.2994': attribute type 32 has an invalid length. [ 308.965172][T16255] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2994'. [ 308.979266][T16255] bond5: Setting coupled_control to off (0) [ 309.036236][ T40] audit: type=1400 audit(5303773115.783:895): avc: denied { append } for pid=16253 comm="syz.7.2994" name="usbmon5" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 309.260847][ T40] audit: type=1326 audit(5303773116.013:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16264 comm="syz.1.2997" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f47d8f7c9 code=0x7ffc0000 [ 309.276290][ T40] audit: type=1326 audit(5303773116.023:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16264 comm="syz.1.2997" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f47d8f7c9 code=0x7ffc0000 [ 309.283833][ T40] audit: type=1326 audit(5303773116.023:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16264 comm="syz.1.2997" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9f47d8f7c9 code=0x7ffc0000 [ 309.299086][ T40] audit: type=1326 audit(5303773116.023:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16264 comm="syz.1.2997" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f47d8f7c9 code=0x7ffc0000 [ 309.307041][ T40] audit: type=1326 audit(5303773116.023:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16264 comm="syz.1.2997" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f47d8f7c9 code=0x7ffc0000 [ 309.313994][ T40] audit: type=1326 audit(5303773116.023:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16264 comm="syz.1.2997" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9f47d8f7c9 code=0x7ffc0000 [ 309.321675][ T40] audit: type=1326 audit(5303773116.023:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16264 comm="syz.1.2997" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f47d8f7c9 code=0x7ffc0000 [ 309.328886][ T40] audit: type=1326 audit(5303773116.023:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16264 comm="syz.1.2997" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f47d8f7c9 code=0x7ffc0000 [ 309.336869][ T40] audit: type=1326 audit(5303773116.023:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16264 comm="syz.1.2997" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f47d8f7c9 code=0x7ffc0000 [ 309.709768][T16277] netlink: 'syz.7.3000': attribute type 21 has an invalid length. [ 309.712299][T16277] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3000'. [ 309.716557][T16277] netlink: 'syz.7.3000': attribute type 21 has an invalid length. [ 309.719774][T16277] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3000'. [ 309.725265][ C1] net_ratelimit: 54354 callbacks suppressed [ 309.725277][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 309.725305][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.725455][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.726187][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.727053][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.727896][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 309.727991][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.728651][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.729294][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.729942][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.835397][T16282] tipc: Started in network mode [ 309.837046][T16282] tipc: Node identity ac1414aa, cluster identity 4711 [ 309.839921][T16282] tipc: Enabled bearer , priority 10 [ 309.854902][T16282] overlay: Unknown parameter 'fsmagic' [ 310.202365][T16309] netlink: 'syz.2.3008': attribute type 1 has an invalid length. [ 310.213222][T16309] netlink: 'syz.2.3008': attribute type 1 has an invalid length. [ 311.170109][ T6021] tipc: Node number set to 2886997162 [ 311.246086][T16347] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 311.250407][T16346] IPv6: NLM_F_CREATE should be specified when creating new route [ 311.256773][T16346] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 311.259085][T16346] IPv6: NLM_F_CREATE should be set when creating new route [ 311.261521][T16346] IPv6: NLM_F_CREATE should be set when creating new route [ 311.393210][T16350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16350 comm=syz.3.3021 [ 313.343153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 313.353163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 313.413715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 313.437310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 313.454506][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 313.471662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 313.473623][T16374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3028'. [ 313.550105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 313.680630][T16377] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 313.680630][T16377] The task syz.1.3030 (16377) triggered the difference, watch for misbehavior. [ 313.833471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 314.494783][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 314.730839][T16396] FAT-fs (loop1): unable to read boot sector [ 314.734601][ C0] net_ratelimit: 51637 callbacks suppressed [ 314.734612][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.734656][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 