last executing test programs: 4m7.798383559s ago: executing program 32 (id=368): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@ipv4_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x3, 0xc8, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @loopback}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0xb4, 0x30, 0x58f, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x4, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m18.212866627s ago: executing program 33 (id=1317): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1800, 0x23a, 0x7ff, 0xf83, 0x3}, 0x1c) r0 = socket$alg(0x26, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close_range(r0, r1, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000040)={@dev}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x80003, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 2m52.002546406s ago: executing program 4 (id=1725): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1}, 0x48) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38) 2m51.879092827s ago: executing program 4 (id=1726): r0 = memfd_create(&(0x7f0000000380)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb1w&\xdfP\xba\xdf\xf9F\xc1\xd4x\xaa\x92~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7R\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1l\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b$\x0e\x00\x00\x00\x00\x00\x00\x94&\xac\x88\x95\xff\xda\x14d\xcbx\bx\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x00\x17\x00\x00sH\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,-\n\xe6gB#\x8ch=:F$\xe6\x87\xf0AF\xd5\x84\x80\x81y\xf1\a\x0f \xbb\xfa\xd3\x88\xad=5J\x13>u\x8c\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\xdf\xcf\b\x9f\xb6\xf2\x84\xbag\xe5.\xe4\x1f\xb3\xf4\xc6\xad\x06\x1btb\"\x87\x0f\xd7\xf9\x10~\xdc7\xe7\xdc\x11\xd8?\x040\xc5%%\x1c\x8d\xe0\xb99\x10\x11\x84\xbb\xa9\x9em\x1d\xfd\xd4\xcf\x8cH\xa6\x980\xadg\x9b\x8b$\x0e\x04\xd8\xaa\x17\xac\xf4\xda\xd0z\x87H\x03Du\x91\x839\xec\xd7\xde\xf2P\xf6dj-b\x84\x18\xe9\fy`\xca\x86Za7\xe4P\x95B\xeefTdk\x83\xcc\xa4\xa5\b\x1e\x998\x042\xb2\xdd\x8a\xea\xefQ\xf3-Z\a\xd3\xbb\xd5\x80\xb7\v\xa9\xae*\xca\xd90\xc8\xf4_\xe9N7*K:\xe1\xa4\xf7G\a\xd4Q\f7\xdeK,&\xf8\xe7\xffj\xd1\xae\xa1\x04\xf9\xd5\xc5\\\xcc:\xb1\xa70\xad\xf0U\x1aK\x8bN\xcd\xf50\xa3\xc7\xee\x7f\x1a#\xc9\xb3^\xdd/\x13\xb6\xe9%\xed\x04\xf4o}\x17U\x16C\xb2\xea7C\xb6fH$\xd6\xeb\x03\xd2\xa9\xa0\x9a\x93\xed-S\xe5p\xa28*\x98C\xa9\xf5\xf1*\xaa3\xb9\x88\xb3E\x03\x06\xf7\xa7\x1fTHV\xfe\t\x9e>\x90\xfe\xf1\x8e~z+\x10&\xac9\xef\x1b<\x86', 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/tcp\x00') ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000000)={0x5, r0, 'id0\x00'}) syz_open_dev$vivid(&(0x7f0000000180), 0x1, 0x2) pread64(r1, &(0x7f00000000c0)=""/187, 0xbb, 0x101) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x20000000}, 0xc) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000240)={{0x2, 0x7}, 0x100, './file0\x00'}) fchmod(r0, 0x184) ioctl$TIOCGPTPEER(r2, 0x5441, 0xa4) 2m51.878583825s ago: executing program 4 (id=1727): r0 = syz_open_dev$usbfs(&(0x7f0000000400), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003e40)=[{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f00000000c0)="b01a80a65bc60bc64d2f4148fdf37f92ecf3488d49cd7910b6b84ab98629b8255b436317bd1efcd54383df1b048d0f262a10f3ae9a7afec48889980bd452c21eee32193dcbeafff7fa44808d2968cead325b5225aed7b3ce394a", 0x5a}, {&(0x7f0000000140)="b7b65262c61a23cb1a866ea3f8f10826746b06e9f076537896db5c4317ba8eb6f0e79e2445d6d7ee239d90f961d8156159e78c667eba0464a8ab1d89f1eee023f1897a7808eca39966c3fc1ea59bc86eea099173922059cd632157914e20891bbe48b2f0ce832eef5566b2e16ee745ebfa4915efed5803612111bd", 0x7b}, {&(0x7f00000001c0)="d404024a16c993daa3e93450f101128bcb573dd090047aa5a207523de902ad9ecbf20728228a61e0dd36167a1574696a704bf129cabcb3c297", 0x39}, {&(0x7f0000000200)="cdf63056fabaf1dcfd5ad64502afc2f63dc0b74e2b6ef8292e2393efdafb900e6f1b03464a80c4c90573c6c63ad2e0ab", 0x30}, {&(0x7f0000000240)="4fadb63ceb000c3e0a070969cc6770c32e243c3521ec7117d2d8717d2e09802546198e6fe8bdeaa8548d760853c57c3026beaaa8273cc98a5d6d35978eef5a8854f8f60dfc957906e6a8763182d4c0b60c0cf1433624704896a2dde4441779e046a7df5c89c91af39ec2b987005690eb45e6d3f1aa0ae2321c1f715357004b23dce9fadbd58b49a75028178252b3979e095c2c70c35f929ac9d2cb0fbde1dec9aec9971e", 0xa4}, {&(0x7f0000000300)="5a6efeb9fa96732fda2e2da04fdcdc2a29afa9b09e26ac07fee4e9b142d24493991f32f9a26ef0d1ef8736f49d6e22f2210189f823", 0x35}, {&(0x7f0000000340)="564d1ba21ca7125e7c77b4e382e04dbeff27afa0b3b2ed6885b089afbe8a57f305430986f1892edd8175884de40acd20b9ae56da15979b1b8de566ce15301997b10c2c18bbc80ddfbaa41ca5ea8de4c1cbdfcc42469443004dbf12ac73de96495c4b2a4cbacf524dbd39f8e7335b1679f393284ab82cebc89244b29275287c1941433674bff16980c26e457990b27d614a85c15e95afec8f341669dc", 0x9c}, {&(0x7f0000001440)="4f81f46b5a3ef894fa588595b64db09b1706b192dae27af9d0207f3f4bb4134b146fb36ab613fd2ade4d9f2d7b762d47d2cca9d2ba2099235622fd08657df7b519cba39d17aae14f6e4b837d0cd2f5b7fb278800a8f9f4c31217c80f8860554f5eb83472303db35d104b2562aa0ae13d70d52b511dec3371a6381f61e93374e2604aca7fec7144b7670d28b8dbeda78c0492d13511af141390be5eab9ec8f97e368b29", 0xa3}, {&(0x7f0000001500)="df544fde", 0x4}], 0xa, 0x0, 0x0, 0x8800}, {0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000001600)="25bd54de9b274e9c0ff64ec46c75b7d7f028bba3bae3f99a8fa6ccef16bf421813f70bd8934d3cbbc9a14a6535b93929d29a4e1b5fdc983f4765806c95ac6381529bdfc2a79933a3a863133147539994e4c28d72300572d376409e14827bc21f57c6bb2c453d0b236bffa7a0d777f300b7c8f571cd89d301207ba5aeed386d7375ef7c11c08da6281974892f44e9b416f5e4b78f66d387a05eb1768fc2b4c3828b6bf4d064d241dad71182db7d843e6b6340df91da13ecee671560e2f49d45f8d91df07168ebbf061f9fc270c83b69cb1537d95b80a7a3bd8e776bcfc94d6ee117b7d8", 0xe3}, {&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000002700)="ac7051a06e3b28f137a3381e98a7440288623d19e9bdbab95ec96b6a1380e9650d1f68ce762ca799c37ff31d9b90bd783c8345e959aba32270e182712372f9d087f8898e26ba8e0da14b5c17336bb7164391aaa4ceba9ea2ccc4a522428f27b9ab9c645489928365f76a3124af8ff133ea7cdaf27e992e50cae3c7997c70d1cc4b65fc441d9c2b3be1009763a52c807d3cd5b8632418ad6412e784c77ca191323fc584dd90235bfc6c881a8f50f26930", 0xb0}, {&(0x7f00000027c0)="68fc2870668b51b3ffcbf0dcb214e76521b0cfe773667dc051b40531b750a85fe9", 0x21}], 0x4, 0x0, 0x0, 0x40}, {0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000002840)="0633c3683bf45700fa23b9e0c932285e9f6e20e5339f4509e4a86996e0291bbe855ea36dcb76c99cd6", 0x29}, {&(0x7f0000002880)="9ef0dd2c0f9886e17f2e4bd9ec192becb8a46f1a056e3112c822e0a71b9263a1b6d3f03f9910a2638631b6baaeca68205b8ebc10616e23e837008dd78b913d9d92d80f0b127d75b5080e35e924fb7213f22bbb63434c686168582841d72aff0715993d5bbd4a20f4c67b9d9ecf38a3842cfa5b2f3fbb908ff9efa7fa0490348cac6bb1b3c7de4553ca93351607496c31812f705f57762befdddcd84de63735459cf0c4e5c00cf05556eac165e61f10", 0xaf}, {&(0x7f0000002940)="7be0fc785e72e12127bb7b00d94190645cef378edcce3de3c708b398f110373d8349cfcb997fbcde150d9f7f380a4c35d28fea80bfba479cabf3cb5e38790ae11d4246f36c103a3597bbdd389c415b52a70f2b0e22cf6c0c3442c60671b785b41bb374f1fd0a9d1aa7be5a34ff1275a6284a097c85a255e203f83ced04078a3648fde4b00fc4f42caf62371042dcfcf0b0210e376f8a8d6aa5cb837cd0e2cbbc88bc7c641de4f030ff6c8d5c1a0aba372d43c58065511f2311870b42941388fefe4b7a261997216d14601d", 0xcb}, {&(0x7f0000002a40)="15ea7298b385a5ea3a9c1217dc860157fea63c38ab516c6c0e58a1d66164609f9c3845b4f1021afaaa7b7fa4128b5a77d5c4aa6f8125617ae8d94fb9d01844", 0x3f}, {&(0x7f0000002a80)="ff665cd76add0b0f72f29e439956b26130a85433d3fa6a681ea9094afb963cb8bac01e882ebe986a4327f52347b4abde6711546e5d50dea398177be5ed896c7312e2f7685b6939ab9c230d913867313705bbf7902fd39e537f9ac0875726bdb76b6b5bd4dbf018a843b95c805ee92d94d02e7dcce4c096ade3fd1bf6cdce3ab394e86c059642643a36940aa0a6230618ae3580b1a43b0157077c7aef2b6ed3a9e8975402469d133b0aec85b848d3af295233b2f7932e74ffca2d1a6ee44be7783e975b1d899fc8d828c22b85e3b2cdd1fa", 0xd1}, {&(0x7f0000002b80)="6ddceac7749da91924932f0eb14fb52106747a4342c5d2d37753ca589c880159638352d3bd56ce12926f10121f67baa21a27f585771ff1739c70b9c9013e21ed6664ccb3097782d2cf45c16314f7869a879d8e9f7e26f2757c7dc5ad17123649780c9b70b8295f2a69e3a470c3281e44c4b33a9f087f378bc3cd54e7540e5b56db3c8b60661723e6d3c8cb8e263c4ad45e6cb6665b3333b1978e6341003b37f55398cf2db5e238948bab1f0023baae3d872c5d42a0ae5c546fd8af57f6dbdbd815d177fbf513cda6e20276ae28da44a3811048359acd", 0xd6}, {&(0x7f0000002c80)="b123ee5c5c89510de4b7bbfa642185cabd7ad7745baf3799e91077f8071a1f766f812f7523486be27ecc783a5fd36d62e0a37df2090b7661fb469093f8197afcf04fb8ca2eb3d306f7a57ab0cf21ecde318af89c620966ab82a7635bc99963261b6e0e5e9a8dd33a3b950ae694e248b3b15a2c61b4c3c6d7a101decbe6fe842aceebfe9cc049f30795f62f75e08a531419b60a620914514323871a15cbb4b9a13ea74ee0454e7fbfac8d8a58d9977b4b309e544eb0e5c633e64cfd53045abc3c8529fb367a6f1dcec9d5d510657e2f47d4461e011ec466b3ec021355aa067f483689871178280b8d65cff65a1b934adddb4bc13aed4436424e7c141f02a5050e14397b6a1f6a74762064c8d05a54da1264688e59b8306542258cfb7457e57f6ff8524a05f22894f83096f37513fde8edb1221518e128dfad46b8020d45007a9169f952b373baafb162524d0d0de745e8cf9a38501e30f9701933af66368869c08d5bdc2b4e599d951f82729076387eae0d94aca6bab817730314bdcd111ac6fa81825500688b31a3c268767c7400221859dd9d4d51e24f6782d938f448b401a6df715293636277d595f64570e4dd4728b151c7b69ae768a7b53204a94a4c33ec04fa9f936f9e4c2aff9a5674d6d72a02fee93ef3bd15f7bb5c6853fb03dafaac0d825e3038683c724e5cbb3cb4d56f63eda74caf30bdedbfc705d87591a7571732c39fd095431f73ceafe22b42e978cddaa25fb8b4f3c9e02c87c0fb030bec6876a568ca90ad84fd125342deaceb702a8ef87504b32fafc0557237a2d1676dc09d0819f1f3ba3eb02542ad15daece27c0717212cf8163bc0fa98ec1b8ff98ef70cbdf795da703edd28d42e1487bb52273a65d037db86f386a6967a79aa95aeed303d09cfee259a953f7c4e1da17f7da79dff755e0bdfec2ce952fb6e95effc126812a8cb0025e8470dfc89081534933331d70eb59dca0efa7cf9520e0a48036396c0af61436d21a43dbf18998c9200e447315b53573676ed2bdd653c735a01f8edfc85ff3cb11c8cb18cde348556ef146318e4674589ab60f9697186f16d76ae0a3c8791feb07c9a4c515db10d0df288b5861150b65b7606bfcb02e786ff26fef7d6d9da28d2c293b50297257a3253c0af94a7878ef661700025a8ece42c34a7b3150aee2dbfbc14904ccc53361b45490c5f43063529fd8d2d3961b0bae0faf7b5838140976c8c5c25c268476f6a0bf35f9a17afc63fb3646a234985fa072a4b79856ac260707e231d9a0c8d7793835f104555ebf8cdd3e04d4189941d1b10e6a0efb2e819bb904f7f37600956dbd8ccaca162c7fcfa96017abc63c0907ff5208e0e035c0f3a5f2d7cee89c84688f611f743666a195be025b8fa8c29b4538d81679c31c4de88d93856a159da3c95735bd68b49d7e18c189e65ea8026e987fcce86b5ab47cabc5e41573fda5564399528ffd1f22179665731cc51fba8fe41faf782541981ef028576a01540d8bfb00124e736c997f01f8d1efb09fd9a0075df61420ec5dfefcb69afcdbb625cc1548f214e00c53aab1a7f841968c25efb8d33770cab2fd84a549ccb3d1065a49a33aed499153c3634604db9e3e5be6c535bd38198c865a85c4b3cc6b7ac01f6706a31b944ef891ef20f31d496553cddf5e45320682a3748a6367ef823fb566480009818fec21baaff557c8ae86c52ef02e5d2e48aa3363d373bd7bed6a8d1eb7ce3a630865e45dfe202c105c4f667345df576274e0112558fb4f01fa107182da931fb2b80ddfb3ca3cbb5c38b5210efc939a8db6d7e574afdc9d3269beff2965b7cba2ea6946a4811d8b6db3ba94ee49d689c2ce9af33368e9b0b94f1e4ea883bfe264128dda770b865f0b1540551b333c0a9ef206d3506480cac3faada3e83f0ef89427927750a699b2c63193f4253c938029a5dd692c4ea28b4cbd5771acf6ced15e8fe1efce534c15b5c973ff8eba3c031a5aa73f06409f6f303bb7b0b389fa71c82163f50f49fbdbb3deb6098e622a512e5cf4eddb6ddaf23c12062a872f93b2d5f7fac316c71a3c4ab3184ac11447bf74e9c7f03b2178cb1a14d50b3c25a0ed8317ea153fd7ceb9f41e11f2ecbf2a72e1fb5f021a54f6126de9fd084dec7e055876ca3ec0b2262953e602a9b3649b9179c1a33c615f8341b34faeb5b66caa105557cd045534493cb4ee2feb08216519d493caaf17983710633c9c471956d9479936f4f194d916fc0c38f7d0e9edbc87f8dde5aa286f9919d4653addf8e49a61c7f7b6a45169361ab12292b01270aedbd0ff8246e40c7c8dd83a2f394a78d5f61016c50f70b2a4259811dd120181166e5983c18a0ebe8ba37fb71d818b79ba5e419dc740ae0839615ef0cb9150bad7e085e91dc1f3fc0086d89f84dbc5a3ab1c761e6958988d15d333d2ae3c1a3002cb23a0baf847bc10e6f01bc97284645f3509163d8b63713644595870bbd061e2d8f71fae44aaf48b9b157eee3159f362460720e3e0e13b58135bc34dcad7ac31b01beb1a4eb9342a15bb83ab78f1c37e1d2155e36dec56a74bf03a14ddb5e4c9c858ff9b30e7d8f1c51a1f6b3e92c65bc8123a88189d47c4476ca2a31f9cf8ae4bbc79481a5a902828f61cba8abb7d0d7f4006bda964551af552898639da9c7f18289fdd2b442e0668747011cc15da4c51b63a4636d80197ea3182cf0d7320f298b4ab09f8686a636d74a6507595b1737a80e76e4895850d86b8b01c38b4c7844950587117b52ed30d6c0ca4b3c06fa37c0818606e688dbec6b86c83ba186933c4c2537785974b0862909b544b32d911615b1590895b93d1c6a0641b482cc067799fb04543cbf2e0767011092435cad3bb0a6b14ad8e96d04f69db787c93844480930c1ecf5ecc3d942561fdc4ea7b5f17b806ae2115d36064d8d3de7c9d4982e2f6e9561e9f5511c160c545410356c25ce04314cb08a682e5e33c1257fdcd394dc3613c927d935a323169aae10c1b0e06b286a818dc80b97c1f08c67def571e8730e3331ef8f7a6ce44f14f4ca684acd47fe5a4226f9d5acb46946b29fd7ae410e570d95dcf0f11fb16cdd9e8544c788bdfa9acaed18f567f967c874a6352497c48668186b82eaee1ebf39e152d5f394c4116fcc280eb3994200ebcc7346f4b847b9a6f447ae50b86f0e795de22ee5f43eb8752f8484b70a0746dad55dc49377ae52caf9f37d737518dcde5a6b1d72eb9075700f35c05643f774ba269ef1dab59a4182d18a98f2db8defeb74e104ea0baaf0c64b74c749f6166d39e0804fd4682b872fef5ed26ca6070924652d0fc7e8c093464c98fd5997b19d17115b2f62fc96c9e87bfcf9441a864c16d7c4b5003407eb7522dddd5a6b6057f24828d3ddb19e1dcd5614cf696750fba71b8415d643fdd14511f75a033970859def521604d05c40b168c0b516264eab1d2fde05943064b6d99769593468e9dc9dd76d10288350527c3f73ef9a85c9c50f742b760c18973061ff5dbd323f16b722d78a1ac6751ec2e3240f09753ae0441cad29170c101ceb1c1375602cf3d19bfe518ff258703eef58fcb52bba8e556d4e343075fb3b85243753514455de0019a06aa6e36208f01886eb6123f02c04c1bff62c99289b372048695965845d62552a8cfa75403630e1681fc0254d7200cbb2ec0d1265e919848fc5a89cefd7ac49bea632348660e4c4e8830bc704c098c1305b6d096a12a24814c1656afe3bb73dd3e00f08fe0a65c8d76a0fa0b69dc17f3441efdec458320800deb34bd5b6f48de271f01c4406b193322e0649761946c4daae24be3bd3d48d8c62f328e474590fd09c0cb1997166788001719ffc577f848aae981ef194acbbd309077f875b75552cee699c5e7f27cb61508ed82a168f2baced3fd5e70d7378040a1ee4b529a426f6bc85d8581a672a80f9046780de60af398496577a166bd9b94514ab92b4f61ee1f46a550cc0c2ee3ca2d63c32749d3afaf23f9a77261960e4aef915bc332cef8e333d21516f54dd158f18aa1ef36cdbb20dbbdf697eeea611eda4772f54b9dba00fb0a189133ce37e83421b1108b38ba329c3a51f17d554d31d44620afc3452e8cf4d48bf045425199e5957458c2aa2b1b5e4f914a8fa2b144c315997cd0afb60b491c446f0e062f85fb120f1ddc018f31080b705049af8dfcb2b60e028b75ed535dd87bbd29cbd09895c38436ac170e795520ce6a05ddc9b5edecb0a5caf72ccb38175d08fb27911e8d870e6d7571d71b10440e05c516cdc59aa91119a9b2c1afe0443a5434e25e1c5bf340b04d5c256d5c11a08bdd141c1ea5239d06abafe86a795bedacb68e7182d35ae305c7906920c6b766da4f023ed9a5f087b492cc011850c060f96e8fd84f4b86e509d77499db74a49316d5b70f18af0449ef08f6b2d42ff1450a86e46a2c7185e0585c2070fd185abdd0f387337d0c897fa122153f54a0d26ae102f5c3f3541358e0ebef449146876e4f6249c8f7304deb5a7e2552fac2a242f458a634bd4727fcc9798bce76dc7f6ae60746f27a0fba1f79e267ebe26450718e9c9827ceb92302079eae8b9433e479a5d1bb07e6ef35b73faa79450f69d50164b693547aaff9568cbdce3b4bc9146ce0298b257c533ae27da643a8e62cd484692f0849be3a221ab575e75db3fbd3f177ad1db88d5eda3a86414a65f62865a8b6f36524332894f914fee45ac1fc6865387863bf11facbc0aa6b2a6f4fca9caf6956f52747b728a1e0a74d8ae505af314830fed07a2d86d98f5c36e052290a3649997dc69f6f27023fe9fc9efc39a7a2abb81278bb672aa13fca3a3fb7a26916ba0fd75150d0cfa0c984c1c4635e4854dc770140b394bfd68bbfe4c278636b9e638d3392ba71d23d221839462eb8b94a31deb9b50ef4ba1d4857339cc980f500aea44f3f369bc0da9ab29c9a882cb641eed3d9da0c04d9d2c55ccd2b7078cfd4cee83344fd8c539e79e9d594a34efb2f811767d817904966273c63c974580d736ae65901108e6258ce7f3584b0f19d34de08acf50c743834963b534aab8c67812b438db64e40d300e69d5fb3bb16f6dfbe84cd1b022fe93ab40c2baf82e95961605009823ca90939462c32357f83c892648014bab1f0d8424b9378fd6b294003762a8f0b2c7d7e3726eb71a43c73c996036da59c6bc2fc2daddfd26718581754592a39a55c165a3068d0235af67f094355cc3ea107516874438595ea2533bf31b36c4f508c3a89b9be0059c0472d0672741a9c5c41cecbb14628cb0d762ffdc3d12648e62684e5127968c820b5144ec60425d7bc3bb01b61fcbfe1f13b6a979754d497dd2e1f5dcacea4a15e7207d70f4708a12a754b77ae1c9f3cc0575591ff78274c152f3f8d02efa30aeaa5f3b2e38ab1e8c310da9ddc3b266b27e901631bc176306bbe2f763fc344b6f78e90061d62d64b749583f812bb5fe25f1d90185b8641d937cafb7675f882376778a746399aeb8585e5779b86ef99c51862541831b16cc9d2e4e40b9db832f12ce94f2ac7a093e31c6a06a7f488614177dca21c80996891e8c500bc012c923aa45370cd5fcccce95b9027e6f49b833f6315931e72aa5ae386682ff3491b91007affc4650772a24cc98e03141915f4f0bbf95153500bf1d13bbb78c0fbab42b7c7371dc2a98bf3af045d513614dca3988fc32e3b08c5db77389cfb60e4f6ce74554f83bf641e56254b71edf5e98ab37719c1dda64a9c8aab6bac577899b655e56b8910afd3de31ec5b19d95cd56a134fd46b9b046187c9e11", 0x1000}], 0x7, &(0x7f0000003d00)=[@iv={0x108, 0x117, 0x2, 0xed, "7c0e3549f5351ffab403c7088024b9c806037604e74d4f5a62b48f0f92271fc80f4959e18bfa962fe29f0c804619db25c4bbbbf762aa12ff3fc960447c05a06151e8619ff88e64a6e61c6471d18a1c91b8dacb950d0460b2e4a215d4d178e91d8150c8ec371db155683a408ae3b701d4841cd8dbce22dbfc65f25f4a9512d10cdc8bef6ee2572f2cf05a57740724eec948e7b943fd7eb31f1bd6936fc4a3af487992d2fc2e766cdb18e4d0eb7a67edb7da9c01f5e622bc3b598fb1aa791aee50ffe9efedc7190c5048c8e99f56fb46a8ca899890ec572c06da6a185fb97a3f9d473be36d8401a6538d6fd2a680"}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x120, 0x4000000}], 0x3, 0x40000) close_range(r1, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x15, 0x0, 0xfffd, 0x7995}, 0xfffffffffffffc4d, 0x0, 0x0, 0x48000000, 0x3, 0x1, 0x0}) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfd, 0x7fff0003}]}) r3 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r4 = fcntl$dupfd(r3, 0x0, r3) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$sequencer(r4, &(0x7f0000000000), 0xca80) close_range(r2, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r5, 0x5761, &(0x7f0000000040)={0x1, 0x0, [{}]}) 2m50.936768027s ago: executing program 4 (id=1748): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000001c0), 0x4) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) readv(r1, &(0x7f00000015c0)=[{&(0x7f0000000580)=""/24, 0x18}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x102) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x802) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x40084}, 0x40000c0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000040)=""/185) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000200)=0x77) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00') 2m50.196736399s ago: executing program 4 (id=1771): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) recvmmsg(r1, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000c"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) 2m49.815517456s ago: executing program 4 (id=1780): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x50, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x3c, 0x18, 0x0, 0x0, @binary="08ac0f0002ac0f0009ac0f00b4c6ea978047236b91931953af0e321188bc14dc0a21a004dd323a3af287c7bec8028105fcbee7c6ed007b1a"}]}, 0x50}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x64848}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x0, 0x2, 0x0, 0x1, @void}}}, @IFLA_IFNAME={0x14, 0x3, 'pim6reg1\x00'}]}, 0x48}}, 0x840) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r5, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0xe}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000025}, 0x0) 2m49.702131502s ago: executing program 34 (id=1780): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x50, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x3c, 0x18, 0x0, 0x0, @binary="08ac0f0002ac0f0009ac0f00b4c6ea978047236b91931953af0e321188bc14dc0a21a004dd323a3af287c7bec8028105fcbee7c6ed007b1a"}]}, 0x50}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x64848}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x0, 0x2, 0x0, 0x1, @void}}}, @IFLA_IFNAME={0x14, 0x3, 'pim6reg1\x00'}]}, 0x48}}, 0x840) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r5, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0xe}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000025}, 0x0) 2m38.080907707s ago: executing program 5 (id=2016): r0 = socket$kcm(0x10, 0x2, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_open_dev$cec(&(0x7f0000001080), 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x5, @void}, 0x10) (async) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000580)={0xd52, 0x8000, 0x1000006, 0x8000004, 0x1fc, 0x7, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x5c, 0x3, 0x1, 0x4, 0x9c, 0xff, 0x6}) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xe79}}, './file0\x00'}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000007000000000000000104000085100000ffffffff18110000", @ANYRES32, @ANYBLOB="000000000000008600000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000006a400c00010000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0xc573, 0x4a, &(0x7f0000000240)=""/74, 0x41100, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x5, 0x8, 0x9, 0x8001}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0xffffffffffffffff], &(0x7f0000000340)=[{0x2, 0x4, 0x8, 0x4}, {0x4, 0x2, 0x8, 0x3}, {0x4, 0x1, 0x10, 0x9}, {0x3, 0x4, 0x1, 0xb}, {0x3, 0x5, 0xa, 0xb}, {0x1, 0x3, 0xb, 0x5}], 0x10, 0x9}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@fallback=r1, 0x8, 0x1, 0x25a8, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000640)={0x7fff, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r5, r2, 0x2b, 0x31, r3, @void, @void, @void, @value=r6, r4}, 0x20) (async) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848350000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2m38.032898371s ago: executing program 5 (id=2017): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48) r0 = io_uring_setup(0xaa0, &(0x7f0000000340)={0x0, 0x2c17, 0x1, 0xfffffffd, 0x21e}) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x955a, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000080)={0x0, {0x4, 0x200}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[]) clock_settime(0xfffffffd, &(0x7f0000000d00)) openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x101881, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m37.967362956s ago: executing program 5 (id=2020): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close(r1) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x194, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x148, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x58, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x194}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x178, 0x194, 0x194, 0x178, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'sit0\x00', 'ip6_vti0\x00', {}, {}, 0x6, 0x0, 0x4a}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x20, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xffff, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYRES16=r4], 0x118}], 0x1, 0x0, 0x0, 0x4000}, 0x48810) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r5, 0x101, 0x2, &(0x7f00000029c0)=0x2, 0x4) syz_emit_ethernet(0x8b, &(0x7f0000000200)={@remote, @empty, @val={@void, {0x8100, 0x4, 0x0, 0x3}}, {@llc_tr={0x11, {@llc={0x7e, 0xff, "2cc6", "ee228e72e5110101cfda0b1617ef7bec1b702419f4d71bb413595869dbbbb44031566b88595f834c81b8db76223851f873b10c32dd66a9a4f21f1a3cd9d32e6a2ae8bfb985ab90b529c9ec2be2b774ff74129652dfbb8a8e39b1b3ff23741c9c2e3dbd257d9e47aaf5993f21fb010c9cdbb235f033"}}}}}, &(0x7f0000000040)={0x1, 0x3, [0x699, 0x79f, 0x284, 0x2f1]}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001800030000000000000a140000fd0100000000000014001500fe800000000000000000240000000001a281de82783f0fcbe8a76511e51224d3fc30702ddbe91f872e0d395047239a2e4369f13399a758000000"], 0x30}}, 0x0) close(r3) ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f00000000c0)={0x1c, 0x859, 0x1, 0x800}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x7, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x80}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000980)=@deltfilter={0x118c, 0x2d, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x8, 0xffe0}, {0xffe5, 0xe}, {0x4, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x40, 0x92}}, @filter_kind_options=@f_cgroup={{0xb}, {0x114c, 0x2, [@TCA_CGROUP_ACT={0x1148, 0x1, [@m_ctinfo={0x10c, 0x17, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x10000}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x400}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2b9}]}, {0xaf, 0x6, "00c9c578959b698ad7fbcedd98655268ac83e1c43121f31d5f9bd87531ddabf95ce60048c089c43f7d395c058b27488c7ee4369d61ef7b5f2d0b1f2aa8ed826d3b2788d9cdaa2b42459676b03fba9433ea6369c5810b8b6beb8d9071c7bea97f520c520c17778ab40705ed8f239974922ce81fc78617133aca8863176a011acdf11869caf2c03997015534bdb4f3ca2d4d726fd325f6e7222222f11f0dce45a1f023cd18476ae221ace075"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x64, 0x17, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xefdf, 0x3, 0x8, 0x80000000, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1a7b, 0x20000000}}]}, {0x11, 0x6, "7dbb4f6cddeedf96115924ce69"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}, @m_simple={0x110, 0x16, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xe, 0x3, 0x6, 0x7, 0x5}}, @TCA_DEF_DATA={0xd, 0x3, '{\x8e--$+(.\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3d, 0x8, 0x20000000, 0x8, 0x3}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7f, 0xfc000000, 0xffffffffffffffff, 0x4, 0xe}}]}, {0x8b, 0x6, "1cc33697c0347ba1e11f45125361515d694640545060eeb616a5b637b6a596cdf6692b5424b3995c6b2ffe8ab4bf4f964baf850e7c00936dd5545af6819469e2d0010b0ada8731c05879d385f7d9a96453b2e3ca473a1a7d6f2cae32d4b72063536a2b846744eb265d73853770a33f9cb09db73484bd6db3eaf3baebae8ac7329fb4faab16a7e1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_pedit={0xec4, 0x5, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xfffff50b, 0xe5a, 0xffffffffffffffff, 0x5, 0xf94}, 0x0, 0xcd, [{0x4, 0x7ff, 0x895, 0x7, 0x8177, 0x24}]}, [{0x6, 0x5, 0x87, 0x10b, 0x7, 0x82f5}, {0x5, 0x9, 0x9, 0x7fff, 0xd2d4e261, 0x6}, {0x4, 0x6, 0x34, 0x0, 0x7, 0x2}, {0x2, 0x1, 0x20, 0x5, 0x8, 0x100}, {0x9, 0x0, 0xe, 0x94c, 0x4, 0x50c3c7a3}, {0xfff, 0x9, 0x6, 0xfffffff4, 0xd, 0x4}, {0xa73, 0xff, 0x6, 0x3, 0x6, 0x800000}, {0x6, 0x304, 0x6, 0x973, 0x1e4f3959, 0x816e}, {0x8, 0x7, 0x3, 0x1, 0x7ff, 0x80000001}, {0x1ff, 0x1, 0x9, 0x7, 0x5, 0x3}, {0xffffff81, 0x3c81, 0x2, 0x0, 0x9, 0xf2a}, {0x0, 0x5, 0x6, 0x1ff, 0xfff, 0x2}, {0x2, 0x0, 0x9, 0x4, 0x2, 0x101}, {0xb, 0x7, 0x1, 0xf, 0x7fffffff, 0x2}, {0xf3f, 0x4, 0x6, 0x2, 0x8001, 0x2}, {0x7, 0x60, 0x31d7, 0xdd93, 0x8, 0xffff22a3}, {0x1edf6710, 0x1, 0x7ff, 0x8, 0x62, 0xf}, {0x0, 0xb, 0x1, 0x3, 0x1, 0xfffffffc}, {0x86e, 0x1, 0xdeb, 0x2, 0x665, 0xf}, {0x0, 0x3, 0x3f09, 0x4, 0x7, 0x3e92c70e}, {0x6, 0x9, 0x6833, 0x5, 0x9, 0x7}, {0x270fda0a, 0xb, 0x9, 0xfff, 0x8, 0xb121}, {0x2b, 0x8d, 0x7, 0x19, 0x101, 0x4}, {0xfffffffc, 0x1, 0x1, 0xb71c, 0x8, 0x80}, {0x10000, 0x7fff, 0x9, 0xffffffff, 0x4f172c55, 0x7ff}, {0xe, 0xfffffff9, 0x4, 0x400, 0x1, 0x4}, {0x9, 0x6, 0x8001, 0x9fab, 0x4}, {0x2, 0x5, 0x4, 0x6, 0x8d7e, 0x6}, {0xe, 0x0, 0x2ff3, 0x6, 0x41, 0x2}, {0x4, 0x3, 0x6, 0xffffff81, 0x7, 0x5e}, {0x0, 0x6, 0x80000000, 0x9, 0x8001, 0x700000}, {0x800, 0x9, 0x7, 0x20, 0x1, 0x7fff}, {0x56, 0xffffffff, 0x5c1d, 0x4, 0x7, 0x3}, {0x8, 0xc, 0xffff, 0x3009cea0, 0x2, 0x7}, {0x3, 0x5, 0x0, 0x3, 0x9, 0xf}, {0x7, 0x4, 0x8, 0x200, 0x4, 0x8}, {0x0, 0x3, 0x6, 0x1f7, 0x5, 0x6f}, {0xfffffffd, 0x7, 0x7, 0x6, 0x1ff, 0x3}, {0x7, 0xed0, 0x8, 0x101, 0xc, 0x8}, {0x1, 0x0, 0x6, 0xdf886309, 0x100, 0x401}, {0xb65a, 0x6f, 0x8, 0x2, 0x9, 0x8}, {0x1, 0x4, 0x4, 0x5, 0x10001, 0x3}, {0x80000000, 0x8, 0x6, 0x1, 0xa1b, 0x6}, {0xa, 0x5403, 0x8, 0x5f, 0x1000, 0x7}, {0x8, 0x0, 0x80000000, 0x4, 0x5}, {0x1, 0xec3e, 0x60, 0x7f, 0x3af, 0x101}, {0x1, 0x101, 0xb, 0x1, 0xff, 0x3}, {0x7, 0x9486, 0x4, 0xba, 0x9, 0xf}, {0xa3, 0x0, 0x1b8, 0x7, 0x6, 0x4}, {0x2, 0x0, 0xd9, 0x400, 0x3, 0x300}, {0x7617, 0x2, 0xa, 0xd, 0x6, 0xffffffff}, {0x8001, 0xa, 0x3, 0x7fffffff, 0x8, 0xf83}, {0x7, 0x62, 0x800, 0x10001, 0x4, 0x7}, {0x0, 0x0, 0x10001, 0x8, 0x740, 0xffffff3d}, {0x7d1, 0x2, 0xf6, 0x1, 0x3, 0xfffffff8}, {0x2, 0x0, 0x2, 0x8, 0x4, 0x31}, {0x7, 0xffffffff, 0x8897, 0xff, 0x1}, {0x7, 0x8, 0x2, 0x6, 0x44}, {0x5, 0x80000001, 0x2, 0x9, 0xf0e2, 0x6}, {0xff, 0xd6e9, 0x0, 0x5, 0x6, 0x4}, {0x8, 0x8, 0x400, 0xe55, 0xfff, 0x1}, {0x5, 0x9, 0x4, 0x9, 0x4, 0x564a}, {0xffffffbf, 0x400, 0xee30, 0x0, 0x8, 0x6}, {0x1, 0x171, 0xa, 0xd, 0xb, 0x100}, {0x8, 0x8, 0x101, 0xc, 0x3}, {0x4, 0x8, 0xffffff80, 0x7f, 0x80, 0x4}, {0xffffff05, 0x7, 0x80, 0x3, 0xfffffffa, 0x7}, {0x7fff, 0x8, 0x7fff, 0x5, 0x1, 0xe9}, {0x0, 0x7fffffff, 0xe, 0x2, 0x9, 0x9}, {0x7, 0x3d3f, 0x7fff, 0x7, 0xfff, 0x5}, {0xffffff25, 0x0, 0x400, 0xfaf, 0x8, 0xb}, {0xfff, 0x3, 0x8, 0x596d, 0x2, 0x5}, {0x10001, 0xd44a000, 0x2, 0xf, 0x1, 0x4}, {0x0, 0x5, 0x2, 0xf, 0x40, 0x8}, {0xf46, 0x5, 0x8, 0x3, 0x6, 0xc}, {0x8001, 0x0, 0x3, 0x2, 0xd, 0x800}, {0x8, 0x32c106a2, 0x9ea6, 0x9, 0x1, 0xa}, {0x8, 0x7, 0x5, 0x2, 0x1, 0x1000}, {0xfffffffb, 0x8, 0x6, 0x3, 0x4, 0x2}, {0xa, 0xffff2c89, 0x506c07f0, 0x4ec9e2fe, 0x7ff, 0x81}, {0x2, 0xfffffffd, 0x0, 0xf000000, 0x7ff, 0xb4}, {0x7, 0xfff, 0xfffffffb, 0xe00, 0x5, 0x2}, {0xd024, 0x400, 0x3, 0x8, 0x60, 0x81}, {0x1, 0x30a, 0x6, 0xde, 0x1, 0x7}, {0x508, 0x2, 0x5, 0x81, 0x10001, 0xc165}, {0x301, 0xffff3606, 0x3, 0x1, 0x9, 0x10}, {0x3ff, 0x1, 0x8, 0x9, 0x200, 0x7}, {0xa, 0x6, 0x1000, 0xab15, 0x4, 0x2}, {0x3, 0x1, 0x10000, 0x1, 0x1000, 0x1}, {0x5, 0x3, 0x4, 0x7, 0x6, 0x8}, {0xd, 0x81, 0x2, 0x8000, 0xc, 0x4}, {0xfffff800, 0x7, 0x8, 0x4, 0x4, 0x2}, {0x10000, 0x4d8, 0x6, 0x6, 0x0, 0x3}, {0x7, 0x6, 0x7, 0xd12d, 0x6, 0x75}, {0xfffffffc, 0x1e4b, 0xfffffff8, 0x3, 0x1, 0x2}, {0x4, 0x5, 0x3, 0x1, 0x9, 0x7}, {0xffffffff, 0xa01, 0x2, 0x0, 0x4, 0xd1e5}, {0xe, 0x2, 0x0, 0xad49, 0x2, 0x1}, {0x5, 0x6, 0x3, 0x6, 0x4, 0x231}, {0x7d52, 0x4, 0x6, 0x7fff, 0x10, 0x4}, {0x2, 0x8, 0x5, 0x1, 0x6, 0x4}, {0x5, 0xfffffffe, 0x0, 0xfffffff5, 0xe, 0x6}, {0x40, 0x3, 0xfff, 0xec, 0x7fff, 0x5}, {0x6, 0x7fffffff, 0x6, 0x10000, 0x2, 0x80000001}, {0x2, 0x6, 0x10, 0x3, 0x5, 0x2}, {0x0, 0x5, 0x8000, 0x1, 0x4707, 0x9}, {0x200, 0x8, 0xf, 0x7, 0x2da, 0x5}, {0x3, 0x5, 0x7, 0x123, 0x7ff, 0xd}, {0x0, 0x7fff, 0xf, 0x80000000, 0x0, 0x1}, {0x1, 0xc, 0x1, 0x5, 0x72, 0x50}, {0xb, 0xf88, 0x7, 0x10000, 0xdb0}, {0x80000000, 0x8001, 0x3, 0x8, 0x400, 0x12}, {0x40, 0x7, 0x3, 0xffff314d, 0x3b5, 0x3ff}, {0x7, 0x4, 0xd, 0xa, 0x6, 0x400}, {0x4, 0x6, 0xffff20e6, 0x800, 0x3}, {0x1000, 0x7fffffff, 0x0, 0x8000, 0x7, 0x7}, {0xffffff01, 0x800, 0x5, 0x4, 0x8, 0x8}, {0x5, 0x10, 0x5, 0x9, 0x8000, 0x2}, {0x5eb, 0x0, 0x6, 0x10, 0x401}, {0xf2, 0x1, 0x9, 0x3, 0x2, 0x2a0}, {0xffffffff, 0xfffffbff, 0x6, 0xffffffff, 0x1, 0x8}, {0x0, 0x8, 0x6, 0x0, 0x6, 0x7}, {0x5, 0x5b94571d, 0x1, 0x8, 0x1, 0xd9}, {0x2, 0x1, 0x400, 0x40d, 0x4, 0xfffff800}, {0x4b8, 0x7, 0x4, 0x80, 0x6, 0x10}, {0x5, 0x9, 0xd, 0x0, 0x8, 0xff}, {0x1, 0x9, 0x5, 0x1, 0x7, 0x200}, {0xa0000000, 0xff, 0x7fffffff, 0x6, 0x1, 0xfff}], [{0x5}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x2}, {0x3}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0xd6928857319be1be}, {0x2}, {}, {0x3, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x2}, {0x5, 0x1}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x4, 0x8b1e27ff15c6bc71}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x4e9ac51ab09498b, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {}, {}, {0x0, 0x1}, {0xf4085f65c6f70492}, {0x5}, {0x2}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0x3}, {0x4, 0xd980c383d73861ee}, {}, {0x9cdc90cf46255dd1, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}], 0x1}}]}, {0x60, 0x6, "49703748e1cb10bbc7388a41843140c251e5dbd57566f988cf7f6602667ab96086597333752eb91d1ff6f80f4640bb62415537676538814032e227cd2bf233194766cd591c29f9c7ed88b69a96cbab22ab9133d1fc1adac03707c570"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x118c}, 0x1, 0x0, 0x0, 0x1}, 0x20008004) socket(0x1d, 0x800, 0x7ff) 2m37.941143813s ago: executing program 5 (id=2021): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000001fc0), r0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="f57e5d509c832831a6973ac0dc93b4e594e57c872aacb42984ecfd00"/44], 0x1c}, 0x1, 0x0, 0x0, 0x4000084}, 0x8800) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mkdir(0x0, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r2, 0x4) listen(r2, 0x5) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x1015, 0x1) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 2m37.892845509s ago: executing program 5 (id=2023): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0xb1}, {0x6, 0x0, 0x0, 0x7}]}, 0x10) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000200)={0x8, [0x0, 0x6, 0xfc41, 0xf4f, 0x9, 0x200, 0x101, 0x5, 0xffff, 0x4, 0x40, 0x1, 0x2d, 0x9, 0x1, 0x6, 0x4, 0x0, 0x7, 0x4, 0xddf, 0x6, 0xd, 0x3, 0x9, 0x7, 0x2, 0x5, 0xd, 0x9, 0x6, 0x80, 0xff, 0x7fff, 0x2, 0x15, 0x0, 0x1, 0x9, 0x3, 0x7, 0x400, 0xb90, 0x400, 0x4, 0x6, 0x8, 0x3], 0x7}) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0xb1}, {0x6, 0x0, 0x0, 0x7}]}, 0x10) (async) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000200)={0x8, [0x0, 0x6, 0xfc41, 0xf4f, 0x9, 0x200, 0x101, 0x5, 0xffff, 0x4, 0x40, 0x1, 0x2d, 0x9, 0x1, 0x6, 0x4, 0x0, 0x7, 0x4, 0xddf, 0x6, 0xd, 0x3, 0x9, 0x7, 0x2, 0x5, 0xd, 0x9, 0x6, 0x80, 0xff, 0x7fff, 0x2, 0x15, 0x0, 0x1, 0x9, 0x3, 0x7, 0x400, 0xb90, 0x400, 0x4, 0x6, 0x8, 0x3], 0x7}) (async) 2m37.454349871s ago: executing program 5 (id=2030): mkdir(&(0x7f0000000300)='./bus\x00', 0x40) getxattr(&(0x7f0000000200)='./bus\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="6f73782e73797374656d2e706f7369785f61636c5f64656661756c1102"], 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './bus\x00'}) 2m37.404025504s ago: executing program 35 (id=2030): mkdir(&(0x7f0000000300)='./bus\x00', 0x40) getxattr(&(0x7f0000000200)='./bus\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="6f73782e73797374656d2e706f7369785f61636c5f64656661756c1102"], 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './bus\x00'}) 1m43.542353729s ago: executing program 6 (id=2910): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020}, 0x2020) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 1m43.477835094s ago: executing program 6 (id=2911): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48001400090523bd7000fddbdf25021f80cb00ea69cc5f6c5c79d54253afb619a3b3de66c3be3f896b594670d830ab358839fedd1ed0c6edf4b407cbfedb8752af44703f93ec1587e7d38fa521c92ade23d88d521301aeba6af71ac4c1d4bbd97a8f905adf37b1a41b4f2b1a", @ANYRES32=r3, @ANYBLOB="08000400ac1414aa08000a000400000008000a000100000008000400ac1e000108000200e00000020800090003010000"], 0x48}, 0x1, 0x0, 0x0, 0x4044014}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000040000900ffffffdefddbdf250200000004001f000800018004003380"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000000)={0x8, 0x10000, 0x17, 0x1080000000, 0x5, 0xffff, 0x7, 0x8}, 0x0, 0x0, 0x0, 0x0) io_setup(0x58, 0x0) write(r6, 0x0, 0x0) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$unix(r7, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000000180)={'veth0_vlan\x00', @random="440f00"}) syslog(0x2, &(0x7f0000003280)=""/106, 0x6a) socket$nl_route(0x10, 0x3, 0x0) 1m42.548261198s ago: executing program 6 (id=2918): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="5800000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac008000500f6ff0200050005c05e776189eab556a705251e618294ff0051f60a84c9f4d4938037e786c6c953000000000000000000", 0x58}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x5, &(0x7f0000000040)=0x1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 1m42.545818001s ago: executing program 6 (id=2920): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f00000000c0)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x10004, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x3) read$FUSE(r2, &(0x7f0000001e00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004300)="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", 0x2000, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x130, 0x0, 0x10001, {0x3ffffffffffffffc, 0xfffffff7, 0x0, '\x00', {0x2fff, 0x0, 0x8000000000010000, 0x906, r4, r5, 0xc000, '\x00', 0x6, 0x27efc00800000, 0x81, 0x3, {0x1000000a, 0x3fd}, {0x2, 0x3}, {0x5, 0x200005}, {0xffffffffe, 0xa03}, 0x80008001, 0xa, 0xfffffffe, 0x5}}}}) (async) write$FUSE_INIT(r2, &(0x7f0000001200)={0x50, 0x0, r3, {0x7, 0x29, 0xffffffff, 0x22000100, 0x0, 0x0, 0x8000000}}, 0x50) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xd19, @empty, 0x4}, 0x1c) (async) statx(r6, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) (async) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', &(0x7f0000000140), 0x1801080, &(0x7f00000002c0)={'trans=virtio,', {[{@cache_fscache}, {@posixacl}, {@cache_fscache}, {@afid={'afid', 0x3d, 0x1}}], [{@fowner_gt={'fowner>', r1}}]}}) (async) openat(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', 0x4100, 0x11) 1m42.473089555s ago: executing program 6 (id=2921): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b240)=ANY=[@ANYBLOB="140000002e00f10326bd7000fdffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x4044080) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0xba1b474e0b1c775a) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001e0001032abd48b1e83c00000000410000000000009e000000000000000004d402002b000a0101010000000000000035000008000c0001000100"/72], 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000400)) socket$caif_stream(0x25, 0x1, 0x2) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r3, r2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x0) fstat(r2, &(0x7f0000000480)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x195943, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x3, 0x0) r6 = syz_io_uring_setup(0x10005c2, &(0x7f00000002c0)={0x0, 0x3594, 0x10000, 0x1023, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) io_uring_enter(r6, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x21, {0x5, 0x1}, 0x9}, 0x1) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r9 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x10080, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r9, 0xc01c64a3, &(0x7f0000000300)={0x3, 0x0, 0xfffff279, 0x10000, 0x4, 0x8000, 0x6}) r10 = fsopen(&(0x7f0000000380)='udf\x00', 0x0) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000000)={0x29, @rand_addr, 0x0, 0x3, 'sh\x00', 0x13, 0x8, 0x5a}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r11, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) fcntl$dupfd(r10, 0x0, r10) 1m41.885134121s ago: executing program 6 (id=2925): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0xaf}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x400) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x2, 0x2}, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000010}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x120, r2, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x32}}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3a, 0x20}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x70}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}]}]}, 0x120}}, 0x4) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f00000003c0)='veth1_to_team\x00') (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000400)={0xc, 0x0}) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000440)={0x8, r3}) (async) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000480), 0x200000, 0x0) ioctl$CDROM_SELECT_SPEED(r4, 0x5322, 0x20a3) (async) close(r1) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r5, &(0x7f0000000500)='memory.pressure\x00', 0x2, 0x0) (async) r6 = accept$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000580)=0x1c) setsockopt$inet6_int(r6, 0x29, 0x10, &(0x7f00000005c0)=0x8, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000600)={0x10004, 0x3, 0x2c000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000640), &(0x7f0000000680)=0x4) (async) getsockopt$inet6_int(r6, 0x29, 0x8, &(0x7f00000006c0), &(0x7f0000000700)=0x4) (async) r7 = accept4(r6, &(0x7f0000000740)=@rc={0x1f, @fixed}, &(0x7f00000007c0)=0x80, 0x80000) sendto$packet(r7, &(0x7f0000000800)="43df4c0ebfa355ca2cc9909b59f649af73a68a67ac2792896e50a180026421f8b66777e4e3a1ea0a77bcb168176543405e829564b9d477859657dc30648269ea4d712fae0175b3ba26f34e196b7962b8d9118cd3ac370c5e5463443d29094b377ab28efc9e732cc74c5e749bb519b2221ffdee5ba6c3ec0f7df7a529438c57dfaf91425c961e0e130c9c924b420a95ea67aabf9bee4803882779d1c6d990c6ca68fbc7fa6ef63dbeb2390a9b512c8e786bcd5d75b6a34c2f99fbeb95e5e741386b6a4c9e2673ee5d2303", 0xca, 0x800, 0x0, 0x0) r8 = openat$cgroup_subtree(r5, &(0x7f0000000900), 0x2, 0x0) (async) ioctl$sock_inet_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000940)) (async) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000980)=@lsc={0x3, 0x2, "0fea3e1efb39647b2bc7"}) recvfrom$llc(r7, &(0x7f00000009c0)=""/6, 0x6, 0x40000000, &(0x7f0000000a00)={0x1a, 0x207, 0x40, 0x3, 0x2, 0x3, @local}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r8, {r6}}, './file0\x00'}) syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000c00000/0x400000)=nil) (async) r10 = socket$caif_seqpacket(0x25, 0x5, 0x3) accept4(r10, &(0x7f0000000a80)=@ethernet={0x0, @multicast}, &(0x7f0000000b00)=0x80, 0x0) (async) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}]}, 0x64}, 0x1, 0x0, 0x0, 0x6010}, 0x400c004) 1m41.836772654s ago: executing program 36 (id=2925): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0xaf}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x400) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x2, 0x2}, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000010}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x120, r2, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x32}}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3a, 0x20}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x70}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}]}]}, 0x120}}, 0x4) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f00000003c0)='veth1_to_team\x00') (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000400)={0xc, 0x0}) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000440)={0x8, r3}) (async) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000480), 0x200000, 0x0) ioctl$CDROM_SELECT_SPEED(r4, 0x5322, 0x20a3) (async) close(r1) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r5, &(0x7f0000000500)='memory.pressure\x00', 0x2, 0x0) (async) r6 = accept$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000580)=0x1c) setsockopt$inet6_int(r6, 0x29, 0x10, &(0x7f00000005c0)=0x8, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000600)={0x10004, 0x3, 0x2c000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000640), &(0x7f0000000680)=0x4) (async) getsockopt$inet6_int(r6, 0x29, 0x8, &(0x7f00000006c0), &(0x7f0000000700)=0x4) (async) r7 = accept4(r6, &(0x7f0000000740)=@rc={0x1f, @fixed}, &(0x7f00000007c0)=0x80, 0x80000) sendto$packet(r7, &(0x7f0000000800)="43df4c0ebfa355ca2cc9909b59f649af73a68a67ac2792896e50a180026421f8b66777e4e3a1ea0a77bcb168176543405e829564b9d477859657dc30648269ea4d712fae0175b3ba26f34e196b7962b8d9118cd3ac370c5e5463443d29094b377ab28efc9e732cc74c5e749bb519b2221ffdee5ba6c3ec0f7df7a529438c57dfaf91425c961e0e130c9c924b420a95ea67aabf9bee4803882779d1c6d990c6ca68fbc7fa6ef63dbeb2390a9b512c8e786bcd5d75b6a34c2f99fbeb95e5e741386b6a4c9e2673ee5d2303", 0xca, 0x800, 0x0, 0x0) r8 = openat$cgroup_subtree(r5, &(0x7f0000000900), 0x2, 0x0) (async) ioctl$sock_inet_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000940)) (async) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000980)=@lsc={0x3, 0x2, "0fea3e1efb39647b2bc7"}) recvfrom$llc(r7, &(0x7f00000009c0)=""/6, 0x6, 0x40000000, &(0x7f0000000a00)={0x1a, 0x207, 0x40, 0x3, 0x2, 0x3, @local}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r8, {r6}}, './file0\x00'}) syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000c00000/0x400000)=nil) (async) r10 = socket$caif_seqpacket(0x25, 0x5, 0x3) accept4(r10, &(0x7f0000000a80)=@ethernet={0x0, @multicast}, &(0x7f0000000b00)=0x80, 0x0) (async) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}]}, 0x64}, 0x1, 0x0, 0x0, 0x6010}, 0x400c004) 1m27.647134618s ago: executing program 7 (id=3121): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000100)='./file0/../file0\x00', r3, &(0x7f0000000180)='./file1/file0\x00') r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="15000200000000f4ffff060000000c001600fbffffffffffffff140008"], 0x34}}, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x40045436, 0xd) 1m27.646352612s ago: executing program 7 (id=3122): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}}, 0x18) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000200)=0x2) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0xa}}, 0x10) shutdown(r4, 0x2) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x12b700, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x74, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7f}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0xf2cff8cd247adf5d}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xe821}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004010}, 0x4048890) r7 = getpgrp(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PIO_FONT(r8, 0x4b61, &(0x7f0000000080)="99070a") ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000000)=r7) 1m27.486003585s ago: executing program 7 (id=3123): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @broadcast}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000240)="f3420faece66b884000f00d8410fc76980c7442400ee000000c744240200000000ff1c2466baa100ecf2c16e002a48b8ed000000000000000f23d00f21f835200000000f23f80f08b9800000c00f3235000100000f300f13ab09000000", 0x5d}], 0x1, 0xc, 0x0, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000240)=ANY=[], 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 1m27.005015026s ago: executing program 7 (id=3126): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) ppoll(&(0x7f0000000180)=[{r2, 0x2404}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0xffff, 0x2, 0x4}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20040080}, 0x8004) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x8000, 0x0) ioctl$CDROMREADAUDIO(r3, 0x5392, &(0x7f0000000000)={@lba=0xffff, 0x2, 0x0, 0x0}) accept4$llc(r1, 0x0, 0x0, 0x0) 1m27.004339377s ago: executing program 7 (id=3128): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r1, &(0x7f0000000000)={{0x3, @default, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x11, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x33, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r3, &(0x7f0000000300)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x7}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @jmp={0x5, 0x0, 0x0, 0x6, 0x7, 0xc, 0xfffffffffffffff0}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x5, 0x1ff, 0xd364}, 0x10, r2, 0x0, 0x5, &(0x7f00000005c0)=[r4, r4], &(0x7f0000000600)=[{0x0, 0x202, 0x8, 0x9}, {0x2, 0x4, 0x4, 0xa}, {0x5, 0x5, 0x6, 0x5}, {0x0, 0x3, 0x4, 0x1}, {0x3, 0x5, 0xb, 0x2}]}, 0x94) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl$SIOCNRDECOBS(r0, 0x89e2) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) bind$ax25(r1, &(0x7f0000000000)={{0x3, @default, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x11, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x33, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) (async) fstat(r3, &(0x7f0000000300)) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x7}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @jmp={0x5, 0x0, 0x0, 0x6, 0x7, 0xc, 0xfffffffffffffff0}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x5, 0x1ff, 0xd364}, 0x10, r2, 0x0, 0x5, &(0x7f00000005c0)=[r4, r4], &(0x7f0000000600)=[{0x0, 0x202, 0x8, 0x9}, {0x2, 0x4, 0x4, 0xa}, {0x5, 0x5, 0x6, 0x5}, {0x0, 0x3, 0x4, 0x1}, {0x3, 0x5, 0xb, 0x2}]}, 0x94) (async) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) (async) 1m26.951848913s ago: executing program 7 (id=3129): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) (async) r0 = socket$inet6(0xa, 0x3, 0x3c) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x6, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10, 0x20, 0x0, 0x0, 0xee01}, {}, {0x0, 0xe97b}, 0x400000, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x40) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r5, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7ff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}}, 0x1) r6 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r6, 0xc0405665, &(0x7f0000000280)={0x1, 0x4, 0x0, 0x1000, 0x3fd, 0x0, 0x8}) (async) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d120b2d, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000200)=0x12) (async) ioctl$SNDCTL_DSP_GETODELAY(r7, 0x80045017, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r0, &(0x7f0000000400)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) (async) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 1m21.506010933s ago: executing program 0 (id=3200): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000020380)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000180)=0xfff, 0x12) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@mcast2, 0x0}, &(0x7f0000000080)=0x14) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r5, &(0x7f0000000240)=[{&(0x7f00000000c0)='\n', 0x1}], 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', r4, 0x7, 0x8, 0x6, 0x7ff, {{0x1f, 0x4, 0x1, 0x6, 0x7c, 0x67, 0x0, 0x5, 0x4, 0x0, @empty, @local, {[@rr={0x7, 0x3, 0xa0}, @timestamp_prespec={0x44, 0x34, 0x79, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x15}, 0x2}, {@loopback, 0x2}, {@remote, 0xc}, {@dev={0xac, 0x14, 0x14, 0x33}, 0xfe3}, {@multicast1, 0x40}, {@broadcast}]}, @timestamp_addr={0x44, 0x1c, 0x26, 0x1, 0xb, [{@multicast1, 0x2}, {@multicast1, 0x1}, {@loopback}]}, @noop, @timestamp_addr={0x44, 0x14, 0xb9, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@broadcast}]}]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000020380)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$cgroup_int(r3, &(0x7f0000000180)=0xfff, 0x12) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@mcast2}, &(0x7f0000000080)=0x14) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') (async) writev(r5, &(0x7f0000000240)=[{&(0x7f00000000c0)='\n', 0x1}], 0x1) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', r4, 0x7, 0x8, 0x6, 0x7ff, {{0x1f, 0x4, 0x1, 0x6, 0x7c, 0x67, 0x0, 0x5, 0x4, 0x0, @empty, @local, {[@rr={0x7, 0x3, 0xa0}, @timestamp_prespec={0x44, 0x34, 0x79, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x15}, 0x2}, {@loopback, 0x2}, {@remote, 0xc}, {@dev={0xac, 0x14, 0x14, 0x33}, 0xfe3}, {@multicast1, 0x40}, {@broadcast}]}, @timestamp_addr={0x44, 0x1c, 0x26, 0x1, 0xb, [{@multicast1, 0x2}, {@multicast1, 0x1}, {@loopback}]}, @noop, @timestamp_addr={0x44, 0x14, 0xb9, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@broadcast}]}]}}}}}) (async) 1m21.431339665s ago: executing program 0 (id=3201): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x442, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fedbdf251000000008003b000300000008000600", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r5], 0x34}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r7, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x63c, 0x52}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000010400000000000004"], 0x24, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66b8a9000f00d866b81b010f00d0b9800000c00f3235000400000f30c4c17571e5f766b8cb000f00d8660f38802ef6d2670fc71a8fe99892f166baf80cb85801ae8def66bafc0c66ed", 0x49}], 0x1, 0x34, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r12, 0x4008ae93, &(0x7f0000000080)=0x4000) ioctl$KVM_RUN(r12, 0xae80, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r13, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080021bd7000ffdbdf251d0000000c009900e7ff0700ffff0000080000002b0000000800030021d944e08ef7c9de1940ec4fc91a41dc0760ca4cfdbca3ac0d3c5543c377207eb9f6d6f8267b59c75e50237374161146a9e6dadcc627dbae78d8cd8caecf7a5673005be03c8843cc5af586fa429b21faa6573b0326a57605e30c97627f9ad91232b50e2249634c36aed122b5a5266d82cd69fb408e4d467f750856d92a4d4dde5fc34e4cddd39c8635b8fe", @ANYRES32=0x0, @ANYBLOB="2c00238008001700000200000500130001000000060012006500000005000e0003000000060019000100000008000300", @ANYRES32=r14, @ANYBLOB="0c00238005000e0001000000"], 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r15 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x8000, 0x0) read$sequencer(r15, &(0x7f0000000480)=""/98, 0x62) 1m21.152246643s ago: executing program 0 (id=3203): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r3, 0x575aeade4e9ae0f5, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x3}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0xf9ba}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r4, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r1, 0x1, 0x70bd29, 0x25dfdbf9, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x6}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003500)=@newtaction={0x60, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x31fd, 0x800, 0x0, 0x0, 0xfa05}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0xa850}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000080)={0x9, 0x100, 0x5, {0xfffffffd, 0xfff, 0x6, 0x3}}) 1m21.069343827s ago: executing program 0 (id=3205): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_pidfd_open(r0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) setns(r1, 0x6000000) 1m20.326808752s ago: executing program 0 (id=3211): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x34, r2, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x34}}, 0x4044) (async) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async, rerun: 32) r3 = syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) (rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400001c040a010200004000000000000a000008"], 0x14}, 0x1, 0x0, 0x0, 0x24040800}, 0x8080) (async, rerun: 32) r5 = socket(0x10, 0x80002, 0x0) (rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)) (async) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYRESDEC=r3, @ANYRES16=r7, @ANYBLOB="010028bd7000fddbdf250f00000005002f00000000000500350000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000084}, 0x40004) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) (async) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'nq\x00', 0x1, 0x4, 0x8}, 0x2c) (async) socket(0x1e, 0x805, 0x0) (async) socket$kcm(0xa, 0x2, 0x0) (async) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'ovf\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) (async, rerun: 64) setsockopt$IP_VS_SO_SET_ADDDEST(r11, 0x0, 0x487, &(0x7f0000000500)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r6) 1m20.037764631s ago: executing program 0 (id=3214): mkdir(&(0x7f00000001c0)='./bus\x00', 0x40) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000080)=r1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x88081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000100)) 1m19.939897655s ago: executing program 37 (id=3214): mkdir(&(0x7f00000001c0)='./bus\x00', 0x40) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000080)=r1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x88081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000100)) 1m10.866979088s ago: executing program 38 (id=3129): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) (async) r0 = socket$inet6(0xa, 0x3, 0x3c) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x6, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10, 0x20, 0x0, 0x0, 0xee01}, {}, {0x0, 0xe97b}, 0x400000, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x40) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r5, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7ff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}}, 0x1) r6 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r6, 0xc0405665, &(0x7f0000000280)={0x1, 0x4, 0x0, 0x1000, 0x3fd, 0x0, 0x8}) (async) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d120b2d, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000200)=0x12) (async) ioctl$SNDCTL_DSP_GETODELAY(r7, 0x80045017, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r0, &(0x7f0000000400)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) (async) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 25.658592243s ago: executing program 1 (id=3720): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa097}, {0xa, 0x4e21, 0x9, @local, 0x9}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000040) r7 = socket(0x15, 0x5, 0x2) listen(r7, 0x2000) 25.537017859s ago: executing program 1 (id=3722): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x1d9) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x10001, 0x402000, 0x1000000, 0xfffffffc, 0xc}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d00400000000001c00128009000100626f6e64000000000c00028008001400006f"], 0x3c}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) 25.379873893s ago: executing program 1 (id=3723): r0 = socket(0x10, 0x3, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000058000000060a010400000000000000000500400008000b4000000000300004802c0001800b00010074756e6e656c00001c00028008000340000000f5080001400000000008000240000000140900010073797a30"], 0xcc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x240048c0) 25.302144861s ago: executing program 1 (id=3728): mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='jffs2\x00', 0x2204801, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000240)='./cgroup\x00', 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2f}, @private2, 0x98e, 0x0, 0x1, 0x500, 0x0, 0x4d30356, r2}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r4, 0x1, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x0, 0x8, r3, 0x0, 0x0, 0x1}]) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r7 = socket$inet(0x2, 0x801, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010102}, 0x31) shutdown(r7, 0x1) sendto$inet(r5, 0x0, 0x0, 0x2000cf2c, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 24.131932256s ago: executing program 1 (id=3741): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x6, 0x801) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000000)={0x4000, r5}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfd, 0x7fff0003}]}) close_range(r6, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="04010000", @ANYRES16=r2, @ANYBLOB="0004fcffffff0000000001000000100007800c00018008000100", @ANYRES32=r7, @ANYBLOB="580007800c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00040004000000000000000c000400ed000000000000000c00050004010000000000000c0003000700000000000000400007800c00018008000100", @ANYRES32=r9, @ANYBLOB="0c00018008000100", @ANYRES32=r9, @ANYBLOB="00000000001d1200", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00060003000000000000000c0006000000000000000000"], 0x104}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x1a, 0x0, 0x15, 0x0, 0x0}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00') mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=virtio,uname9mountinfo\x00,\x00']) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) getsockopt$SO_TIMESTAMP(r11, 0x1, 0x23, 0x0, &(0x7f0000000200)) r12 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={&(0x7f0000000240)='./file0\x00', r10, 0x4000, r7}, 0x18) r13 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r13, 0x89e0, &(0x7f0000000300)={r14}) read$FUSE(r12, &(0x7f0000003480)={0x2020}, 0x2020) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r15, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r7, 0x8040942d, &(0x7f0000000480)) 23.852006916s ago: executing program 1 (id=3743): mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) writev(r1, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000040)="b845d9", 0x3}], 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x2000, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000001c) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='xfs\x00', 0x10410, &(0x7f00000000c0)='norecovery') 23.782149017s ago: executing program 39 (id=3743): mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) writev(r1, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000040)="b845d9", 0x3}], 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x2000, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000001c) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='xfs\x00', 0x10410, &(0x7f00000000c0)='norecovery') 2.204774617s ago: executing program 3 (id=3964): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000220000000000800000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0)="ad57877f678615cea5858470ef9a9ce63f4388845b68d100479307c5d3db3216b7807206e76d92cff1013bd30a2e69ed768a65bc12b293c353bfd1a7c490b96aa3b3ee5d2f8197de941b151d00e13907b094edaa74621c59ccb3f96c04cacc0a81e98e6c72427f5a9775c5e4f2c8d78f12cdff12ebf387c786566c3de8cbf582d7", &(0x7f0000000000)=""/3, 0x2}, 0x20) (async, rerun: 64) r2 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f00000001c0)=0x6, 0x4) (async, rerun: 32) bind$can_raw(r2, &(0x7f00000002c0), 0x10) (async, rerun: 32) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000001400)=0x8, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) (async, rerun: 64) r4 = socket(0x10, 0x803, 0x0) (rerun: 64) write(r4, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0x3, 0x1, 0x19, 0x4}, {0xb23, 0x0, 0x80, 0x58d}]}) (async, rerun: 64) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000), 0x2}, 0x20) (async, rerun: 64) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.850802127s ago: executing program 3 (id=3969): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "080000000000ebffffb48200e8ff000405000100000000000019010000000080", 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) socket$inet6(0xa, 0x4, 0xe66) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x7}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x40) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000080)={"000c00816800df00"}) 1.744387273s ago: executing program 3 (id=3971): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={r1, r1, 0x6dfc, 0xb7e, 0x2}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000100)={0x34, r2, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000100)={0x0, 0x0, 0x0}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) ioctl$BLKSECTGET(r7, 0x1267, &(0x7f0000000000)) ioctl$BLKGETSIZE(r7, 0x1260, &(0x7f00000002c0)) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000e00)={[{@none}, {}]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000280)={r5, r6, r8, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0]}) 1.615114997s ago: executing program 8 (id=3974): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, @local, 0x80, 0x8000, 0xfffffffc, 0x8dc67}}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r5, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9, 0x0, 0x1}, 0x3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000640)=[{0x800000000}], 0x1, 0x100000c01, 0x61, 0x0, 0x0, 0x6e}) write$sndseq(r4, &(0x7f00000000c0)=[{0x5, 0x1, 0x0, 0x0, @time, {}, {}, @result}], 0x1c) 1.305894138s ago: executing program 9 (id=3977): fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, {0x2, 0x4e21, @broadcast}, 0x1c6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='wg2\x00', 0xc, 0xffffffffffffffff, 0x25}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0x0, 0x1e, 0x6000, 0x1, 0x7f, '\x00', r1, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50) (async) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async) r4 = socket$inet_sctp(0x2, 0x0, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x5}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000280)={r5, 0x7, 0x9, 0x3}, 0x10) r6 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) write$cgroup_subtree(r6, &(0x7f00000002c0)={[{0x2d, 'rlimit'}, {0xb9e19bb939a873e1, 'devices'}, {0x2b, 'freezer'}, {0x2d, 'memory'}, {0x2d, 'net'}, {0x0, 'perf_event'}, {0x2b, 'pids'}, {0x2d, 'rlimit'}, {0x2b, 'net_cls'}]}, 0x4a) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x321000, 0x0) close(r7) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @local}, 0x2, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)='veth0_macvtap\x00', 0x7fff, 0x80}) (async) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000480)={0xfffc, 0x1000, 0x304, 0x8, 0x7338, 0x816, 0xfff, 0x1, r5}, 0x20) (async) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000005c0)={r5, 0x2409, 0xa, [0x40, 0x1, 0xc, 0xc, 0xd4, 0xe, 0xfffe, 0x4, 0x400, 0x4]}, 0x1c) (async) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x98, 0x7, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x7a, 0x7, 0x1, 0x0, "10bde7f71255119279885277f3a3a2aa694e418ee83d6af5e367c9bd930f70e2395f55c6a56447d0cf7192aafdd25b6b6889c5000d02117f3cfa1d84963035303f833bd06bd96d0fa9079401ea735c8c3bff9c87739d46bde7e50d48360ded0d12e9c58d03177451ca538cf472f87026810a74783891"}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000044}, 0x1) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x6) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r9, 0x4068aea3, &(0x7f0000000780)) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000800)='wg1\x00', 0x10) (async) recvfrom(r4, &(0x7f0000000840)=""/63, 0x3f, 0x100, &(0x7f0000000880)=@caif, 0x80) (async) r10 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r10, &(0x7f0000000900)={0x22, 0x4, 0x0, 0x0, 0x5}, 0x6) (async) pipe2(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) ioctl(r11, 0x80000000, &(0x7f0000000980)="76d0b59288c16618bc45600c4ee86895d35c1f0b60ba3fc03121a4fa063b9b1815316839a82c994b22f6ed3dc03454c3149a84ec89a40ebf617bc673bb845ff3a11168535f3d64eabe57ffee50103e5d34ce6480ac20871ca80349beb82b2f242a6527ec4ab827e7513d98713a004d3d948e902f07d74585e52a28d7a3b383b52a2941e54aaa5a9da5e066270892ddb2e96571395d748e08897e2c54d99d2138d068771f151841e0f938df07d3809d784f5ecdba3e2206211dc24cb2d40e0edd5b20926e8ee353a64d73") 1.166569815s ago: executing program 9 (id=3978): prctl$PR_SET_ENDIAN(0x14, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="08b4fffffede", &(0x7f0000002240)=""/4103, 0xfffffffe, 0x0, 0x0, 0x0}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x6, 0x9, "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", 0xd, 0x5, 0x4, 0x3, 0xa, 0x1, 0x6, 0x1}}}, 0x120) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000025c0)=@delchain={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x10}}}, 0x24}}, 0x0) (async) mknod(&(0x7f0000000180)='./bus\x00', 0xc000, 0x100) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000feffffff000000000a0000008500000041000000850008002a0000009500000000000000bec0439891ddf3443afb9b74a2574b85b08160aa0ffb94a755436f3b9299db86620646"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='jfs\x00', 0x8080, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000640)=0x652, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000012140400d6f56fe6874bba930800030002000000720800010000000000c99604494b080000000008001500050000000800010000000000080047000300000008000300041bce6fd1df000000"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) 1.078208437s ago: executing program 9 (id=3979): syz_emit_ethernet(0x200000, 0x0, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000020180)) 1.045251358s ago: executing program 9 (id=3980): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0xf5d9, 0x4) (async) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0xf5d9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xda4, @private2, 0x80000000}], 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x1034c0, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x1034c0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, 0xee00, 0x0) (async) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, 0xee00, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r2, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r3, 0x0, 0x1, 0x0, 0x8}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 765.546308ms ago: executing program 3 (id=3984): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f6fecf0", "53c272d8b763f690b35605dff8a4a8d2", "44000100", "72392a24199b5903"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000300)=[{&(0x7f0000000940)=""/248, 0xf8}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/227, 0xe3}], 0x1, 0x0) fcntl$setown(r0, 0x8, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 653.595958ms ago: executing program 8 (id=3985): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x4000) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_buf(r1, 0x1, 0x3d, 0x0, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000280)='./file1\x00') r2 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x9397, {0x200003, 0x180, 0x20fe, 0x0, 0x84, 0xd615, 0x10000009, 0x9, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x1000007, 0x6361, 0x5, 0xffffffed, 0x26}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x170b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) sendfile(r2, r2, &(0x7f0000000080), 0x7f06) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000400)={0x2}) ppoll(&(0x7f0000000140)=[{r0, 0x1214}, {r0, 0x1209}], 0x2, &(0x7f0000000380), &(0x7f00000003c0)={[0xffffffff]}, 0x8) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r9, &(0x7f00000017c0)={0x2020}, 0x2020) syz_open_dev$tty1(0xc, 0x4, 0x1) 644.0003ms ago: executing program 2 (id=3986): prlimit64(0x0, 0xb, &(0x7f0000000140)={0x4, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0) (async) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000b00), 0x80003, 0x0) ioctl$DVD_WRITE_STRUCT(r1, 0x5392, &(0x7f0000000000)=@copyright={0x1, 0x0, 0x10, 0x6}) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$FUSE(r2, &(0x7f0000000a00)={0x2020}, 0x2020) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$getownex(r2, 0x10, &(0x7f0000002a40)={0x0, 0x0}) capset(&(0x7f0000002a80)={0x19980330, r3}, &(0x7f0000002ac0)={0x7, 0xa990, 0x7, 0x5, 0x0, 0x6}) r4 = syz_clone(0x5002011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r5, &(0x7f0000002180)=[{{&(0x7f0000000840)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000008c0)="f6f9c771007eb425d03e6d3a0f089a7a12190b396689eeedc44c36d8d1328b2cc98499de6383ac039d49596e0336367afe8ffc22c8b49e3ea90393e981e6f7641fc3b4d82ccee4971d318e4895b0984cf27fda235390ccb60aa5a1423ec8e59ce1c36830859b682a4f85b01e4f19bfc0ebf52b434445c5438dff7b134e7784c14569589b509231ea992df805cded92169e05080e98fbfdcf2b5e70e7af6c0693387d3f5e424bf01c41f5e354c1dd05875026a45fd929837ac29bb5f47209c12f22efa4ebe098c57d8982e62124398b7d", 0xd0}, {&(0x7f00000009c0)="9a0a11c912d7569576dd0b1dca67802001adaf6285f2a88bf98e47083153d696", 0x20}, {&(0x7f0000000a00)="7bba44f5db9083d04ff3c533667543092430b74214ed371aa1d0e58eb6b9926d6768c9e420ac059ff978f7b977fd8debc02cd7659d5152efd5ebafa62d2454276108c64927fa2bc3696106f27c22acf81d0ac02a25dc2dbb729fce30f8248b941eba98b1dde7cc315bc0451c332cbff8a3cb01b09cd54d509269204e6545f321", 0x80}], 0x3}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000b40)="a218ca6bfb5309ca5ad6827951dd2c48c5a3e68a7f61e76c1f3a1d04897dea350245c80d8d4aaa12084c7927826f9e0b191fe764b6ee1882b034a424faef3d76806c6ed2e0fa149658bf537a28fd6ace58246fb8f387a2e7cc45929563702c54cb62f42ff8687c831ebb448da6c069035af35266c5b1cf3fdbc7a3229112c577e3678b4f1d217ce2681b01a5fc7a9faa3bbed807d68fdc28", 0x98}, {&(0x7f0000000c00)="9eba3cfd97c554030abf84f16a3f8521ce4c95f30e18060531303eb2a9e3edd1bd4538205f470eae9db16ba0917d8701d3d6ddba9c988f7ee6c76b6844a20315ca3d4a4d7a938b689896a2f8a340b9eef906ececf066ab6ed9505699b5aee6681838896e08d87d5beeb92cc8c8a0249b569e9ad86acf1c1659671d1bbe689980850c3b5e123f2ac3aa3e588db551b6574e93d2129ace4e3747e8b19d3bdfbf571fc8c5ae66f0b500abcce673b4eadb8429d4193e5735405863fd233e595b9b4c52f63b4be253196ad9118ed735", 0xcd}, {&(0x7f0000000d00)="bf8e683e1ae6e101fa3706007780eee7a2fd8e70d509ee2cd0a523f41b2ff7099806e5d3a37d6ab8b1f37dfba665e3de9c5af0eca86b6be0c7acc27074ed44824f85dc603623426d9d2b5a8f0233515c7763c272fe2ce36d865131ec620c69df79493ec768687962843436a9210c37cbf7ae66608beb8b54b24c3daf7168d3ba57de2b81671b6371f74f4f34650aa882d219b2f28ce9dfa327504de38575dabdcdb58adc5ddec42c021cde80f02aa8ebe57d98c59bd4312309d68ac914dc7359aaabe9681a85dff9f4a263e321d30b4f092b7b9e44f68e93547b147196df", 0xde}, {&(0x7f0000000ac0)="bb9e12fef95ad5", 0x7}, {&(0x7f0000000e00)="da94b2f61fb0ff09b2e17000ac53b607ee", 0x11}, {&(0x7f0000000e40)="159e2f2283108539a3e93af8fbf66f36bc683d789e4060aeef8f44e21909c4fa1569129b9989f5f152e2bebea6a54fd41c0488435b540feb3c98ab08135365b95e069ac5bf44cddb23d34e4eaa3cba7fd9e5c0b2302b9917726605a7ddaebe77df0338ccc6cdf27e4a33382171c82aaf8b708c0fb6aacff3c880a5b018113c0dddc7724d119c49c4922b422965756a36727494dcc246bc1e6e317c41b974eb2c77ce680cc00b92ef10d36603f7c67247970206d5e9236c8c62de6dbc6ffe772b7bc2c238355d2b5318eb743fce6c17f13e96f4f863fca5ed778f969a0724", 0xde}, {&(0x7f0000000f40)="55f6186b", 0x4}, {&(0x7f0000000f80)="67e4aa15c91f7c47c3f99129a6eb7b54488f7bd9d97ab94e4cbe4ad77482fe87591471d2c55732b06321d98e35c33a48e3e241c8ae4cadc6854f3b4f136c8f98f6d740e21df8c81b19de2fc002893ff59d1ec832729080d3fdf11ec69a9195684e3abcea", 0x64}], 0x8, &(0x7f0000001080)=[{0x78, 0x107, 0x7f, "2683c3f3993f684effcd160d9a11a96c061f5e9ca61adc91a9a2d0bb1e4ef0572c3ca0bf3348915560b2341587a5bcfda0567df51baa37b85ff67d072a8b3eeeb29d53baed85f751f412e58929bc9a8b0b43edc647a4da91da0becef007662055265"}, {0x40, 0x137, 0x6, "23c321e98005642824b0363fd2491dc276607f5f17e5c7decb0011cd5e951e07e8a555e5948cb8328e"}, {0x1010, 0x11, 0x8, "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"}], 0x10c8}}], 0x2, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000300)={0x2, 0x2}) 428.74402ms ago: executing program 2 (id=3987): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0xfff, 0x6, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0xfffffffffffffea8, 0x1, 0x5, 0xb0, 0x4, 0x5, 0x4, 0x8], 0x0, 0x1c02c0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x29, 0x0}, 0x24004045) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x400, 0xe4) lseek(0xffffffffffffffff, 0xffffffffffffff73, 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3430076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a6217c2e837cd4c1ab72fcd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f229d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdffffffffffffffffe2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d41222d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315aff0dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e781b2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e9565868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000080000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1031}}, 0x1006) r7 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x0, 0x0, 0x20002fb}) r8 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(r6, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0xfffffffffffffff5, 0x9, {0x1, 0x0, 0x0, '\x00', {0x1, 0x9, 0xffffffffffffffff, 0xfffffff3, 0x0, 0x0, 0xa000, '\x00', 0x2, 0x3, 0xffffffffffffc2f3, 0x3, {0xfffffffffffffffd, 0x7}, {0x7}, {0x0, 0x4}, {0x5}, 0x61, 0x0, 0x5fff}}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0x29, 0x80, 0x0, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x7}}]}}}]}, 0x60}}, 0x0) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) 421.16128ms ago: executing program 8 (id=3988): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x4, 0x200000, 0x7}) r0 = inotify_init() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x4, 0x6, 0x0, 0x500, 0x4, 0x540000, r2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private0, 0x0, 0x6, 0x0, 0x500, 0x6, 0x3a0102, r2}) r4 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) pwrite64(r4, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) inotify_add_watch(r0, &(0x7f0000000000)='./file1\x00', 0x4000523) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0x9, &(0x7f0000002000/0x2000)=nil, 0x7) 310.619763ms ago: executing program 8 (id=3989): r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001080006040002aaaaaaaaaa14ac1414bbaaaaaa879914ac"], 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x20a001, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2000f5}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r5, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x7}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x7]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d7b9ff797a0"}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x10}}], 0x70) sendmsg$nl_route(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=@bridge_getlink={0x9c, 0x12, 0x8, 0x70bd26, 0x25dfdbfc, {0x7, 0x0, 0x0, r2, 0x10061, 0x40000}, [@IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'team0\x00'}, {0x14, 0x35, 'bond_slave_0\x00'}, {0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'team0\x00'}, {0x14, 0x35, 'vxcan1\x00'}, {0x14, 0x35, 'veth1_macvtap\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) socket$packet(0x11, 0x3, 0x300) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001080006040002aaaaaaaaaa14ac1414bbaaaaaa879914ac"], 0x0) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x20a001, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2000f5}, 0x20) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @loopback}}) (async) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) (async) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) (async) write$sndseq(r5, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x7}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x7]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d7b9ff797a0"}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x10}}], 0x70) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=@bridge_getlink={0x9c, 0x12, 0x8, 0x70bd26, 0x25dfdbfc, {0x7, 0x0, 0x0, r2, 0x10061, 0x40000}, [@IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'team0\x00'}, {0x14, 0x35, 'bond_slave_0\x00'}, {0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'team0\x00'}, {0x14, 0x35, 'vxcan1\x00'}, {0x14, 0x35, 'veth1_macvtap\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) (async) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) 310.297135ms ago: executing program 2 (id=3990): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) (async) r1 = gettid() (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x4000, &(0x7f0000000280)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@subsystem='cpuacct'}, {@xattr}, {}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@subsystem='cpuacct'}]}) (async) fsetxattr$security_evm(r2, &(0x7f0000000140), &(0x7f0000000300)=ANY=[@ANYBLOB="02138b167898106eef871f2febfd63823aaa58eaa2fffb065e8aaea5a538bc6d6f35f7a087ee0694fe00d3ab3ead0530c5e53fa93248ec34162cce430e18d3c7cb02e16cec1c33ccae2597d1bcaa8e431ad853282bd2cec3affc3e7d31e204c1cf10bc63b2a91538ff1ab002c34389258222d1bc58f4060d30f38390"], 0x13, 0x1) (async) write$dsp(r2, &(0x7f0000000040)='\x00', 0x1) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) syz_open_procfs$namespace(r1, &(0x7f00000001c0)='ns/ipc\x00') 224.73305ms ago: executing program 8 (id=3991): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000500)={0x3ff, 0x0, 0x4, {0x9, @raw_data="e63e09b33e64369d8dae60e1e6e735d73f64ea1b51edd82d923da428ca836d3295d0c9b12d3bb819c276dfe5003698b901165421f38b48f2e58e6d50f68960de10a1d05064227456803708d41adaff2023ccc507000000b81433647f5d5aee7df2e720448f2fbfc7684178ad817581d3180327796bbec48401556e4429464b7514dcc765288d05c22b02aec6e7cf0e0991b0d8c7bae62d5c2c67542265f7197d9d534aa3f543e7563ccc4bd3e3e7f137e4fd5538e16f7aa9f3b545ae927ed6afc98f34332d0d43d7"}, 0x9}) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x1}) (async) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x1}) unshare(0x2a020400) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x106f) (async) sendfile(r1, r2, 0x0, 0x106f) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x84080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x44002, 