314.734767][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.735401][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.736091][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.736731][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.737385][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.737856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.738004][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.738636][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.787119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 314.797203][T16402] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 315.115203][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 315.115215][ T40] audit: type=1400 audit(5303773121.874:952): avc: denied { name_bind 0x1000000 } for pid=16417 comm="syz.7.3047" path="socket:[74364]" dev="sockfs" ino=74364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 315.303907][T16428] bridge0: port 3(veth0_to_bridge) entered blocking state [ 315.314361][T16428] bridge0: port 3(veth0_to_bridge) entered disabled state [ 315.319761][T16428] veth0_to_bridge: entered allmulticast mode [ 315.326013][T16428] veth0_to_bridge: entered promiscuous mode [ 315.329013][T16428] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.333750][T16428] bridge0: port 3(veth0_to_bridge) entered blocking state [ 315.336177][T16428] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 316.067729][ T40] audit: type=1400 audit(5303773122.824:953): avc: denied { mounton } for pid=16449 comm="syz.7.3055" path="/448/file0" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 316.104060][T16453] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 316.126603][ T40] audit: type=1400 audit(5303773122.885:954): avc: denied { unmount } for pid=10441 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 316.445362][T16455] netlink: 'syz.2.3045': attribute type 1 has an invalid length. [ 316.448428][T16457] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3045'. [ 317.164688][T16468] block nbd3: NBD_DISCONNECT [ 317.279915][ T40] audit: type=1400 audit(5303773124.035:955): avc: denied { ioctl } for pid=16478 comm="syz.3.3062" path="socket:[74637]" dev="sockfs" ino=74637 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 317.651279][T16495] overlayfs: unescaped trailing colons in lowerdir mount option. [ 317.676556][T16498] netlink: 75 bytes leftover after parsing attributes in process `syz.3.3069'. [ 317.906294][T16511] fuse: Unknown parameter 'grlNu' [ 317.976340][T16509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3072'. [ 317.978505][T16516] o2cb: This node has not been configured. [ 317.996463][T16516] o2cb: Cluster check failed. Fix errors before retrying. [ 317.998786][T16516] (syz.2.3074,16516,2):user_dlm_register:674 ERROR: status = -22 [ 318.001597][T16516] (syz.2.3074,16516,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 318.188981][T16526] input: syz0 as /devices/virtual/input/input33 [ 319.443314][T16542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3081'. [ 319.551486][T16545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.554720][T16545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.574104][T16545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.577495][T16545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.578351][T16534] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3079'. [ 319.652088][T16535] netlink: 8948 bytes leftover after parsing attributes in process `syz.1.3080'. [ 319.740198][ T40] audit: type=1400 audit(5303773126.495:956): avc: denied { append } for pid=16553 comm="syz.3.3083" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 319.743763][ C1] net_ratelimit: 50452 callbacks suppressed [ 319.743775][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 319.743778][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.743797][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.743982][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.744211][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.744394][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.744560][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.744626][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.744837][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.745063][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.811400][T16558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3085'. [ 319.856308][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888058086c00: rx timeout, send abort [ 320.370900][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888058087400: rx timeout, send abort [ 320.374482][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888058086c00: abort rx timeout. Force session deactivation [ 320.883810][ C0] vxcan0 (unregistered): j1939_tp_rxtimer: 0xffff888058087400: abort rx timeout. Force session deactivation [ 321.907915][T16611] Bluetooth: MGMT ver 1.23 [ 322.162815][T16627] netlink: 'syz.7.3106': attribute type 9 has an invalid length. [ 322.169822][T16627] netlink: 'syz.7.3106': attribute type 11 has an invalid length. [ 322.177883][T16627] netlink: 'syz.7.3106': attribute type 12 has an invalid length. [ 322.186746][T16627] netlink: 210020 bytes leftover after parsing attributes in process `syz.7.3106'. [ 322.202044][T16627] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3106'. [ 