0x0) (async) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x44002, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010003704000000000000000000000000151ee847fd316702b45ea0ea3284e8815c214a10fac76bb9e1d92d091cd55576c38b7201ec93f4a7c6e8607a10895aceb7b65aa365591e0eeb98ee8cecfacdd9ef831c048ded1ef17b2b71b219d235afd2e75949bf27f277da30e8f558415d41b5c7b4cdf73a296c2ad66e5c120a5b727b16e631429e149bf204f9cbb0da677a43db898185644792b4cdc5adc4e7f6d5254e631ea753a3f48e6959e8c385231230e0f9b7dc2043da382aa8a5eaaf276adac688aaf7922e18c7e10e13a51906235b3353cfbe", @ANYRES32=r6, @ANYBLOB="83040500000000002800128008000100736974001c00028006000f000200000006001000af90000008000300ac1414aa"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) setrlimit(0x7, &(0x7f0000000400)) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) pread64(r8, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) (async) pread64(r8, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) ioctl$sock_SIOCGSKNS(r7, 0x894c, 0x0) sendmmsg$inet(r4, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x200) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r9, 0xc00864bf, &(0x7f0000000500)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r9, 0xc00864bf, &(0x7f0000000500)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r9, 0xc03064ca, &(0x7f0000000700)={&(0x7f0000000680)=[r10, 0x0], 0x0, 0x0, 0x2, 0x2}) syz_io_uring_setup(0xc7f, &(0x7f0000000180)={0x0, 0x3347, 0x20, 0x1, 0x0, 0x0, r3}, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}, 0x1, 0x0, 0x0, 0xc040}, 0x0) 223.86244ms ago: executing program 2 (id=3992): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="38000000490001002abd7000fcdbdf250a000100", @ANYRES32=0x0, @ANYBLOB="0002000014000100fcd70000000000000000000000420000080002000c40000005ef8aca3f39050e97872d6819850e0073b2a06dce276a3add775946674ffba4389bdac69118ad8236c60fc81b4ecd92b8c0849200f170a538787cdbe8a5b833f5d300133b7a4cd88dc91516da14452ec5dc31"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="043e3a0d01101136334d17dedda37ba854f20001ffffffffffff7f079a020001cab7afe6d882dc93056c330009aaaaaaaaaa11206918ac9b0f1ad96a06a0415dde72dd8881cf5e557e01efb75bca6c67551b97c03dbb65368b267cb8c6e019b20d966743f091d89b8769682bf084359b4bac31a8cffd0fa098c5a8cd1f1ca7ef98bbacded1fa2009ab8f288b48afb7ecd1f98b24534a081151337cb8aea30215cd4ab1c058b0e9103cab9218"], 0x3d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, 0x18, 0x209, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$inet(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000240), 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0xf00}, {&(0x7f00000002c0)="00000000008542f4cdb9eaa26519373f589fc2eb12c86e15e5d786493663546e514e6ad1b23e97c489", 0x5}], 0x2}}], 0x400000000000039, 0x8004) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x1, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) open(&(0x7f0000000d40)='./file0\x00', 0x42c3, 0x0) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000fddbdf253500000008000300", @ANYRES32=r9, @ANYBLOB="0a0034000301010101010000"], 0x28}, 0x1, 0x0, 0x0, 0x4040804}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r10, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0xa8, 0x3}, {0x7f, 0x1}, {0xc, 0x7}, {0x6, 0x1}, {0x1, 0x3}, {0x38}, {0xff, 0x4}, {0x1}, {0x4, 0x7}, {0x81, 0x2}, {0x7, 0x6}, {0x6}, {0x21, 0x5}, {0xf, 0x7}, {0x5, 0x2}, {0xb}, {0x2, 0x7}, {0x7, 0x5}, {0xa, 0x2}], "14f74dd2d450a758"}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20004840) fcntl$setlease(r7, 0x400, 0x0) unlink(&(0x7f0000000040)='./file0\x00') sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="370000003600010000000000ffdbdf25040000805f7e582f4cd357f5bfca55cb3d23d206631f3c7dc16c9cd50005000800000000df4f29f5e15d36f038"], 0x14}], 0x1}, 0x0) 138.696878ms ago: executing program 2 (id=3993): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4b}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7fffffff}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0xd0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0xf8, 0x10, 0x6, 0x1a, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x80, 0x3, 0xd}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x29, 0x40, 0x7, 0x9, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x20, 0x40, 0x8, 0x1}}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x118, r2, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4}, 0x4040) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0xd7, 0x0, 0xffffffffffffffff, 0xc684, '\x00', r6, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x50) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000940)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%pI4 \x00'}, 0x20) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ac0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffff7, '\x00', r6, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000b40)={r1, 0xfffffffffffffff9, 0x7fff, 0x3}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xd, 0x25, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@call={0x85, 0x0, 0x0, 0x2e}, @generic={0x49, 0x8, 0x2, 0x6, 0x3}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}, @alu={0x4, 0x0, 0x7, 0x8, 0x7, 0xfffffffffffffff2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffe}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='GPL\x00', 0x8, 0x8e, &(0x7f0000000880)=""/142, 0x40f00, 0x2, '\x00', 0x0, @sock_ops, r9, 0x8, &(0x7f0000000980)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000009c0)={0x5, 0x4, 0x7, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000b80)=[r10, r11, r12], &(0x7f0000000bc0)=[{0x4, 0x2, 0x7, 0x3}, {0x1, 0x3, 0x4, 0xb}, {0x3, 0x1, 0xe, 0xc}, {0x0, 0x2, 0x5, 0x2}, {0x2, 0x2, 0xf}], 0x10, 0x656000}, 0x94) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0x7, &(0x7f0000000d00)={0x3f30000, 0x401, 0x2, 0x5}, 0x10) (async) fsconfig$FSCONFIG_CMD_CREATE(r12, 0x6, 0x0, 0x0, 0x0) (async) r15 = socket$phonet(0x23, 0x2, 0x1) sendmsg(r15, &(0x7f0000001040)={&(0x7f0000000d40)=@isdn={0x22, 0x3, 0x1, 0x2, 0xdf}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000dc0)}, {&(0x7f0000000e00)="c22bc842d4a74f2b8beb56c42f0cbef96a3a358409cc7c06bb0f575b0cd47671260adc2a54e0edb031230a660bc8467e81230aaaba154fc431c09744ec919d9372b9f01964f8f6f686aaa3e5034791efbca4aa2553ff24d321be82a4ac60b5353b3b1bf05ce512b3d2af34d29b6ba0b96d109f9455d2e4e97619a808eecca659e3fd85f4fbe056fc7f0e4b18f4fe90a71c0739c1e763e3cd1d9f6c7c639aa1dd84240cc38acd9093a99a7538206eccdc7c45226c381da2039accd5696fad4f1540211a4e9ade6a11b9a6d933dfafff3fd0c7e8c5fdc2a6c1b6bec04a5abb0eeda94d487b", 0xe4}], 0x2, &(0x7f0000000f40)=[{0xe0, 0x111, 0x5, "5c8b3b4112d1ed5a53bdf0951c36b0a24843603225a38db7267208aa886b5f91a96b7e621287a6e0436eaa2c7b170e133c6df9445a2864bde65f5a4dd4ee5998c7842f63b4bfc6e6903bc918ea4ef2f41945363b27d6e595b271f8655cd50cec6cda3ce39bc9ad34fd17c0056e31f6241a49c837ecd9928d33f45974f9c4ea89633e05e4a2a12d1555fb2f786b94edf0efc65f2ff8ef3188866109d05647b2fbbfa7d0123c06fe6892d2b7d9bac4109dbc2d179d9300288ba21caffafe3cb3a779bfb0c9630ae4380a77a156ed69bbc9"}], 0xe0}, 0x4000000) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000012c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001280)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r12, &(0x7f0000001300)={0x5, 0x10, 0xfa00, {&(0x7f0000001080), r16}}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{r11, 0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)=r13}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001740)={0x6, 0x16, &(0x7f0000001400)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r17}}, @ldst={0xdbba184209175fed, 0x2, 0x0, 0x0, 0x5, 0xffffffffffffff98, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @jmp={0x5, 0x0, 0xd, 0x5, 0xb, 0x56, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xed, 0x0, 0x0, 0x0, 0x8cf2}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0xa, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0x7fff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}], &(0x7f00000014c0)='GPL\x00', 0xc4d9, 0xe6, &(0x7f0000001500)=""/230, 0x41000, 0x60, '\x00', r5, 0x25, r9, 0x8, &(0x7f0000001600)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000001640)={0x2, 0xd, 0x0, 0x7fff}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000001680)=[{0x4, 0x2, 0x1, 0x6}, {0x2, 0x5, 0x2, 0x5}, {0x5, 0x5, 0x3, 0x4}, {0x1, 0x4, 0xc, 0x9}, {0x1, 0x3, 0x0, 0x8}, {0x2, 0x4, 0x2, 0xc}, {0x3, 0x1, 0x9, 0xa}, {0x3, 0x2, 0x2, 0x2}, {0x4, 0x4, 0x0, 0x7}], 0x10, 0xfffffffb}, 0x94) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r8, &(0x7f00000018c0)={0xb, 0x10, 0xfa00, {&(0x7f0000001800), 0xffffffffffffffff, 0x5}}, 0x18) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r12, 0x400442c8, &(0x7f0000001900)={r8, 0x9, 0xff7f}) r18 = bpf$MAP_CREATE(0x0, &(0x7f0000001940)=@bloom_filter={0x1e, 0x7, 0x8, 0x7, 0xa001, r7, 0x9, '\x00', 0x0, r8, 0x1, 0x5, 0x2, 0x5, @value=r17}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001ac0)={r18, &(0x7f00000019c0)="245a9de2dd014daf6bb0f9ee5403cbd5de78da87213269fba0ef0ff1ae0e729a84c3676249142a8c9abf0059a509", &(0x7f0000001a00)=""/139, 0x4}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND_IP(r12, &(0x7f0000001b00)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, r16}}, 0x30) 135.234224ms ago: executing program 3 (id=3994): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0x4}}, 0xe8) socket$kcm(0x29, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x4040) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$TIOCEXCL(r2, 0x540c) sendmmsg(r1, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d82c99466183a4ac9db74513ad977c", 0xf}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f0000000040)="1d337e7a4b4009d7e7451944ed8c20fda27b9e11e40c8c", 0x17}, {&(0x7f0000000080)="6783f3ba0bce0539aae1b28a7ee76ecf0c304b40f6e24be7f4b74624932b725bf2c6fca749ad87e3df31c85b514b8ffbcf95da9798b8e3a76c1735b1f76fa9a376eba5c233ddd43b13ef86d14df2dac30f21a8e8fdee6b105f9f737573d8c791d176968011a8a2adda820fff83fc229ac96263e876206dba44b98bbc96548133c91255f6df534f28226a0fa01c10faf40e155cf832d512543a078f243feb2c357d52abcad367a6ad776ff2a2049258aa818215922d025a65e3c5e4971b5d0e94076afe337eeaec8ddcd15d2b81d43b2f88f7ac6153bcc5becebfb6c781ad3d88c2dc05f3575401dc8b69b910129a99174cefba5322f6f9f9", 0xf8}, {&(0x7f0000000180)="a9bf824fc3f53e0c9f81c9c6e375037eaf01e82c0746583049f78c6cbe9bfe03da08f113b5c16925b7ea200333d812bb5858aefb7d4a0c10c37c", 0x3a}, {&(0x7f0000000300)="c4fedffef0625c91ecfbd5b53df24cf18867292612c330a53a2315b55a5542b78f948ffa99381acc85447e21722b65110f68f88ab42f8ca61e63815352d90e6b3841518211d2ae5216cdf9e56427757b941c560f70318bd133792e1900e57f995b6eb59eb51c1a43e94d7a15d03fd71f667d25b799976112ca294b186e32165ba777b8c03acf53ddf660e5f5b1ac80cdd4c69dba3838b15f8c7fe1c6088e11ce3a", 0xa1}], 0x6}}, {{&(0x7f0000000440)=@qipcrtr={0x2a, 0x3, 0x3fff}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000015c0)="c738e54ea9154458eb830e5ad0c49924f5cae9c90fe2be340ebdd8a2f72f67358e83d5170a179a4ecd9535b80d3501e022d66043bbf07bff865ca2700613a1541a40410feadd65db44e921be216cb082a739a2c556729ac7eccedb9a87801b0f3fe8d5d8a875d6d987f6b2e06deb026d73b55becbb97292ede21835f8eec99421f0de2070826fdd0857404bd1259c8568d8bb5278b7f6c1a0bca00da", 0x9c}], 0x1, &(0x7f0000001680)=[{0xe0, 0x10b, 0x3, "cd4e7f19d401bcd93b62f7d4209388e23f039190df2a64923677043b5037bfdaf3998f6029338961aa5cc010dff1ddb6763cbc5d6a1d4059495c151e67c4866083340fba6c7a72e276c11958b633394ac1556cf5de5ceb8f5169c9b735c90292c1062311842668f023bfeab50848338cc7fa5c41749065d4c73bc03208daf44bcca9e1e4ab118199814c802246e9065f0ba4aa9b7243e72860da18672fd4d2581c9bed7f98acb96acf9c3e239bacd56a93bad43cdca362541a0fc5d493d07a56b9fe6a259b9eb4e279"}, {0xb0, 0x10c, 0x5, "88f401ef5a77d5adf01e2aea9c1c27fef6bdc99022886f9508f0eb6c83aee53ab1a4d68b7dde871f017b81ec7cfe8d052a33ba79bca6a284ea385749bbf0df12afbf0e24d28e96b7398bb02817dcd93bac5c646fe2b3a8a2694c5f9fb764a7c91c0748960ab4fc36cf7b18322e38880f6baf81ea393ead838b9afbe0dd6ff3659a8b9ff4a1fb76a699f112a2eee877718638c7a965a522a9a0d79c4628"}, {0xa8, 0x107, 0x7, "f20011afbfec4c02cab01f6af14bca78e840ffdca1920605e293443790635f8adb91f1800a3fbb068ef771a69b1d1c05bba7623370999001e99795dd05a5eddef60fe734d1cb347c84e31e9bd77012f3b2bd04fa0609d98f15743c36ec8177afc1ccaec5c311577db858786f0176b61946b303c07e04dd5e37e9d323a5d40baa2db674a16e13bd50aa91233f9d784bba21"}, {0xb0, 0x88, 0x9, "099401b35983f1d63bc4bd714ccbce46e83c02f312f5462625f34725bfe144d25935f457b866b5c315b62c431acf549b7363a2d5b5d7f3bc1918cfd1072adeea96724fcbdcf5526d2cc4ad2bef0d399c47792f03f34bc72d7af4e2f17a0751b19c59dfdca95efad7967639c1d9bac6b8aeaffa0fc8a2d2f2ef653628095f34cd5fc43ba7e0974f04863d24c615bf4e0eb71a072478e391c52bcbcb9527fb6c53"}, {0xc8, 0x1, 0xffffff9f, "136dbefdcd2965d894ff571bc198c591bef87384709eacd226ba98f946d2b3bb73c086bdcf6ecef8d207b6b524cfb502192a9c5f976150cf817587d5189aa0caddcf968d8e757149cdc8634a0b01ce918d87348594b888118eb577fced4b29cff9014c54eb0e0a73d346d4c5bce1330ed4bfd03643b4d8a002147011c20f6f23b69e0e637cbd63edc157a12f9864127ecb742b27f04129f4b75375a996175dd7315d99635319f250c72ea9b7e8b48d3d9ecc48"}, {0xa8, 0x112, 0x2, "d1bb2d2663b5207f0d887f12aa5a774edae18af5c10f4fb864f746971eea251e9ebf38750fb6b89902e82b6b314be563ac172bb04aee0258167dca12d5a4671ab44207ae3334fdc2db0f3087948cb78d108c3c3938bc0eb1d5bb57d9a5ae17070d9b8f42de6365cf3a1794122597398b4cd8954fb8f817202ff9a989c488c0f4e0d643f98bd1387db4670b77e3a8f86ea8"}, {0x110, 0xff, 0x3c6, "34163f7e5275ac230cf6a6ac3ace93af7d06c7da3f44353739d663becb40810c98d6135feb674c2fd1acface1e5406d4ef159f6da60d89c2b338876891a336f80f4356b5bd0fefb3c99f3cfc4b9b39ea07d4faecc285d1662d64077375419e696e755900580ce5b585c30d1abb0153fc6b9db6919c71f9bdeb15d7c6ee35d5bf10a491f5b0df913572f18e19cf3a543703f5efa5e9165fa5290865dfde7dd95e0f938e9c24644c9268325c09c8923f4f98490c2e495860d08edd9f846d2b5f2a02f14ee94703f1e66c09c19e5d29cb94144e3017fac4103e27a0761aaee417abd45d516297e45d6f131e44a7dd3b4fef538c8a08d1b04de80725049a24"}], 0x568}}], 0x2, 0x0) 135.027966ms ago: executing program 8 (id=3995): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) (async, rerun: 64) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) (rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 32) r0 = syz_clone(0x61084400, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) move_pages(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], &(0x7f0000000240)=[0x1], 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = syz_io_uring_setup(0x227, &(0x7f0000000640)={0x0, 0x8906, 0x20, 0xffffffff, 0x197}, &(0x7f0000000380), &(0x7f0000000600)) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (rerun: 64) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) (async) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000280)={0x0, r4, 0xd, {0x7, 0xa42}, 0x80}, 0x1) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="34000000071400022abd7000fbdbdf2508000100020000000900020073797a3200000000080001000000000008004400", @ANYRES32=r4, @ANYBLOB="04"], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x11) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB="7800000048000c0426bd7000ffdbdf250a004000", @ANYRES64=r4, @ANYBLOB="0000000014000100fe88000000000000000000000000010108000200e3ffffff070002000c000000080002000d00000014000100fc00000000000000000000000000000014000100fe8000"/96], 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async, rerun: 64) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r1) (rerun: 64) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0264af", @ANYRES16=r6, @ANYBLOB="b97d26bd7000fedbdf254a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)="72303a02b359274cd33db065938f360af8a403afb98cf2c17307cec32413529bdf14f521d41b3aafd718087031eda6a898155603000000000000005eef2964a7e86c0fcf2edc44c1e0d2e693a6beb94294", 0x51, 0x1) (async) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000006c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) (async) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1ab083, 0x0) (async) socket$netlink(0x10, 0x3, 0x4) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async) accept4(r7, 0x0, 0x0, 0x0) 119.319524ms ago: executing program 9 (id=3996): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRESOCT=r0, @ANYRESOCT=r0], 0x38}}, 0x80) 1.234414ms ago: executing program 2 (id=3997): r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x50) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) (async) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (rerun: 64) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r5, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r4, 0x407, 0x100004) (async) write$eventfd(r4, &(0x7f0000000240), 0xffffff14) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) (async) prctl$PR_SET_UNALIGN(0x6, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000001000)={0x0, "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"}) (async) sync() 973.92µs ago: executing program 3 (id=3998): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000)) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRESHEX=r1, @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x480d0}, 0x4c800) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000080)) unshare(0x6020480) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b23, &(0x7f0000000040)) 0s ago: executing program 9 (id=3999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000019c0)={'wlan1\x00', 0x0}) pwrite64(r0, &(0x7f0000000100)="f8f93ea7d111a27eb89b27cf14c3d830aab8e42d478ba84be915a7268b944abb88d2c7472b4057afbb548c2a3df4228b006ca0033d87663b54892491801358028c6cd0aa4d", 0x45, 0xf3) r4 = memfd_create(&(0x7f0000000480)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\x12Pc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xfbe\xe6eqC\x81\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92)\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\x94D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2do\xfb\xa2\xab4\xad\xf6\xda\xee?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e\x00\x00\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x6) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) read$nci(r5, 0x0, 0x0) fstatfs(r5, &(0x7f0000000880)=""/4096) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000440)={0x0, 0x1, 0xecc4, 0x1000004}) fcntl$addseals(r4, 0x409, 0x8) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf251d00000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) kernel console output (not intermixed with test programs): ink socket, switching to perfect channel medium [ 265.211721][T17546] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3255'. [ 265.214671][T17546] netlink: 'syz.8.3255': attribute type 11 has an invalid length. [ 265.222461][T17546] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3255'. [ 265.225318][T17546] netlink: 'syz.8.3255': attribute type 11 has an invalid length. [ 265.399965][ T5289] Bluetooth: hci1: command tx timeout [ 265.475077][T17546] pim6reg99999999: entered allmulticast mode [ 265.559324][T17553] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3256'. [ 265.659019][ T6974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.731720][ T40] kauditd_printk_skb: 5646 callbacks suppressed [ 265.731733][ T40] audit: type=1400 audit(2000524344.974:10298): avc: denied { setattr } for pid=13185 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.736592][T17556] XFS (nbd8): SB validate failed with error -5. [ 265.741469][ T40] audit: type=1400 audit(2000524344.984:10299): avc: denied { setattr } for pid=13185 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.757101][ T40] audit: type=1400 audit(2000524344.984:10300): avc: denied { setattr } for pid=13185 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.783381][ T40] audit: type=1400 audit(2000524344.984:10301): avc: denied { setattr } for pid=13185 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.790643][ T40] audit: type=1400 audit(2000524344.984:10302): avc: denied { setattr } for pid=13185 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.797841][ T40] audit: type=1400 audit(2000524344.984:10303): avc: denied { setattr } for pid=13185 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.805936][ T40] audit: type=1400 audit(2000524344.984:10304): avc: denied { setattr } for pid=13185 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.815080][ T40] audit: type=1400 audit(2000524344.993:10305): avc: denied { setattr } for pid=13185 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.822657][ T40] audit: type=1400 audit(2000524344.993:10306): avc: denied { setattr } for pid=13185 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.824366][T13185] audit: audit_backlog=65 > audit_backlog_limit=64 [ 265.968482][T17572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.971807][T17572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.098692][T17576] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 266.115908][T17576] mac80211_hwsim hwsim25 syzkaller0: left promiscuous mode [ 266.359295][T17587] x_tables: duplicate underflow at hook 1 [ 266.770593][ T1027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.773489][ T1027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.303229][T17616] fuse: Unknown parameter 'ft' [ 267.457208][T17625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.811159][T17637] FAULT_INJECTION: forcing a failure. [ 267.811159][T17637] name failslab, interval 1, probability 0, space 0, times 0 [ 267.815156][T17637] CPU: 2 UID: 0 PID: 17637 Comm: syz.2.3278 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.815173][T17637] Tainted: [L]=SOFTLOCKUP [ 267.815177][T17637] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 267.815183][T17637] Call Trace: [ 267.815188][T17637] [ 267.815192][T17637] dump_stack_lvl+0x100/0x190 [ 267.815210][T17637] should_fail_ex.cold+0x5/0xa [ 267.815223][T17637] should_failslab+0xc2/0x120 [ 267.815238][T17637] kmem_cache_alloc_noprof+0x83/0x780 [ 267.815251][T17637] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 267.815264][T17637] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 267.815279][T17637] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 267.815291][T17637] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 267.815308][T17637] mmu_topup_memory_caches+0x25/0x170 [ 267.815324][T17637] kvm_mmu_load+0xd6/0x23e0 [ 267.815338][T17637] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 267.815348][T17637] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 267.815358][T17637] ? kvm_msr_allowed+0x47/0x450 [ 267.815373][T17637] ? kvm_deliver_exception_payload+0x129/0x210 [ 267.815387][T17637] ? __pfx_kvm_mmu_load+0x10/0x10 [ 267.815400][T17637] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 267.815413][T17637] ? kvm_check_and_inject_events+0x961/0x10c0 [ 267.815431][T17637] vcpu_run+0x39ee/0x5ca0 [ 267.815449][T17637] ? __lock_acquire+0x4a5/0x2630 [ 267.815462][T17637] ? __pfx_vcpu_run+0x10/0x10 [ 267.815483][T17637] ? rcu_is_watching+0x12/0xc0 [ 267.815499][T17637] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 267.815514][T17637] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 267.815534][T17637] kvm_vcpu_ioctl+0x730/0x16d0 [ 267.815547][T17637] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 267.815559][T17637] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 267.815576][T17637] ? do_vfs_ioctl+0x226/0x13e0 [ 267.815587][T17637] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 267.815596][T17637] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 267.815611][T17637] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 267.815654][T17637] ? selinux_file_ioctl+0x139/0x290 [ 267.815665][T17637] ? selinux_file_ioctl+0xb4/0x290 [ 267.815678][T17637] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 267.815690][T17637] __x64_sys_ioctl+0x18e/0x210 [ 267.815701][T17637] do_syscall_64+0xc9/0xf80 [ 267.815715][T17637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.815726][T17637] RIP: 0033:0x7fdf4159aeb9 [ 267.815736][T17637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.815746][T17637] RSP: 002b:00007fdf3f7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.815756][T17637] RAX: ffffffffffffffda RBX: 00007fdf41815fa0 RCX: 00007fdf4159aeb9 [ 267.815763][T17637] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 267.815769][T17637] RBP: 00007fdf3f7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 267.815776][T17637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 267.815782][T17637] R13: 00007fdf41816038 R14: 00007fdf41815fa0 R15: 00007ffdd3803208 [ 267.815796][T17637] [ 267.830782][ T5938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 267.887795][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.946324][ T5938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 267.957962][ T5938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 267.976808][ T5938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 267.983046][ T5938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 268.058971][T17638] xfrm0 speed is unknown, defaulting to 1000 [ 268.315079][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.424128][ T1027] hid-generic 0003:0001:8000.0009: unknown main item tag 0x0 [ 268.426442][ T1027] hid-generic 0003:0001:8000.0009: unknown main item tag 0x0 [ 268.428773][ T1027] hid-generic 0003:0001:8000.0009: unknown main item tag 0x0 [ 268.430963][ T1027] hid-generic 0003:0001:8000.0009: unknown main item tag 0x0 [ 268.433290][ T1027] hid-generic 0003:0001:8000.0009: unknown main item tag 0x0 [ 268.435497][ T1027] hid-generic 0003:0001:8000.0009: unknown main item tag 0x0 [ 268.437756][ T1027] hid-generic 0003:0001:8000.0009: unknown main item tag 0x0 [ 268.440142][ T1027] hid-generic 0003:0001:8000.0009: unknown main item tag 0x0 [ 268.442372][ T1027] hid-generic 0003:0001:8000.0009: unknown main item tag 0x0 [ 268.444646][ T1027] hid-generic 0003:0001:8000.0009: unknown main item tag 0x0 [ 268.451597][ T1027] hid-generic 0003:0001:8000.0009: hidraw1: USB HID vfffff0.00 Device [syz1] on syz1 [ 268.460477][T17638] chnl_net:caif_netlink_parms(): no params data found [ 268.560698][T15037] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.564502][T15037] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.663308][T11022] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 268.672634][T15037] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.678814][T15037] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.708338][T17638] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.714685][T17638] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.722640][T17638] bridge_slave_0: entered allmulticast mode [ 268.726008][T17638] bridge_slave_0: entered promiscuous mode [ 268.747154][T17638] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.759227][T17638] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.761985][T17638] bridge_slave_1: entered allmulticast mode [ 268.767345][T17638] bridge_slave_1: entered promiscuous mode [ 268.826567][T15037] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.829658][T15037] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.840626][T11022] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.844309][T11022] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.852028][T17638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.855475][T11022] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 268.859784][T11022] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 268.863019][T11022] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.877322][T17638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.886235][T11022] usb 13-1: config 0 descriptor?? [ 268.894080][T17674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3285'. [ 268.923433][T15037] bond0: (slave netdevsim0): Releasing backup interface [ 268.929834][T15037] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.933667][T15037] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.942071][T17638] team0: Port device team_slave_0 added [ 268.948930][T17638] team0: Port device team_slave_1 added [ 268.973979][T17638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.978776][T17638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.990828][T17638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.995993][ T9747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.011863][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.012477][T17638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.017751][T17638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.027056][T17638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.086320][T17638] hsr_slave_0: entered promiscuous mode [ 269.088498][T17638] hsr_slave_1: entered promiscuous mode [ 269.090514][T17638] debugfs: 'hsr0' already exists in 'hsr' [ 269.093346][T17638] Cannot create hsr debugfs directory [ 269.229409][T17678] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3286'. [ 269.315064][T17688] input: syz0 as /devices/virtual/input/input25 [ 269.340366][T17689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17689 comm=syz.9.3286 [ 269.370687][T15037] bond2 (unregistering): (slave xfrm1): Releasing backup interface [ 269.373050][T15037] xfrm1 (unregistering): left promiscuous mode [ 269.705560][T15037] bond0 (unregistering): Released all slaves [ 269.709793][T15037] bond1 (unregistering): Released all slaves [ 269.775939][T17698] /dev/nullb0: Can't open blockdev [ 269.815035][T15037] bond2 (unregistering): Released all slaves [ 269.940079][T15037] bond3 (unregistering): Released all slaves [ 270.022555][ T5289] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 270.026187][ T5289] Bluetooth: hci1: Injecting HCI hardware error event [ 270.047310][ T5938] Bluetooth: hci1: hardware error 0x00 [ 270.058763][T15037] bond4 (unregistering): Released all slaves [ 270.072524][T15037] bond5 (unregistering): Released all slaves [ 270.116074][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.226177][ T5289] Bluetooth: hci3: command tx timeout [ 270.229376][T11022] usbhid 13-1:0.0: can't add hid device: -71 [ 270.231703][T11022] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 270.236082][T11022] usb 13-1: USB disconnect, device number 4 [ 270.315651][T15037] : left promiscuous mode [ 270.366563][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 270.368550][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 270.830081][T15037] hsr_slave_0: left promiscuous mode [ 270.843744][T15037] veth1_macvtap: left promiscuous mode [ 270.845837][T15037] veth0_macvtap: left promiscuous mode [ 270.847787][T15037] veth1_vlan: left promiscuous mode [ 270.849581][T15037] veth0_vlan: left promiscuous mode [ 271.221468][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.532530][ T40] kauditd_printk_skb: 3268 callbacks suppressed [ 271.532541][ T40] audit: type=1400 audit(2000524350.405:13564): avc: denied { recv } for pid=5838 comm="syz-executor" saddr=127.0.0.1 src=60838 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 271.549731][ T40] audit: type=1400 audit(2000524350.414:13565): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=43892 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 271.572969][ T40] audit: type=1400 audit(2000524350.414:13566): avc: denied { read write } for pid=16305 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 271.580925][ T40] audit: type=1400 audit(2000524350.414:13567): avc: denied { read write open } for pid=16305 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 271.610239][ T40] audit: type=1400 audit(2000524350.424:13568): avc: denied { ioctl } for pid=16305 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 271.620738][ T40] audit: type=1400 audit(2000524350.461:13569): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=60838 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 271.630561][ T40] audit: type=1400 audit(2000524350.461:13570): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=60838 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 271.640244][ T40] audit: type=1400 audit(2000524350.461:13571): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=60838 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 271.649972][ T40] audit: type=1400 audit(2000524350.470:13572): avc: denied { recv } for pid=17721 comm="syz.2.3297" saddr=10.0.2.2 src=43892 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 271.658141][ T40] audit: type=1400 audit(2000524350.470:13573): avc: denied { recv } for pid=17721 comm="syz.2.3297" saddr=10.0.2.2 src=43892 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 271.684744][T17730] FAULT_INJECTION: forcing a failure. [ 271.684744][T17730] name failslab, interval 1, probability 0, space 0, times 0 [ 271.688620][T17730] CPU: 2 UID: 0 PID: 17730 Comm: syz.8.3298 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.688636][T17730] Tainted: [L]=SOFTLOCKUP [ 271.688640][T17730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 271.688646][T17730] Call Trace: [ 271.688651][T17730] [ 271.688656][T17730] dump_stack_lvl+0x100/0x190 [ 271.688677][T17730] should_fail_ex.cold+0x5/0xa [ 271.688689][T17730] should_failslab+0xc2/0x120 [ 271.688704][T17730] kmem_cache_alloc_noprof+0x83/0x780 [ 271.688718][T17730] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 271.688730][T17730] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 271.688745][T17730] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 271.688758][T17730] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 271.688774][T17730] mmu_topup_memory_caches+0x25/0x170 [ 271.688790][T17730] kvm_mmu_load+0xd6/0x23e0 [ 271.688804][T17730] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 271.688814][T17730] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 271.688824][T17730] ? kvm_msr_allowed+0x47/0x450 [ 271.688839][T17730] ? kvm_deliver_exception_payload+0x129/0x210 [ 271.688853][T17730] ? __pfx_kvm_mmu_load+0x10/0x10 [ 271.688866][T17730] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 271.688879][T17730] ? kvm_check_and_inject_events+0x961/0x10c0 [ 271.688897][T17730] vcpu_run+0x39ee/0x5ca0 [ 271.688914][T17730] ? __lock_acquire+0x4a5/0x2630 [ 271.688928][T17730] ? __pfx_vcpu_run+0x10/0x10 [ 271.688948][T17730] ? rcu_is_watching+0x12/0xc0 [ 271.688964][T17730] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 271.688979][T17730] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 271.688999][T17730] kvm_vcpu_ioctl+0x730/0x16d0 [ 271.689012][T17730] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 271.689024][T17730] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 271.689041][T17730] ? do_vfs_ioctl+0x226/0x13e0 [ 271.689052][T17730] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 271.689061][T17730] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 271.689075][T17730] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 271.689096][T17730] ? selinux_file_ioctl+0x139/0x290 [ 271.689106][T17730] ? selinux_file_ioctl+0xb4/0x290 [ 271.689118][T17730] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 271.689130][T17730] __x64_sys_ioctl+0x18e/0x210 [ 271.689142][T17730] do_syscall_64+0xc9/0xf80 [ 271.689156][T17730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.689167][T17730] RIP: 0033:0x7f544019aeb9 [ 271.689177][T17730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.689188][T17730] RSP: 002b:00007f543e3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 271.689199][T17730] RAX: ffffffffffffffda RBX: 00007f5440415fa0 RCX: 00007f544019aeb9 [ 271.689205][T17730] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 271.689212][T17730] RBP: 00007f543e3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 271.689218][T17730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 271.689224][T17730] R13: 00007f5440416038 R14: 00007f5440415fa0 R15: 00007ffdfe28a668 [ 271.689238][T17730] [ 271.756688][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.204313][T17638] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 272.222039][T17638] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 272.242783][T17638] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 272.249226][ T5938] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 272.259145][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.274905][T17638] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 272.358096][T15037] IPVS: stop unused estimator thread 0... [ 272.392226][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.418513][ T5938] Bluetooth: hci3: command tx timeout [ 272.530786][T17638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.555077][T17638] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.566901][T15036] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.569653][T15036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.579384][T15037] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.581708][T15037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.650240][T17755] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.652618][T17755] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.727152][T17759] qnx4: no qnx4 filesystem (no root dir). [ 272.728799][T17755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.735174][T17755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.824624][T15036] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.830342][T15036] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.833057][T15036] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.842319][T15036] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.447412][T17638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.525330][T17638] veth0_vlan: entered promiscuous mode [ 273.543245][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.545296][T17638] veth1_vlan: entered promiscuous mode [ 273.562319][T17801] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3315'. [ 273.570578][T17802] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3315'. [ 273.606254][T17638] veth0_macvtap: entered promiscuous mode [ 273.621681][T17638] veth1_macvtap: entered promiscuous mode [ 273.650269][T17638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.663874][T17638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.679031][T15036] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.682869][T15036] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.686198][T15036] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.688874][T15036] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.820838][ T9747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.823872][ T9747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.857350][T15037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.859840][T15037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.949952][T17819] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3318'. [ 273.972821][T17824] openvswitch: netlink: IP tunnel dst address not specified [ 274.021303][T17820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17820 comm=syz.8.3318 [ 274.136046][T17831] new mount options do not match the existing superblock, will be ignored [ 274.144359][T17831] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 274.470790][T17846] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 274.471130][T17844] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 274.477006][T17846] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 274.573545][T17850] netlink: 'syz.9.3325': attribute type 1 has an invalid length. [ 274.576147][T17850] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3325'. [ 274.578871][T17850] netlink: 658 bytes leftover after parsing attributes in process `syz.9.3325'. [ 274.591226][T17850] netlink: 1 bytes leftover after parsing attributes in process `syz.9.3325'. [ 274.643484][ T5938] Bluetooth: hci3: command tx timeout [ 275.147410][T17867] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3330'. [ 275.150331][T17867] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3330'. [ 275.154809][T17867] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3330'. [ 275.491762][T17888] fuse: Bad value for 'user_id' [ 275.497175][T17888] fuse: Bad value for 'user_id' [ 275.545778][T17885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3336'. [ 275.612328][T17890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17890 comm=syz.1.3336 [ 275.642971][T17887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3334'. [ 275.756992][ T5966] net_ratelimit: 4 callbacks suppressed [ 275.757003][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.784512][T17902] vivid-000: ================= START STATUS ================= [ 275.787401][T17902] vivid-000: Test Pattern: 75% Colorbar [ 275.790349][T17902] vivid-000: Fill Percentage of Frame: 100 [ 275.792227][T17902] vivid-000: Horizontal Movement: No Movement [ 275.794109][T17902] vivid-000: Vertical Movement: No Movement [ 275.795880][T17902] vivid-000: OSD Text Mode: All [ 275.797288][T17897] blktrace: Concurrent blktraces are not allowed on loop16 [ 275.797373][T17902] vivid-000: Show Border: false [ 275.801557][T17902] vivid-000: Show Square: true [ 275.803059][T17902] vivid-000: Sensor Flipped Horizontally: true [ 275.804943][T17902] vivid-000: Sensor Flipped Vertically: false [ 275.806814][T17902] vivid-000: Insert SAV Code in Image: true [ 275.808662][T17902] vivid-000: Insert EAV Code in Image: false [ 275.812950][T17902] vivid-000: Insert Video Guard Band: false [ 275.814764][T17902] vivid-000: Reduced Framerate: false [ 275.816448][T17902] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 275.818764][T17902] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 275.824107][T17902] vivid-000: Enable Capture Cropping: true [ 275.825907][T17902] vivid-000: Enable Capture Composing: true [ 275.827765][T17902] vivid-000: Enable Capture Scaler: true [ 275.829402][T17902] vivid-000: Timestamp Source: End of Frame [ 275.833763][T17902] vivid-000: Colorspace: SMPTE 170M [ 275.835419][T17902] vivid-000: Transfer Function: Default [ 275.840257][T17902] vivid-000: Y'CbCr Encoding: Default [ 275.844034][T17902] vivid-000: HSV Encoding: Hue 0-179 [ 275.845652][T17902] vivid-000: Quantization: Default [ 275.847188][T17902] vivid-000: Apply Alpha To Red Only: false [ 275.849049][T17902] vivid-000: Standard Aspect Ratio: 4x3 [ 275.850714][T17902] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 275.855580][T11022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.858903][T17902] vivid-000: DV Timings: 640x480p59 inactive [ 275.861132][T17902] vivid-000: DV Timings Aspect Ratio: 16x9 [ 275.865516][T17902] vivid-000: Maximum EDID Blocks: 2 [ 275.867181][T17902] vivid-000: Limited RGB Range (16-235): false [ 275.869080][T17902] vivid-000: Rx RGB Quantization Range: Automatic [ 275.871042][T17902] vivid-000: Power Present: 0x00000001 [ 275.872718][T17902] tpg source WxH: 720x576 (Y'CbCr) [ 275.875304][T17902] tpg field: 2 [ 275.876424][T17902] tpg crop: (0,560)/64x16 [ 275.877706][T17902] tpg compose: (0,0)/16x9 [ 275.879021][T17902] tpg colorspace: 1 [ 275.880256][T17902] tpg transfer function: 0/0 [ 275.881645][T17902] tpg Y'CbCr encoding: 0/0 [ 275.882984][T17902] tpg quantization: 0/0 [ 275.893506][T17902] tpg RGB range: 0/2 [ 275.894769][T17902] vivid-000: ================== END STATUS ================== [ 276.483958][T17928] tmpfs: Bad value for 'mpol' [ 276.654769][T17938] pimreg: entered allmulticast mode [ 276.658195][T17938] pimreg: left allmulticast mode [ 276.751459][T17944] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3351'. [ 276.764390][T17944] pim6reg: entered allmulticast mode [ 276.779806][T17948] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 276.782127][T17948] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 276.797782][T17948] tipc: Started in network mode [ 276.799357][T17948] tipc: Node identity 080211000001, cluster identity 4711 [ 276.801736][T17948] tipc: Enabled bearer , priority 0 [ 276.868614][ T5938] Bluetooth: hci3: command tx timeout [ 276.879939][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.890511][ T40] kauditd_printk_skb: 4545 callbacks suppressed [ 276.890527][ T40] audit: type=1400 audit(2000524355.415:17963): avc: denied { read write open } for pid=17638 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 276.911298][ T40] audit: type=1400 audit(2000524355.415:17964): avc: denied { ioctl } for pid=17638 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 276.921502][ T40] audit: type=1400 audit(2000524355.415:17965): avc: denied { recv } for pid=5837 comm="sshd-session" saddr=10.0.2.2 src=43892 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 276.954146][ T40] audit: type=1400 audit(2000524355.415:17966): avc: denied { recv } for pid=5837 comm="sshd-session" saddr=10.0.2.2 src=43892 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 276.961562][ T40] audit: type=1400 audit(2000524355.424:17967): avc: denied { search } for pid=17918 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.973363][ T40] audit: type=1400 audit(2000524355.424:17968): avc: denied { getattr } for pid=17918 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 276.982774][ T40] audit: type=1400 audit(2000524355.424:17969): avc: denied { search } for pid=17918 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.990259][ T40] audit: type=1400 audit(2000524355.424:17970): avc: denied { getattr } for pid=17918 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 276.998882][ T40] audit: type=1400 audit(2000524355.424:17971): avc: denied { search } for pid=17918 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.006442][ T40] audit: type=1400 audit(2000524355.424:17972): avc: denied { search } for pid=17918 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1897 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.017917][T17958] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3354'. [ 277.167217][T17965] Cannot find del_set index 4 as target [ 277.725220][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.992522][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.993697][ T6013] tipc: Node number set to 134418688 [ 278.340114][T18003] openvswitch: netlink: IP tunnel dst address not specified [ 278.348801][T18004] ip6gre0: Master is either lo or non-ether device [ 279.094869][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.722233][T18055] FAULT_INJECTION: forcing a failure. [ 279.722233][T18055] name failslab, interval 1, probability 0, space 0, times 0 [ 279.730530][T18055] CPU: 0 UID: 0 PID: 18055 Comm: syz.1.3376 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.730547][T18055] Tainted: [L]=SOFTLOCKUP [ 279.730551][T18055] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 279.730558][T18055] Call Trace: [ 279.730562][T18055] [ 279.730566][T18055] dump_stack_lvl+0x100/0x190 [ 279.730584][T18055] should_fail_ex.cold+0x5/0xa [ 279.730597][T18055] should_failslab+0xc2/0x120 [ 279.730612][T18055] kmem_cache_alloc_noprof+0x83/0x780 [ 279.730625][T18055] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 279.730638][T18055] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 279.730653][T18055] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 279.730666][T18055] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 279.730682][T18055] mmu_topup_memory_caches+0x25/0x170 [ 279.730698][T18055] kvm_mmu_load+0xd6/0x23e0 [ 279.730712][T18055] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 279.730722][T18055] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 279.730733][T18055] ? kvm_msr_allowed+0x47/0x450 [ 279.730747][T18055] ? kvm_deliver_exception_payload+0x129/0x210 [ 279.730761][T18055] ? __pfx_kvm_mmu_load+0x10/0x10 [ 279.730775][T18055] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 279.730788][T18055] ? kvm_check_and_inject_events+0x961/0x10c0 [ 279.730806][T18055] vcpu_run+0x39ee/0x5ca0 [ 279.730824][T18055] ? __lock_acquire+0x4a5/0x2630 [ 279.730841][T18055] ? __pfx_vcpu_run+0x10/0x10 [ 279.730862][T18055] ? rcu_is_watching+0x12/0xc0 [ 279.730878][T18055] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 279.730893][T18055] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 279.730913][T18055] kvm_vcpu_ioctl+0x730/0x16d0 [ 279.730926][T18055] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 279.730938][T18055] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 279.730956][T18055] ? do_vfs_ioctl+0x226/0x13e0 [ 279.730967][T18055] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 279.730976][T18055] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 279.730990][T18055] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 279.731011][T18055] ? selinux_file_ioctl+0x139/0x290 [ 279.731022][T18055] ? selinux_file_ioctl+0xb4/0x290 [ 279.731034][T18055] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 279.731046][T18055] __x64_sys_ioctl+0x18e/0x210 [ 279.731058][T18055] do_syscall_64+0xc9/0xf80 [ 279.731073][T18055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.731084][T18055] RIP: 0033:0x7f46f299aeb9 [ 279.731094][T18055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.731105][T18055] RSP: 002b:00007f46f38e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 279.731116][T18055] RAX: ffffffffffffffda RBX: 00007f46f2c15fa0 RCX: 00007f46f299aeb9 [ 279.731123][T18055] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 279.731130][T18055] RBP: 00007f46f38e8090 R08: 0000000000000000 R09: 0000000000000000 [ 279.731136][T18055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 279.731143][T18055] R13: 00007f46f2c16038 R14: 00007f46f2c15fa0 R15: 00007ffc64fb4ae8 [ 279.731157][T18055] [ 279.804198][T18058] overlayfs: missing 'lowerdir' [ 279.853609][T18060] sg_write: data in/out 63015/14 bytes for SCSI command 0x0-- guessing data in; [ 279.853609][T18060] program syz.8.3378 not setting count and/or reply_len properly [ 279.881287][T18060] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 279.884242][T18060] IPv6: NLM_F_CREATE should be set when creating new route [ 279.952733][ T6897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.207709][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.245023][T18060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.479559][T15037] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.482900][T15037] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.489085][T18073] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 280.497167][T15037] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.504345][T15037] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.591265][T18084] befs: (nbd8): unable to read superblock [ 281.322711][T15037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.576941][T18090] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 281.579457][T18090] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 281.586521][T18090] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 281.591235][T18090] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 281.593891][T18090] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 281.603821][T18090] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 281.776083][T18114] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 281.795106][T18114] romfs: unable to set blocksize [ 281.795106][T18114] [ 281.857411][T18121] program syz.8.3394 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.946025][T18125] cgroup2: Unknown parameter 'memory_recursiveprFI;9ot' [ 282.031528][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 282.186461][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 282.196104][ T10] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 282.201840][ T10] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 282.205792][ T10] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 282.211337][ T10] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 282.225101][ T10] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 282.228013][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.231709][ T10] usb 6-1: Product: syz [ 282.233035][ T10] usb 6-1: Manufacturer: syz [ 282.234776][ T10] usb 6-1: SerialNumber: syz [ 282.248713][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 282.256981][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input26 [ 282.265920][ T40] kauditd_printk_skb: 4082 callbacks suppressed [ 282.265932][ T40] audit: type=1400 audit(2000524360.435:22055): avc: denied { read } for pid=5323 comm="acpid" name="mouse2" dev="devtmpfs" ino=3244 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 282.277882][ T40] audit: type=1400 audit(2000524360.435:22056): avc: denied { read open } for pid=5323 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=3244 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 282.294878][ T40] audit: type=1400 audit(2000524360.435:22057): avc: denied { ioctl } for pid=5323 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=3244 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 282.307576][ T40] audit: type=1400 audit(2000524360.444:22058): avc: denied { read } for pid=5323 comm="acpid" name="mouse2" dev="devtmpfs" ino=3244 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 282.312242][T18141] __nla_validate_parse: 3 callbacks suppressed [ 282.312253][T18141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3400'. [ 282.319286][ T40] audit: type=1400 audit(2000524360.444:22059): avc: denied { read open } for pid=5323 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=3244 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 282.332723][ T40] audit: type=1400 audit(2000524360.444:22060): avc: denied { ioctl } for pid=5323 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=3244 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 282.344409][ T40] audit: type=1400 audit(2000524360.453:22061): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=60838 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 282.354656][ T40] audit: type=1400 