322.290195][T16636] kAFS: unable to lookup cell '(,c¾ûL' [ 322.292471][T16636] netlink: 'syz.3.3107': attribute type 1 has an invalid length. [ 322.296172][T16636] kAFS: unable to lookup cell '(,c¾ûL' [ 322.298494][T16636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3107'. [ 322.654140][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.656257][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.155222][T16643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.163242][T16643] batadv_slave_0: entered promiscuous mode [ 323.165594][T16643] batadv_slave_0: entered allmulticast mode [ 323.441034][T16648] xt_connbytes: Forcing CT accounting to be enabled [ 323.960538][T16657] overlayfs: failed to clone upperpath [ 324.133094][T14968] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 324.296102][T14968] usb 6-1: config 1 interface 0 has no altsetting 0 [ 324.304821][T14968] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 324.313810][T14968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.321169][T14968] usb 6-1: Product: syz [ 324.325870][T14968] usb 6-1: Manufacturer: syz [ 324.332082][T14968] usb 6-1: SerialNumber: syz [ 324.741443][T14968] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 324.753007][ C1] net_ratelimit: 51929 callbacks suppressed [ 324.753021][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 324.753029][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.753307][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.754433][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.755161][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 324.755582][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.757248][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.758586][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.759019][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.759804][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.092557][T16683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3114'. [ 325.105385][T16683] bond0: entered promiscuous mode [ 325.107029][T16683] bond_slave_0: entered promiscuous mode [ 325.108932][T16683] bond_slave_1: entered promiscuous mode [ 325.128511][T16683] bond0: left promiscuous mode [ 325.130202][T16683] bond_slave_0: left promiscuous mode [ 325.132144][T16683] bond_slave_1: left promiscuous mode [ 325.472972][T16696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3125'. [ 325.477487][T16696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3125'. [ 325.565163][T16701] netlink: 'syz.7.3126': attribute type 3 has an invalid length. [ 325.574067][T16701] netlink: 244 bytes leftover after parsing attributes in process `syz.7.3126'. [ 325.598663][T16701] netlink: 'syz.7.3126': attribute type 3 has an invalid length. [ 325.611970][T16701] netlink: 244 bytes leftover after parsing attributes in process `syz.7.3126'. [ 325.656434][T16701] netlink: 'syz.7.3126': attribute type 3 has an invalid length. [ 325.658952][T16701] netlink: 244 bytes leftover after parsing attributes in process `syz.7.3126'. [ 325.685692][T16701] netlink: 'syz.7.3126': attribute type 3 has an invalid length. [ 325.688324][T16701] netlink: 244 bytes leftover after parsing attributes in process `syz.7.3126'. [ 325.732945][T16701] netlink: 'syz.7.3126': attribute type 3 has an invalid length. [ 325.735874][T16701] netlink: 244 bytes leftover after parsing attributes in process `syz.7.3126'. [ 325.739080][T16701] netlink: 'syz.7.3126': attribute type 3 has an invalid length. [ 325.741872][T16701] netlink: 244 bytes leftover after parsing attributes in process `syz.7.3126'. [ 325.747617][T16701] netlink: 244 bytes leftover after parsing attributes in process `syz.7.3126'. [ 326.189263][T16722] SELinux: ebitmap start bit (1819243365) is not a multiple of the map unit size (64) [ 326.196906][T16722] SELinux: failed to load policy [ 326.222048][T16729] SELinux: ebitmap start bit (1819243365) is not a multiple of the map unit size (64) [ 326.235457][T16729] SELinux: failed to load policy [ 326.903047][ T6021] usb 6-1: USB disconnect, device number 4 [ 326.916167][ T6021] usblp0: removed [ 326.976954][T16754] 9p filesystem being mounted at /285/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 327.231201][T16760] syzkaller0: entered promiscuous mode [ 327.233540][T16760] syzkaller0: entered allmulticast mode [ 327.586031][T16774] loop6: detected capacity change from 0 to 7 [ 327.591751][T16776] validate_nla: 59 callbacks suppressed [ 327.591763][T16776] netlink: 'syz.3.3147': attribute type 1 has an invalid length. [ 327.597309][T16774] Dev loop6: unable to read RDB block 7 [ 327.599100][T16774] loop6: unable to read partition table [ 327.601098][T16774] loop6: partition table beyond EOD, truncated [ 327.606896][T16774] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 327.720189][T16781] dvmrp17: entered allmulticast mode [ 327.777948][ T40] audit: type=1400 audit(5303773134.536:957): avc: denied { listen } for pid=16780 comm="syz.1.3152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 328.016870][T16800] netlink: 'syz.3.3155': attribute type 12 has an invalid length. [ 328.028368][T16801] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 328.033151][T16800] netlink: 'syz.3.3155': attribute type 12 has an invalid length. [ 328.100526][T16809] bond0: entered promiscuous mode [ 