audit(2000524360.453:22062): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=60838 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 282.365412][ T40] audit: type=1400 audit(2000524360.453:22063): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=60838 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 282.374951][ T40] audit: type=1400 audit(2000524360.463:22064): avc: denied { read } for pid=5323 comm="acpid" name="event4" dev="devtmpfs" ino=3245 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 282.474936][ T10] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 282.478515][ T10] (id 0x00) [ 282.616382][ T10] rc_core: IR keymap rc-imon-pad not found [ 282.618300][ T10] Registered IR keymap rc-empty [ 282.619981][ T10] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 282.623290][ T10] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 282.636101][ T10] imon:send_packet: packet tx failed (-71) [ 282.658075][ T10] imon 6-1:155.0: remote input dev register failed [ 282.660962][ T10] imon 6-1:155.0: imon_init_intf0: rc device setup failed [ 282.694668][ T10] imon 6-1:155.0: unable to initialize intf0, err 0 [ 282.697627][ T10] imon:imon_probe: failed to initialize context! [ 282.709746][ T10] imon 6-1:155.0: unable to register, err -19 [ 282.720325][ T10] usb 6-1: USB disconnect, device number 3 [ 282.889494][T18169] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.3403'. [ 282.895523][T18169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3403'. [ 282.939195][T18169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3403'. [ 282.946026][ T5938] Bluetooth: hci4: command 0x2016 tx timeout [ 283.365242][T18186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3409'. [ 283.376209][T15036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.399376][T18186] syzkaller1: entered promiscuous mode [ 283.401787][T18186] syzkaller1: entered allmulticast mode [ 283.454211][T18188] loop6: detected capacity change from 0 to 2640 [ 283.460137][ T6397] buffer_io_error: 28 callbacks suppressed [ 283.460147][ T6397] Buffer I/O error on dev loop6, logical block 0, async page read [ 283.465568][ T6397] Buffer I/O error on dev loop6, logical block 0, async page read [ 283.468570][ T6397] Buffer I/O error on dev loop6, logical block 0, async page read [ 283.471665][ T6397] Buffer I/O error on dev loop6, logical block 0, async page read [ 283.477844][ T6397] Buffer I/O error on dev loop6, logical block 0, async page read [ 283.480894][ T6397] Buffer I/O error on dev loop6, logical block 0, async page read [ 283.483904][ T6397] Buffer I/O error on dev loop6, logical block 0, async page read [ 283.489352][ T6397] Buffer I/O error on dev loop6, logical block 0, async page read [ 283.492583][ T6397] ldm_validate_partition_table(): Disk read failed. [ 283.495315][ T6397] Buffer I/O error on dev loop6, logical block 0, async page read [ 283.497906][ T6397] Buffer I/O error on dev loop6, logical block 0, async page read [ 283.500598][ T6397] Dev loop6: unable to read RDB block 0 [ 283.503378][ T6397] loop6: unable to read partition table [ 283.506348][T18188] ldm_validate_partition_table(): Disk read failed. [ 283.515093][T18188] Dev loop6: unable to read RDB block 0 [ 283.517531][T18188] loop6: unable to read partition table [ 283.523463][T18188] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 283.811717][ T5938] Bluetooth: hci3: command 0x0c1a tx timeout [ 284.368301][ T59] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 284.433650][ T5938] Bluetooth: hci3: unexpected event for opcode 0x1804 [ 284.528587][ T59] usb 13-1: Using ep0 maxpacket: 16 [ 284.552960][ T59] usb 13-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 284.559389][ T59] usb 13-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1104, setting to 1024 [ 284.566688][ T59] usb 13-1: config 1 interface 0 has no altsetting 0 [ 284.593284][ T59] usb 13-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.40 [ 284.598898][ T59] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.602611][ T59] usb 13-1: Product: syz [ 284.607596][ T59] usb 13-1: Manufacturer:   [ 284.613839][ T59] usb 13-1: SerialNumber: syz [ 284.640897][T18202] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 284.920523][ T59] usbhid 13-1:1.0: can't add hid device: -71 [ 284.922511][ T59] usbhid 13-1:1.0: probe with driver usbhid failed with error -71 [ 284.939065][ T59] usb 13-1: USB disconnect, device number 5 [ 285.153641][T18225] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3420'. [ 285.159230][T18225] tipc: Enabling of bearer rejected, failed to enable media [ 285.183712][ T5938] Bluetooth: hci4: command 0x2016 tx timeout [ 286.105882][T18252] geneve2: entered promiscuous mode [ 286.116921][T15037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.306411][T18263] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3430'. [ 286.672939][ T5338] ldm_validate_partition_table(): Disk read failed. [ 286.675374][ T5338] Dev loop6: unable to read RDB block 0 [ 286.678089][ T5338] loop6: unable to read partition table [ 286.811817][T15036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.939640][T18284] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3436'. [ 286.946026][T18271] syz.1.3433 (18271): drop_caches: 2 [ 287.094266][T18293] fuse: Invalid rootmode [ 287.104829][ T53] IPVS: starting estimator thread 0... [ 287.215343][T18296] IPVS: using max 45 ests per chain, 108000 per kthread [ 287.307737][T18310] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=18310 comm=syz.2.3441 [ 287.396238][ T5938] Bluetooth: hci4: command 0x2016 tx timeout [ 287.437710][T18317] netlink: 'syz.2.3446': attribute type 30 has an invalid length. [ 287.483017][ T9740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.505485][T18321] netlink: 'syz.2.3446': attribute type 30 has an invalid length. [ 287.621833][ T40] kauditd_printk_skb: 4205 callbacks suppressed [ 287.621844][ T40] audit: type=1400 audit(2000524365.445:26270): avc: denied { search } for pid=18306 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.646170][T18327] xfrm0 speed is unknown, defaulting to 1000 [ 287.652710][ T40] audit: type=1400 audit(2000524365.454:26271): avc: denied { search } for pid=18306 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.660316][ T40] audit: type=1400 audit(2000524365.454:26272): avc: denied { getattr } for pid=18306 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 287.669852][ T40] audit: type=1400 audit(2000524365.454:26273): avc: denied { search } for pid=18306 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.680581][ T40] audit: type=1400 audit(2000524365.454:26274): avc: denied { search } for pid=18306 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1897 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.693536][ T40] audit: type=1400 audit(2000524365.454:26275): avc: denied { search } for pid=18306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.706266][ T40] audit: type=1400 audit(2000524365.454:26276): avc: denied { getattr } for pid=18306 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=8736 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 287.716633][ T40] audit: type=1400 audit(2000524365.501:26277): avc: denied { create } for pid=18325 comm="syz.1.3448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 287.722630][ T40] audit: type=1400 audit(2000524365.501:26278): avc: denied { recv } for pid=5838 comm="syz-executor" saddr=127.0.0.1 src=60838 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 287.759342][ T40] audit: type=1400 audit(2000524365.510:26279): avc: denied { recv } for pid=13492 comm="syz-executor" saddr=10.0.2.2 src=43892 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 287.966121][ T5995] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 288.010419][T18345] xt_hashlimit: max too large, truncated to 1048576 [ 288.025109][T18347] trusted_key: encrypted_key: insufficient parameters specified [ 288.142914][ T5995] usb 6-1: config 0 has no interfaces? [ 288.158230][ T5995] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 288.161499][ T5995] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.164112][ T5995] usb 6-1: Product: syz [ 288.165497][ T5995] usb 6-1: Manufacturer: syz [ 288.191158][ T5995] usb 6-1: SerialNumber: syz [ 288.197685][ T5995] usb 6-1: config 0 descriptor?? [ 288.211339][T18352] syzkaller1: entered promiscuous mode [ 288.218465][T18352] syzkaller1: entered allmulticast mode [ 288.249450][T18355] program syz.9.3455 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.383407][T18357] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 288.492293][T18327] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.568611][ T841] usb 6-1: USB disconnect, device number 4 [ 288.580906][T18361] sit0: Caught tx_queue_len zero misconfig [ 288.760370][T18368] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3459'. [ 288.763195][T18368] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 288.767480][ T5938] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 288.770829][ T5938] Bluetooth: hci3: Injecting HCI hardware error event [ 288.775035][ T5289] Bluetooth: hci3: hardware error 0x00 [ 288.807876][T18369] bridge_slave_1: entered allmulticast mode [ 289.547363][T15037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.607371][T18384] netlink: 'syz.1.3465': attribute type 13 has an invalid length. [ 289.669846][T18384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18384 comm=syz.1.3465 [ 289.969286][T18397] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3469'. [ 290.050074][T18397] bond0: (slave bond_slave_0): Releasing backup interface [ 290.341228][T18426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=18426 comm=syz.8.3476 [ 290.350635][T18426] netlink: 376 bytes leftover after parsing attributes in process `syz.8.3476'. [ 290.744204][ T10] usb 14-1: new low-speed USB device number 2 using dummy_hcd [ 290.885220][T18399] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 290.915432][ T10] usb 14-1: Invalid ep0 maxpacket: 64 [ 290.990639][ T5289] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 291.054403][ T10] usb 14-1: new low-speed USB device number 3 using dummy_hcd [ 291.104313][T18460] SELinux: policydb magic number 0xfffffc8c does not match expected magic number 0xf97cff8c [ 291.110697][T18460] SELinux: failed to load policy [ 291.126315][T18460] 9pnet_fd: Insufficient options for proto=fd [ 291.225790][ T10] usb 14-1: Invalid ep0 maxpacket: 64 [ 291.230897][ T10] usb usb14-port1: attempt power cycle [ 291.274017][T18465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3487'. [ 291.282441][T18465] bridge0: entered promiscuous mode [ 291.284591][T18465] macsec1: entered allmulticast mode [ 291.286357][T18465] bridge0: entered allmulticast mode [ 291.288729][T18465] bridge0: port 3(macsec1) entered blocking state [ 291.291073][T18465] bridge0: port 3(macsec1) entered disabled state [ 291.299759][T18465] bridge0: left allmulticast mode [ 291.301613][T18465] bridge0: left promiscuous mode [ 291.375576][T18468] loop4: detected capacity change from 0 to 7 [ 291.387744][T18468] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 291.389864][T18468] loop4: partition table partially beyond EOD, truncated [ 291.392519][T18468] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 291.510334][ T6397] udevd[6397]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 291.514872][T18471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3489'. [ 291.592388][ T10] usb 14-1: new low-speed USB device number 4 using dummy_hcd [ 291.633729][ T10] usb 14-1: Invalid ep0 maxpacket: 64 [ 291.781925][ T10] usb 14-1: new low-speed USB device number 5 using dummy_hcd [ 291.815026][T18479] netlink: 'syz.1.3491': attribute type 1 has an invalid length. [ 291.815963][ T10] usb 14-1: Invalid ep0 maxpacket: 64 [ 291.821939][ T10] usb usb14-port1: unable to enumerate USB device [ 292.276665][ T6470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.967330][ T6470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.973957][T18515] ipt_REJECT: TCP_RESET invalid for non-tcp [ 292.981272][ T40] kauditd_printk_skb: 2626 callbacks suppressed [ 292.981282][ T40] audit: type=1400 audit(2000524370.455:28906): avc: denied { create } for pid=18514 comm="syz.1.3500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 292.990435][ T40] audit: type=1400 audit(2000524370.455:28907): avc: denied { write } for pid=18514 comm="syz.1.3500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 292.998502][ T40] audit: type=1400 audit(2000524370.455:28908): avc: denied { read } for pid=18514 comm="syz.1.3500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 293.006186][ T40] audit: type=1400 audit(2000524370.455:28909): avc: denied { read } for pid=18514 comm="syz.1.3500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 293.012740][ T40] audit: type=1400 audit(2000524370.455:28910): avc: denied { read } for pid=18514 comm="syz.1.3500" dev="nsfs" ino=4026533961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 293.019353][ T40] audit: type=1400 audit(2000524370.455:28911): avc: denied { read open } for pid=18514 comm="syz.1.3500" path="net:[4026533961]" dev="nsfs" ino=4026533961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 293.028098][ T40] audit: type=1400 audit(2000524370.455:28912): avc: denied { create } for pid=18514 comm="syz.1.3500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 293.036620][ T40] audit: type=1400 audit(2000524370.464:28913): avc: denied { recv } for pid=5838 comm="syz-executor" saddr=127.0.0.1 src=60838 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 293.048554][ T40] audit: type=1400 audit(2000524370.464:28914): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=43892 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 293.057081][ T40] audit: type=1400 audit(2000524370.474:28915): avc: denied { read write } for pid=13492 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 293.060786][T18520] xt_TPROXY: Can be used only with -p tcp or -p udp [ 293.198766][T18526] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3505'. [ 293.202940][T18526] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 293.202940][T18526] program syz.8.3505 not setting count and/or reply_len properly [ 293.361280][T18532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3504'. [ 293.364338][T18532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3504'. [ 293.369768][T18532] team0: entered promiscuous mode [ 293.371426][T18532] team_slave_0: entered promiscuous mode [ 293.375447][T18529] xt_CT: No such helper "snmp_trap" [ 293.383268][T18532] team_slave_1: entered promiscuous mode [ 293.385906][T18532] bond0: entered promiscuous mode [ 293.387816][T18532] bond_slave_0: entered promiscuous mode [ 293.389746][T18532] bond_slave_1: entered promiscuous mode [ 293.391575][T18532] bridge_slave_1: entered promiscuous mode [ 293.394727][T18532] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 293.645326][ T6897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.724898][T18542] netdevsim netdevsim9: Firmware load for './file0/file0/..' refused, path contains '..' component [ 293.756585][T18542] afs: Unknown parameter 'dynE.' [ 293.767264][T18544] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3509'. [ 293.779036][T18544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3509'. [ 293.797144][T18544] bond1: entered promiscuous mode [ 293.799503][T18544] 8021q: adding VLAN 0 to HW filter on device bond1 [ 293.815828][T18544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18544 comm=syz.1.3509 [ 293.934036][T18548] xfrm0 speed is unknown, defaulting to 1000 [ 293.997245][T18548] netlink: 'syz.1.3510': attribute type 3 has an invalid length. [ 294.000655][T18548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.332874][T18570] __nla_validate_parse: 3 callbacks suppressed [ 294.332886][T18570] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3516'. [ 294.346664][T18570] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 294.352298][T18570] gretap1: entered promiscuous mode [ 294.354512][T18570] gretap1: entered allmulticast mode [ 294.367470][T18570] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3516'. [ 294.404504][T18570] mkiss: ax0: crc mode is auto. [ 294.467213][T18574] netlink: 'syz.2.3517': attribute type 4 has an invalid length. [ 294.467279][T18572] netlink: 'syz.2.3517': attribute type 4 has an invalid length. [ 294.940430][T15037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.988086][T18604] vcan1: entered allmulticast mode [ 295.930460][T18634] syz.8.3535 (18634): drop_caches: 2 [ 296.125988][T18641] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3538'. [ 296.316741][T18657] netlink: 'syz.8.3542': attribute type 3 has an invalid length. [ 296.798752][T18672] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3547'. [ 296.801625][T18671] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3547'. [ 297.083947][T18674] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 297.092741][T18674] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3548'. [ 297.283731][T18678] kvm: kvm [18676]: vcpu0, guest rIP: 0x9115 Unhandled WRMSR(0xc2) = 0xa09000007043 [ 297.287001][T18678] kvm: kvm [18676]: vcpu0, guest rIP: 0x9154 Unhandled WRMSR(0xc2) = 0x7043 [ 297.289916][T18678] kvm: kvm [18676]: vcpu0, guest rIP: 0x9156 Unhandled WRMSR(0xc2) = 0x7043 [ 297.293388][T18678] kvm: kvm [18676]: vcpu0, guest rIP: 0x9115 Unhandled WRMSR(0xc1) = 0x4fdf00000000 [ 297.358000][T18683] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3551'. [ 297.810995][T18695] efs: cannot read volume header [ 298.152010][T18708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3559'. [ 298.155324][T18708] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3559'. [ 298.261400][T18712] netlink: 'syz.1.3560': attribute type 5 has an invalid length. [ 298.395596][ T40] kauditd_printk_skb: 1298 callbacks suppressed [ 298.395607][ T40] audit: type=1400 audit(2000524375.512:30214): avc: denied { ioctl } for pid=18711 comm="syz.1.3560" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 298.448895][ T6470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.469880][ T40] audit: type=1400 audit(2000524375.587:30215): avc: denied { ioctl } for pid=18711 comm="syz.1.3560" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 298.523054][ T40] audit: type=1400 audit(2000524375.633:30216): avc: denied { recv } for pid=5838 comm="syz-executor" saddr=127.0.0.1 src=60838 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 298.533809][ T40] audit: type=1400 audit(2000524375.633:30217): avc: denied { read write } for pid=17350 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 298.536152][ T10] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 298.541288][ T40] audit: type=1400 audit(2000524375.633:30218): avc: denied { read write open } for pid=17350 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 298.552416][ T40] audit: type=1400 audit(2000524375.633:30219): avc: denied { ioctl } for pid=17350 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 298.560022][ T40] audit: type=1400 audit(2000524375.643:30220): avc: denied { recv } for pid=5837 comm="sshd-session" saddr=10.0.2.2 src=43892 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 298.567731][ T40] audit: type=1400 audit(2000524375.652:30221): avc: denied { ioctl } for pid=18711 comm="syz.1.3560" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 298.590580][ T40] audit: type=1400 audit(2000524375.652:30222): avc: denied { ioctl } for pid=18711 comm="syz.1.3560" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 298.598639][ T40] audit: type=1400 audit(2000524375.652:30223): avc: denied { ioctl } for pid=18711 comm="syz.1.3560" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 298.710950][ T841] hid_parser_main: 33 callbacks suppressed [ 298.710963][ T841] hid-generic 0005:00B6:0009.000A: unknown main item tag 0x0 [ 298.718722][ T841] hid-generic 0005:00B6:0009.000A: unknown main item tag 0x0 [ 298.721072][ T841] hid-generic 0005:00B6:0009.000A: unknown main item tag 0x0 [ 298.723376][ T841] hid-generic 0005:00B6:0009.000A: unknown main item tag 0x0 [ 298.725914][ T841] hid-generic 0005:00B6:0009.000A: unknown main item tag 0x0 [ 298.728414][ T841] hid-generic 0005:00B6:0009.000A: unknown main item tag 0x0 [ 298.731080][ T841] hid-generic 0005:00B6:0009.000A: unknown main item tag 0x0 [ 298.732332][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 298.733587][ T841] hid-generic 0005:00B6:0009.000A: unknown main item tag 0x0 [ 298.739260][ T841] hid-generic 0005:00B6:0009.000A: unknown main item tag 0x0 [ 298.741543][ T841] hid-generic 0005:00B6:0009.000A: unknown main item tag 0x0 [ 298.741788][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 298.749721][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 298.765892][ T10] usb 6-1: string descriptor 0 read error: -22 [ 298.767962][T18720] netlink: 'syz.9.3562': attribute type 3 has an invalid length. [ 298.768095][ T841] hid-generic 0005:00B6:0009.000A: hidraw1: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 298.771286][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 298.777998][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.797992][T18712] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 298.825229][T18723] sp0: Synchronizing with TNC [ 298.844915][T18723] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3564'. [ 298.848510][T18722] [U] [ 298.848532][T18721] fido_id[18721]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 299.029909][ T10] cdc_ncm 6-1:1.0: bind() failure [ 299.047971][ T10] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 299.050089][ T10] cdc_ncm 6-1:1.1: bind() failure [ 299.062845][ T10] usb 6-1: USB disconnect, device number 5 [ 299.129615][T18740] libceph: resolve '4' (ret=-3): failed [ 299.134003][T15036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.309494][T18746] erspan1: entered promiscuous mode [ 299.807201][ T9740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.812448][T18771] __nla_validate_parse: 1 callbacks suppressed [ 299.812459][T18771] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3577'. [ 299.872366][T18771] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 299.875516][T18771] overlayfs: overlapping lowerdir path [ 299.879553][T18775] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 299.972336][ T9740] Bluetooth: hci0: Frame reassembly failed (-84) [ 300.065229][T18783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3582'. [ 300.092268][T18783] 8021q: adding VLAN 0 to HW filter on device bond1 [ 300.136582][T18786] xfrm0 speed is unknown, defaulting to 1000 [ 300.495093][T15036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.829501][T18821] program syz.9.3592 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.411852][T18839] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 301.755372][ T5938] Bluetooth: hci4: unexpected event for opcode 0x1804 [ 301.906724][T18871] xt_hashlimit: max too large, truncated to 1048576 [ 301.989787][T18878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3607'. [ 302.023655][T18882] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 302.036667][T18881] F2FS-fs (nbd9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 302.039088][T18881] F2FS-fs (nbd9): Can't find valid F2FS filesystem in 1th superblock [ 302.042603][T18881] F2FS-fs (nbd9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 302.045741][T18881] F2FS-fs (nbd9): Can't find valid F2FS filesystem in 2th superblock [ 302.056196][T18881] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3608'. [ 302.117032][ T5938] Bluetooth: hci0: command 0x1003 tx timeout [ 302.120029][ T5289] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 302.146158][T18885] 8021q: adding VLAN 0 to HW filter on device bond2 [ 302.224887][T18886] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.227474][T18886] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.525649][T18904] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 302.606540][T18906] program syz.8.3614 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.615346][T18906] macsec1: entered promiscuous mode [ 302.668092][T18913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3616'. [ 302.769504][T18913] team0: Port device team_slave_0 removed [ 302.955866][T18930] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 303.231091][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.342161][T18964] syzkaller0: entered promiscuous mode [ 303.344169][T18964] syzkaller0: entered allmulticast mode [ 303.376923][T18966] tipc: Started in network mode [ 303.378633][T18966] tipc: Node identity 0e6710b464e4, cluster identity 4711 [ 303.385787][T18966] tipc: Enabled bearer , priority 0 [ 303.394759][T18963] tipc: Resetting bearer [ 303.412973][T18963] tipc: Disabling bearer [ 303.643022][T18977] comedi comedi1: c6xdigio: I/O port conflict (0x3,3) [ 303.710040][T18982] xt_hashlimit: Unknown mode mask 84, kernel too old? [ 303.757355][ T40] kauditd_printk_skb: 3573 callbacks suppressed [ 303.757372][ T40] audit: type=1400 audit(2000524380.522:33797): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=60838 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 303.769432][ T40] audit: type=1400 audit(2000524380.522:33798): avc: denied { create } for pid=18979 comm="syz.8.3634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 303.775537][ T40] audit: type=1400 audit(2000524380.522:33799): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=60838 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 303.785404][ T40] audit: type=1400 audit(2000524380.522:33800): avc: denied { recv } for pid=5837 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=60838 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 303.794872][ T40] audit: type=1400 audit(2000524380.531:33801): avc: denied { recv } for pid=5837 comm="sshd-session" saddr=10.0.2.2 src=43892 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 303.805045][ T40] audit: type=1400 audit(2000524380.541:33802): avc: denied { bind } for pid=18979 comm="syz.8.3634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 303.823728][ T40] audit: type=1400 audit(2000524380.541:33803): avc: denied { name_bind } for pid=18979 comm="syz.8.3634" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 303.834540][ T40] audit: type=1400 audit(2000524380.541:33804): avc: denied { node_bind } for pid=18979 comm="syz.8.3634" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 303.849514][ T40] audit: type=1400 audit(2000524380.559:33805): avc: denied { write } for pid=18979 comm="syz.8.3634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 303.859352][ T40] audit: type=1400 audit(2000524380.559:33806): avc: denied { connect } for pid=18979 comm="syz.8.3634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 303.927198][ T9747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.127698][ T841] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 304.298906][ T841] usb 14-1: Using ep0 maxpacket: 16 [ 304.333091][ T841] usb 14-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 304.337047][ T841] usb 14-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 304.347140][ T841] usb 14-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 304.351542][ T841] usb 14-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 304.357424][ T841] usb 14-1: config 0 interface 0 has no altsetting 0 [ 304.377779][ T841] usb 14-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 304.388507][ T841] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.391777][ T841] usb 14-1: Product: syz [ 304.393523][ T841] usb 14-1: Manufacturer: syz [ 304.395963][ T841] usb 14-1: SerialNumber: syz [ 304.402992][ T841] usb 14-1: config 0 descriptor?? [ 304.419280][T18987] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 304.504506][T19003] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3641'. [ 304.514474][T19003] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3641'. [ 304.631675][ T5995] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 304.648101][T18987] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 304.661048][ T841] input: syz syz as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/input/input29 [ 304.802150][ T5995] usb 6-1: Using ep0 maxpacket: 16 [ 304.813317][ T5995] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 304.817166][ T5995] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 304.820875][ T5995] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 304.827449][ T5995] usb 6-1: config 1 interface 0 has no altsetting 0 [ 304.836026][ T5995] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 304.840513][ T5995] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.843756][ T5995] usb 6-1: Product: syz [ 304.845354][ T5995] usb 6-1: Manufacturer: syz [ 304.847231][ T5995] usb 6-1: SerialNumber: syz [ 305.075815][T11022] usb 14-1: USB disconnect, device number 6 [ 305.088770][ T5995] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 305.254486][ T5289] Bluetooth: hci4: unexpected event for opcode 0x1804 [ 305.284590][T15036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.287469][T15036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.877608][T19028] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19028 comm=syz.8.3647 [ 305.885986][T19028] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=19028 comm=syz.8.3647 [ 305.892655][T19028] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 305.907834][T19032] No such timeout policy "syz1" [ 305.970975][ T9747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.059611][ T5289] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 306.062957][ T5289] Bluetooth: hci4: Injecting HCI hardware error event [ 306.068052][ T5938] Bluetooth: hci4: hardware error 0x00 [ 306.221825][T19050] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3653'. [ 306.443673][T19061] program syz.2.3657 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 306.523335][T19064] netlink: 'syz.2.3658': attribute type 11 has an invalid length. [ 306.530328][T19064] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3658'. [ 306.624397][T19067] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3659'. [ 306.901962][T19073] Mount JFS Failure: -22 [ 306.907647][T19073] team0: Device is already in use. [ 307.181935][T19080] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3663'. [ 307.372022][ T59] usb 6-1: USB disconnect, device number 6 [ 307.382724][ T59] usblp0: removed [ 307.434966][T19104] /dev/nullb0: Can't open blockdev [ 307.574195][T19113] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 308.037736][T19138] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 308.289475][ T5938] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 308.479582][T19165] netlink: 'syz.9.3685': attribute type 1 has an invalid length. [ 308.485737][T19165] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3685'. [ 308.488415][T19165] netlink: 1 bytes leftover after parsing attributes in process `syz.9.3685'. [ 308.491029][T19165] netlink: 658 bytes leftover after parsing attributes in process `syz.9.3685'. [ 308.981747][T19190] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3692'. [ 309.020161][ T9740] Bluetooth: Error in BCSP hdr checksum [ 309.113343][ T40] kauditd_printk_skb: 2681 callbacks suppressed [ 309.113354][ T40] audit: type=1400 audit(2000524385.523:35987): avc: denied { search } for pid=19192 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.120841][T19194] tipc: Started in network mode [ 309.122260][ T40] audit: type=1400 audit(2000524385.523:35988): avc: denied { search } for pid=19192 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1897 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.125476][T19194] tipc: Node identity , cluster identity 4711 [ 309.133095][T19194] tipc: Failed to set node id, please configure manually [ 309.136665][T19194] tipc: Enabling of bearer rejected, failed to enable media [ 309.139438][ T40] audit: type=1400 audit(2000524385.523:35989): avc: denied { search } for pid=19192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.142427][T19192] audit: audit_backlog=65 > audit_backlog_limit=64 [ 309.148432][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 309.151611][ C1] audit: audit_lost=232 audit_rate_limit=0 audit_backlog_limit=64 [ 309.152152][T19178] audit: audit_backlog=65 > audit_backlog_limit=64 [ 309.152420][T19196] audit: audit_backlog=65 > audit_backlog_limit=64 [ 309.152431][T19196] audit: audit_lost=233 audit_rate_limit=0 audit_backlog_limit=64 [ 309.152439][T19196] audit: backlog limit exceeded [ 309.291439][ T9740] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 309.305941][T15037] Bluetooth: Error in BCSP hdr checksum [ 309.328975][T19196] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 309.389675][T19209] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3696'. [ 309.394478][T19209] lo speed is unknown, defaulting to 1000 [ 309.396382][T19209] lo speed is unknown, defaulting to 1000 [ 309.398521][T19209] lo speed is unknown, defaulting to 1000 [ 309.407845][T19209] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 309.423456][T19209] lo speed is unknown, defaulting to 1000 [ 309.426022][T19209] lo speed is unknown, defaulting to 1000 [ 309.428513][T19209] lo speed is unknown, defaulting to 1000 [ 309.431028][T19209] lo speed is unknown, defaulting to 1000 [ 309.440278][T19209] lo speed is unknown, defaulting to 1000 [ 309.442796][T19209] lo speed is unknown, defaulting to 1000 [ 309.445759][T19209] lo speed is unknown, defaulting to 1000 [ 309.584078][T15037] Bluetooth: Error in BCSP hdr checksum [ 309.783844][T19222] netlink: 'syz.2.3699': attribute type 1 has an invalid length. [ 309.803105][T19222] 8021q: adding VLAN 0 to HW filter on device bond2 [ 309.835117][T19222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3699'. [ 309.984024][T19231] IPVS: set_ctl: invalid protocol: 151 100.1.1.0:20000 [ 310.077372][ T9740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.120498][T19234] omfs: Invalid superblock (0) [ 310.206059][T19240] kAFS: unparsable volume name [ 310.931848][ T5289] Bluetooth: hci0: command 0x1003 tx timeout [ 310.934979][ T5938] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 311.179134][T19257] bridge_slave_0: default FDB implementation only supports local addresses [ 311.197509][T19258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.202195][T19258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.446439][ T9747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.450915][ T9740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.131996][T15037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.337017][T19281] ALSA: seq fatal error: cannot create timer (-19) [ 312.471978][T19287] xfrm0 speed is unknown, defaulting to 1000 [ 312.476595][T19287] lo speed is unknown, defaulting to 1000 [ 312.567399][T19294] xfrm0 speed is unknown, defaulting to 1000 [ 312.570862][T19294] lo speed is unknown, defaulting to 1000 [ 313.026577][T19312] xfrm0 speed is unknown, defaulting to 1000 [ 313.030694][T19312] lo speed is unknown, defaulting to 1000 [ 313.292055][T19334] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 313.385216][T19334] serio: Serial port ptm0 [ 313.845691][T19365] netlink: 'syz.9.3737': attribute type 10 has an invalid length. [ 313.848356][T19365] bridge_slave_1: left allmulticast mode [ 313.850212][T19365] bridge_slave_1: left promiscuous mode [ 313.852152][T19365] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.857431][T19365] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 313.906107][ T1027] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 313.946631][T19367] overlay: Unknown parameter 'euid' [ 314.077214][ T1027] usb 13-1: Using ep0 maxpacket: 8 [ 314.087802][ T1027] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 314.099665][ T1027] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 314.102901][ T1027] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 314.106346][ T1027] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.113668][ T1027] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 314.116725][ T1027] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.208907][T19373] hpfs: Bad magic ... probably not HPFS [ 314.212275][T19373] hpfs: Bad magic ... probably not HPFS [ 314.343796][ T1027] usb 13-1: GET_CAPABILITIES returned 0 [ 314.345683][ T1027] usbtmc 13-1:16.0: can't read capabilities [ 314.539552][ T40] kauditd_printk_skb: 3240 callbacks suppressed [ 314.539570][ T40] audit: type=1400 audit(2000524390.608:39171): avc: denied { recv } for pid=5838 comm="syz-executor" saddr=127.0.0.1 src=60838 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 314.551622][ T40] audit: type=1400 audit(2000524390.608:39172): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=43892 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 314.560825][ T40] audit: type=1400 audit(2000524390.608:39173): avc: denied { read write } for pid=13492 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 314.569923][ T40] audit: type=1400 audit(2000524390.608:39174): avc: denied { read write open } for pid=13492 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 314.579098][ T40] audit: type=1400 audit(2000524390.608:39175): avc: denied { ioctl } for pid=13492 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 314.592037][ T40] audit: type=1400 audit(2000524390.654:39176): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=60838 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 314.599569][ T40] audit: type=1400 audit(2000524390.654:39177): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=60838 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 314.607434][ T40] audit: type=1400 audit(2000524390.654:39178): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=60838 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 314.615146][ T40] audit: type=1400 audit(2000524390.654:39179): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=43892 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 314.623467][ T40] audit: type=1400 audit(2000524390.654:39180): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=43892 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 314.677099][ T6898] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.798949][ T6898] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.834650][T15036] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 314.838021][T15036] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 314.844245][T15036] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 314.848915][T15036] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 314.865378][ T5289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.873495][ T5289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.876860][ T5289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.882802][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.886255][ T5289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.895258][ T5289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.915712][ T6898] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.964535][T19383] xfrm0 speed is unknown, defaulting to 1000 [ 314.968129][T19383] lo speed is unknown, defaulting to 1000 [ 315.081005][T19388] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 315.232903][ T6898] bridge_slave_1: left allmulticast mode [ 315.235052][ T6898] bridge_slave_1: left promiscuous mode [ 315.237243][ T6898] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.246949][ T6898] bridge_slave_0: left allmulticast mode [ 315.249034][ T6898] bridge_slave_0: left promiscuous mode [ 315.250950][ T6898] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.665668][ T6898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.674135][ T6898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.679387][ T6898] bond0 (unregistering): Released all slaves [ 315.777234][ T6898] bond1 (unregistering): Released all slaves [ 315.896871][ T6898] bond2 (unregistering): Released all slaves [ 315.911176][ T6898] bond3 (unregistering): Released all slaves [ 315.924783][T19383] chnl_net:caif_netlink_parms(): no params data found [ 315.981888][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.029063][T19383] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.033318][T19383] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.037439][ T6898] IPVS: stopping backup sync thread 18882 ... [ 316.040342][T19383] bridge_slave_0: entered allmulticast mode [ 316.046830][T19383] bridge_slave_0: entered promiscuous mode [ 316.055121][T19383] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.059787][T19383] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.062218][T19383] bridge_slave_1: entered allmulticast mode [ 316.065881][T19383] bridge_slave_1: entered promiscuous mode [ 316.130531][T19383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.138378][T19383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.163308][T19383] team0: Port device team_slave_0 added [ 316.169117][T19383] team0: Port device team_slave_1 added [ 316.205523][T19383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.216707][T19383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.224667][T19383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.238970][T19383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.240950][ T9740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.241462][T19383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.270571][T19383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.321702][T19414] Bluetooth: MGMT ver 1.23 [ 316.344804][T19383] hsr_slave_0: entered promiscuous mode [ 316.350721][T19383] hsr_slave_1: entered promiscuous mode [ 316.353147][T19383] debugfs: 'hsr0' already exists in 'hsr' [ 316.355220][T19383] Cannot create hsr debugfs directory [ 316.467152][ T6898] hsr_slave_0: left promiscuous mode [ 316.469785][ T6898] hsr_slave_1: left promiscuous mode [ 316.471954][ T6898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.474319][ T6898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.477175][ T6898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.479690][ T6898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.486252][ T6898] veth1_macvtap: left promiscuous mode [ 316.488098][ T6898] veth0_macvtap: left promiscuous mode [ 316.490449][ T6898] veth1_vlan: left promiscuous mode [ 316.492567][ T6898] veth0_vlan: left promiscuous mode [ 316.869427][ T5966] usb 13-1: USB disconnect, device number 6 [ 316.960205][ T6898] team0 (unregistering): Port device team_slave_1 removed [ 317.098976][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.101750][ T5289] Bluetooth: hci0: command tx timeout [ 317.232286][T19422] xfrm1: entered allmulticast mode [ 317.475632][ T6898] IPVS: stop unused estimator thread 0... [ 317.620205][ T6898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.623479][ T6898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.738207][T19438] __nla_validate_parse: 1 callbacks suppressed [ 317.738219][T19438] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3758'. [ 317.745337][T19438] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3758'. [ 317.753483][T19440] ref_ctr_offset mismatch. inode: 0x974 offset: 0x0 ref_ctr_offset(old): 0x24 ref_ctr_offset(new): 0x0 [ 317.970675][T19383] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 318.002163][T19383] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 318.022495][T19383] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 318.042855][T19383] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 318.069378][T19450] netlink: 'syz.8.3761': attribute type 1 has an invalid length. [ 318.138131][T19464] gfs2: error -5 reading superblock [ 318.164366][T19457] kvm: kvm [19452]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 318.167756][T19457] kvm: kvm [19452]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 318.226276][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.293641][ T9740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.332018][T19383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.353952][T19383] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.365819][ T9740] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.368427][ T9740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.385850][ T9740] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.388021][ T9740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.851785][T19509] ipt_ECN: cannot use operation on non-tcp rule [ 318.879438][T19383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.952716][T19383] veth0_vlan: entered promiscuous mode [ 318.969709][T19383] veth1_vlan: entered promiscuous mode [ 319.016306][T19383] veth0_macvtap: entered promiscuous mode [ 319.030043][T19383] veth1_macvtap: entered promiscuous mode [ 319.069041][T19383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.078358][T19383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.088929][ T6470] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.091601][ T6470] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.094406][ T6898] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.100569][ T6898] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.191770][ T9747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.194944][ T9747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.225690][ T9740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.230843][ T9740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.319573][ T5289] Bluetooth: hci0: command tx timeout [ 319.321013][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.486330][T19534] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3777'. [ 319.590661][T19542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3780'. [ 319.593736][T19542] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3780'. [ 319.601884][T19541] syzkaller1: entered promiscuous mode [ 319.603462][T19541] syzkaller1: entered allmulticast mode [ 319.624040][T19541] syzkaller0: entered promiscuous mode [ 319.625616][T19541] syzkaller0: entered allmulticast mode [ 319.752054][T19545] xt_limit: Overflow, try lower: 271964/0 [ 319.899698][ T40] kauditd_printk_skb: 3415 callbacks suppressed [ 319.899713][ T40] audit: type=1400 audit(2000524395.618:42596): avc: denied { create } for pid=19548 comm="syz.3.3782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 319.912408][ T40] audit: type=1400 audit(2000524395.618:42597): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=60838 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 319.922686][ T40] audit: type=1400 audit(2000524395.618:42598): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=60838 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 319.931911][ T40] audit: type=1400 audit(2000524395.627:42599): avc: denied { recv } for pid=5837 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=60838 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 319.941433][ T40] audit: type=1400 audit(2000524395.627:42600): avc: denied { write } for pid=19548 comm="syz.3.3782" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 319.948440][ T40] audit: type=1400 audit(2000524395.627:42601): avc: denied { recv } for pid=19547 comm="rm" saddr=10.0.2.2 src=43892 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 319.958739][ T40] audit: type=1400 audit(2000524395.627:42602): avc: denied { recv } for pid=19548 comm="syz.3.3782" saddr=127.0.0.1 daddr=127.0.0.1 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 319.967652][ T40] audit: type=1400 audit(2000524395.627:42603): avc: denied { write } for pid=19548 comm="syz.3.3782" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 319.975703][ T40] audit: type=1400 audit(2000524395.627:42604): avc: denied { recv } for pid=19547 comm="rm" saddr=10.0.2.2 src=43892 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 319.999613][ T40] audit: type=1400 audit(2000524395.627:42605): avc: denied { recv } for pid=5838 comm="syz-executor" saddr=127.0.0.1 src=60838 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 320.057110][T19556] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3783'. [ 320.443641][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.569271][T19566] netlink: 'syz.8.3786': attribute type 1 has an invalid length. [ 320.572789][T19566] netlink: 'syz.8.3786': attribute type 2 has an invalid length. [ 320.742527][T19570] netlink: 'syz.8.3787': attribute type 1 has an invalid length. [ 320.905919][T19580] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3788'. [ 320.911699][T19580] gtp0: entered promiscuous mode [ 321.388602][T19600] overlayfs: workdir and upperdir must reside under the same mount [ 321.410355][T19600] overlayfs: workdir and upperdir must reside under the same mount [ 321.544811][ T5289] Bluetooth: hci0: command tx timeout [ 321.803047][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.174001][T19648] netlink: 'syz.8.3805': attribute type 1 has an invalid length. [ 322.332078][T19664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3807'. [ 322.400754][T19664] team_slave_0 (unregistering): left promiscuous mode [ 322.401279][ T9740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.409155][T19664] team0: Port device team_slave_0 removed [ 322.433434][T19669] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3809'. [ 322.436288][T19669] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3809'. [ 322.453939][T19668] Process accounting resumed [ 322.925058][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.975856][T19692] input: syz1 as /devices/virtual/input/input30 [ 323.087479][ T9747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.286892][T19705] __nla_validate_parse: 2 callbacks suppressed [ 323.286903][T19705] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3817'. [ 323.490609][T19714] nbd: must specify at least one socket [ 323.544133][T19714] xfrm0 speed is unknown, defaulting to 1000 [ 323.548502][T19714] lo speed is unknown, defaulting to 1000 [ 323.771258][ T5289] Bluetooth: hci0: command tx timeout [ 323.772226][ T6470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.779109][T19733] hugetlbfs: Unknown parameter 'fd' [ 323.887346][ T841] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 323.910521][T19739] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 323.915824][T19738] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 324.027723][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.064356][ T841] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 324.067184][ T841] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 324.073598][ T841] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 324.076684][ T841] usb 8-1: config 1 has no interface number 0 [ 324.078687][ T841] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 324.084537][ T841] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 324.088584][ T841] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 324.097687][ T841] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.110610][ T841] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 324.457332][ T9747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.647646][T18393] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 324.725682][ T841] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now attached [ 324.829416][T18393] usb 13-1: Using ep0 maxpacket: 16 [ 324.843463][T18393] usb 13-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 324.848409][T18393] usb 13-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 324.856606][T18393] usb 13-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 324.860676][T18393] usb 13-1: config 1 interface 0 has no altsetting 0 [ 324.874293][T18393] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 324.877370][T18393] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.879922][T18393] usb 13-1: Product: syz [ 324.881324][T18393] usb 13-1: Manufacturer: syz [ 324.888049][T18393] usb 13-1: SerialNumber: syz [ 324.942050][T19778] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3823'. [ 324.956468][T19778] : entered promiscuous mode [ 324.963708][T19726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.979272][T19726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.982594][T19783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.130406][T18393] usblp 13-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 325.295197][ T40] kauditd_printk_skb: 4761 callbacks suppressed [ 325.295253][ T40] audit: type=1400 audit(2000524400.656:47367): avc: denied { search } for pid=19790 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.304135][ T40] audit: type=1400 audit(2000524400.656:47368): avc: denied { search } for pid=19790 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1897 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.312972][ T40] audit: type=1400 audit(2000524400.656:47369): avc: denied { search } for pid=19790 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.320744][ T40] audit: type=1400 audit(2000524400.656:47370): avc: denied { search } for pid=19790 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.329047][ T40] audit: type=1400 audit(2000524400.675:47371): avc: denied { search } for pid=19791 