328.102403][T16809] bond_slave_0: entered promiscuous mode [ 328.104385][T16809] bond_slave_1: entered promiscuous mode [ 328.142180][T16809] bond0: left promiscuous mode [ 328.153458][T16809] bond_slave_0: left promiscuous mode [ 328.161585][T16809] bond_slave_1: left promiscuous mode [ 328.221464][T16812] sp0: Synchronizing with TNC [ 328.228518][T16812] [U] è [ 328.283856][T16809] fuse: Bad value for 'rootmode' [ 328.313938][T16821] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 328.365070][T16824] ntfs3(sr0): Primary boot signature is not NTFS. [ 328.367696][T16824] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 328.866672][ T40] audit: type=1400 audit(5303773135.626:958): avc: denied { setattr } for pid=16833 comm="syz.2.3166" name="PPTP" dev="sockfs" ino=76088 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 328.926078][ T6021] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 329.082480][T16842] mac80211_hwsim hwsim34 : renamed from wlan1 [ 329.103940][ T6021] usb 6-1: config index 0 descriptor too short (expected 65535, got 36) [ 329.106855][ T6021] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.110462][ T6021] usb 6-1: config 0 has no interfaces? [ 329.112629][ T6021] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 329.115449][ T6021] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.119922][ T6021] usb 6-1: config 0 descriptor?? [ 329.147732][T16850] netlink: 'syz.7.3170': attribute type 1 has an invalid length. [ 329.150191][T16850] netlink: 'syz.7.3170': attribute type 3 has an invalid length. [ 329.160431][T16850] netlink: 'syz.7.3170': attribute type 3 has an invalid length. [ 329.762235][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.762234][ C1] net_ratelimit: 51971 callbacks suppressed [ 329.762266][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 329.763022][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.764068][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.765144][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.766141][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.766224][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.766440][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.766684][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.766949][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.844776][T16835] 8021q: adding VLAN 0 to HW filter on device bond2 [ 330.300848][T16872] overlayfs: failed to clone upperpath [ 330.733112][T16886] sp0: Synchronizing with TNC [ 331.144299][T16899] __nla_validate_parse: 77 callbacks suppressed [ 331.144311][T16899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3183'. [ 331.178743][T16899] 8021q: adding VLAN 0 to HW filter on device bond4 [ 331.191728][T16902] Device name not specified. [ 331.191728][T16902] [ 331.537396][T16884] [U] è [ 331.594249][T14968] usb 6-1: USB disconnect, device number 5 [ 331.875470][T16936] SELinux: Context system_u:object_r:scanner_device_t:s0 is not valid (left unmapped). [ 331.880663][ T40] audit: type=1400 audit(5303773138.637:959): avc: denied { relabelto } for pid=16935 comm="syz.1.3189" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:scanner_device_t:s0" [ 331.895433][T16936] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3189'. [ 331.900554][ T40] audit: type=1400 audit(5303773138.657:960): avc: denied { associate } for pid=16935 comm="syz.1.3189" name="kvm" dev="devtmpfs" ino=84 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:scanner_device_t:s0" [ 331.919273][ T40] audit: type=1400 audit(5303773138.657:961): avc: denied { ioctl } for pid=16935 comm="syz.1.3189" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:scanner_device_t:s0" [ 331.949868][T16939] random: crng reseeded on system resumption [ 331.976006][T16938] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 332.188681][T16947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3194'. [ 332.433854][T16953] bond3 (unregistering): Released all slaves [ 332.922655][T16964] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3199'. [ 333.179203][T16966] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3200'. [ 333.187864][T16966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3200'. [ 333.199136][T16966] kernel read not supported for file /policy (pid: 16966 comm: syz.1.3200) [ 333.203149][ T40] audit: type=1400 audit(5303773139.957:962): avc: denied { module_load } for pid=16965 comm="syz.1.3200" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 333.572201][T16969] [ 333.573051][T16969] ============================================ [ 333.575043][T16969] WARNING: possible recursive locking detected [ 333.577418][T16969] syzkaller #0 Tainted: G L [ 333.579896][T16969] -------------------------------------------- [ 333.582116][T16969] syz.1.3201/16969 is trying to acquire lock: [ 333.584398][T16969] ffff888101b0c0f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_do_insn+0x2e/0x3e0 [ 333.587191][T16969] [ 333.587191][T16969] but task is already holding lock: [ 333.589541][T16969] ffff888101b0a8f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x167/0x2eb0 [ 333.592578][T16969] [ 333.592578][T16969] other info that might help us debug this: [ 333.595122][T16969] Possible unsafe locking scenario: [ 333.595122][T16969] [ 333.597689][T16969] CPU0 [ 333.598906][T16969] ---- [ 333.600166][T16969] lock(&dev->mutex#4); [ 333.601565][T16969] lock(&dev->mutex#4); [ 333.602916][T16969] [ 333.602916][T16969] *** DEADLOCK *** [ 333.602916][T16969] [ 333.605462][T16969] May be due to missing lock nesting notation [ 333.605462][T16969] [ 333.608084][T16969] 1 lock held by syz.1.3201/16969: [ 333.609731][T16969] #0: ffff888101b0a8f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x167/0x2eb0 [ 333.612906][T16969] [ 333.612906][T16969] stack backtrace: [ 333.614820][T16969] CPU: 2 UID: 0 PID: 16969 Comm: syz.1.3201 Tainted: G L syzkaller #0 PREEMPT(full) [ 333.614836][T16969] Tainted: [L]=SOFTLOCKUP [ 333.614840][T16969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 333.614846][T16969] Call Trace: [ 333.614850][T16969] [ 333.614855][T16969] dump_stack_lvl+0x116/0x1f0 [ 333.614870][T16969] print_deadlock_bug+0x225/0x2f0 [ 333.614883][T16969] __lock_acquire+0x1497/0x2890 [ 333.614897][T16969] lock_acquire+0x179/0x330 [ 333.614908][T16969] ? comedi_do_insn+0x2e/0x3e0 [ 333.614920][T16969] ? __pfx___might_resched+0x10/0x10 [ 333.614931][T16969] __mutex_lock+0x1aa/0x1ca0 [ 333.614946][T16969] ? comedi_do_insn+0x2e/0x3e0 [ 333.614957][T16969] ? comedi_do_insn+0x2e/0x3e0 [ 333.614968][T16969] ? __pfx___mutex_lock+0x10/0x10 [ 333.614982][T16969] ? __pfx___might_resched+0x10/0x10 [ 333.614993][T16969] ? __up_read+0x2d1/0x700 [ 333.615005][T16969] ? down_read+0x13d/0x460 [ 333.615019][T16969] ? __lock_acquire+0x436/0x2890 [ 333.615032][T16969] ? comedi_do_insn+0x2e/0x3e0 [ 333.615041][T16969] comedi_do_insn+0x2e/0x3e0 [ 333.615052][T16969] comedi_dio_bitfield2+0x3c4/0x420 [ 333.615064][T16969] ? __pfx_comedi_dio_bitfield2+0x10/0x10 [ 333.615077][T16969] ? lockdep_hardirqs_on+0x7c/0x110 [ 333.615090][T16969] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 333.615102][T16969] ? stack_depot_save_flags+0x3de/0x9b0 [ 333.615121][T16969] bonding_dio_insn_bits+0x2bd/0x570 [ 333.615135][T16969] ? comedi_unlocked_ioctl+0x1793/0x2eb0 [ 333.615149][T16969] ? __pfx_bonding_dio_insn_bits+0x10/0x10 [ 333.615164][T16969] insn_rw_emulate_bits+0x29b/0x5f0 [ 333.615181][T16969] ? __pfx_insn_rw_emulate_bits+0x10/0x10 [ 333.615198][T16969] ? comedi_check_chanlist+0x2d6/0x380 [ 333.615214][T16969] parse_insn+0xf4c/0x1a70 [ 333.615226][T16969] ? __pfx_parse_insn+0x10/0x10 [ 333.615237][T16969] ? find_held_lock+0x2b/0x80 [ 333.615252][T16969] ? do_insnlist_ioctl+0x15f/0x750 [ 333.615266][T16969] do_insnlist_ioctl+0x272/0x750 [ 333.615279][T16969] comedi_unlocked_ioctl+0x1793/0x2eb0 [ 333.615295][T16969] ? futex_wake+0x1ad/0x530 [ 333.615323][T16969] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 333.615338][T16969] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 333.615351][T16969] ? do_vfs_ioctl+0x128/0x14f0 [ 333.615363][T16969] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 333.615375][T16969] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 333.615392][T16969] ? hook_file_ioctl_common+0x144/0x410 [ 333.615410][T16969] ? selinux_file_ioctl+0x180/0x270 [ 333.615423][T16969] ? selinux_file_ioctl+0xb4/0x270 [ 333.615436][T16969] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 333.615451][T16969] __x64_sys_ioctl+0x18e/0x210 [ 333.615463][T16969] do_syscall_64+0xcd/0xf80 [ 333.615477][T16969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.615488][T16969] RIP: 0033:0x7f9f47d8f7c9 [ 333.615498][T16969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.615509][T16969] RSP: 002b:00007f9f48ba2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 333.615523][T16969] RAX: ffffffffffffffda RBX: 00007f9f47fe5fa0 RCX: 00007f9f47d8f7c9 [ 333.615530][T16969] RDX: 0000200000000100 RSI: 000000008010640b RDI: 0000000000000003 [ 333.615536][T16969] RBP: 00007f9f47e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 333.615542][T16969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.615548][T16969] R13: 00007f9f47fe6038 R14: 00007f9f47fe5fa0 R15: 00007ffc4f60adc8 [ 333.615558][T16969] [ 334.771384][ C0] net_ratelimit: 62781 callbacks suppressed [ 334.771397][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.771449][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 334.771703][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.771949][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.772399][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.772713][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.773171][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.773413][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.773430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.773565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.780630][ C0] net_ratelimit: 106471 callbacks suppressed [ 339.780645][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.780658][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.780676][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 339.780789][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 339.780897][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 339.781014][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 339.781123][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 339.781236][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 339.781357][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0) [ 339.781464][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:2c:eb:fb:31:bb, vlan:0)