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.336226][ T40] audit: type=1400 audit(2000524400.675:47372): avc: denied { search } for pid=19791 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1897 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.343342][ T40] audit: type=1400 audit(2000524400.675:47373): avc: denied { search } for pid=19791 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.346482][T19791] audit: audit_backlog=65 > audit_backlog_limit=64 [ 325.346569][T19758] audit: audit_backlog=65 > audit_backlog_limit=64 [ 325.346580][T19758] audit: audit_lost=254 audit_rate_limit=0 audit_backlog_limit=64 [ 325.354674][ T841] usb 13-1: USB disconnect, device number 7 [ 325.361052][ T841] usblp0: removed [ 325.629575][T19794] bond1: option downdelay: invalid value (18446744073709551615) [ 325.632978][T19794] bond1: option downdelay: allowed values 0 - 2147483647 [ 325.636834][T19794] bond1 (unregistering): Released all slaves [ 325.826401][ T841] snd_usb_pod 8-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 326.016607][T19813] netlink: 'syz.8.3842': attribute type 9 has an invalid length. [ 326.615473][ T8751] usb 13-1: new full-speed USB device number 8 using dummy_hcd [ 326.794871][ T8751] usb 13-1: config 0 has an invalid interface number: 8 but max is 0 [ 326.800010][ T8751] usb 13-1: config 0 has no interface number 0 [ 326.802164][ T8751] usb 13-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 326.806096][ T8751] usb 13-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 326.809598][ T8751] usb 13-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 326.817304][ T8751] usb 13-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 326.820623][ T8751] usb 13-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 326.823496][ T8751] usb 13-1: Product: syz [ 326.825001][ T8751] usb 13-1: SerialNumber: syz [ 326.829506][ T8751] usb 13-1: config 0 descriptor?? [ 326.842837][ T8751] cm109 13-1:0.8: invalid payload size 0, expected 4 [ 326.847715][ T8751] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.8/input/input31 [ 326.848443][T18393] usb 8-1: USB disconnect, device number 9 [ 326.868516][T18393] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 326.953316][T19833] syzkaller0: entered promiscuous mode [ 326.955150][T19833] syzkaller0: entered allmulticast mode [ 326.970733][T19834] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3848'. [ 327.199649][T19840] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3849'. [ 327.205483][T19840] gretap0: entered promiscuous mode [ 327.326115][T19842] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 327.328046][T19842] PKCS7: Only support pkcs7_signedData type [ 327.351942][ C0] cm109 13-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 327.356221][ C0] cm109 13-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 327.358557][ C0] cm109 13-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 327.360780][ T6001] usb 13-1: USB disconnect, device number 8 [ 327.362630][ C0] cm109 13-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 327.362642][ C0] cm109 13-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 327.381284][ T6001] cm109 13-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 327.808739][T19860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3992 sclass=netlink_route_socket pid=19860 comm=syz.3.3854 [ 327.813833][T19860] SELinux: policydb magic number 0x2c0 does not match expected magic number 0xf97cff8c [ 327.817813][T19860] SELinux: failed to load policy [ 327.930196][T19864] random: crng reseeded on system resumption [ 327.948369][T19864] tmpfs: Unknown parameter 'usrquota' [ 327.976650][T19867] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 327.979624][T19867] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 327.988233][T19867] overlayfs: missing 'lowerdir' [ 328.078840][T19872] netlink: 'syz.8.3858': attribute type 12 has an invalid length. [ 328.083374][T19872] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3858'. [ 328.167939][T19879] No such timeout policy "syz1" [ 328.362132][T19887] binder: 19886:19887 ioctl c0306201 0 returned -14 [ 328.425833][T19891] netlink: 211856 bytes leftover after parsing attributes in process `syz.3.3862'. [ 328.435168][T19888] binder: 19886:19888 ioctl c0306201 0 returned -14 [ 328.564072][ T6898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.728110][T19902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3866'. [ 328.889987][T19907] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3867'. [ 329.008541][T19915] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3869'. [ 329.200631][T19921] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3870'. [ 329.204382][T19921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3870'. [ 329.209579][T19921] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3870'. [ 329.254661][T15036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.282555][T19923] dvmrp6: entered allmulticast mode [ 329.422445][T19927] netlink: 'syz.8.3873': attribute type 2 has an invalid length. [ 329.424873][T19927] netlink: 'syz.8.3873': attribute type 1 has an invalid length. [ 329.429633][T19927] netlink: 'syz.8.3873': attribute type 1 has an invalid length. [ 329.496944][T19934] xt_socket: unknown flags 0x48 [ 329.524944][T19936] fuse: Bad value for 'user_id' [ 329.529287][T19936] fuse: Bad value for 'user_id' [ 329.634770][T19945] mac80211_hwsim hwsim30 : renamed from wlan1 [ 329.709610][T19950] veth1_to_team: entered promiscuous mode [ 329.717879][T19950] loop6: detected capacity change from 0 to 7 [ 329.726553][ C2] blk_print_req_error: 25 callbacks suppressed [ 329.726565][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 329.731407][ C2] buffer_io_error: 49208 callbacks suppressed [ 329.731420][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 329.739990][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 329.743099][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 329.746043][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 329.749593][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 329.753282][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 329.756543][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 329.761442][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 329.764339][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 329.766959][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 329.769817][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 329.773727][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 329.776666][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 329.779037][T19950] ldm_validate_partition_table(): Disk read failed. [ 329.781299][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 329.784472][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 329.787460][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 329.790319][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 329.792996][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 329.795949][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 329.798790][T19950] Dev loop6: unable to read RDB block 0 [ 329.801973][T19950] loop6: unable to read partition table [ 329.804769][T19950] loop6: partition table beyond EOD, truncated [ 329.807435][T19950] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 329.829963][T19950] netlink: zone id is out of range [ 329.831780][T19950] netlink: zone id is out of range [ 329.833306][T19950] netlink: zone id is out of range [ 329.834811][T19950] netlink: zone id is out of range [ 329.836986][T19950] netlink: zone id is out of range [ 329.839009][T19950] netlink: zone id is out of range [ 329.841056][T19950] netlink: zone id is out of range [ 329.842912][T19950] netlink: zone id is out of range [ 329.860342][T19950] bpq0: entered promiscuous mode [ 329.866837][T19950] veth1_to_team: left promiscuous mode [ 330.171697][T19962] tmpfs: Unknown parameter 'mpZ(refer:0' [ 330.373298][T19966] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3886'. [ 330.501435][T19968] kvm: kvm [19967]: vcpu0, guest rIP: 0x5408d Unhandled WRMSR(0x40000057) = 0x8 [ 330.501492][T19973] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3888'. [ 330.507594][T19973] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3888'. [ 330.521092][T19973] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3888'. [ 330.655261][ T40] kauditd_printk_skb: 3738 callbacks suppressed [ 330.655274][ T40] audit: type=1400 audit(2000524405.666:51103): avc: denied { read write } for pid=17350 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 330.678104][ T40] audit: type=1400 audit(2000524405.666:51104): avc: denied { read write open } for pid=17350 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 330.696913][ T40] audit: type=1400 audit(2000524405.666:51105): avc: denied { ioctl } for pid=17350 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 330.706304][ T40] audit: type=1400 audit(2000524405.694:51106): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=60838 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 330.715441][ T40] audit: type=1400 audit(2000524405.694:51107): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=60838 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 330.721548][T19983] Cannot find add_set index 65532 as target [ 330.724107][ T40] audit: type=1400 audit(2000524405.694:51108): avc: denied { recv } for pid=5837 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=60838 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 330.733405][T19984] Cannot find add_set index 65532 as target [ 330.735349][ T40] audit: type=1400 audit(2000524405.704:51109): avc: denied { recv } for pid=5837 comm="sshd-session" saddr=127.0.0.1 src=60838 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 330.745889][ T40] audit: type=1400 audit(2000524405.704:51110): avc: denied { recv } for pid=5837 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=60838 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 330.754721][ T40] audit: type=1400 audit(2000524405.704:51111): avc: denied { recv } for pid=5837 comm="sshd-session" saddr=10.0.2.2 src=43892 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 330.763131][ T40] audit: type=1400 audit(2000524405.704:51112): avc: denied { recv } for pid=5837 comm="sshd-session" saddr=10.0.2.2 src=43892 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 330.966535][T20003] xfrm0 speed is unknown, defaulting to 1000 [ 330.970321][T20003] lo speed is unknown, defaulting to 1000 [ 331.597004][T20034] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 331.599470][T20034] SELinux: failed to load policy [ 331.618773][T20035] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 331.958680][T20059] netlink: 'syz.8.3908': attribute type 1 has an invalid length. [ 331.984434][T20059] 8021q: adding VLAN 0 to HW filter on device bond5 [ 331.988336][T20059] bond4: (slave bond5): making interface the new active one [ 331.991196][T20059] bond4: (slave bond5): Enslaving as an active interface with an up link [ 332.002119][T20059] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 332.009960][T20059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=20059 comm=syz.8.3908 [ 332.038466][T20061] overlay: filesystem on ./file0 not supported as upperdir [ 332.633965][T20091] netlink: 'syz.8.3916': attribute type 6 has an invalid length. [ 332.808106][ T5289] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 333.038435][T20102] syzkaller0: entered promiscuous mode [ 333.040489][T20102] syzkaller0: entered allmulticast mode [ 333.062908][T20103] program syz.3.3920 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.045899][ T6897] net_ratelimit: 9 callbacks suppressed [ 334.045918][ T6897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.306601][T20157] bond1: ARP target 4.0.0.0 is already present [ 334.306619][T20157] bond1: option arp_ip_target: invalid value (4) [ 334.317587][T20157] bond1 (unregistering): Released all slaves [ 334.350874][T20159] cgroup: Unknown subsys name 'cpuset' [ 334.366317][T20163] __nla_validate_parse: 21 callbacks suppressed [ 334.366328][T20163] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3938'. [ 334.448224][T20165] netlink: 'syz.3.3940': attribute type 8 has an invalid length. [ 334.669691][T20173] nfs4: Unknown parameter 'NoaR' [ 334.725431][ T6470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.413143][ T9740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.696431][T20229] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3955'. [ 335.742963][T20232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=20232 comm=syz.9.3956 [ 335.749448][T20232] netlink: 208240 bytes leftover after parsing attributes in process `syz.9.3956'. [ 336.031828][ T40] kauditd_printk_skb: 1938 callbacks suppressed [ 336.031841][ T40] audit: type=1400 audit(2000524410.695:53051): avc: denied { create } for pid=20243 comm="syz.9.3959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 336.039352][ T40] audit: type=1400 audit(2000524410.695:53052): avc: denied { recv } for pid=5838 comm="syz-executor" saddr=127.0.0.1 src=60838 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 336.050593][ T40] audit: type=1400 audit(2000524410.695:53053): avc: denied { write } for pid=20243 comm="syz.9.3959" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 336.063280][ T40] audit: type=1400 audit(2000524410.695:53054): avc: denied { write open } for pid=20243 comm="syz.9.3959" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 336.082797][ T40] audit: type=1400 audit(2000524410.695:53055): avc: denied { ioctl } for pid=20243 comm="syz.9.3959" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 336.083566][T20248] loop5: detected capacity change from 0 to 7 [ 336.098896][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 336.104284][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 336.106346][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 336.106616][ T6897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.110963][ T40] audit: type=1400 audit(2000524410.695:53056): avc: denied { recv } for pid=5837 comm="sshd-session" saddr=10.0.2.2 src=43892 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 336.111789][T20248] Dev loop5: unable to read RDB block 7 [ 336.125676][ T40] audit: type=1400 audit(2000524410.695:53057): avc: denied { ioctl } for pid=20243 comm="syz.9.3959" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 336.127663][T20248] loop5: unable to read partition table [ 336.139033][ T40] audit: type=1400 audit(2000524410.695:53058): avc: denied { mounton } for pid=20243 comm="syz.9.3959" path="/181/file0" dev="tmpfs" ino=992 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 336.139240][T20248] loop5: partition table beyond EOD, truncated [ 336.151754][ T40] audit: type=1400 audit(2000524410.705:53059): avc: denied { read write } for pid=13492 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 336.161068][ T40] audit: type=1400 audit(2000524410.705:53060): avc: denied { read write open } for pid=13492 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 336.171577][T20248] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 336.443519][T20265] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.3964'. [ 336.449481][T20268] netlink: 'syz.3.3964': attribute type 39 has an invalid length. [ 336.533453][ T5289] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 336.537568][ T5289] Bluetooth: hci0: Injecting HCI hardware error event [ 336.542471][ T5289] Bluetooth: hci0: hardware error 0x00 [ 336.723577][T20288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3969'. [ 336.737740][T20288] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3969'. [ 336.840061][T20291] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3970'. [ 336.844423][T20291] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3970'. [ 336.923063][T20304] fuse: Bad value for 'fd' [ 336.926759][T20300] cgroup: none used incorrectly [ 337.072102][T20311] xt_hashlimit: size too large, truncated to 1048576 [ 337.397801][T20323] Mount JFS Failure: -22 [ 337.693252][T20334] netlink: 'syz.2.3982': attribute type 29 has an invalid length. [ 337.697572][T20334] netlink: 'syz.2.3982': attribute type 29 has an invalid length. [ 337.704105][T20334] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3982'. [ 337.973372][T20342] binder: 20341:20342 ioctl c018620c 200000000400 returned -22 [ 338.251990][T20357] dlm: no locking on control device [ 338.486906][T20378] xfrm0 speed is unknown, defaulting to 1000 [ 338.489776][T20378] lo speed is unknown, defaulting to 1000 [ 338.571390][T20387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3998'. [ 338.574190][T20387] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 338.597768][T20391] [ 338.598573][T20391] ====================================================== [ 338.600853][T20391] WARNING: possible circular locking dependency detected [ 338.603100][T20391] syzkaller #0 Tainted: G L [ 338.605098][T20391] ------------------------------------------------------ [ 338.607389][T20391] syz.2.3997/20391 is trying to acquire lock: [ 338.609336][T20391] ffff88803d726868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 338.611922][T20391] [ 338.611922][T20391] but task is already holding lock: [ 338.614135][T20391] ffff88802f72e420 (sb_writers#6){.+.+}-{0:0}, at: __do_splice+0x33b/0x370 [ 338.616849][T20391] [ 338.616849][T20391] which lock already depends on the new lock. [ 338.616849][T20391] [ 338.620083][T20391] [ 338.620083][T20391] the existing dependency chain (in reverse order) is: [ 338.622872][T20391] [ 338.622872][T20391] -> #4 (sb_writers#6){.+.+}-{0:0}: [ 338.625202][T20391] mnt_want_write+0x6f/0x450 [ 338.626811][T20391] ovl_set_acl+0x43c/0xa70 [ 338.628366][T20391] set_posix_acl+0x263/0x320 [ 338.629979][T20391] vfs_set_acl+0x468/0x900 [ 338.631553][T20391] do_set_acl+0x14c/0x1a0 [ 338.633106][T20391] do_setxattr+0xeb/0x180 [ 338.634666][T20391] filename_setxattr+0x16e/0x1d0 [ 338.636433][T20391] path_setxattrat+0x1ff/0x3a0 [ 338.638093][T20391] __x64_sys_setxattr+0xc6/0x140 [ 338.639830][T20391] do_syscall_64+0xc9/0xf80 [ 338.641431][T20391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.643461][T20391] [ 338.643461][T20391] -> #3 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 338.646189][T20391] down_read+0x99/0x460 [ 338.647696][T20391] lookup_slow+0x42/0x70 [ 338.649200][T20391] path_lookupat+0x5e8/0xc40 [ 338.650821][T20391] filename_lookup+0x202/0x590 [ 338.652493][T20391] kern_path+0x35/0x50 [ 338.653957][T20391] lookup_bdev+0xd8/0x280 [ 338.655595][T20391] resume_store+0x1d6/0x460 [ 338.657177][T20391] kobj_attr_store+0x58/0x80 [ 338.658777][T20391] sysfs_kf_write+0xf2/0x150 [ 338.660385][T20391] kernfs_fop_write_iter+0x3e0/0x5f0 [ 338.662222][T20391] vfs_write+0x6ac/0x1070 [ 338.663777][T20391] ksys_write+0x12a/0x250 [ 338.665345][T20391] do_syscall_64+0xc9/0xf80 [ 338.666941][T20391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.668957][T20391] [ 338.668957][T20391] -> #2 (&of->mutex){+.+.}-{4:4}: [ 338.671208][T20391] __mutex_lock+0x1a2/0x1b90 [ 338.672834][T20391] kernfs_seq_start+0x4f/0x2a0 [ 338.674484][T20391] seq_read_iter+0x2c1/0x1270 [ 338.676155][T20391] kernfs_fop_read_iter+0x46c/0x610 [ 338.677913][T20391] vfs_read+0x825/0xb30 [ 338.679415][T20391] ksys_read+0x12a/0x250 [ 338.680904][T20391] do_syscall_64+0xc9/0xf80 [ 338.682472][T20391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.684489][T20391] [ 338.684489][T20391] -> #1 (&p->lock){+.+.}-{4:4}: [ 338.686679][T20391] __mutex_lock+0x1a2/0x1b90 [ 338.688265][T20391] seq_read_iter+0xe1/0x1270 [ 338.689860][T20391] proc_reg_read_iter+0x220/0x310 [ 338.691562][T20391] copy_splice_read+0x4ba/0xb90 [ 338.693203][T20391] do_splice_read+0x285/0x370 [ 338.694839][T20391] splice_file_to_pipe+0x82/0x120 [ 338.696512][T20391] do_sendfile+0x366/0xe20 [ 338.698059][T20391] __x64_sys_sendfile64+0x1d8/0x220 [ 338.699837][T20391] do_syscall_64+0xc9/0xf80 [ 338.701429][T20391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.703464][T20391] [ 338.703464][T20391] -> #0 (&pipe->mutex){+.+.}-{4:4}: [ 338.705789][T20391] __lock_acquire+0x14b8/0x2630 [ 338.707492][T20391] lock_acquire+0x17c/0x330 [ 338.709094][T20391] __mutex_lock+0x1a2/0x1b90 [ 338.710729][T20391] pipe_lock+0x69/0x80 [ 338.712237][T20391] iter_file_splice_write+0x1f8/0x10a0 [ 338.714132][T20391] do_splice+0x109c/0x1fd0 [ 338.715694][T20391] __do_splice+0x33b/0x370 [ 338.717255][T20391] __x64_sys_splice+0x187/0x250 [ 338.718963][T20391] do_syscall_64+0xc9/0xf80 [ 338.720562][T20391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.722577][T20391] [ 338.722577][T20391] other info that might help us debug this: [ 338.722577][T20391] [ 338.725772][T20391] Chain exists of: [ 338.725772][T20391] &pipe->mutex --> &ovl_i_mutex_dir_key[depth] --> sb_writers#6 [ 338.725772][T20391] [ 338.729945][T20391] Possible unsafe locking scenario: [ 338.729945][T20391] [ 338.732280][T20391] CPU0 CPU1 [ 338.733961][T20391] ---- ---- [ 338.735667][T20391] rlock(sb_writers#6); [ 338.737001][T20391] lock(&ovl_i_mutex_dir_key[depth]); [ 338.739482][T20391] lock(sb_writers#6); [ 338.741563][T20391] lock(&pipe->mutex); [ 338.742996][T20391] [ 338.742996][T20391] *** DEADLOCK *** [ 338.742996][T20391] [ 338.745470][T20391] 1 lock held by syz.2.3997/20391: [ 338.747064][T20391] #0: ffff88802f72e420 (sb_writers#6){.+.+}-{0:0}, at: __do_splice+0x33b/0x370 [ 338.747948][ T5289] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 338.749853][T20391] [ 338.749853][T20391] stack backtrace: [ 338.749864][T20391] CPU: 3 UID: 0 PID: 20391 Comm: syz.2.3997 Tainted: G L syzkaller #0 PREEMPT(full) [ 338.749879][T20391] Tainted: [L]=SOFTLOCKUP [ 338.749883][T20391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.749890][T20391] Call Trace: [ 338.749894][T20391] [ 338.749899][T20391] dump_stack_lvl+0x100/0x190 [ 338.749914][T20391] print_circular_bug.cold+0x178/0x1c7 [ 338.749931][T20391] check_noncircular+0x146/0x160 [ 338.749950][T20391] __lock_acquire+0x14b8/0x2630 [ 338.749961][T20391] ? __do_splice+0x33b/0x370 [ 338.749977][T20391] ? __x64_sys_splice+0x187/0x250 [ 338.749992][T20391] lock_acquire+0x17c/0x330 [ 338.750001][T20391] ? pipe_lock+0x69/0x80 [ 338.750014][T20391] ? __pfx___might_resched+0x10/0x10 [ 338.750029][T20391] __mutex_lock+0x1a2/0x1b90 [ 338.750041][T20391] ? pipe_lock+0x69/0x80 [ 338.750053][T20391] ? pipe_lock+0x69/0x80 [ 338.750066][T20391] ? __pfx___mutex_lock+0x10/0x10 [ 338.750080][T20391] ? rcu_is_watching+0x12/0xc0 [ 338.750093][T20391] ? iter_file_splice_write+0x1d3/0x10a0 [ 338.750107][T20391] ? trace_kmalloc+0x83/0xb0 [ 338.750120][T20391] ? __kmalloc_noprof+0x365/0x9c0 [ 338.750131][T20391] ? pipe_lock+0x69/0x80 [ 338.750143][T20391] pipe_lock+0x69/0x80 [ 338.750155][T20391] iter_file_splice_write+0x1f8/0x10a0 [ 338.750169][T20391] ? preempt_schedule_thunk+0x16/0x30 [ 338.750181][T20391] ? preempt_schedule_common+0x42/0xc0 [ 338.750193][T20391] ? __pfx_iter_file_splice_write+0x10/0x10 [ 338.750207][T20391] ? __lock_acquire+0x4a5/0x2630 [ 338.750217][T20391] ? __pfx_try_to_wake_up+0x10/0x10 [ 338.750232][T20391] ? find_held_lock+0x2b/0x80 [ 338.750249][T20391] ? __pfx_iter_file_splice_write+0x10/0x10 [ 338.750263][T20391] do_splice+0x109c/0x1fd0 [ 338.750277][T20391] ? __lock_acquire+0x4a5/0x2630 [ 338.750288][T20391] ? __pfx_do_splice+0x10/0x10 [ 338.750301][T20391] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 338.750314][T20391] ? find_held_lock+0x2b/0x80 [ 338.750328][T20391] __do_splice+0x33b/0x370 [ 338.750342][T20391] ? __pfx___do_splice+0x10/0x10 [ 338.750357][T20391] __x64_sys_splice+0x187/0x250 [ 338.750372][T20391] do_syscall_64+0xc9/0xf80 [ 338.750385][T20391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.750399][T20391] RIP: 0033:0x7fdf4159aeb9 [ 338.750414][T20391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.750428][T20391] RSP: 002b:00007fdf3f7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 338.750441][T20391] RAX: ffffffffffffffda RBX: 00007fdf41815fa0 RCX: 00007fdf4159aeb9 [ 338.750451][T20391] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000006 [ 338.750459][T20391] RBP: 00007fdf41608c1f R08: 00000000088000cc R09: 0000000000000000 [ 338.750468][T20391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.750476][T20391] R13: 00007fdf41816038 R14: 00007fdf41815fa0 R15: 00007ffdd3803208 [ 338.750491][T20391] [ 338.753624][T20396] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 338.846717][T20396] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 338.940300][T20394] delete_channel: no stack [ 340.214272][ T6470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.887444][ T9747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.890079][T15036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.908953][ T40] kauditd_printk_skb: 1829 callbacks suppressed [ 341.908970][ T40] audit: type=1400 audit(2000524416.182:54890): avc: denied { search } for pid=20418 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.920893][ T40] audit: type=1400 audit(2000524416.191:54891): avc: denied { search } for pid=20418 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1897 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.928026][ T40] audit: type=1400 audit(2000524416.191:54892): avc: denied { search } for pid=20418 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.936200][ T40] audit: type=1400 audit(2000524416.191:54893): avc: denied { search } for pid=20418 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.943281][ T40] audit: type=1400 audit(2000524416.201:54894): avc: denied { search } for pid=20419 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.944348][T20419] audit: audit_backlog=65 > audit_backlog_limit=64 [ 341.951152][ T40] audit: type=1400 audit(2000524416.201:54895): avc: denied { search } for pid=20419 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1897 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.952092][T20419] audit: audit_lost=258 audit_rate_limit=0 audit_backlog_limit=64 [ 341.959830][ T40] audit: type=1400 audit(2000524416.201:54896): avc: denied { search } for pid=20419 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.961504][T20419] audit: backlog limit exceeded [ 342.256678][ T6897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.279245][ T9740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.366085][ T6470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.050541][ T9747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.745533][ T9747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.746424][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog