last executing test programs: 8m57.310001049s ago: executing program 32 (id=792): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x280) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000280)={0x520c, 0x650, 0x1, 0x8, 0xce86, 0x3ff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x24048001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x3b, 0x301, 0x70bd27, 0x25dfdbfc, {0x1}}, 0x14}}, 0x1) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='vxfs\x00', 0x208000, 0x0) syz_80211_inject_frame(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="d038b400f7ffffffffffffffffffffff50505050505087000d0182624701010100000008021100000000380b002600000000000000014d0d000000ffffffffffff0300000001080211000001c5e800ff7f0000000000000800000004080211000001092c000004ffffffffffff010000007e150309630802110000004e7b000002"], 0x95) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x2, 0x0, 0x41b}}}, 0x2) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000bb3000/0x1000)=nil) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_delrule={0x24, 0x21, 0x1, 0x70bd06, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x6}]}, 0x24}}, 0x20000000) 7m19.3151169s ago: executing program 33 (id=1601): socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'ip6erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}) r1 = socket$kcm(0x10, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x4000080) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4c040) 6m0.087577563s ago: executing program 34 (id=2135): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x8, @empty, 0x9}}, 0xffff85e0, 0x0, 0x10403, 0x4, 0x22}, 0x9c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$l2tp6(0xa, 0x2, 0x73) recvmmsg(r5, &(0x7f0000000280)=[{{&(0x7f0000000300)=@nl, 0x80, 0x0}, 0x8}], 0x1, 0x2100, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="39c394e534ecf02e7e0e9ca208004b54", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x95, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 3m18.104364995s ago: executing program 3 (id=3495): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000040)) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x3}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x5) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$XFS_IOC_READLINK_BY_HANDLE(r1, 0xc038586c, &(0x7f0000000280)={r2, &(0x7f0000000180)='*\\&]\x00', 0x40, &(0x7f00000001c0)={@align=0x8000000, {0x3, 0x81, 0x9, 0x1200}}, 0xf, &(0x7f0000000200), &(0x7f0000000240)=0x6}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x7, 0x10, 0xf, 0x0, {{0x33, 0x4, 0x0, 0x3, 0xcc, 0x64, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1, {[@cipso={0x86, 0x11, 0x2, [{0x5, 0x9, "05b91533beb3bb"}, {0x5, 0x2}]}, @timestamp_prespec={0x44, 0xc, 0x61, 0x3, 0x7, [{@rand_addr=0x64010100, 0xf8}]}, @noop, @noop, @rr={0x7, 0x13, 0x61, [@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x2c, 0x2, [{0x2, 0xa, "c3a573b20e7621c4"}, {0x6, 0x6, "01a78137"}, {0x5, 0x6, "43d27c6e"}, {0x0, 0xc, "bf649f532f25f7789f2b"}, {0x6, 0x4, "6486"}]}, @timestamp_prespec={0x44, 0x24, 0xe5, 0x3, 0x3, [{@rand_addr=0x64010100, 0x4}, {@local, 0x10}, {@multicast2, 0x6}, {@loopback, 0x5}]}, @cipso={0x86, 0x15, 0x3, [{0x5, 0x7, "5ac60e0364"}, {0x5, 0x8, "90a89629e4c7"}]}, @lsrr={0x83, 0x1f, 0x94, [@empty, @empty, @multicast1, @remote, @rand_addr=0x64010101, @multicast1, @empty]}, @end]}}}}}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@newchain={0x3c, 0x64, 0x20, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x2, 0xc}, {0xfff2, 0xd}, {0x0, 0xf}}, [@f_rsvp={{0x9}, {0xc, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @multicast2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000500)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x665}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040000}, 0x840) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GPU_INFO(r1, 0xc0106440, &(0x7f0000000740)={0x0, 0x100, &(0x7f00000006c0)}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x18, 0x1407, 0x800, 0x5, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40005) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x38, r5, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xe, 0x77}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r6 = accept$unix(r0, &(0x7f00000009c0), &(0x7f0000000a40)=0x6e) recvmmsg$unix(r6, &(0x7f0000002c80)=[{{&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/11, 0xb}, {&(0x7f0000000b40)=""/18, 0x12}, {&(0x7f0000000b80)=""/136, 0x88}, {&(0x7f0000000c40)=""/194, 0xc2}, {&(0x7f0000000d40)=""/53, 0x35}, {&(0x7f0000000d80)=""/181, 0xb5}, {&(0x7f0000000e40)=""/43, 0x2b}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/252, 0xfc}], 0x9, &(0x7f0000002040)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002140)=""/40, 0x28}, {&(0x7f0000002180)=""/109, 0x6d}, {&(0x7f0000002200)=""/92, 0x5c}, {&(0x7f0000002280)=""/236, 0xec}, {&(0x7f0000002380)=""/136, 0x88}], 0x5}}, {{&(0x7f00000024c0), 0x6e, &(0x7f0000002580)=[{&(0x7f0000002540)=""/55, 0x37}], 0x1, &(0x7f00000025c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000002600), 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000002680)=""/101, 0x65}, {&(0x7f0000002700)=""/121, 0x79}, {&(0x7f0000002780)=""/54, 0x36}, {&(0x7f00000027c0)=""/196, 0xc4}, {&(0x7f00000028c0)=""/163, 0xa3}, {&(0x7f0000002980)=""/68, 0x44}, {&(0x7f0000002a00)=""/189, 0xbd}, {&(0x7f0000002ac0)=""/219, 0xdb}], 0x8, &(0x7f0000002c40)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x10000, &(0x7f0000002d80)={0x77359400}) sendmsg$RDMA_NLDEV_CMD_RES_GET(r10, &(0x7f0000002e80)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x20, 0x1409, 0x200, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x4008000) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x4000010, r9, 0x0) r12 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002ec0), 0x10002, 0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r14 = landlock_create_ruleset(&(0x7f0000002f00)={0x440, 0x2, 0x2}, 0x18, 0x4) syz_io_uring_submit(r11, 0x0, &(0x7f0000002f40)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r12, 0x0, 0x0, 0x8, 0x4, 0x1, {0x0, r13, r14}}) r15 = accept$unix(r7, &(0x7f0000002f80), &(0x7f0000003000)=0x6e) r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000003080), r8) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000003140)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003100)={&(0x7f00000030c0)={0x40, r16, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x200000c4) ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f0000003180)={'veth1_to_team\x00', @remote}) syz_usb_connect$cdc_ncm(0x5, 0x77, &(0x7f00000031c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x0, 0x10, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "b4a8"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1, 0x101, 0x3}, {0x6, 0x24, 0x1a, 0x401, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x9, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xf, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x2, 0x6, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x8, 0x7, 0x62}}}}}}}]}}, &(0x7f0000003540)={0xa, &(0x7f0000003240)={0xa, 0x6, 0x310, 0x6, 0x15, 0x8, 0x40, 0x1}, 0x65, &(0x7f0000003280)={0x5, 0xf, 0x65, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x57, 0x10, 0xb, "3ab27024cd09b1d62e5a06f4a9b48c784db513f2909febd61eef3e4d64df958a1adf612b9a88bd22a3d0acc256724a5218fcfb6204d2730aab9c872c09e9a6c7a915d8d505610150d0d64c1a44785beaa2ef3b73"}, @ptm_cap={0x3}]}, 0x6, [{0xbf, &(0x7f0000003300)=@string={0xbf, 0x3, "1e266ad82f81e7f53194b00a407db031d67dd07af7b7adf2b9e6421fcbddf71012beec66e32d86459cd68df3f31cd720ac5cedbb42fc8441d4068cfb99515fff55ee2e2e87946c8c8e22a7adff84ce13fd050e0daef23ba7979efea27094128cf0600d5668c9430c753adf24f6cc46ffb9bf254bcce250eb1ffee74eedbea5922918512d061a049e023e28b4e232e09b9d0658190c6c08dce7c886bfa7632d67664f939a1cac66a1c5a0da2745c9d0059fc204589d9f1c7effc6b0feb2"}}, {0x4, &(0x7f00000033c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000003400)=@lang_id={0x4, 0x3, 0x418}}, {0x68, &(0x7f0000003440)=@string={0x68, 0x3, "ab351887464de7037c08c156e4adca36529af6a37d47278b5dc8658fb722f901217863ffad8cdfa31284f2f3ca36ff98fe8d67ac2c1952859df3060495e1117bf718b8c97856360788ecc0ac0af7c4cb25abf4d4911d68f6f996f30a84baa7f675fcbc8c4be5"}}, {0x1e, &(0x7f00000034c0)=@string={0x1e, 0x3, "4f7314904d4cdba9ba2dee98ff2b7d52ceea97f7e882191ea33a7ade"}}, {0x4, &(0x7f0000003500)=@lang_id={0x4}}]}) mmap$snddsp_control(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe, 0x198910, r9, 0x83000000) ioctl$FITHAW(r15, 0xc0045878) sendmsg$MPTCP_PM_CMD_REMOVE(r7, &(0x7f0000003680)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003640)={&(0x7f0000003600)={0x2c, r4, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000810}, 0x1) 3m16.468779272s ago: executing program 3 (id=3514): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x88, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x10001, 0x42}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x4040804) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000ed360f01c4b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x61}], 0xaaaac98, 0x4, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0x10}], 0x1}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg(r7, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x20008004) setsockopt$sock_int(r7, 0x1, 0x1, &(0x7f0000000300)=0xf6a, 0x4) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCFLSH(r8, 0x540b, 0x0) write$UHID_INPUT(r8, &(0x7f00000011c0)={0xfc, {"a483885aed0d09f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f073063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801118c20b8f16bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399ea4727d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a040200b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a64002bebc2407aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef64ab253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bf068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827475e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcb32b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba36b37767b6b45a44957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b94025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b03512629f46366e7205dd8d6f37525c1a0e94210dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9154f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d603994732d6b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21396532713e5b69cf767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285e6a89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeaf1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b627cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e46a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5c92441918145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed608000000a006e39336d07c2b80817a28ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030f81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c00004f5d374755534d7f68f679c4ff516e9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00", 0x1000}}, 0xffbc) 3m15.730390042s ago: executing program 3 (id=3523): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = fanotify_init(0x1a, 0x800) memfd_create(&(0x7f0000000000)='/dev/kvm\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r3, 0x441, 0x4800001a, r4, 0x0) fanotify_mark(r3, 0x1, 0x20, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000480)={"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"}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000630173100000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2f}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m15.137118164s ago: executing program 3 (id=3527): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_dellink={0x2c, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x8400, 0x40000}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001000030429bd7000fbdbdf2500000000", @ANYRESDEC=r2, @ANYBLOB="2a5273ae2d96a4044859e3378800a60000801400030062726964676530000000", @ANYBLOB="f6ec4a8147ad95b0d4f52396bcaaa3cda616a242de5bdf75a6231bccc13ab3364a600f71d415b67ba7c391f5f723d86233fb60f01e4a7e9d548cc2efe000", @ANYRESOCT=r2, @ANYRESOCT=r2, @ANYRES16=r2], 0x38}}, 0x20048000) 3m14.670213789s ago: executing program 3 (id=3528): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff2424852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff0e0b5a293e3877adc1660edbc9a0307a25720a70e419dc44febf7ddc73fd4a5a0b6c28667f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a5ee0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b417354335f8cf20d0d96ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002100040026bd7000fedbdf25021420000300000814000000080049faac141403000000000440000005001300000000008c000c400000000000000006"], 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xc}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001040), 0x2201, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000001180)={0xdb, 0x1, 0x5, 0xcf, "10b6ceb9a7cfc6c67b640cf82a25e0bfbadd4acf44457656babe57081d7d66c3d674621ae16b26457b8ab2b0fc29fc3fafe6645ca4761b08ebe702099494ceeaea0b445a53548d012dd7a85777a2837b7f1d921d560359f5bd3bf134c690323e1e4d1a1d786c49995e43e124a1e7e061d50b20a859b4ce8516d3ba4cc79468d6426b614e1c1b7bcdb2c72b08409d0acc80c9fb5b71525f1186fdc2cf1236d9e2297517958c65c6a7f31ca8bbb70c512810f3d589688b93f04e033acab737cd475a78d0"}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 3m13.297879347s ago: executing program 3 (id=3534): r0 = fsopen(&(0x7f0000000040)='hpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r2 = fsmount(r1, 0x0, 0x0) (rerun: 32) fchdir(r2) (async) getsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) 3m12.771082253s ago: executing program 35 (id=3534): r0 = fsopen(&(0x7f0000000040)='hpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r2 = fsmount(r1, 0x0, 0x0) (rerun: 32) fchdir(r2) (async) getsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) 2m28.854483804s ago: executing program 5 (id=4010): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14}}, 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) 2m28.706687398s ago: executing program 5 (id=4011): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xf) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3b}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000280)="c0c2b45dbd24", 0x6}, {&(0x7f0000000040)="a43b2eaab4feffffff0088a89ce06b7e26dd", 0x12}], 0x2) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r7, 0x8, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x8040) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x10000004000, 0x1) ioctl$BLKTRACESTOP(r10, 0x2279, 0x0) ioctl$TCSETSW2(r9, 0x402c542c, &(0x7f0000000200)={0xf48, 0x0, 0xfffffe3f, 0x10000, 0x0, "4d0000000001000000fbd98ec08100", 0xfff, 0x800}) readv(r9, &(0x7f0000000240)=[{&(0x7f0000000140)=""/16, 0x10}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES16=r1, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x4002) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000002400032700000000fcffff5d4c890200", @ANYRES16, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRESDEC, @ANYBLOB="029000000080040008000a00", @ANYRES32=r8], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x20024894) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x84, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @private=0xa010103}}}, &(0x7f0000000300)=0x90) socket$nl_route(0x10, 0x3, 0x0) shmctl$IPC_RMID(0x0, 0x0) socket(0x10, 0x803, 0x4) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r12, &(0x7f00000028c0)={0x2020}, 0x2020) 2m28.385499651s ago: executing program 5 (id=4014): creat(&(0x7f0000000100)='./file0\x00', 0x24) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10, &(0x7f0000002340)=ANY=[@ANYBLOB="22fdbee1ff8c66643d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000400,\x00']) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x20849b, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000140)={0x4, [0x6, 0x0, 0xffffff2a], [{0x8, 0xe9, 0x0, 0x0, 0x0, 0x1}, {0x91f6, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x8, 0x1, 0x1, 0x0, 0x1}, {0x8f1, 0x1, 0x0, 0x0, 0x1, 0x1}, {0xb4, 0x1, 0x0, 0x0, 0x1}, {0x4, 0x8, 0x1, 0x0, 0x1, 0x1}, {0x1e, 0x2e, 0x0, 0x0, 0x1}, {0x5, 0x5, 0x0, 0x1, 0x0, 0x1}, {0xd1e, 0x6, 0x1, 0x0, 0x0, 0x1}, {0x2, 0xd1, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x76ce}, {0x3, 0xd022, 0x0, 0x1}], 0x9}) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, &(0x7f0000000100)='barrier') 2m28.377958205s ago: executing program 5 (id=4015): syz_open_dev$vcsa(&(0x7f0000000080), 0x4, 0x121400) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x4, 0x121400) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r1, @ANYBLOB="0400ff0f7000ffdbdf251d0000004400238005000f000600000005000600f700006bad55dae8db0331b8cb4b7604a89900050008000a00000006000300db00000005001d000100000005001e00000000000500130000000000060012000000000008000100510000000c002380050007000900000008000100140000000c009900400000000c0000000c009900000100004d00050008800100450000000c0099000080ffff25000000"], 0xa8}, 0x1, 0x0, 0x0, 0x10000081}, 0x4050) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0xf, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8490}, 0x80) recvmsg$can_raw(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000900)=""/110, 0x14}], 0x1}, 0x40000040) (async) recvmsg$can_raw(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000900)=""/110, 0x14}], 0x1}, 0x40000040) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x2200890, 0x0) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x2200890, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004882, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r5, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r4, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 2m28.087231722s ago: executing program 5 (id=4017): r0 = fanotify_init(0x2, 0x400) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, &(0x7f0000000500)={r6, r6, 0x93, 0x2, 0x2}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYRES64=r0, @ANYRES32=r4, @ANYBLOB="01f10500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x4011}, 0x40004) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x18) r8 = open(&(0x7f0000000680)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1e00000004000000010000000900000040100000", @ANYRES32=r8, @ANYBLOB="0200"/20, @ANYRESDEC=r3, @ANYRES32=r8, @ANYBLOB="1000000001000dcb15f000000e00"/28], 0x50) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) syz_pidfd_open(r9, 0x0) pidfd_send_signal(r8, 0x1d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0xfffff801}}, './file0\x00'}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000980)=ANY=[@ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="1100"/12, @ANYRES32, @ANYBLOB="25b519fff074cdec9d04e835f35cdac7de74044347c292bd739b5a4899692c62a9b14b99d95dd59f98140c86adc3022e832a33792fba8eed40d3800dffacd44fba1eebce6dcf25f8f85076f94959cb049045f64f7a756b5ea33d4c700a5eeeff3bb52fae1cb01cc59f1442eb11764d27f0f446cb5b258fb53ce9efca4cf2bfffb93b95ca7efbc236e9d81db089632d71a0ae3d6a0932e7193f076cd7ea5f9200aa744364cb3d454c0078d3", @ANYRES64=0x0], 0xa) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1=0xe000030a}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast2}}}], 0x20}}], 0x1, 0x80) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000780)=[@in6={0xa, 0x4e21, 0x6, @empty, 0x80000001}]}, &(0x7f0000000100)=0x10) r13 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000700), 0x224c00, 0x0) fsconfig$FSCONFIG_SET_FD(r13, 0x5, &(0x7f0000000740)='GPL\x00', 0x0, r7) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) r14 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_SUBDINFO(r14, 0x80486402, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000840)={r12, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x41, 0xd, 0x7, 0x4}, 0x9c) 2m27.45764821s ago: executing program 5 (id=4026): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'rose0\x00'}) kexec_load(0x0, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x5ffdd000, 0x3e0000}], 0x0) 2m27.389036471s ago: executing program 36 (id=4026): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'rose0\x00'}) kexec_load(0x0, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x5ffdd000, 0x3e0000}], 0x0) 1m22.597423741s ago: executing program 8 (id=4800): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0xffffffff8798ea50) r1 = epoll_create(0x7) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="20000000280001e5ff020000000000000e"], 0x20}], 0x1}, 0x20000040) r3 = epoll_create1(0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, &(0x7f0000000000), 0x4003) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0x980900}) r5 = epoll_create(0x7) r6 = socket(0x2c, 0x800, 0x118) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000370403000000f8dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="890c0400000000001c0012800900010069706970000000000c00028006000f0005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000140)={0x60000000}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x2, 0x0, 0x0, 0x7fff0026}]}) close_range(r7, 0xffffffffffffffff, 0x0) 1m22.531316306s ago: executing program 8 (id=4801): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='4'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x7, '\x00', r2, r3, 0x0, 0x0, 0x4}, 0x50) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1=0xac1414aa}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) 1m22.530835263s ago: executing program 8 (id=4802): r0 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x3c, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4c}]}, 0x3c}}, 0x20000000) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x3c, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4c}]}, 0x3c}}, 0x20000000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) mq_timedsend(r4, &(0x7f0000000080)="22064140740b8cbc6086", 0xa, 0x7fff, &(0x7f0000000100)) readv(r4, &(0x7f0000000040)=[{&(0x7f0000004980)=""/4096, 0x1000}, {&(0x7f0000000000)=""/45, 0x2d}], 0x2) (async) readv(r4, &(0x7f0000000040)=[{&(0x7f0000004980)=""/4096, 0x1000}, {&(0x7f0000000000)=""/45, 0x2d}], 0x2) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000000)={0x0, 0xb8, 0x2, &(0x7f00000004c0)={0xfa, "f4e1a230be8f46463fb1a5f1b46f44eaa25e485b747a07678118bc00"}}) 1m22.29575359s ago: executing program 8 (id=4807): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_UNLINKAT={0x24, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}) io_uring_enter(r2, 0x46f3, 0x0, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='reno', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000240)='./file0\x00') sendto$inet(r1, &(0x7f0000000340)="8995b3c271bab84f6e841cd28301f2e02519276836b2ab14ba300f39a71758d74d011771db342aa6df71dc54faabe6ccc2dae1fdf17d4c74618af0", 0x3b, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x328, 0xa, 0xd0e0000, 0x328, 0x100, 0x450, 0x1d8, 0x1d8, 0x450, 0x1d8, 0x3, 0x0, {[{{@ip={@local, @loopback, 0xffffffff, 0xff, 'batadv0\x00', 'erspan0\x00', {0xff}, {0xff}, 0x1, 0x3, 0x10}, 0x0, 0x2c8, 0x328, 0x0, {}, [@common=@unspec=@state={{0x28}, {0xfff}}, @common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x7008, 0x4, [0x22, 0x36, 0x16, 0x35, 0x14, 0x8, 0x3, 0x8, 0x1f, 0x6, 0x2b, 0x3c, 0xc, 0x2d, 0x15, 0x3e], 0x2, 0xb, 0x7}}}, {{@uncond, 0x3202, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x7, 0x8001, 0x1, 'pptp\x00', 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 1m21.358939448s ago: executing program 8 (id=4823): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x4, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={'nr', 0x0}, 0xf43, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, 0x8, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x2d8, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@loopback, @remote, 0xffffff00, 0xffffffff, 'macvlan1\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x5c, 0x1, 0x20}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@socket1={{0x28}, 0x1}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x4, 0xe, [0x3d, 0x14, 0x32, 0xe, 0x34, 0x32, 0x1, 0x3b, 0xa, 0x7, 0x23, 0x6, 0x8, 0x21, 0x28, 0x1a], 0x0, 0x4, 0xb}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0xc, "d4c0fdf27060ae3b9ba55d6e877b090cd7820050e3fc954ee920de70ebac"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@empty, @broadcast, 0xffffffffffffffff, "56cad7af2bd1ea680affbcf59ff246fe3c2b7500782f7b39e1b719e7e922a1b5", 0xffffffc0, 0x1, 0xf, 0xfffffff7}, 0x3c) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000840)=@gettfilter={0x5c, 0x2e, 0x400, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xffe7}, {0x5, 0x8}, {0x4, 0x6}}, [{0x8, 0xb, 0x485}, {0x8, 0xb, 0xb}, {0x8, 0xb, 0xec}, {0x8, 0xb, 0x10001}, {0x8, 0xb, 0x8000000}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x80000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x55) umount2(&(0x7f00000002c0)='./file0\x00', 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x41, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="44000000e2e552c5cb8baa24e32b4c87aa5589dac4bca0b7afaeea8ebd29ee74fc5b2333ff1b234986e457df73ac8e188a4e71b69f94956535a2ebaa992d06470d633f3eef8fce480cf24fc4df557ebb8673a14e492d19cd2b3e0da425b457b252eead270abe1d75d899dc09228563aa2fe1f1989a609adf5999010400003ad56143f8620845c103000000000000005db9e7ec2d45e252a382bab7f7d39e21940850d537613805cf6bba081bcfae10240b85c93af884a0f09225581c177b4126a58139b31e9b40a00fc145022e939ca018d9e98e97dc60d400000000", @ANYRES16=r8, @ANYBLOB="00082dbd7000fedbdf2502000000080019000a01010105000d0000000000050021000000000006001d000200000008000c00010000000800180000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40008086}, 0x0) 1m21.071928972s ago: executing program 8 (id=4828): r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000080)=0x2, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a40300001e0a05010000000000000000070000070900020073797a31000000000900010073797a300000000078030380740300800800034000000002680301"], 0x428}}, 0x40088) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 1m20.997194529s ago: executing program 37 (id=4828): r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000080)=0x2, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a40300001e0a05010000000000000000070000070900020073797a31000000000900010073797a300000000078030380740300800800034000000002680301"], 0x428}}, 0x40088) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 1m2.740001014s ago: executing program 1 (id=5093): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80043, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000080)={0x20, 0x0, &(0x7f0000000040)=[{0x0, 0x2}], 0xdeadbeef, 0x8, 0x1}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002800), 0x541480, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r1, 0x3b8b, &(0x7f00000028c0)={0x10, 0x1}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x9913}}, './file0\x00'}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000100)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000140)={0x48, 0x1, r3, 0x0, 0x1ff, 0xffffffffffffbfa6}) fcntl$getown(r1, 0x9) 1m2.73869853s ago: executing program 1 (id=5095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="29003abd7000ffdbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="f4e8ddde2ed8634f3f9c05002e"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000071, 0x0, 0xc0300}]}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10060}, 0xc, &(0x7f0000000640)={&(0x7f0000000a80)=ANY=[@ANYBLOB="30010000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r2, @ANYBLOB="440001801400020067656e65766531000000000000000000080003000300000008000100", @ANYRES32=r2, @ANYBLOB="140002007465616d30000000000000000000000008000300010000006400018008000100", @ANYRES32=r2, @ANYBLOB="080003000100000008000100", @ANYRES32=r2, @ANYBLOB="14000200726f736530000000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="140002006261746164763000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="080003000300000054000180140002007465616d30000000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="08000300020000001400020076657468315f746f5f68737200000000080003000200000008000300020000000800030001000000"], 0x130}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000070c002c2bfcfe800000000000e7106d7e00000000aafe8000000000000000000000000000aa000004000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9000000090780000fe05f989901e030dfe06e2d4c3d90100"], 0x0) preadv(r9, &(0x7f0000000000)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="7dd1c7af", @ANYRES16=r10, @ANYBLOB="01002cbd7000fddbdf25100000004c0007800c000300030000000000000008000200050000000c000400f07a000000000000080002000400000008000200010000000c00040000000000000000000c0004000200000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 1m2.664853003s ago: executing program 1 (id=5101): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x13}}}}}]}}]}}, 0x0) (async) r2 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x13}}}}}]}}]}}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) cachestat(r3, &(0x7f0000000200)={0x8, 0x55}, &(0x7f0000000240), 0x0) (async) cachestat(r3, &(0x7f0000000200)={0x8, 0x55}, &(0x7f0000000240), 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000000c0)={0xffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x4}}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x604, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000200)={{0x4, 0x3}, 'port0\x00', 0x9, 0x68, 0x6, 0x7fff, 0xda78, 0x1, 0x3ff, 0x0, 0x7, 0x7}) read$FUSE(r5, &(0x7f00000034c0)={0x2020}, 0xcac) (async) read$FUSE(r5, &(0x7f00000034c0)={0x2020}, 0xcac) 1m1.311112093s ago: executing program 1 (id=5115): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001800090400150000000000002d"], 0x1c}}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v2={0x2000000, [{0x2, 0xeec}, {0xe8000000, 0xffff8000}]}, 0x14, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r4], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r7, r6, r6], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r11) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000004280)=ANY=[@ANYBLOB="28000000648e1f401abaf09417fd7bdc7c", @ANYRES16=r13, @ANYBLOB="00092abd7000ffdbdf25060000000a00e80008021100000100000800050002000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x80) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000100)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r14, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x2, 0x8, {0x6, 0x9, 0x0, 0x80000000000000ff, 0x3, 0x0, 0x7fffffff, 0x58, 0x3, 0x8000, 0x9, r15, r16, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf9, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}]}, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000002f80)={0x0, 0x0}, &(0x7f0000002fc0)=0xc) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000700)="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", 0x2000, &(0x7f0000003140)={&(0x7f00000005c0)={0x50, 0x0, 0x8000000000000000, {0x7, 0x2d, 0x3, 0x40001080, 0x1, 0x40, 0x81, 0x655d, 0x0, 0x0, 0x10, 0xb}}, &(0x7f0000000680)={0x18, 0x0, 0xe6a, {0x2}}, &(0x7f0000002700)={0x18, 0x0, 0x7, {0x8}}, &(0x7f0000002740)={0x18, 0xfffffffffffffff5, 0xbfe, {0xa}}, &(0x7f0000002780)={0x18, 0x0, 0x401, {0x85e}}, &(0x7f0000002800)={0x28, 0x0, 0x59, {{0x4000000000, 0x3ff, 0x2}}}, &(0x7f0000002840)={0x60, 0xffffffffffffffda, 0x0, {{0x9, 0x2, 0xfffffffffffffff8, 0x0, 0x4, 0xfff80000, 0xff, 0x9}}}, &(0x7f00000028c0)={0x18, 0xfffffffffffffffe, 0x2, {0x7}}, &(0x7f0000004200)=ANY=[@ANYBLOB="169905c771628088814a6bc21df3eb15000800e3ff0145a19384c8a481423efba1e1bc8c6b62f21bd1e43061cc2f661132c0971bebac31edaf1191abf06b9b4141e88fa0adfa3f8c837c021ea27cd7db489eb4e691169e7314eef27c4171afb5583f706545da867c48005953600f3acc"], &(0x7f0000002940)={0x20, 0x0, 0x7, {0x0, 0x11}}, &(0x7f0000002980)={0x78, 0xfffffffffffffffe, 0xace, {0x2a5, 0x3, 0x0, {0x6, 0x101, 0x6, 0x400, 0x1, 0xf0, 0x8, 0x0, 0x7, 0x2000, 0x2e3df27, r9, r10, 0x4, 0x67d}}}, &(0x7f0000002a00)={0x90, 0x0, 0x2, {0x0, 0x1, 0xfff, 0xc, 0xeeb, 0x3, {0x3, 0x8e0b, 0x7, 0x3f, 0x800, 0x41e, 0xf, 0x4, 0x8, 0x8000, 0x1, r9, 0x0, 0x5, 0x7fff}}}, &(0x7f0000002ac0)={0x80, 0x0, 0xd, [{0x2, 0x2, 0x0, 0x1}, {0x4, 0x5, 0x0, 0xb}, {0x2, 0x2, 0x4, 0x29, '[\xa1-\xff'}, {0x0, 0x0, 0x8, 0xfffff800, 'nl80211\x00'}]}, &(0x7f0000002b40)={0x338, 0xfffffffffffffff5, 0x5, [{{0x2, 0x2, 0x8, 0x5, 0x9, 0x1000, {0x4, 0x95, 0x0, 0x6, 0x73c8, 0xd, 0x3, 0x80, 0x40, 0x8000, 0x7, r9, r10, 0xc6, 0xc0bc}}, {0x2, 0x2, 0xa, 0xc05f, '/dev/fuse\x00'}}, {{0x4, 0x3, 0x2, 0x4f, 0x6, 0x499, {0x2, 0xfffffffffffffffc, 0x0, 0xe, 0xfff, 0x551, 0x2, 0xa, 0x3, 0x6000, 0xffff, r9, r10, 0xfffffffd, 0xfffffff1}}, {0x0, 0x6b, 0x5, 0x7fff, 'TIPC\x00'}}, {{0x1, 0x0, 0xd, 0x2, 0x6, 0x0, {0x1, 0x7, 0x7ff, 0x4, 0x10, 0x400, 0x0, 0x63, 0x89, 0x1000, 0x6, r8, r10, 0xf, 0x5}}, {0x5, 0x3, 0x5, 0x1, 'TIPC\x00'}}, {{0x5, 0x1, 0x3, 0x1, 0xffffff81, 0x9, {0x4, 0x3e7, 0x6, 0x5, 0x26df, 0x4da, 0x1000, 0x3, 0x0, 0x8000, 0xb98, r8, r10, 0x3, 0x80000001}}, {0x1, 0x1ff, 0x5, 0x401, '\'$%*\\'}}, {{0x6, 0x2, 0xfff, 0x8000, 0xffff7fff, 0x6a58, {0x4, 0x3, 0x8, 0x2, 0x0, 0x6, 0x10ca, 0x5, 0x4c2, 0xc000, 0x8, r9, r10, 0x7, 0x6}}, {0x5, 0x5, 0x2, 0x8, '-\''}}]}, &(0x7f0000002e80)={0xa0, 0xffffffffffffffda, 0x156, {{0x2, 0x2, 0x6, 0x1, 0x1, 0x6, {0x4, 0x2, 0x13, 0xfff, 0x52, 0x0, 0x9, 0xa, 0x7, 0x8000, 0x2, r15, r10, 0x2, 0xa}}, {0x0, 0x8}}}, &(0x7f0000002f40)={0x20, 0x0, 0x3, {0x8, 0x0, 0x3, 0xb18f}}, &(0x7f0000003000)={0x130, 0x0, 0xffffffffffff3895, {0x5, 0xffffff01, 0x0, '\x00', {0x0, 0x57f, 0x4c62c0dd, 0x1, r17, r10, 0x8000, '\x00', 0xd03, 0x3, 0x1, 0xfffffffffffffffa, {0x0, 0x864c}, {0xfffffffffffeffff, 0x8}, {0x81, 0x3}, {0xfffffffffffffffc, 0xe6}, 0x7, 0x3, 0x8001}}}}) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r12, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x880) write$FUSE_ATTR(r1, &(0x7f0000000200)={0x78, 0xffffffffffffffb4, 0x0, {0x3ff, 0xffffffc0, 0x0, {0x4, 0x1, 0x6, 0xcc94, 0x4, 0xf, 0xa87, 0x7a29, 0x800, 0xc000, 0x5, r8, r10, 0xffff5821, 0x10001}}}, 0x78) 1m0.361374016s ago: executing program 1 (id=5117): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x3a, 0xffffffffffffffd0, &(0x7f0000000300)="0000ffffffffa000f2710263d2ac", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x27) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x8000}, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) r5 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r5, &(0x7f0000000080)={&(0x7f0000000140)={0xa, 0xa, 0x4, @private0, 0x16d6}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000800002900000074bd0016620000b93340dd000000000051c9e760c816118c687230aeb974902509d952af8ace23b76d567fca"], 0x18}, 0x922bac8556bdad8e) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000980)={{{@in=@loopback, @in=@dev}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000007fc0)={&(0x7f0000007f80)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x0, {@in6_addr=@remote, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xe050}, 0x20000000) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r7, 0x5406, &(0x7f0000000040)={0x2, 0x40, 0x40, 0x1, 0x12, "1e74aefa1652e4f7"}) read(r7, &(0x7f0000000280)=""/142, 0x8e) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000007fc0)={&(0x7f0000007f80)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x0, {@in6_addr=@remote, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xe050}, 0x20000000) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000000c0)=0xa) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r1, 0x3ba0, &(0x7f0000000680)={0x48, 0x4, 0x0, 0x0, 0x96, &(0x7f00000005c0)="f41e51a6b25163b087f196a02388392f39543f028dbc0d13d3216ee73c363913f44e4e768ae05d558d2854ee23c3b49f6d9f1f3ab0807d60ab83b325cfe6522821bdbefbee6258f48194d482bba4689a925abc9a41a2e0a8daaaa0ccecd54afa1b8def962edec49f1a81f022fa6e9fa87b9475ffb991cdfa0c88670b4fe70c53ee0d27dba84219ec89a7f23255e44416e22c1f5980b5", 0xd23}) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0x810}, 0x54) 59.444005413s ago: executing program 1 (id=5125): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000005c0)={0x17c04, 0xffffffffffffffff, 0x7, 0x3, 0x100000004, 0x803}) r2 = syz_open_procfs(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x54, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x844}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000040)={0x1}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="cb9adbb9f1181f3e44391faed3c806bf", 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='gfs2\x00', 0x0, &(0x7f0000000380)='acl') r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x8717, 0x7800, 0xd, 0x101, {{0x10, 0x4, 0x3, 0x7, 0x40, 0x65, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1, {[@ssrr={0x89, 0x7, 0xa1, [@dev={0xac, 0x14, 0x14, 0x17}]}, @end, @timestamp_prespec={0x44, 0x1c, 0x18, 0x3, 0x6, [{@rand_addr=0x64010102, 0x5200}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xee}, {@local}]}, @ra={0x94, 0x4}, @end, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x6, 0xe, 0x40, 0x3, 0x21, @local, @local, 0x80, 0x8000, 0xd7fa, 0x6}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000640)={&(0x7f00000000c0), 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, r5, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa4}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x20}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x40) 43.469712446s ago: executing program 38 (id=5125): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000005c0)={0x17c04, 0xffffffffffffffff, 0x7, 0x3, 0x100000004, 0x803}) r2 = syz_open_procfs(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x54, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x844}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000040)={0x1}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="cb9adbb9f1181f3e44391faed3c806bf", 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='gfs2\x00', 0x0, &(0x7f0000000380)='acl') r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x8717, 0x7800, 0xd, 0x101, {{0x10, 0x4, 0x3, 0x7, 0x40, 0x65, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1, {[@ssrr={0x89, 0x7, 0xa1, [@dev={0xac, 0x14, 0x14, 0x17}]}, @end, @timestamp_prespec={0x44, 0x1c, 0x18, 0x3, 0x6, [{@rand_addr=0x64010102, 0x5200}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xee}, {@local}]}, @ra={0x94, 0x4}, @end, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x6, 0xe, 0x40, 0x3, 0x21, @local, @local, 0x80, 0x8000, 0xd7fa, 0x6}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000640)={&(0x7f00000000c0), 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, r5, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa4}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x20}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x40) 37.203284983s ago: executing program 6 (id=5404): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1000000, 0x0, 0xffffffff}, 0x10}, 0x94) r2 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x400) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000140)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000640)=r1) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x20, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x9, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x16}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xd9ad}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xa7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0xfffffffa, 0x27, &(0x7f0000000240)=""/39, 0x41000, 0x40, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000380)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x4, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[r0, r0, r0, r3, r4, r0, r0], &(0x7f0000000440)=[{0x0, 0x3, 0x5, 0x9}], 0x10, 0x5}, 0x94) 37.015190073s ago: executing program 6 (id=5407): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x10dd02, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) fcntl$addseals(r0, 0x409, 0x8) readv(r0, &(0x7f00000025c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/239, 0xffffffda}, {&(0x7f00000013c0)=""/195, 0xc3}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f00000024c0)=""/251, 0xfb}, {&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000240)=""/56, 0x38}], 0x9) 36.951952933s ago: executing program 6 (id=5409): r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x389400) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x4, {0x8, 0x1, 0x2, 0x5}}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1, 0xa}}, './file0\x00'}) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_cpb={{0x441, 0xb}, {0xfa, 0x7, 0x0, 0x979, 0x9, 0x2, 0xf}}}, 0xf) ioctl$CEC_G_MODE(r0, 0x80046108, &(0x7f0000000100)) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@initdev}}, &(0x7f0000000300)=0xe8) mount$nfs4(&(0x7f0000000140)='/dev/audio#\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x200000, &(0x7f0000000340)={[{'/dev/audio#\x00'}, {'/dev/audio#\x00'}], [{@hash}, {@subj_type={'subj_type', 0x3d, '/dev/audio#\x00'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f00000003c0)={0x0, 0x7, 0x1}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x13}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2080}, 0x800) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x13}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2080}, 0x800) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000500), 0x101081) write$P9_RVERSION(r4, &(0x7f0000000540)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) (async) write$P9_RVERSION(r4, &(0x7f0000000540)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r0) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r0) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xd0, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000010}, 0x8044) read(r0, &(0x7f0000000780)=""/157, 0x9d) openat$cuse(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) (async) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000880)={0x2020}, 0x2020) (async) read$FUSE(r6, &(0x7f0000000880)={0x2020}, 0x2020) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000028c0)) landlock_restrict_self(r0, 0x0) (async) landlock_restrict_self(r0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000002900)={r4}) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000002940)=0x59) ioctl$RTC_UIE_ON(r4, 0x7003) (async) ioctl$RTC_UIE_ON(r4, 0x7003) recvmsg$inet_nvme(r1, &(0x7f0000002dc0)={&(0x7f0000002980)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002a00)=""/117, 0x75}, {&(0x7f0000002a80)=""/175, 0xaf}, {&(0x7f0000002b40)=""/71, 0x47}, {&(0x7f0000002bc0)=""/146, 0x92}], 0x4, &(0x7f0000002cc0)=""/216, 0xd8}, 0x10000) (async) recvmsg$inet_nvme(r1, &(0x7f0000002dc0)={&(0x7f0000002980)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002a00)=""/117, 0x75}, {&(0x7f0000002a80)=""/175, 0xaf}, {&(0x7f0000002b40)=""/71, 0x47}, {&(0x7f0000002bc0)=""/146, 0x92}], 0x4, &(0x7f0000002cc0)=""/216, 0xd8}, 0x10000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002e00)='./binderfs2/custom1\x00', 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000002f40)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e80)={0x4c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x2020) (async) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000002f40)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e80)={0x4c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x2020) write(r7, &(0x7f0000002f80)="3f8e6e507eba21d264a632d160dac09a7c255fc11988e92f030cae7cefc8f4b5894fe553d933a1a39c33145f2a0172eaa3913a4f58e48c76d32ab992bc10ed43f843f727c04afca2954a103d46377220f31cf498fcb87a", 0x57) (async) write(r7, &(0x7f0000002f80)="3f8e6e507eba21d264a632d160dac09a7c255fc11988e92f030cae7cefc8f4b5894fe553d933a1a39c33145f2a0172eaa3913a4f58e48c76d32ab992bc10ed43f843f727c04afca2954a103d46377220f31cf498fcb87a", 0x57) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r8, &(0x7f0000003180)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003140)={&(0x7f00000030c0)={0x48, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 36.95173953s ago: executing program 6 (id=5410): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000240)='./file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fddbdf05090000003000038006000400e9000000140002006272696467655f736c6176655f300000080003000000000008000100"], 0x44}}, 0x48040) 36.882500991s ago: executing program 6 (id=5412): r0 = socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000000)={0x0, 0x0, "d7b1e707a66daa5fdac86bfdbb99ccf0"}) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000073013f000000000095", @ANYBLOB="9106e176d5d467fa0edb6a780cf2e20512ce3f5530895e8e9d563efa77b82b8807e1ae43ed1c28cb37f5d4aa38cecc353f585dd722a3897e892437bb78945a430e7e0c2797686fca8a8f54bff47a52341a622a74b50ba0bb02a622e06c9583f8e9184c270cc7d9b564"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x27, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb30f}, 0x94) 36.608960618s ago: executing program 6 (id=5413): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) (async) syz_clone(0x91a0200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)="24ab3f9fadf08a2bff49ec2208104e0c6339b39cda51a6b76683d93f1ad6a9b71cb8184fda55f020976ab9417b4afb12") (async) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad000008"], 0x125) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r4 = dup3(r3, r2, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) 36.537441881s ago: executing program 39 (id=5413): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) (async) syz_clone(0x91a0200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)="24ab3f9fadf08a2bff49ec2208104e0c6339b39cda51a6b76683d93f1ad6a9b71cb8184fda55f020976ab9417b4afb12") (async) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad000008"], 0x125) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r4 = dup3(r3, r2, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) 33.470637447s ago: executing program 0 (id=5434): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x8100, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x8100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0xfffffffffffffebb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0xfffffffffffffebb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) bind$l2tp6(r2, &(0x7f0000000140)={0xa, 0x0, 0x101, @remote, 0x9, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x2a, 0xc, @val=@uprobe_multi={0x0, 0x0}}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000180001000000000000000000020020000003c80600000000ae001500040000000c0016800800060008000000"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x3, 0x71, 0x10, 0x1e}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='G', 0x1}], 0x1}, 0x41) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r1, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) 33.15431512s ago: executing program 0 (id=5437): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x4, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5, 0x9, 0x5, 0xffff2d37, 0x0, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0xe, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x47, 0x4c74, 0x80000000, 0x242, 0x3, 0x4, 0x0, 0x80008071, 0x7, 0x8, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x3, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x7, 0x209, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x8000047, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x24f, 0x42, 0x4], [0x7, 0x408, 0x2, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x0, 0x4, 0x2950bfaf, 0x1000, 0x4b2760ed, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2eb, 0x0, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x1, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x201, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x6b, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x8, 0x9, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x400007, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x3404c8d4) (async) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000380)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x6, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)={0x19c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x3a}}}}, [@NL80211_ATTR_IE={0xdd, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0x3}}, @gcr_ga={0xbd, 0x6, @broadcast}, @random={0x2, 0xbe, "40618851f88c2b4398a6d1b60645cbc0ffe949c3552cb2a42efd7b91e0d10b040c9c5755e580f35f74eb9f9c5d3953a5d91c35eefb780156fd37f72aa77c99db1ee3902fc617a4e540d01f520b6dc37a93a0cf68af084117622921dc93111ad37926adc558efb3dc82651560b3334d1d729748bf5de8ea39d36fbe7dc78a708b9c3e2ca3fbc3c6522ba71a1bf8e3d8e10432e4afe0660541739df4406443b4a8d7bd0e69a7b3dc4fd332e5e52a9588ec9da574f9d4d18b400ce7464025b8"}, @mesh_id={0x72, 0x6}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x21, 0xfa, "87d7452ece5f74c6a2fd282f5fb8964b52b68bf67ecbf2c45b875627c6"}, @NL80211_ATTR_FILS_ERP_RRK={0x70, 0xfc, "4c53546d11c172ae23cb1ec20baabceac30cf18192c21348d14f83d896379503ce8d240f3cfd6c4acaa085fc60f2b0f6080cc934a54595a8462b2e529376b052474772fd6a6783806b4f62ecd09f3254843582ba65bc11b804a7160ac0bc8ca77689f9bb37e8b04eb83d650a"}]]}, 0x19c}, 0x1, 0x0, 0x0, 0x8811}, 0x40) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) (async) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) (async) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r4, 0xfffffffffffffc01, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r1, 0x0, 0x93, 0xee, &(0x7f00000005c0)="3cb580bc019d5bc3b4b78e7d236a74b05e365ffb4624d85cc1421b7bafcc3e9660615b2c5f28ae18fe9136c08659bfad53b0fa54bcb8d1f00353654ef441fa01ae1532acfc9a2581e27b0aeb82ff957eeeda9f0baa2d47c399841ec899ce0ec6c937731ae03bedca48c334bb1e3fb8b0c2f9b36ea5bbb5edc41d1a47f65021693cc7969b02aa1f769eec94a62aa6eae4298d27", &(0x7f0000000900)=""/238, 0x1, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000300), 0x0, 0x0, 0x10000}, 0x50) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) (async) bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1e) (async) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 33.082309964s ago: executing program 0 (id=5438): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x2, &(0x7f0000000200)=@raw=[@jmp={0x4, 0x0, 0x0, 0x1}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x90) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) preadv2(r2, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x10, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000000)=0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) setresgid(0xee00, 0xee01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/ipc\x00') setns(r5, 0x8000000) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, r0, 0xb, 0x7}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x11, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000300)='GPL\x00', 0xf1, 0x34, &(0x7f0000000340)=""/52, 0x40f00, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xd, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x8, 0x40, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x1, r6, 0x1, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x4, 0x3, 0x8}, {0x1, 0x3, 0x0, 0x1}], 0x10, 0x4}, 0x94) close_range(r5, r4, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x400) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r7, 0x8044610a, 0x0) r8 = socket(0x10, 0x3, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r9, r9, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0x71cd0223e63738cb, r9, &(0x7f00000005c0)={0x0, 0x1, 0x8, 0x9, 0x8, 0xfffffffffffffff8, 0x2, 0x6, 0x7ff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000540001002bbd70000200000007003a0d", @ANYRES32=r11, @ANYBLOB="20000100", @ANYRES32=r11, @ANYBLOB="010200000000000000e0ff0f0000ffffac1414aa86dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x20048040) sendto$inet6(r8, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 32.991938961s ago: executing program 0 (id=5440): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x44) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0xff00, @empty=0xff000000}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0x38, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 32.9087158s ago: executing program 0 (id=5441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x936db2dd88b358d2}}, [@NFT_MSG_DELFLOWTABLE={0xf4, 0x18, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0xbc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'xfrm0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5a}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xf8, 0x16, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xa0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'macvlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x214}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 32.636528854s ago: executing program 0 (id=5444): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="c915216e733d76697297696f2c63616368653d6d6d61702c"]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) fanotify_mark(r1, 0x2, 0x1016, r0, 0x0) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @ioapic={0x8080000, 0x5f6e, 0x1, 0x3, 0x0, [{0x0, 0x5, 0x6, '\x00', 0xe7}, {0xf8, 0x33, 0x4a, '\x00', 0x1}, {0xa8, 0x4, 0x5, '\x00', 0x9}, {0xd, 0x81, 0x38, '\x00', 0x5}, {0x4, 0x81, 0x2, '\x00', 0xd}, {0x4, 0x4, 0x2, '\x00', 0x5}, {0x10, 0x7f, 0x81, '\x00', 0xf8}, {0x4f, 0x9, 0x29, '\x00', 0x4}, {0x9, 0x6, 0x10, '\x00', 0x2}, {0x3, 0x2, 0x3, '\x00', 0x9}, {0x5, 0x9, 0x5, '\x00', 0x9}, {0x7, 0x4, 0x2}, {0x10, 0xe, 0x7, '\x00', 0x6}, {0x7, 0x8, 0x3, '\x00', 0xc}, {0x8, 0x73, 0x3, '\x00', 0x2}, {0x1, 0xd, 0x7, '\x00', 0x8}, {0x7, 0x8, 0x8, '\x00', 0x6}, {0x81, 0x10, 0x8, '\x00', 0xf}, {0x9, 0x80, 0x6, '\x00', 0x1}, {0x3, 0x5, 0x9, '\x00', 0x7}, {0x8, 0xa, 0x4, '\x00', 0x6a}, {0xf4, 0x2, 0x3, '\x00', 0x3}, {0x7, 0x0, 0x8, '\x00', 0xf7}, {0x5, 0xc2, 0x7f}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_unix(&(0x7f0000003680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=unix']) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x1, 0x3, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x3, 0xffffffffffffffff, 0x4, 0x8}, 0x4}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x20000000) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 32.329585805s ago: executing program 40 (id=5444): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="c915216e733d76697297696f2c63616368653d6d6d61702c"]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) fanotify_mark(r1, 0x2, 0x1016, r0, 0x0) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @ioapic={0x8080000, 0x5f6e, 0x1, 0x3, 0x0, [{0x0, 0x5, 0x6, '\x00', 0xe7}, {0xf8, 0x33, 0x4a, '\x00', 0x1}, {0xa8, 0x4, 0x5, '\x00', 0x9}, {0xd, 0x81, 0x38, '\x00', 0x5}, {0x4, 0x81, 0x2, '\x00', 0xd}, {0x4, 0x4, 0x2, '\x00', 0x5}, {0x10, 0x7f, 0x81, '\x00', 0xf8}, {0x4f, 0x9, 0x29, '\x00', 0x4}, {0x9, 0x6, 0x10, '\x00', 0x2}, {0x3, 0x2, 0x3, '\x00', 0x9}, {0x5, 0x9, 0x5, '\x00', 0x9}, {0x7, 0x4, 0x2}, {0x10, 0xe, 0x7, '\x00', 0x6}, {0x7, 0x8, 0x3, '\x00', 0xc}, {0x8, 0x73, 0x3, '\x00', 0x2}, {0x1, 0xd, 0x7, '\x00', 0x8}, {0x7, 0x8, 0x8, '\x00', 0x6}, {0x81, 0x10, 0x8, '\x00', 0xf}, {0x9, 0x80, 0x6, '\x00', 0x1}, {0x3, 0x5, 0x9, '\x00', 0x7}, {0x8, 0xa, 0x4, '\x00', 0x6a}, {0xf4, 0x2, 0x3, '\x00', 0x3}, {0x7, 0x0, 0x8, '\x00', 0xf7}, {0x5, 0xc2, 0x7f}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_unix(&(0x7f0000003680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=unix']) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x1, 0x3, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x3, 0xffffffffffffffff, 0x4, 0x8}, 0x4}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x20000000) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2.21833533s ago: executing program 9 (id=5908): chdir(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r0, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r3, 0x9, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x48c4}, 0x800) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x361880, 0x0) ioctl$IOMMU_VFIO_GET_API_VERSION(r5, 0x3b64) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000240)={0x0, 0x10001}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r6, 0x1}, &(0x7f0000000340)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) r7 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) map_shadow_stack(&(0x7f000072a000/0x3000)=nil, 0x3000, 0x0) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2.080595413s ago: executing program 9 (id=5909): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2, 0x8, 0x0, 0x0}}, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x560f, &(0x7f00000002c0)={0xb}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) sendmsg$nl_netfilter(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001640)=ANY=[], 0x298}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) 1.152621117s ago: executing program 9 (id=5928): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0x0, 0x0, 0x0}) 1.152112808s ago: executing program 9 (id=5930): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x13, r2, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000240)={[{@size={'size', 0x3d, [0x34]}}]}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x54}}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x7f}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x400}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff51}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x200440c0}, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x7, 0x7800, 0x7a, 0x3, {{0x11, 0x4, 0x2, 0x8, 0x44, 0x64, 0x0, 0x4, 0x2f, 0x0, @private=0xa010101, @multicast2, {[@timestamp={0x44, 0x18, 0x4c, 0x0, 0x1, [0x930, 0xef, 0x8, 0xffffffff, 0xc]}, @ssrr={0x89, 0x17, 0xd1, [@local, @empty, @broadcast, @local, @local]}]}}}}}) (async) r5 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f00000015c0)=[{{&(0x7f00000001c0)={0x2, 0x400, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000002074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000001140)="17463ab6d80fb6eedc81ba60ccbb9d", 0xf}], 0x2}, 0xf5ffffff}, {{&(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}], 0x2, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000140)={@mcast1, 0x0}, &(0x7f0000000180)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000200)={'erspan0\x00', r4, 0x8000, 0x700, 0x3c, 0x3, {{0xe, 0x4, 0x1, 0x8, 0x38, 0x68, 0x0, 0x4, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x9d, 0x3, 0x8, [{@rand_addr=0x64010101, 0x7}]}, @lsrr={0x83, 0x17, 0x9f, [@broadcast, @broadcast, @empty, @empty, @multicast1]}]}}}}}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@getnexthop={0x38, 0x6a, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40180}, 0x20004004) 1.086797393s ago: executing program 9 (id=5932): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x8400040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50) link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00') syz_fuse_handle_req(r1, &(0x7f00000021c0)="75c6c1015909d4338683df9486bbc81e43f13e4926c27c2f82f846633ae45dde55cd4aa48598dfcbe26577ac059a9420bca1c94427a6d7872a1b30832e91813fe7e1af1f00f4587326ea389615a22b9b665a4b77d6cd3efb7c7ef750596fd9d755e7c9200af5a208abf303434848890294b53f279f4390b8cba0f4c94ad8b0815e520566857afa936aea2e23f24e936f8f9b2e7aafcabd0f1fdc885b32e9dcf5eddf7cd4445f872327973e0789fe437e6201e32297c99c6be42731a056ed21fee6df04daae244d4164b1f27764dc0d3b38d824461b54c9b7f13dba393b8e2029454f5174b5a59a35970316b38de13bd00db37eb9029abcf71c734e0a865ce878284540125caad33853dc11039bda8f0fb6bb9f67065a858d9d13aa1e8a79727b376ac3b5e25f688821e19fa5573034c50882e3fcbd111e137b80b428f6986d9d8cdb2a2476fbebf22de118e27f0fc48bcfb54fccde391238eea73f5a9fbe2138ae958f44fcfe66845acb714d9b49bfba663b6fe29e09f58ff81d65abe5516378bc176bf7212ed988d1e306b36a37d35ca97a62fa5c70e76829b3f63b3deaa7b98b67fc19586cc60541fadf4b6c5da31a083e57a34399348f53b9c5ab83579ce5ea883195be71b8383cbc6e6227054f1867bcb321d9da7eff2a93f0487ecf6bd2ae805d95be46bea30d267f52ace8c21410b357fef133ace7eba38a326dae7c708a25320c70f229c555289cd8703b680d78b9c6eac6bc99c8abfe8e656f6054a7cede6330f335e9c43d88f1f31380e575fec7e04b1c8cb7b43288849dc0e1ec01e259a15986e23a501ce360a25ec565e0d7d12a20513e82c89fd4f89774ad4b395191b6a9d6b26c99bccd3bc61668dd642aeddeb506782ee87da02eab31f8281587b0dff57a7dd4d8f470c96b467a711f19855c939ef8b503a302673545eb77ba3e599962eeb4e30d5261490bde68860d14d7dfd2e797674384394a39ba4635f902d15e6198e6a2df8357fd0ef40c5a309a2aafd0d94f2983d83086b93ad787ae6b6c22389cd36ee9e958b6e297123ffa6dddfa0d5f7c56de809681b23b89ddb0f38c889c5d7957d47e2aaa1330b12cde716d47c9d60c5e0ded86c8f3c592394eec7c94740e14fdfe799d75f2417c9c8d7ff3247e85bcecda02f7c22d8133a92bc44f3c96f1b7c24fb8493b117efbb2fab56013a4f442da56c46beee7ff473e8e2618e387cb2576d6a4b1d8937203bd01f5f1f8bc035c4009ac67ebc53f88e314ceeda2c1156e0150ca1c4686db66be31986aac9d0799905058a998bf04b417fefa43a9d28e89eae3e5bce4e645097646708d26789c01ecd2b592bce9caffa134a2a31bdbd14d1cc20ef586e6827a009b3472b3fc6b8e759afce903e35f588416480621d1ffb3d7fb66dfe4f0f00e343128cd677ea9833c979cdf94f3cc3eccca626af6537a268297d860e1ee10dfa3e6ee4b30cc369208ab8d44d52e6bcc961766a303053a8e459bc95be9f0f815aba00a9f9e6d4f8c13289169e6f4c2ad4f4a0ddd88e3c54460fa01814a6e154447bade1c4d2dc99d9eadf2427ba9bffb6c3c1fe76d83971d082f7f60435f226754b647ed02aa4364ed22d4331647f4c7aa8bdf5822ecf2ec217d929e5aff4625fee1dcaf38bf4dcd2233d84eba0667c868a18a39c4337f41e9ac33b94bf7856994efcf2564fb1111518ab8dd5459939043c8d72636fc2b089aa99ff158d252a864cb2281592154ff3699623da1b8dfab8f874c14672e7a3f676a0bc654495dd1779e9ba599bfcab5b77bfdce1429dc68c8738ac23056328c918ff8e6eb735c524ce0a1413cdeebe26906d123999c3445d8a6b74dadc9b2d8718c028b52ca3bc5fd30411673dd5564111dcb4f1423c880c3160d2dd83a41bd76fc80474b7e0601a8bd2708ebe85f1b23e190833485f7f3f43b4767b9aba721711dd79d55ac5aecd9ddaa66b04490f52bf6b6475309f15bb64132dc6111be416267c04a2658c490542a7e04d6a7a9dec7237555cbdb32f051c33018452976101cda7d145f39011ac31d019dddb8755998ad1721a04b3fc3f7bb07b3ac2f2087e8f63c9070c65c509238b9d0e33a596b1247108bb7985b35bc33b9c4426e90554f00b6a9c37d1e9ddc27f2f8b16ec70a8fbf13a48659fd75cf71e245772848b4999d37e1b45a3253ae3900b03acd571f5f4621b5d0b672fd87ee83bc1c0d2c08a478fb57091c1634e10d196b4a185728736e75066eb222bfdb463762e773912d5f78fcaf400531fcb2ebe375ab81be7e5412dc153b18bdd3cb0a271e5c650ee2b3fb41727144659bd9e3867733ef3dafccff61adcbc079f0034080ad6cebd2d591f5519f374c1e9cfcc1e1d149b19ed169f3d0a63ee80513db620807e89ceb0ad9c8a5bfc3e1207aab30df7e460fc715bd0e1cf8bd1f346d56e2046f2174d67e89180e5b80c2b3947a3fa80a5def940eaabd2a53d8658d07dc7290dbbdd5277ae9a5e66a8afdbe591798e2f283903bb389274e70af2b45863e6660b62b31b0b0b7c3785f9b0cc292659f97464089399a3f517a8b3b48eb751b855f37ad65d5f2c8ff377a87225ed7c9a970dcde700c62a107b59d10e8c7a6bc2d218099c457be927e35ca4fcc839a5e77ebd022b12848a85c4611d81c6dfa703dae14cbde0e4f0d4df9c888976b09b36d4b63fd474777e8841fda0fa58a3d4291303440e5c7af3ccf8bb478068577214556f48bc14fe4f25c4566c300cde1b20aeeb90c8b6e14ceea3b1c2545e9add0036af3ef47b70eeb6a4bd945bbd514b6f297992aed30393295ac72a5170b0e4b0048b4b4b16a0174405f6165721e69d5ac1c0a1b1c31f6756a0750ab9cf5e1325b77678266b4ee9e5efab246bdee0f1d48b1281cfaa0578e063caeaab14508a340043e6ea18b495ecfe518aadbd0ba4e6d534376611121917ce1eb5197997daed456437207d1e83ad98aee13e3581b0a826eb34a6ec65b6258b0791a2e86a3cdae26d3ef60cfe77ea622bc234d42530c40bc63f86a66c2e6df3efb6b0b6f1c3370eee8e123fe6d952f03ca7ffb94f2f837296771294febf0e4dc28f626da6b4a5bfc7b4c980e3a1eb2d5fa669bc661be59a73d681cefae5def0b866bf4fd7fcd967f9a3bca09c327aaff7635e218b5b7f822c759fd2a6a0a2ddcbd1daa57aef73d69ca88679dfd39934377321e080f4fccaeb5a08786fbf7c6df97ae830f1b2ab77e66bbb9ed9aea46114638b1afd0443a625f0a6e708db7431ebd946638993ffcc7f837e30f5e66abfff9cddf1f9ceba7b025b2452014616c2a66db5d6f4afaf678b1330a70bbdfbbcfb950df9f75f03eb013189982ba8d204315ecd13d70b3ed75f14386224f83b0c95fa45fb4c40a2e655204a01187aaf705bec8e6dfa8f3a387fded3205a613606b794356818ba193a89c4eb716c66ccda98becddd25e9b681307d87d8bf1f3a581ec11becc96996cdc953fa357a1b9537c25c7ea3524d8a929caef9165970aa400e4a2d9ef6dbd7bab4a79491916112073880da0ebcc22035c1f0ea07512ef2908ec62a8e7993f2871aab05016d9cdc548bb7eb8962a54a5c13977ef6b79573d2ca2977b65c22519708af129cebc852563368c225f80d4ae2e51a7bb7d5cf7031c6379697bef8bd696f1e5671d41f4121da411d9ed6a9c345c64d71c469454c1ce8fd8f9c745f6160093cd6400e625e60b7b5646c1d1d167a63379cc87201987d28ad3dae05ab8651591ece4ddb055bf5f7310ea6858040f6cd4f38fea70568f10b09a98a12d1546e7fd5efe549622f54bbc10dcd42f60f8d61aa31fa050a0f7bcbc6e45f9dce0091b5e769ed9ed4aa31e9c1b97619945c03fccf60f8bd547dc0fa072093e4265940d223555534b77489f6cef12f523deab648d6e77b7af4614eaf283a292e3034c6bcd485e8c65f7cc52ff123d1432f53ca3bd42be8b348ba3bfaf57451a5483fce32956669ec96863c3989794fb3359a4b4ac54fbedf566859b9818a5d71779f676874fd126888ad4c03a0dd018732cf5a11e58836556d5378a50c31ae83c364ae9fdeb5e183e5b34587c13e814f2fc757cbb4dbbffeb2d362d442d0617050c33c6aaa1ea593f63374566f10b741f57805d4c74fb43435b54b92c532f865300b4351e1913a34cdc80f5eb0e09e29b248df71a08cfb93351f2af9c9cb052c46d100beeb326d92d70e40da88eabb5acca56fb5fe498ee5d9e1302c3fbd05c6bc7ab12446d089635cd4d9ad88752b131e6ec91fa553afb66ace2c2e3c3709d97b68647b244843e247cf09fd7d056002e4c1754434bd4507f0b79b964bddfd3ad9ed1d1e361995f448808c886998d69f2feadc6d2babcfda86e694866728701b8ae04ef2df56d11fe16da0da9390371fa1ad5158528c5e316b292c123e3f56a579b9e9f516e6f5d321b1df3080959443ce2f88460ec57d7707b87d7f0f878aa3a0c6dff6de51b778410906cb9668c86ebb43a856d651f475142809abecf6cfafff6ed7143b4923d375678f9cb05409a23875d180c3b60a8f80dab10cee5d54fd9b12521c47e09b5df1a5c6d05e25d81232c144385bb3b46f2b5436ee0836e066d12dfe7e844c249431dfd8713ae6428607a337f06d35778ecc5ddfe3470287fc777cde9f0f8aad11e5bf89fd3c097a0fd8f8da1ebd1e4d4de1b39ad0d1cc933e1386875cae224c29a232a15d4fc1e79196ede9ec8f2ec6fa72098a93b90d8cfce870bcffc270e0874f10dd5387867aadf6413925da4ad1d581201cc914bcbe7754685a25ee3b52bdbe20491d460f7275f943f5be210faa4e9d5dbcd4a4e23adc739c521dbc78a2040d33f206e85f3ac04dfc0195368d211de09ab29855f3ea400e12ac2d43f8ca8d12502bba88fe8e027f5970ccac619e9136ee0c9bce5ee7dd16d715a046a539e042c662723b7fac74c4e2de06f7f7ef4e31648a19b0bf9628d57f3bee570147aaa29faaa60ecf78e5eee6f2b5ce48706a498d72ada4334b82815af52991a77a3546dbbc80c3e53c3a4546fe7f1c0b2dd22100a943b83125c0d0e9a7c5412aa1245c228e13bb9d176fd3734c75963d18260ae25ee11a4588a41c480220bd089223cf5bb70318d4109b5ba190525362374b457b4f198a916ff6066acc5d6e1e3d19a48b2d89ce74cf9338c9ac9ed32343536549b694eb334a5c6316522bd7c703e2df29e6266d7b715ab740098dc98c4338ea91ca592f686ac5b09ceed0fc17ad127b817556289d039bed5f7afeb9922a25a64e6259e9dfa407bc595e97b3a234c053061e9d216292b60c9f2d2465b42c31a8b0357209c6134d3b94d9bc68af60204738301072792e416c8dc612405b766bc2bc4b97acde6f6844b5fb2dfee21be5c1d91a2301bdd5740852ebc8df9c36fb1ff7d8aaee18e2c75c9763366fa7692f87f7d1076980436892251203790599dc789310964a9c03f88dc1f1c0b1cac159f5e36399c75cdb805744486f5624876e81af3f0e1590d098183a40afecf0841d0acf687b13049148eed079796bbb6c1edd3f5c0f5661a2d329b0165ac12f5cf58606970656d2c4d13a4cf2e15aaec175fc59bd9f23ea7869db744fcc0eba039259c7e541efaa066106e9b2c92bdded3e42884a8a02e71457f44775692a1c4fd845ff5ba8595c55ad4bb2177f975de0d22e0feac37f5c3f16426ebcd99d17c829759ac72dc1448661394d3a104999cd40cb09d086146cc92c6408ab1a0b0ad898cbfe76d4962ad0eec1c572a78f9d7342c3de64e881e99afc5b1df3227e198c79c1727a141a8a9da7ba3aae5b3e4ee59a84020191b70fa928d7ce136904c0b03c6c13391f55b381e2df7087b00932251ad7688117cd02ef5ceb5c7dda16d069de3a3e3ff2e341db15df06a96cab1ad2a51db41310ac48d572229695ca941cdfc8416b4307ac6dc176566635bc87d94557e7e4f7a14bdf86d1293c6dafe9ecc280d1a36cc6734485d41b6bd6a33e3605591d98e17fd34f901cdbc33710d768f791b9600218fed28a5d21a0e6589c7d6fb5120c8446eba3a8c8b39dddff369b30cffc0426484ef0b6f6664bec8655e040b2bb3fe3f6863c0a36fe182e3627f6ac38d23050092327f8b67beef764bc35207ed73e4850b43a229d48105d3649c45dc658e27b964b149f978b884268e69a4b353a06e473da3dc7d94c93f7070aae7f3cd2b422840ae55105a6ade053b47b2c72f8b7bad5edc52bc6a8daae76922517e6e3f19b82c5a286e7bfc7254d764ddb79c612e91e1bc61927ad424d1914043a6aacfecb7c90ffb16797349a1ec02de9585b51f19da3a0665f484826f77759234b4b4b7ebf0e176fde2571abc3d4714b543000a1726743dc9e0e6c0bc393b25300287603f47464988eed454ca2dc4377c4c1056f688aa1b5a40d380ba787e962f5cbb902db29a084e305b68f289df8112d19b9a34a32b76a827aa607eb306982aa8aa071c3909c9d1120a0e15a041524eeb12cba62e0378ffcfdf14821710c0d767e32e6a1bd09e76e4f6f9fe4843a967bd633a5fae28a3ae1f64861df70aec3c0cff134a5c8609f011686a430a0c7ef3a36a34a36e0d401b51e51c7eb6e8d13e8616f8c40f0bea3ed9c2b722e141567dbb558da1d7c509ee205b2e9936702b79cec40270398b97dc3525bad7b6809aece6cbe80728c4a188935aaad9edf706a557b84614741259345dfcff830299c640ab3cc534bc1ed744b3a935bb2943e4f8582600394b43269bb94b7c8b6de766770c43b96b04d59d6bb15831fe0bfbc0bb930141d0bd64c280c0a42f49380dd315adab35a4ebaa081ae1f736669156088e2d07670169ec89b85fe4149362135b290336c20451330a968e457c1c8b30ba6ee5ec335b9356a84a19dd459d49ed0b12f730289c24565d2ab0c1d5ed68fb4fa92800c8be4eba970913dd2cec7cfc1617ef0b3f7cae1d2979d2944bcdc375cf0c16a86ac6d5ed98a8d9405b674108f0bfb16b9c0408b134bec0df951bbf261ebc0be30ef15321bf82a6a482bc02db237e1a3d0c401316082ba674962a819d73671829f329b67dd5fcf3715fe6219fbf3631d265a5f0c7cfc3c107e469a55318357fc4f5f28fe48c534025fe0c1f06fa815987b7e1f5acd5a16fdd1c0dccb18d1047f8fb837affeb16dffbf91e01ea904571b21a1c0ac3cab6054314a7becb4188c96596258661a8eb71fcb374ada50b4c8e381f8e76a6b56a9e20a04ecf87445eb164760a4b9abcf96be310a9e0c2ac067f3be2bc05aeb0e91e9998bd1be01c68ce885edb372ca48d8518b45ecce90e2144c2356ceac563bfb4735ce0f21427bec2f728798578ef3c83e0a9ec0e16c4bb1ee24e99ca4dec6888eec3727702e058a3e0d5b8d5a72819b5b9dedd5e698ddb1f4542bd19f6cfdfe62cc179c7ee17307d2d8868c61d061a9310b8a037009017d24dcc6137f79926e20ff015cef3de464c2a9774b1db06a885782ac5abfcd1d48a0d65cdb898d3acaf6fbe347d4a80c9455cf7f16d8c890bc629b5d28d669e74db300023471c887f718ad5e7150890e7fdb8c78f2e63f727b205c71640840bedc58f9a52445ea55b95a6b7ddb7919e64728f716ad19c416fb51bac0e3535ff50a16acf7bdfe8066d519ce21ca4a17e4008c00b9f21c72f718d4de2d0cbeff5ca13032d498540478685bc7e45b4d5773c28acc39e58737dc2a3c907bef44e3e2af584fc7aac8f0e7d82fffc341cc984a9a7523de2ef72970646ce8b0d608315d888cc7cfa0f32d1d8da8aa646d9ad12b5dbe8049178b1ffe3bd13183d76dd06073cbca93685f096d8aedfde7c16060ca6bf3d14a24fcfa073673d77321ebfb290b2e92ea026e69ac6881a94e9ebc9b8ddb799ffb8ee771b7951312cc110a1c99a06529c0a0775b830805c54367001ceb69dcf5ab6a11d197bf1d170f686d53ec1b9635db856fd27b92e966f6c6a59ba8bb1ba812937d1b1e68193b3d7e4b213f7eb2a716717a73db04dd22878bfc34646499ded4a7acbffe6694bbae40635e6f0f322dc1662eb7e34b5a1f4a19c0c77bf2faa29b4aa2e2bb88238302cebc0210674473a3a440ddd1ce34317d74638acef8f6b8e471568887a6192a9ddf7c9d003e4890e4390a05bb5a0de8ca6ee7cebe360e6a7b326b3bf56f08fe8732fe8cf56781054ee56db70b45719f40b529d9cc9ff65362fae742c19b958cced92dac22a880ed6def03c3729612bb0ee34ff18557087a103474eff4f8066f8f25379a4d823f95718afbe5601a613abf3af27d247c88fba62280e904c4038fd8b370018a103693091ad3a44fb8be1e73fe9651c8beb51d70f945ca6ac32585b1a693b2d4598178839c10a7e60553fc83122647c5853e31bdef3a1b304da02a5b6df5d37217749c03467024a70703e32d0ec971ce4a8bab10b7a5a12303a7db83526a7fa3c4ec9fc6e125089c05f3a16e7be89249495e5b20cd6857c93378f524d0c46894e595ee76e301bd6da1743ae4e7e750ad8c4f0282f0bbf12e90383af5796e447fee78e302cf46e3a45126fd59d49a624f7033caeac61d49e147d5ed8e85a90c8914efbdfe2bebdf2ae19b58ce9b61684697dc6f0c65088437df7ec3810724ad7a021ec82b0351826dad927acd1a0662f7fc0278bcfcaafa11315bf5121d1b62f0f0471c54052bee73f2b1fb4139243a6d8de170c80604eadab39021306ff9cf5ce751af1fef52e232fc7c64247e32119e4de98d076b0dc84cf918100d8d3ebff83abefee2353acd133612e3815b8ae14d4f0d1006152807e3b42e035b9a62b58d64706730809a21440c7a9ea228ee033abf7cff2343fc4360b541311fa9ad18110be064ccab41436ca6560081111528dd2eb46a961392f024026d127b5836466fdfba1078b1a89f4c88bf8244b640da376a81142db5b1f27bc7e429cc15e6bad993f3d76f2ba3ff0815895361f20067f57fddd43f44b47375340c39283b3871a68f28b0a8166ac3ee35c8393278d5d2d3887c8a0a964f56f1769c29adbba6fbca7901415e2ab3b63f82d09caa3bf6e7f2e743aa073b57ed8a097f80c47ee546e2fe7b4f6fcbc98770fd7e9f1480517f26656171d394cf47ea395bfb995c087f93cde36b07f3507de2ae23d75b000a532c71265521631e4f8126c5eb96f15d04f183e2162ad9c967c0a1c291f1f1fc2b644271f160764af4e469823c3535ebb25cbc37f09b43fbd258b4a1d45335f162ad5f3d9e5406b671811cc0a16e76f4874041bac7b116483a0727f59a2144ca0490fb8acac82e62cba2e45442d4bf35e49f240a57f542be5df86f6942a5a4b82ff437ff2494c7837d22711aae24265a954d8b6e44b731022214e97ef1111f9bd5fde591bba1541799641670bdb290bd45c15c6b7f594179e3a81873f60e382de67bfe33ec177b64950e05706f1243388ffce2a541c5f30a72cf25623e1c35e72bdebf6d87b4684ff156efb10f96392ddb71353d8c8535173ce57ca41905afbef07ba646a067b2fd71bf3e9335e47672fb43639d7a6a4d51923243121724cb3bca92d304ba2c3fc4942b50c302f1ebb15902c5e191d0b3588df150ddb6aa67477a0046394f6ba91c38cb70d4bf5181e5e99d5c5e1fc39ed3c9b793f0520cf96831d65d51b0ecd92e3bee353b413483fa57690152bb4b524fa6d81d82f66bc2b260a40c232dabe1962f0349a078ec42ccc93bd4acbbcfe61af01388719bcf395f27c401f604684a312624820bfa594755fba5a7f61a7d59f364122398b573f37af4b0526099350b43e5bb8c42300be4f2f78a7fd5a317cb6a7cba8758d25122bb3e0fdab6d4968a668fb6db5e9a7944a78dbb0760059e1f3c2e372f28f3787c1c0163fdcf4812c48c08a381a651d4acab89797cf7a4cb1b792d049fdb4d61eb5e65e2870d94b5b23adbabb1c3e6860a021ec90e226475e5b7358199ffe783536ad7be7437b536affb32c74d5c7702b2d6eb47f3b14132bc270ee6ff482fcf6bd5125ac3b17f72e1de54f07d8f97535a0e59c5b8738c9aa630eeddb0c72d3320bf6e99eaf2b321965734106a49b82c57851f2cdbfcbe7197c3eee3a51e03beedb57a186972f0c276579c0cd429e012b3c09f697ec9a71aa074385e1a1c3d3f235bf6e72072be48d025965866667d64a9d80a18baba65ebf3594c5514dee7e4b414e72f79a47a6aab389cfdc5258d08bbb808c97e1f6e0598bc8b7935dc6faa051a95635cc31169b5b8a044a7ecdb9435b1dd5dcf7d28998cb834212777b49a02932787bd690f102fb0772284feed90aa7b5b4887c8d397c0350a010dffe01c6d35e0de2685e6dcc5e71e1542998610b12eec1cebf0bcfa4ddce0bf7b666216c1a352818e941904203dd64d7a253c9632672885e83e2bccd48410a80294a4628f24913cca629fbc5f4a5c4fa0c3c918f479c2247b8cd3768a144894ee10f41f73d18555661b68679dc09f6fb8647f85a4c752d66679468f96400f300d2636e97af596fccb3fa68038ec626d896b40b1297ab4f849dbbe109886fdb3db6cd230271a8c164be8565772125c86059dcb3aa18d40cbcc356450859b5c157f60f4c657d38c0abf8287a836ced10d852025b70000b04d6977306b5d19cac3ed6d50cf0f2a623fce68a233dd6263c0635783998d0a2da76d5080ca8aac7afe8b5750004be87b260f5c6f6dfe4ffbe55fa86924b3fae0f84e2c23f608f41e4d4e4611f22cb282d9ec2413817656806265cd4b0ec24b2ccf79235f348d5d327618c79717f4a849bf838ce3edf7b02fc27bf92abe64aded9f6f2ee8857384dbf63f88471c73cc28366c30b37361ccdb95e16523a6f65f198906b75e148e9ca78ea7e823db6ab7221697e5fc285dfb308ccfa47980e7c4bb4f6047da4cb127ba2334b6ae616098149ffb0cfd5467dc97580d838929b5363768030a59ee1b60f60194094ca8f02ba5aa3eccf7eab811a8204f6f73a886f74d0ac4669d282c7f1cfb29b26f4902f6f7e0b027b01090f362313a5ad20aa719432cea2444959d19c7889f5b3c37ae7439974bd7cb2c03279a402418600bc854b1f9456d62081a89c931b1bf427e3f495e4dcb6f85d9beb948c62a19ea47b40a00525704bda039ba87a7ea1a674da1e9d2da3878438ef4f48fb764f65841934fe0d1886714a422f1b13db25c0587f4557c042545fbae6c91aa2e9fc5a8f84b5fe90427192b0140527c56fc437be55a48d0a82d2fbb8e5254da21a3d48e5632933d1a54b3a2c0bc7ea34321640708a5790185b1f00439971d676ae6fddf92db22bc801cce738768b0618578f192fcfb4a9b9d736b61f7aeaac0ae76039ee17052f20c23754c9e3ab751a5567648eeae2de4183a7ae6d6149eeca6566a7388c3c7ff41bc7e3858978ea73dae0c9af915232f9f05308bb6b7f99fcd265a95edc4ff3ff5ccb02840c75f4d19a118deb7ef445f617bcd15a8c6fb975e51e776527eff86c7b50bcae2e3797d26237ae8e9722639decaf9489b12ad7aeaff6db3e447df91302ac942de2b6ff30b1eb506a43a0e65f02de7d512f41ee700d62b70b982d55dca30494c04a28adee874a1c7c", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x90, 0x0, 0x40100000000, {0x3, 0x3, 0x716, 0x81, 0x2, 0x2c7, {0x1, 0x38000, 0x8, 0x8, 0x1a20, 0xb, 0x5e7, 0x80, 0x9, 0x8000, 0x7, 0x0, r3, 0x8, 0x10000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_pts(r0, 0xc0) 917.016035ms ago: executing program 7 (id=5935): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 650.179008ms ago: executing program 7 (id=5943): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x10, 0x10, 0x0, 0x0, 0x1, 0x0, 0x7}}, 0x1c}}, 0x2000a010) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000003"], 0x8) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'erspan0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3, @ANYBLOB="1e09705d1ebeaba6c5eec2d7bf51aa3fce9e30fb7778151db15d27854a47143aca9b3cddee7dcdcc002feaa15263231ee411ad45787177d5cffa2167af1642791dd6957d0d23ab94e115d3"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 646.75519ms ago: executing program 2 (id=5945): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f00000001c0)={0x79c, r0, 0x32, {0xb, 0x100004000}, 0x2}, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f00000002c0)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0), &(0x7f0000000100)) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) (async) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f00000001c0)={0x79c, r0, 0x32, {0xb, 0x100004000}, 0x2}, 0x1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f00000002c0)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) (async) 552.0053ms ago: executing program 7 (id=5947): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000280)={&(0x7f0000000000)={0xa, 0x4e23, 0x4, @mcast1, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="140000000000000029000000340000000500000000000000"], 0x18}, 0x24000000) 480.627713ms ago: executing program 4 (id=5948): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}, 0x18}}, 0x10) (async, rerun: 32) r1 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) (rerun: 32) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) poll(&(0x7f00000000c0)=[{r2, 0x1117}], 0x1, 0xfffffffb) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x4e, 0x0, 0x1}, 0x28) (async) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) (async) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r4, &(0x7f00000002c0)=""/4096, 0x1000) (async) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x110000, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x800}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000180)={r6, 0xfffffc00}, &(0x7f00000001c0)=0x8) 480.283713ms ago: executing program 7 (id=5949): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$CDROMREADMODE1(r0, 0x530d, &(0x7f0000000180)={0x56, 0xff, 0x82, 0x80, 0x96, 0xff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$nl80211(&(0x7f0000007e00), r2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) poll(&(0x7f0000001940)=[{r5, 0xf0}, {0xffffffffffffffff, 0x4001}, {r5, 0x34}], 0x3, 0x3) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GPU_INFO(r5, 0xc0106440, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000c40)}) 415.930023ms ago: executing program 4 (id=5950): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5423, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5422) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0]) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000440)=@sg0, 0xffffffffffffffff, &(0x7f0000000480)={0xfff, 0x4dfd, 0x0, 0x3}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000002c0)={{0xffffffffffffffff, &(0x7f0000000000)='*\\/)-}}^/^+@^\x00', 0x200c00, &(0x7f0000000080)={@_ha_fsid={[0x101, 0xfffffffb]}, {0x4, 0x5, 0x1, 0x800}}, 0xfff, &(0x7f00000000c0), &(0x7f0000000100)}, {[0x2, 0x8, 0x5, 0x9]}, 0x6, 0x9a, &(0x7f0000000200)=""/154}) clock_gettime(0x7, &(0x7f0000000340)={0x0, 0x0}) lgetxattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@random={'security.', '\x00'}, &(0x7f0000000540)=""/81, 0x51) rmdir(&(0x7f0000000080)='.\x00') utimensat(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380)={{0x0, 0xea60}, {r3, r4/1000+10000}}, 0x100) chown(&(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, 0xee01) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5423, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2000) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5422) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0]) (async) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000440)=@sg0, 0xffffffffffffffff, &(0x7f0000000480)={0xfff, 0x4dfd, 0x0, 0x3}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000002c0)={{0xffffffffffffffff, &(0x7f0000000000)='*\\/)-}}^/^+@^\x00', 0x200c00, &(0x7f0000000080)={@_ha_fsid={[0x101, 0xfffffffb]}, {0x4, 0x5, 0x1, 0x800}}, 0xfff, &(0x7f00000000c0), &(0x7f0000000100)}, {[0x2, 0x8, 0x5, 0x9]}, 0x6, 0x9a, &(0x7f0000000200)=""/154}) (async) clock_gettime(0x7, &(0x7f0000000340)) (async) lgetxattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@random={'security.', '\x00'}, &(0x7f0000000540)=""/81, 0x51) (async) rmdir(&(0x7f0000000080)='.\x00') (async) utimensat(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380)={{0x0, 0xea60}, {r3, r4/1000+10000}}, 0x100) (async) chown(&(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, 0xee01) (async) 414.191398ms ago: executing program 4 (id=5951): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000000)={{0x62000, 0xd000, 0xc, 0x80, 0x2, 0x2, 0x7, 0xc8, 0x9, 0x4, 0x7}, {0xffff1000, 0x6000, 0x1, 0x81, 0x7, 0x6f, 0x3a, 0xa8, 0x1, 0x8, 0x1, 0xc6}, {0xdddd0000, 0x7000, 0x3, 0x0, 0xf8, 0x90, 0x2, 0xf8, 0x8, 0x6, 0x80, 0x9}, {0xc000, 0x70000, 0x3, 0x3, 0x8, 0x0, 0x7f, 0x0, 0x0, 0x7, 0x1, 0xc}, {0x1, 0x80f1000, 0xb, 0x6, 0x7, 0x8, 0x9, 0x3, 0x3, 0x1, 0x14}, {0x200000, 0x40000, 0xd, 0x6, 0x4, 0x8, 0x10, 0x2, 0x3, 0x10, 0x7, 0x4}, {0xa000, 0xf000, 0xa, 0x1, 0x0, 0x6, 0xff, 0x5, 0x4, 0x0, 0x2, 0x1}, {0x2, 0x58000, 0x0, 0x4, 0x5c, 0x80, 0x5, 0x2, 0x3, 0x0, 0x9, 0x86}, {0xeeef0000, 0x4}, {0x7000, 0x8}, 0x40000002, 0x0, 0x1, 0x400408, 0x5, 0x1200, 0x4, [0x101, 0x4, 0x5, 0x80000000]}) (async) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) 363.206414ms ago: executing program 2 (id=5952): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x309800, 0x0) writev(r1, &(0x7f0000001480)=[{&(0x7f0000000600)="0c37f8246f3e", 0x6}, {&(0x7f0000000440)='0', 0x1}], 0x2) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_macvtap\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x90009, 0x3}, {0x8000006, 0x6}]}}) 362.875248ms ago: executing program 4 (id=5953): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="facf6b6749e6fdfd1b6bc5cc989815fe95795ea8b267733ac015af2df9fd26a70968b0ef152c899b22c6fcb1ce782c5eec01351c000eb0bcf166f0309f209c34553b5844969f945020f1d8ade89ba68b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0xfffffc51) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0, 'syz0\x00'}) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r4, 0x0, 0x18, 0x0, &(0x7f0000000040)) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405515, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 'syz1\x00'}) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002040), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r8, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40b3}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f0000002440)={&(0x7f0000002340), 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x28, 0x0, 0x318, 0x70bd20, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5, 0x6e}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001280)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f00000012c0)={r10}) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001240), 0x222480, 0x0) (async) preadv(r0, &(0x7f0000001100)=[{&(0x7f0000000040)=""/1, 0x1}, {&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/95, 0x5f}], 0x3, 0x3, 0x401) (async) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000001140)=0x7) (async) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000001180)=""/140) 362.574059ms ago: executing program 7 (id=5954): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x182df000) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x36, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x29c, 0x10c, 0x150, 0x150, 0x0, 0xf8010000, 0x1d4, 0x238, 0x238, 0x1d4, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'tunl0\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xff], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2f8) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d05, 0x0, 0x390}]}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r1, &(0x7f0000000900)}, 0x20) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x38, r7, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='dctcp', 0x5) (async) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) sendto$inet6(r5, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) (async) sendto$inet6(r5, &(0x7f0000000380)="b3", 0x1, 0x20060000, 0x0, 0x0) 322.493538ms ago: executing program 2 (id=5955): mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x20, &(0x7f00000000c0)={[{@stats}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x4000000}}, {@stats}, {@max={'max', 0x3d, 0x4}}, {@stats}, {@stats}], [{@smackfstransmute}, {@audit}]}) unshare(0x6a040000) 155.890862ms ago: executing program 7 (id=5956): pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r2 = memfd_create(&(0x7f0000000380)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = dup3(r1, r0, 0x0) fchdir(r3) creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000540)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x5, @private2, 0x6}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000300)="f3", 0x1}], 0x1}}], 0x1, 0x44042004) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x4, @private1, 0x4406}], 0x1c) listen(r4, 0x49) accept(r4, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) 155.668401ms ago: executing program 2 (id=5957): r0 = shmget$private(0x0, 0x800000, 0x4, &(0x7f0000173000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_LOCK(r0, 0xb) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) shmctl$SHM_UNLOCK(r0, 0xc) 154.797518ms ago: executing program 9 (id=5958): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) setregid(0xffffffffffffffff, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) pselect6(0x40, &(0x7f0000000900)={0x8000006, 0x0, 0x1ff, 0x3, 0x5, 0x52a9396a, 0x1, 0x8}, 0x0, &(0x7f0000000980)={0x4, 0x7fff, 0x0, 0xc, 0xf, 0x9, 0x3, 0x9}, &(0x7f00000009c0)={0x0, 0x3938700}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001c00070c2bbd7000000000000210000064f521aef7977f05f47ad65f968205ea86", @ANYRES32=r2, @ANYBLOB="0800100014000100000000000000000000000000000000000a000200aaaaaaaaaabb0000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20024014) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000000)=0x9) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x4, 0x4, 0x800006}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) r8 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x1ec, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@TCA_STAB={0x1c8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x0, 0x0, 0x4, 0x2, 0x5, 0x3e2, 0x3}}, {0xa, 0x2, [0x6, 0xee85, 0x7]}}, {{0x1c, 0x1, {0x0, 0x21, 0x1, 0x8000, 0x2, 0x3, 0x8, 0xe}}, {0x20, 0x2, [0xffff, 0x2, 0x9, 0xfffc, 0x2c, 0x8, 0x6fd4, 0x92, 0x3, 0x28d, 0xd02, 0x10, 0xf001, 0x401]}}, {{0x1c, 0x1, {0x0, 0xa8, 0x8000, 0x0, 0x5d1d679740ddd6e1, 0x786a, 0x9, 0x5}}, {0xe, 0x2, [0x7ff, 0xfff9, 0x7, 0x1, 0x7fff]}}, {{0x1c, 0x1, {0x2, 0x7f, 0xfff8, 0x6663, 0x2, 0x3, 0xfffffeff, 0x7}}, {0x12, 0x2, [0x5, 0x1, 0x1, 0x0, 0x9, 0x1000, 0x3]}}, {{0x1c, 0x1, {0x9d, 0x8, 0x3ff, 0x8, 0x2, 0x5, 0xff, 0x4}}, {0xc, 0x2, [0x7, 0x7, 0x5, 0x4]}}, {{0x1c, 0x1, {0xbe, 0x6, 0x9, 0xffff8001, 0x2, 0x0, 0x29, 0x6}}, {0x10, 0x2, [0x1, 0x5, 0x6, 0xfff, 0xb8e, 0x0]}}, {{0x1c, 0x1, {0xd6, 0x80, 0x3, 0xb, 0x2, 0x953, 0x0, 0x4}}, {0xc, 0x2, [0x7f, 0xfffa, 0x2, 0x5]}}, {{0x1c, 0x1, {0xf, 0x9, 0xfc3, 0x34e4, 0x1, 0x9, 0x1ff, 0x6}}, {0x10, 0x2, [0x2, 0x5, 0x7, 0x200, 0x0, 0xfff7]}}, {{0x1c, 0x1, {0x2, 0x1, 0x80, 0x800, 0x0, 0x80000000, 0x5, 0x6}}, {0x10, 0x2, [0x7, 0xffff, 0x9c9, 0x5, 0xffff, 0x5]}}, {{0x1c, 0x1, {0x1, 0xcd, 0x9, 0x9, 0x1, 0x7, 0x800, 0x8}}, {0x14, 0x2, [0x101, 0xf2c, 0x1, 0xffea, 0x19, 0x103, 0x6, 0x7]}}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x8, 0x7}, {}, {0x8, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xb, 0xc}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) 54.154743ms ago: executing program 2 (id=5959): migrate_pages(0x0, 0x6, 0x0, &(0x7f0000000100)=0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) recvmsg$can_raw(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000900)=""/110, 0x6e}], 0x1}, 0x40000040) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) pread64(r0, &(0x7f0000000080)=""/108, 0x6c, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 53.699805ms ago: executing program 4 (id=5960): rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r0 = socket(0xa, 0x2400000001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0xffffffffffffffac, r0, 0x80000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000040)=0xffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 316.422µs ago: executing program 2 (id=5961): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0x1a0, 0x10, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0xfffffffd, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x0, 0x0, 0x70bd28, 0xeaa}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0) 0s ago: executing program 4 (id=5962): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000005c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000600)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000640)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000680)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc03064ca, &(0x7f0000000480)={&(0x7f00000003c0)=[r2, r2], &(0x7f0000000400)=[0xffffffffffffa820], 0xea25, 0x2, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r3, 0xc01864cb, &(0x7f0000000100)={&(0x7f0000000040)=[r4], &(0x7f0000000080), 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f00000006c0)) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, &(0x7f00000007c0)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000800)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x1}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000000900)={0x79, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000940)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000980)) r5 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r5, 0xc03064ca, &(0x7f0000000180)={&(0x7f00000001c0)=[r6], 0x0, 0x200000000009, 0x8d882e851f7e66cb, 0xb}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f00000009c0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000280)) r7 = syz_open_dev$dri(&(0x7f0000000340), 0x9, 0x241) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r7, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r7, 0xc02064cc, &(0x7f00000001c0)={r8, r8, 0x1, 0x5, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r7, 0xc01864cd, &(0x7f0000000300)={&(0x7f0000000180)=[r8, r8, r8], &(0x7f0000000140)=[0x7fff], 0x3}) ioctl$DRM_IOCTL_PANTHOR_VM_BIND(r1, 0xc0186443, &(0x7f0000000c40)={0x0, 0x0, {0x30, 0x0, &(0x7f0000000080)}}) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @empty, 0x4}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000240)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x40000) kernel console output (not intermixed with test programs): n invalid interface number: 7 but max is 0 [ 636.554668][ T10] usb 12-1: config 1 has no interface number 0 [ 636.558123][ T10] usb 12-1: config 1 interface 7 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1023 [ 636.562386][ T10] usb 12-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 636.569309][ T10] usb 12-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 636.573332][ T10] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.576686][ T10] usb 12-1: Product: syz [ 636.578566][ T10] usb 12-1: Manufacturer: syz [ 636.580813][ T10] usb 12-1: SerialNumber: syz [ 636.586899][ T917] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 636.590166][ T917] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 636.591311][T21548] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 636.595226][ T10] usb 12-1: Expected 3 endpoints, found: 2 [ 636.761919][T21548] usb 14-1: Using ep0 maxpacket: 8 [ 636.765911][T21548] usb 14-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.770572][T21548] usb 14-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.774962][T21548] usb 14-1: config 0 interface 0 has no altsetting 0 [ 636.777201][T21548] usb 14-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 636.780455][T21548] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.787585][T21548] usb 14-1: config 0 descriptor?? [ 637.187598][ T959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.192333][ T959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.196225][ T959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.199569][ T959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.203239][ T959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.206432][ T959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.211221][ T959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.215696][ T959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.233174][T21548] hid_parser_main: 4091 callbacks suppressed [ 637.233187][T21548] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 637.243714][T21548] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 637.246063][T21548] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 637.248378][T21548] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 637.250637][T21548] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 637.255340][T21548] mcp2221 0003:04D8:00DD.0010: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 637.445946][ T939] could not open pipe file descriptor [ 637.543737][T21548] usb 14-1: USB disconnect, device number 2 [ 638.058790][ T68] usb 6-1: USB disconnect, device number 20 [ 638.089248][ T1052] overlayfs: failed to resolve './file0': -2 [ 638.133931][ T40] audit: type=1800 audit(1771861390.061:5660): pid=1058 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.5044" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 638.226116][ T1072] IPv6: NLM_F_CREATE should be specified when creating new route [ 638.322482][ T1069] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5047'. [ 638.326091][ T1069] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5047'. [ 638.524320][ T1097] SELinux: ebitmap start bit (3558939718) is not a multiple of the map unit size (64) [ 638.531865][ T1097] SELinux: failed to load policy [ 638.574953][ T1103] overlayfs: overlapping lowerdir path [ 638.590384][ T1108] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 638.593176][ T1108] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 638.600736][ T1108] vhci_hcd vhci_hcd.0: Device attached [ 638.658794][ T1132] netlink: 'syz.9.5059': attribute type 1 has an invalid length. [ 638.663351][ T1132] netlink: 96 bytes leftover after parsing attributes in process `syz.9.5059'. [ 638.667050][ T1132] netlink: 1 bytes leftover after parsing attributes in process `syz.9.5059'. [ 638.672203][ T1132] netlink: 658 bytes leftover after parsing attributes in process `syz.9.5059'. [ 638.863134][ T34] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 638.866406][ T50] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 638.987587][ T1173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5066'. [ 638.996420][ T1173] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input59 [ 639.034989][ T34] usb 11-1: config 0 has no interfaces? [ 639.036779][ T34] usb 11-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 639.039783][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.045291][ T34] usb 11-1: config 0 descriptor?? [ 639.267555][ T1108] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5056'. [ 639.277053][T12223] usb 11-1: USB disconnect, device number 20 [ 639.281658][ T1109] vhci_hcd: connection closed [ 639.283454][T13028] vhci_hcd vhci_hcd.6: stop threads [ 639.287083][T13028] vhci_hcd vhci_hcd.6: release socket [ 639.290886][T13028] vhci_hcd vhci_hcd.6: disconnect device [ 639.326921][ T68] usb 12-1: USB disconnect, device number 18 [ 639.332411][ T50] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 639.518112][ T1237] o2cb: This node has not been configured. [ 639.520600][ T1237] o2cb: Cluster check failed. Fix errors before retrying. [ 639.522961][ T1237] (syz.9.5075,1237,0):user_dlm_register:674 ERROR: status = -22 [ 639.527565][ T1237] (syz.9.5075,1237,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 639.542506][ T1241] F2FS-fs: Conflicting test_dummy_encryption options [ 639.793007][ T1280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=1280 comm=syz.1.5086 [ 639.797920][ T1280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=1280 comm=syz.1.5086 [ 639.957298][ T1309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5095'. [ 640.065269][ T1328] team0 (unregistering): Port device team_slave_0 removed [ 640.071029][ T1328] team0 (unregistering): Port device team_slave_1 removed [ 640.084827][ T1338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.088530][ T1338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.163855][ T68] usb 12-1: new high-speed USB device number 19 using dummy_hcd [ 640.245763][ T1363] hfsplus: unable to find HFS+ superblock [ 640.327148][ T68] usb 12-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 640.330539][ T68] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.333272][ T68] usb 12-1: Product: syz [ 640.335944][ T68] usb 12-1: Manufacturer: syz [ 640.337582][ T68] usb 12-1: SerialNumber: syz [ 640.342736][ T68] usb 12-1: config 0 descriptor?? [ 640.345291][T21548] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 640.348626][ T68] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 640.359212][ T68] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 640.363804][ T68] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 640.368079][ T68] usb 12-1: media controller created [ 640.391390][ T68] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 640.451151][ T1412] tipc: Enabled bearer , priority 0 [ 640.456705][ T68] DVB: Unable to find symbol mt352_attach() [ 640.477017][ T68] DVB: Unable to find symbol nxt6000_attach() [ 640.479182][ T68] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 640.486053][ T68] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb12/12-1/input/input61 [ 640.488660][ T1412] syzkaller0: entered promiscuous mode [ 640.491851][ T1412] syzkaller0: entered allmulticast mode [ 640.492284][ T68] dvb-usb: schedule remote query interval to 1000 msecs. [ 640.495049][ T1412] tipc: Resetting bearer [ 640.496466][ T68] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 640.499516][ T1412] loop5: detected capacity change from 0 to 2640 [ 640.501737][ T68] dvb-usb: bulk message failed: -22 (7/0) [ 640.506797][T12573] Buffer I/O error on dev loop5, logical block 0, async page read [ 640.507090][T12573] Buffer I/O error on dev loop5, logical block 0, async page read [ 640.511602][ T68] dvb-usb: bulk message failed: -22 (7/0) [ 640.512770][T12573] Buffer I/O error on dev loop5, logical block 0, async page read [ 640.517296][ T1411] tipc: Resetting bearer [ 640.517356][T12573] Buffer I/O error on dev loop5, logical block 0, async page read [ 640.521964][T12573] Buffer I/O error on dev loop5, logical block 0, async page read [ 640.537700][T21548] usb 6-1: Using ep0 maxpacket: 16 [ 640.542824][T21548] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 640.545912][T21548] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 640.551910][T21548] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 640.555960][T21548] usb 6-1: config 1 interface 0 has no altsetting 0 [ 640.560200][T21548] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 640.563193][T21548] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.564061][ T1293] dvb-usb: bulk message failed: -22 (7/0) [ 640.565671][T21548] usb 6-1: Product: syz [ 640.565681][T21548] usb 6-1: Manufacturer: syz [ 640.565689][T21548] usb 6-1: SerialNumber: syz [ 640.577433][ T1293] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 640.789871][T21548] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 640.804028][T21548] usb 6-1: USB disconnect, device number 21 [ 640.814379][T21548] usblp0: removed [ 640.999497][ T1450] binder: 1448:1450 ioctl 890b 2000000043c0 returned -22 [ 641.646258][ T6250] dvb-usb: bulk message failed: -22 (7/0) [ 641.651118][ T6250] dvb-usb: error while querying for an remote control event. [ 642.263528][ T1411] tipc: Disabling bearer [ 642.272661][ T50] usb 12-1: USB disconnect, device number 19 [ 642.283069][ T68] tipc: Node number set to 2410457542 [ 642.334251][ T50] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 642.387828][ T1483] overlayfs: failed to resolve './file0': -2 [ 642.450085][ T1489] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5120'. [ 642.452987][ T1489] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5120'. [ 642.456205][ T1489] netlink: 'syz.6.5120': attribute type 19 has an invalid length. [ 642.574026][ T68] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 642.745249][ T68] usb 14-1: too many configurations: 9, using maximum allowed: 8 [ 642.748550][ T68] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 642.751293][ T68] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 642.754413][ T68] usb 14-1: config 0 interface 0 has no altsetting 0 [ 642.757615][ T68] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 642.760247][ T68] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 642.763418][ T68] usb 14-1: config 0 interface 0 has no altsetting 0 [ 642.766230][ T68] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 642.769161][ T68] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 642.772311][ T68] usb 14-1: config 0 interface 0 has no altsetting 0 [ 642.775193][ T68] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 642.776912][ T50] usb 11-1: new full-speed USB device number 21 using dummy_hcd [ 642.777987][ T68] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 642.784012][ T68] usb 14-1: config 0 interface 0 has no altsetting 0 [ 642.786623][ T68] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 642.789621][ T68] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 642.792731][ T68] usb 14-1: config 0 interface 0 has no altsetting 0 [ 642.795455][ T68] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 642.798143][ T68] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 642.801263][ T68] usb 14-1: config 0 interface 0 has no altsetting 0 [ 642.804049][ T68] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 642.806720][ T68] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 642.809950][ T68] usb 14-1: config 0 interface 0 has no altsetting 0 [ 642.814035][ T68] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 642.816627][ T68] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 642.820225][ T68] usb 14-1: config 0 interface 0 has no altsetting 0 [ 642.823835][ T68] usb 14-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 642.826451][ T68] usb 14-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 642.828870][ T68] usb 14-1: Product: syz [ 642.830260][ T68] usb 14-1: Manufacturer: syz [ 642.831714][ T68] usb 14-1: SerialNumber: syz [ 642.834983][ T68] usb 14-1: config 0 descriptor?? [ 642.839886][ T68] yurex 14-1:0.0: USB YUREX device now attached to Yurex #0 [ 642.951331][ T50] usb 11-1: config index 0 descriptor too short (expected 28277, got 36) [ 642.954614][ T50] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 642.967556][ T50] usb 11-1: config 0 has no interfaces? [ 642.969589][ T50] usb 11-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 642.972537][ T50] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.976488][ T50] usb 11-1: config 0 descriptor?? [ 643.021059][ T40] audit: type=1326 audit(1771861394.647:5661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1508 comm="syz.7.5124" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fadf959bf79 code=0x0 [ 643.057295][T21548] usb 14-1: USB disconnect, device number 3 [ 643.065681][T21548] yurex 14-1:0.0: USB YUREX #0 now disconnected [ 643.198114][ T1494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.202056][ T1494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.258375][ T1494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.262878][ T1494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.294114][ T1527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1527 comm=syz.1.5125 [ 643.935262][ T1550] binder: 1548:1550 ioctl c0306201 200000000040 returned -22 [ 643.943756][ T1549] vxlan0: entered promiscuous mode [ 643.945408][ T1549] vxlan0: entered allmulticast mode [ 643.947471][T15517] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.961983][T15517] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.965704][T15517] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.969358][T15517] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.013172][ T40] audit: type=1400 audit(1771861395.575:5662): avc: denied { read } for pid=1561 comm="syz.7.5135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 644.096138][ T1569] binder: 1568:1569 ioctl 5395 200000000100 returned -22 [ 644.183434][ T1578] nfs4: Unknown parameter '18446744073709551615Czl ֬7hMw .ȫ$ut:}6dI' [ 644.217899][ T1582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=1582 comm=syz.7.5142 [ 644.504410][ T5996] usb 12-1: new full-speed USB device number 20 using dummy_hcd [ 644.676963][ T5996] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 644.681155][ T5996] usb 12-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 644.686493][ T5996] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 644.690486][ T5996] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.709044][ T5996] usbtmc 12-1:16.0: bulk endpoints not found [ 645.229646][ T62] Bluetooth: hci1: command 0x0406 tx timeout [ 645.727709][T12223] usb 11-1: USB disconnect, device number 21 [ 646.085633][ T1653] openvswitch: netlink: Flow actions attr not present in new flow. [ 646.130756][ T1664] __nla_validate_parse: 1 callbacks suppressed [ 646.130773][ T1664] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5151'. [ 646.138213][ T1664] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5151'. [ 646.379652][ T1771] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 646.690939][ T1796] input: syz1 as /devices/virtual/input/input62 [ 646.776019][ T50] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 646.827171][ T1805] bond3: option downdelay: invalid value (18446744073709551615) [ 646.830234][ T1805] bond3: option downdelay: allowed values 0 - 2147483647 [ 646.833792][ T1805] bond3 (unregistering): Released all slaves [ 646.946474][ T50] usb 14-1: Using ep0 maxpacket: 8 [ 646.949957][ T50] usb 14-1: unable to read config index 0 descriptor/start: -61 [ 646.952671][ T50] usb 14-1: can't read configurations, error -61 [ 647.096104][ T50] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 647.101183][ T1882] vivid-003: ================= START STATUS ================= [ 647.103627][ T1882] vivid-003: Radio HW Seek Mode: Bounded [ 647.105488][ T1882] vivid-003: Radio Programmable HW Seek: false [ 647.110090][ T1882] vivid-003: RDS Rx I/O Mode: Block I/O [ 647.112036][ T1882] vivid-003: Generate RBDS Instead of RDS: false [ 647.114087][ T1882] vivid-003: RDS Reception: true [ 647.115885][ T1882] vivid-003: RDS Program Type: 0 inactive [ 647.118405][ T1882] vivid-003: RDS PS Name: inactive [ 647.120368][ T1882] vivid-003: RDS Radio Text: inactive [ 647.122224][ T1882] vivid-003: RDS Traffic Announcement: false inactive [ 647.124561][ T1882] vivid-003: RDS Traffic Program: false inactive [ 647.126672][ T1882] vivid-003: RDS Music: false inactive [ 647.128665][ T1882] vivid-003: ================== END STATUS ================== [ 647.135293][ T40] audit: type=1400 audit(1771861398.501:5663): avc: denied { watch watch_reads } for pid=1881 comm="syz.6.5165" path="/143/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 647.217718][ T1886] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5166'. [ 647.220688][ T1886] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5166'. [ 647.255813][ T50] usb 14-1: Using ep0 maxpacket: 8 [ 647.260370][ T50] usb 14-1: unable to read config index 0 descriptor/start: -61 [ 647.263552][ T50] usb 14-1: can't read configurations, error -61 [ 647.266693][ T50] usb usb14-port1: attempt power cycle [ 647.326382][ T1892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5167'. [ 647.428687][T21548] usb 12-1: USB disconnect, device number 20 [ 647.451299][ T1900] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 647.453408][ T1900] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 647.456125][ T1900] vhci_hcd vhci_hcd.0: Device attached [ 647.461572][ T1900] vhci_hcd vhci_hcd.0: port 0 already used [ 647.464739][ T1901] vhci_hcd: connection closed [ 647.464915][T15515] vhci_hcd vhci_hcd.7: stop threads [ 647.468448][T15515] vhci_hcd vhci_hcd.7: release socket [ 647.470379][T15515] vhci_hcd vhci_hcd.7: disconnect device [ 647.640637][ T50] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 647.661640][ T50] usb 14-1: Using ep0 maxpacket: 8 [ 647.665102][ T50] usb 14-1: unable to read config index 0 descriptor/start: -61 [ 647.667683][ T50] usb 14-1: can't read configurations, error -61 [ 647.799850][ T50] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 647.821678][ T50] usb 14-1: Using ep0 maxpacket: 8 [ 647.826044][ T50] usb 14-1: unable to read config index 0 descriptor/start: -61 [ 647.828841][ T50] usb 14-1: can't read configurations, error -61 [ 647.831339][ T50] usb usb14-port1: unable to enumerate USB device [ 647.959870][ T5930] Bluetooth: hci2: command tx timeout [ 648.040365][ T1906] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5169'. [ 648.046365][ T1906] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5169'. [ 648.057958][ T1906] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=1906 comm=syz.7.5169 [ 648.184942][ T1913] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 648.186905][ T1913] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 648.189585][ T1913] vhci_hcd vhci_hcd.0: Device attached [ 648.193604][ T1913] vhci_hcd vhci_hcd.0: port 0 already used [ 648.199432][ T1914] vhci_hcd: connection closed [ 648.199722][T15514] vhci_hcd vhci_hcd.6: stop threads [ 648.203992][T15514] vhci_hcd vhci_hcd.6: release socket [ 648.206500][T15514] vhci_hcd vhci_hcd.6: disconnect device [ 648.354124][ T6250] usb 12-1: new high-speed USB device number 21 using dummy_hcd [ 648.514451][ T6250] usb 12-1: Using ep0 maxpacket: 8 [ 648.517537][ T6250] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 648.520253][ T6250] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 648.523593][ T6250] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 648.526996][ T6250] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 648.530394][ T6250] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 648.535460][ T6250] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 648.539304][ T6250] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.761919][ T6250] usb 12-1: GET_CAPABILITIES returned 0 [ 648.763717][ T6250] usbtmc 12-1:16.0: can't read capabilities [ 648.948021][ T1928] netlink: 'syz.6.5173': attribute type 4 has an invalid length. [ 648.950518][ T1928] netlink: 17 bytes leftover after parsing attributes in process `syz.6.5173'. [ 648.976774][ T40] audit: type=1326 audit(1771861400.235:5664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1907 comm="syz.7.5170" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fadf959bf79 code=0x0 [ 649.084768][ T5996] usb 12-1: USB disconnect, device number 21 [ 649.239502][T12223] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 649.399330][T12223] usb 11-1: Using ep0 maxpacket: 8 [ 649.403707][T12223] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 649.406889][T12223] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 649.410210][T12223] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 649.413853][T12223] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 649.417130][T12223] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 649.421531][T12223] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 649.424481][T12223] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.644638][ T1953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.647700][ T1953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.650975][ T1953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.653841][ T1953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.657292][ T1953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.660425][ T1953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.663628][ T1953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.667533][ T1953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.670711][ T1953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.673543][ T1953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.682877][T12223] usb 11-1: GET_CAPABILITIES returned 0 [ 649.684770][T12223] usbtmc 11-1:16.0: can't read capabilities [ 649.710097][ T50] usb 11-1: USB disconnect, device number 22 [ 650.075625][ T2019] netlink: 'syz.9.5183': attribute type 1 has an invalid length. [ 650.572348][T21548] usb 14-1: new low-speed USB device number 8 using dummy_hcd [ 650.732958][T21548] usb 14-1: Invalid ep0 maxpacket: 64 [ 650.871263][T21548] usb 14-1: new low-speed USB device number 9 using dummy_hcd [ 651.031033][T21548] usb 14-1: Invalid ep0 maxpacket: 64 [ 651.033636][T21548] usb usb14-port1: attempt power cycle [ 651.393466][T21548] usb 14-1: new low-speed USB device number 10 using dummy_hcd [ 651.415623][T21548] usb 14-1: Invalid ep0 maxpacket: 64 [ 651.553796][T21548] usb 14-1: new low-speed USB device number 11 using dummy_hcd [ 651.576001][T21548] usb 14-1: Invalid ep0 maxpacket: 64 [ 651.578187][T21548] usb usb14-port1: unable to enumerate USB device [ 652.174330][ T2068] netlink: 'syz.6.5193': attribute type 30 has an invalid length. [ 652.201272][ T2068] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5193'. [ 652.225763][ T2052] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 652.575716][ T2146] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 652.638149][ T2154] binder: 2153:2154 ioctl 40045613 200000000180 returned -22 [ 652.647428][ T2154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2154 comm=syz.7.5208 [ 652.671902][ T2156] netlink: 'syz.6.5209': attribute type 4 has an invalid length. [ 652.703285][ T2158] 8021q: adding VLAN 0 to HW filter on device bond5 [ 652.721031][ T2197] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5211'. [ 652.763029][ T2197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=2197 comm=syz.6.5211 [ 652.770647][ T2197] usb usb8: usbfs: process 2197 (syz.6.5211) did not claim interface 0 before use [ 653.101995][ T2305] bond4: Unable to set up delay as MII monitoring is disabled [ 653.106448][ T2305] bond4 (unregistering): Released all slaves [ 653.785829][ T2393] md: md2 stopped. [ 653.818697][ T2393] xt_hashlimit: size too large, truncated to 1048576 [ 653.977655][ T2398] veth1_macvtap: left promiscuous mode [ 654.346601][ T2438] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5231'. [ 654.382627][ T2442] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5232'. [ 654.451159][ T2449] CIFS mount error: No usable UNC path provided in device string! [ 654.451159][ T2449] [ 654.454605][ T2449] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 654.572230][ T2467] pim6reg: entered allmulticast mode [ 654.639987][ T2478] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5241'. [ 654.651886][ T2481] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5242'. [ 654.673060][ T2481] 8021q: adding VLAN 0 to HW filter on device bond1 [ 654.682826][ T2482] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.5242'. [ 654.737368][ T40] audit: type=1400 audit(1771861405.636:5665): avc: denied { write } for pid=2521 comm="syz.9.5245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 654.963154][ T2547] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.5249'. [ 654.972153][ T2547] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5249'. [ 654.976017][ T2547] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5249'. [ 655.075124][ T2610] trusted_key: encrypted_key: keylen parameter is missing [ 655.087500][ T2612] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 655.089919][ T2612] overlayfs: failed to set xattr on upper [ 655.091786][ T2612] overlayfs: ...falling back to redirect_dir=nofollow. [ 655.095440][ T2612] overlayfs: ...falling back to metacopy=off. [ 655.097390][ T2612] overlayfs: ...falling back to index=off. [ 655.099263][ T2612] overlayfs: ...falling back to uuid=null. [ 655.138473][ T2617] fuse: Unknown parameter 'fD50x0000000000000003' [ 655.165507][ T2623] fuse: Bad value for 'group_id' [ 655.167264][ T2623] fuse: Bad value for 'group_id' [ 655.244117][ T40] audit: type=1400 audit(1771861406.115:5666): avc: denied { setattr } for pid=2631 comm="syz.9.5260" name="[userfaultfd]" dev="anon_inodefs" ino=108325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 655.306524][ T2629] usb usb9: usbfs: process 2629 (syz.6.5259) did not claim interface 9 before use [ 655.616215][ T2640] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 655.747352][ T2642] netlink: 'syz.7.5262': attribute type 27 has an invalid length. [ 655.804153][ T2642] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.807639][ T2642] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.901753][ T2642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.915203][ T2642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.063153][ T2642] macsec1: left promiscuous mode [ 656.069668][ T2642] macsec1: left allmulticast mode [ 656.079254][ T2642] bridge2: left promiscuous mode [ 656.081450][ T2642] bridge2: left allmulticast mode [ 656.103525][T15514] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 656.107487][T15514] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.111312][T15514] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 656.115063][T15514] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.121068][T15514] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 656.123854][T15514] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.126690][T15514] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 656.139140][T15514] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.431653][ T2708] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 656.957789][ T40] audit: type=1400 audit(1771861407.709:5667): avc: denied { watch watch_with_perm } for pid=2755 comm="syz.6.5284" path="/189/bus" dev="tmpfs" ino=1018 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 657.259416][ T24] usb 11-1: new full-speed USB device number 23 using dummy_hcd [ 657.441901][ T24] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 657.445954][ T24] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 657.451751][ T24] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 657.455552][ T24] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.677768][ T24] usb 11-1: usb_control_msg returned -32 [ 657.679687][ T24] usbtmc 11-1:16.0: can't read capabilities [ 657.822766][T13026] bond0: (slave bond_slave_0): interface is now down [ 657.823827][ T2783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.829644][T13026] bond0: (slave bond_slave_1): interface is now down [ 657.839291][T13026] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 657.846161][T13026] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 657.851819][T13026] bond0: now running without any active interface! [ 657.869307][ T2786] __nla_validate_parse: 6 callbacks suppressed [ 657.869320][ T2786] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.5290'. [ 658.019875][ T2813] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5297'. [ 658.020554][ T2814] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5297'. [ 658.026411][ T2814] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5297'. [ 658.029722][ T2814] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5297'. [ 658.041227][ T2813] bond2: entered promiscuous mode [ 658.043082][ T2813] 8021q: adding VLAN 0 to HW filter on device bond2 [ 658.085293][ T2863] netlink: 120 bytes leftover after parsing attributes in process `syz.9.5298'. [ 658.113775][ T2864] netlink: 'syz.6.5285': attribute type 7 has an invalid length. [ 658.124299][ T2866] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 658.219707][ T2872] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2872 comm=syz.7.5300 [ 658.225173][ T2872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 659.364587][ T62] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 659.371238][ T62] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 659.375482][ T62] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 659.382283][ T62] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 659.384959][ T62] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 659.484087][ T2928] chnl_net:caif_netlink_parms(): no params data found [ 659.540360][ T2928] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.543396][ T2928] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.545771][ T2928] bridge_slave_0: entered allmulticast mode [ 659.549450][ T2928] bridge_slave_0: entered promiscuous mode [ 659.554527][ T2928] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.557411][ T2928] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.560474][ T2928] bridge_slave_1: entered allmulticast mode [ 659.565415][ T2928] bridge_slave_1: entered promiscuous mode [ 659.584707][ T2928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.589251][ T2928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.607568][ T2928] team0: Port device team_slave_0 added [ 659.610771][ T2928] team0: Port device team_slave_1 added [ 659.625075][ T2928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.628364][ T2928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.636422][ T2928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.641178][ T2928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.643402][ T2928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.651394][ T2928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.678792][ T2928] hsr_slave_0: entered promiscuous mode [ 659.682005][ T2928] hsr_slave_1: entered promiscuous mode [ 659.684213][ T2928] debugfs: 'hsr0' already exists in 'hsr' [ 659.686044][ T2928] Cannot create hsr debugfs directory [ 659.718206][ T3174] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 659.854146][ T3236] sctp: [Deprecated]: syz.7.5311 (pid 3236) Use of int in max_burst socket option deprecated. [ 659.854146][ T3236] Use struct sctp_assoc_value instead [ 659.896410][ T40] audit: type=1400 audit(1771861410.475:5668): avc: denied { shutdown } for pid=3239 comm="syz.7.5312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 660.202495][ T50] usb 11-1: USB disconnect, device number 23 [ 660.270109][ T40] audit: type=1400 audit(1771861410.822:5669): avc: denied { read } for pid=3275 comm="syz.9.5315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 660.592607][ T3348] netlink: 64 bytes leftover after parsing attributes in process `syz.9.5317'. [ 660.683217][ T2928] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 660.688528][ T2928] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 660.693353][ T2928] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 660.697843][ T2928] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 660.705646][ T50] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 660.774451][ T2928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.785975][ T2928] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.792557][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.795548][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.808739][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.811933][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.863965][ T50] usb 11-1: Using ep0 maxpacket: 8 [ 660.867910][ T50] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 660.873533][ T50] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 660.877951][ T50] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 660.882964][ T50] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 660.888949][ T50] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 660.892758][ T50] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.909690][ T2928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 661.082454][ T2928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.131708][ T50] usb 11-1: GET_CAPABILITIES returned 0 [ 661.134135][ T50] usbtmc 11-1:16.0: can't read capabilities [ 661.139112][ T2928] veth0_vlan: entered promiscuous mode [ 661.158161][ T2928] veth1_vlan: entered promiscuous mode [ 661.190264][ T2928] veth0_macvtap: entered promiscuous mode [ 661.196520][ T2928] veth1_macvtap: entered promiscuous mode [ 661.210566][ T2928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.229282][ T2928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.257864][T15514] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.274837][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.278915][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.311692][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.319012][T13028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.321521][T13028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.347058][T15503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.350344][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 661.353252][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 661.356097][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 661.359003][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 661.361871][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 661.364734][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 661.367655][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 661.370608][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 661.373467][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 661.377205][T15503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.380036][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 661.382968][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 661.385768][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 661.388649][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 661.391691][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 661.394547][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 661.397339][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 661.403310][T21548] usb 11-1: USB disconnect, device number 24 [ 661.481760][ T3472] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5329'. [ 661.520705][ T40] audit: type=1400 audit(1771861411.994:5670): avc: denied { read } for pid=3467 comm="syz.9.5328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 661.610547][ T62] Bluetooth: hci3: command tx timeout [ 661.746725][ T3499] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 662.439048][ T3527] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5339'. [ 662.443027][ T3528] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5339'. [ 662.872024][ T40] audit: type=1326 audit(1771861413.260:5671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3564 comm="syz.9.5349" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25f399bf79 code=0x0 [ 663.143750][ T3597] netlink: 'syz.6.5358': attribute type 19 has an invalid length. [ 663.148285][ T3597] netlink: 'syz.6.5358': attribute type 19 has an invalid length. [ 663.362663][ T29] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 663.364483][ T40] audit: type=1400 audit(1771861413.719:5672): avc: denied { write } for pid=3623 comm="syz.6.5366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 663.431327][ T3629] xt_TPROXY: Can be used only with -p tcp or -p udp [ 663.531638][ T29] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 663.534871][ T29] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 663.538990][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 663.544166][ T29] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 663.547948][ T29] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 663.551624][ T29] usb 5-1: Product: syz [ 663.553430][ T29] usb 5-1: Manufacturer: syz [ 663.555404][ T29] usb 5-1: SerialNumber: syz [ 663.560286][ T29] usb 5-1: config 0 descriptor?? [ 663.564708][ T29] hub 5-1:0.0: bad descriptor, ignoring hub [ 663.567224][ T29] hub 5-1:0.0: probe with driver hub failed with error -5 [ 663.572693][ T29] usb 5-1: selecting invalid altsetting 0 [ 663.814826][ T3659] sctp: [Deprecated]: syz.9.5372 (pid 3659) Use of int in max_burst socket option. [ 663.814826][ T3659] Use struct sctp_assoc_value instead [ 663.828222][ T5930] Bluetooth: hci3: command tx timeout [ 664.315807][ T3669] fuse: Bad value for 'fd' [ 664.319637][ T3669] fuse: Bad value for 'fd' [ 664.381535][ T3676] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 664.385713][ T3676] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 664.417805][ T3678] openvswitch: netlink: IPv4 tunnel dst address is zero [ 664.461515][ T3680] __nla_validate_parse: 4 callbacks suppressed [ 664.461527][ T3680] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5379'. [ 664.724382][ T3704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.746911][ T3706] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5386'. [ 664.773162][ T3708] VFS: Mount too revealing [ 664.871879][ T3723] macvlan2: entered promiscuous mode [ 664.933092][ T3729] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5392'. [ 664.939890][ T3729] bond0: entered promiscuous mode [ 664.941794][ T3729] bond_slave_0: entered promiscuous mode [ 664.944124][ T3729] bond_slave_1: entered promiscuous mode [ 664.947069][ T3729] batadv_slave_0: entered promiscuous mode [ 664.957093][ T3729] batadv_slave_0: left promiscuous mode [ 664.959489][ T3729] bond0: left promiscuous mode [ 664.961299][ T3729] bond_slave_0: left promiscuous mode [ 664.963193][ T3729] bond_slave_1: left promiscuous mode [ 665.178885][ T3750] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 665.232477][ T3755] netlink: 'syz.7.5399': attribute type 62 has an invalid length. [ 665.234961][ T3755] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5399'. [ 665.318489][ T3760] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5401'. [ 665.663094][ T3783] fuse: Bad value for 'fd' [ 665.803780][ T3795] netlink: 80 bytes leftover after parsing attributes in process `syz.9.5411'. [ 665.807525][ T3795] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5411'. [ 666.046574][ T5930] Bluetooth: hci3: command 0x040f tx timeout [ 666.109880][T15503] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.115477][T15503] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.213460][T15503] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.216823][T15503] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.247292][ T5930] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 666.254097][ T5930] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 666.257337][ T5930] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 666.262099][ T5930] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 666.264850][ T5930] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 666.329221][T15503] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.334259][T15503] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.428926][T15503] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.432569][T15503] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.443287][ T3907] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5417'. [ 666.454623][ T3907] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5417'. [ 666.454651][T13026] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.461328][T13026] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.475326][ T13] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.480124][ T13] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.526957][ T3927] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5418'. [ 666.563191][ T3868] chnl_net:caif_netlink_parms(): no params data found [ 666.586485][ T40] audit: type=1326 audit(1771861416.739:5673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3970 comm="syz.7.5419" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf959bf79 code=0x7ffc0000 [ 666.605100][T15503] bridge_slave_1: left allmulticast mode [ 666.606953][T15503] bridge_slave_1: left promiscuous mode [ 666.608827][T15503] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.614429][T15503] bridge_slave_0: left allmulticast mode [ 666.616245][T15503] bridge_slave_0: left promiscuous mode [ 666.618111][T15503] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.699219][ T4004] netlink: 'syz.7.5422': attribute type 1 has an invalid length. [ 666.701741][ T4004] netlink: 'syz.7.5422': attribute type 2 has an invalid length. [ 667.284482][ T29] usb 5-1: USB disconnect, device number 10 [ 667.343755][T15503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.358530][T15503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.365191][T15503] bond0 (unregistering): Released all slaves [ 667.381320][T15503] bond1 (unregistering): Released all slaves [ 667.388375][T15503] bond2 (unregistering): Released all slaves [ 667.404186][T15503] bond3 (unregistering): Released all slaves [ 667.411197][T15503] bond4 (unregistering): Released all slaves [ 667.476880][ T3868] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.479524][ T3868] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.482280][ T3868] bridge_slave_0: entered allmulticast mode [ 667.492916][ T3868] bridge_slave_0: entered promiscuous mode [ 667.505549][ T3868] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.519728][ T3868] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.522199][ T3868] bridge_slave_1: entered allmulticast mode [ 667.525032][ T3868] bridge_slave_1: entered promiscuous mode [ 667.556028][ T3868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.560467][ T3868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.588075][ T3868] team0: Port device team_slave_0 added [ 667.591254][ T3868] team0: Port device team_slave_1 added [ 667.605436][ T3868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.607788][ T3868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.619340][ T3868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.623877][ T3868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.645953][ T3868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.664071][ T3868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.688694][ T29] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 667.696555][T15503] tipc: Left network mode [ 667.710976][ T3868] hsr_slave_0: entered promiscuous mode [ 667.713358][ T3868] hsr_slave_1: entered promiscuous mode [ 667.721423][ T3868] debugfs: 'hsr0' already exists in 'hsr' [ 667.723273][ T3868] Cannot create hsr debugfs directory [ 667.754782][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.872416][ T29] usb 5-1: config 0 has an invalid interface number: 249 but max is 0 [ 667.875094][ T29] usb 5-1: config 0 has no interface number 0 [ 667.877071][ T29] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 667.891466][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.895341][ T29] usb 5-1: config 0 descriptor?? [ 667.902554][ T29] port100 5-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 668.264812][ T62] Bluetooth: hci3: command 0x040f tx timeout [ 668.305548][T15503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.308724][T15503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.311541][T15503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.328510][T15503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.337385][T15503] veth1_macvtap: left promiscuous mode [ 668.341729][ T4088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.343110][T15503] veth0_macvtap: left promiscuous mode [ 668.344769][ T4088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.353596][ T68] usb 5-1: USB disconnect, device number 11 [ 668.353993][T15503] veth1_vlan: left promiscuous mode [ 668.357641][T15503] veth0_vlan: left promiscuous mode [ 668.449770][ T62] Bluetooth: hci2: command tx timeout [ 668.541934][T15503] team0 (unregistering): Port device team_slave_1 removed [ 668.549192][T15503] team0 (unregistering): Port device team_slave_0 removed [ 669.080609][T15503] IPVS: stop unused estimator thread 0... [ 669.260659][ T3868] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 669.273151][ T3868] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 669.290218][ T3868] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 669.302210][ T3868] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 669.321970][ T4397] macvtap1: entered promiscuous mode [ 669.323728][ T4397] macvtap1: entered allmulticast mode [ 669.325780][ T4397] mac80211_hwsim hwsim50 wlan0: entered promiscuous mode [ 669.329311][ T4397] mac80211_hwsim hwsim50 wlan0: entered allmulticast mode [ 669.333232][ T4397] team0: Device macvtap1 failed to register rx_handler [ 669.342733][ T4397] mac80211_hwsim hwsim50 wlan0: left allmulticast mode [ 669.345236][ T4397] mac80211_hwsim hwsim50 wlan0: left promiscuous mode [ 669.496314][ T3868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.514288][ T3868] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.550053][T15503] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.552936][T15503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.561548][T15503] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.564536][T15503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.661071][ T4431] netlink: 'syz.0.5438': attribute type 4 has an invalid length. [ 669.748400][ T3868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.817103][ T3868] veth0_vlan: entered promiscuous mode [ 669.889898][ T3868] veth1_vlan: entered promiscuous mode [ 669.946762][ T3868] veth0_macvtap: entered promiscuous mode [ 669.964882][ T3868] veth1_macvtap: entered promiscuous mode [ 669.996163][ T3868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.009323][ T3868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.028498][T13026] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.032687][T13026] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.038958][T13026] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.042153][T13026] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.181312][T15515] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.336102][T15515] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.360636][T15517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.363978][T15517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.495147][T15515] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.541570][ T4492] netlink: 'syz.7.5449': attribute type 30 has an invalid length. [ 670.617197][T13028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.620272][T13028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.655735][ T5930] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 670.664223][ T5930] Bluetooth: hci2: command tx timeout [ 670.666899][ T5930] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 670.674153][ T5930] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 670.679878][ T5930] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 670.686540][ T5930] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 670.731985][T15515] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.110745][T15515] bridge_slave_1: left allmulticast mode [ 671.113550][T15515] bridge_slave_1: left promiscuous mode [ 671.116133][T15515] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.129931][T15515] bridge_slave_0: left allmulticast mode [ 671.146355][ T4627] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 671.153992][T15515] bridge_slave_0: left promiscuous mode [ 671.169547][T15515] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.362748][ T4541] __nla_validate_parse: 5 callbacks suppressed [ 671.362762][ T4541] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5450'. [ 671.468283][ T4641] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5456'. [ 671.471698][T15515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.481184][T15515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.485602][T15515] bond0 (unregistering): Released all slaves [ 671.528652][ T4533] chnl_net:caif_netlink_parms(): no params data found [ 671.774923][ T4533] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.777272][ T4533] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.779636][ T4533] bridge_slave_0: entered allmulticast mode [ 671.791100][ T4533] bridge_slave_0: entered promiscuous mode [ 671.794879][ T4533] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.797697][ T4533] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.800418][ T4533] bridge_slave_1: entered allmulticast mode [ 671.804271][ T4533] bridge_slave_1: entered promiscuous mode [ 671.826437][ T6009] usb 14-1: new high-speed USB device number 12 using dummy_hcd [ 671.886952][ T4533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.894768][ T4533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.937387][ T4533] team0: Port device team_slave_0 added [ 671.940790][ T4533] team0: Port device team_slave_1 added [ 671.995743][T15515] hsr_slave_0: left promiscuous mode [ 671.997043][ T6009] usb 14-1: Using ep0 maxpacket: 8 [ 672.001690][T15515] hsr_slave_1: left promiscuous mode [ 672.004154][T15515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 672.006624][T15515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 672.008543][ T6009] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 672.012070][ T6009] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 672.015178][ T6009] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 672.022593][T15515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 672.024946][T15515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 672.027341][ T6009] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 672.030698][ T6009] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 672.034816][ T6009] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 672.037715][ T6009] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.072738][T15515] veth1_macvtap: left promiscuous mode [ 672.075117][T15515] veth0_macvtap: left promiscuous mode [ 672.076894][T15515] veth1_vlan: left promiscuous mode [ 672.078622][T15515] veth0_vlan: left promiscuous mode [ 672.236776][T15515] team0 (unregistering): Port device team_slave_1 removed [ 672.245130][T15515] team0 (unregistering): Port device team_slave_0 removed [ 672.275559][ T6009] usb 14-1: GET_CAPABILITIES returned 0 [ 672.277387][ T6009] usbtmc 14-1:16.0: can't read capabilities [ 672.364255][ T4533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.366487][ T4533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.378466][ T4533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.384168][ T4533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.386434][ T4533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.394668][ T4533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.423953][ T40] audit: type=1400 audit(1771861422.215:5674): avc: denied { mounton } for pid=4818 comm="syz.2.5465" path="/proc/32/cgroup" dev="proc" ino=115725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 672.448788][ T4533] hsr_slave_0: entered promiscuous mode [ 672.451152][ T4533] hsr_slave_1: entered promiscuous mode [ 672.453529][ T4533] debugfs: 'hsr0' already exists in 'hsr' [ 672.455428][ T4533] Cannot create hsr debugfs directory [ 672.491607][ T4661] usb 14-1: usbtmc_ioctl_clear_out_halt returned -32 [ 672.494407][ T4661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.497162][ T4661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.504849][ T6009] usb 14-1: USB disconnect, device number 12 [ 672.633415][ T4944] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 672.878617][ T62] Bluetooth: hci2: command tx timeout [ 672.879329][ T5930] Bluetooth: hci3: command tx timeout [ 672.981933][ T40] audit: type=1400 audit(1771861422.740:5675): avc: denied { mounton } for pid=5002 comm="syz.2.5474" path="/15/file0" dev="proc" ino=4026534999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 673.073355][ T5010] IPv6: Can't replace route, no match found [ 673.080369][ T5010] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5476'. [ 673.412098][ T5042] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5479'. [ 673.429247][ T4533] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 673.449509][ T4533] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 673.484467][ T4533] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 673.493915][ T4533] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 673.622257][ T4533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.636497][ T4533] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.643323][T15515] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.645613][T15515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.652831][T15517] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.655892][T15517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.674972][ T5104] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5487'. [ 673.715869][ T4533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 673.727790][ T5104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 673.746515][ T40] audit: type=1400 audit(1771861423.453:5676): avc: denied { override_creds } for pid=5109 comm="syz.9.5488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 673.848621][ T40] audit: type=1400 audit(1771861423.556:5677): avc: denied { lock } for pid=5121 comm="syz.9.5490" path="socket:[115902]" dev="sockfs" ino=115902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 673.923529][ T5064] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.027857][ T4533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.110621][ T5064] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.176817][ T5151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=5151 comm=syz.7.5492 [ 674.199049][T21548] IPVS: starting estimator thread 0... [ 674.236129][ T5064] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.248192][ T5159] autofs: Unknown parameter 'fyx':˨*J:.ڛF8q( iV5a5{%' [ 674.276137][ T4533] veth0_vlan: entered promiscuous mode [ 674.289203][ T4533] veth1_vlan: entered promiscuous mode [ 674.300658][ T5155] IPVS: using max 48 ests per chain, 115200 per kthread [ 674.305031][ T4533] veth0_macvtap: entered promiscuous mode [ 674.309003][ T4533] veth1_macvtap: entered promiscuous mode [ 674.330191][ T5064] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.344203][ T4533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.352252][ T4533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.360575][T15517] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.363638][T15517] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.371238][T15517] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.374342][T15517] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.430777][T15517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.437098][T15517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.464956][ T8125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.467525][ T8125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.499736][T15503] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.503264][T15503] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.506871][T15503] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.516104][T15503] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.794725][ T5213] netlink: 'syz.2.5497': attribute type 10 has an invalid length. [ 674.812647][ T5213] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5497'. [ 674.815721][ T5213] batadv0: entered promiscuous mode [ 674.817401][ T5213] batadv0: entered allmulticast mode [ 674.819560][ T5213] bridge0: port 3(batadv0) entered blocking state [ 674.851965][ T5213] bridge0: port 3(batadv0) entered disabled state [ 674.861919][ T5213] bridge0: port 3(batadv0) entered blocking state [ 674.864162][ T5213] bridge0: port 3(batadv0) entered forwarding state [ 675.097825][ T5233] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5500'. [ 675.098332][ T5930] Bluetooth: hci3: command tx timeout [ 675.098380][ T62] Bluetooth: hci2: command tx timeout [ 675.287656][ T5255] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5504'. [ 675.303258][T13026] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 675.306461][T13026] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 675.368596][ T5264] fuse: Bad value for 'fd' [ 675.479292][ T5277] fuse: Bad value for 'fd' [ 675.482703][ T5277] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5510'. [ 675.542581][ T5285] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5510'. [ 675.550632][ T5285] erspan1: entered promiscuous mode [ 675.552732][ T5285] erspan1: entered allmulticast mode [ 675.820034][ T5312] netlink: 'syz.7.5515': attribute type 1 has an invalid length. [ 675.861411][ T5312] 8021q: adding VLAN 0 to HW filter on device bond7 [ 676.101403][ T5389] overlayfs: failed to clone lowerpath [ 676.208439][ T5418] x_tables: ip_tables: osf match: only valid for protocol 6 [ 676.267531][ T5429] veth0_to_bond: entered allmulticast mode [ 676.337473][T21548] usb 14-1: new low-speed USB device number 13 using dummy_hcd [ 676.497653][T21548] usb 14-1: device descriptor read/64, error -71 [ 676.774721][T21548] usb 14-1: new low-speed USB device number 14 using dummy_hcd [ 676.924149][T21548] usb 14-1: device descriptor read/64, error -71 [ 677.033187][ T40] audit: type=1400 audit(1771861426.547:5678): avc: denied { bind } for pid=5446 comm="syz.7.5536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 677.063545][T21548] usb usb14-port1: attempt power cycle [ 677.126053][T13026] tipc: Subscription rejected, illegal request [ 677.170233][ T5454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5454 comm=syz.7.5539 [ 677.272700][ T5464] tmpfs: Bad value for 'mpol' [ 677.308468][ T5930] Bluetooth: hci3: command tx timeout [ 677.426455][T21548] usb 14-1: new low-speed USB device number 15 using dummy_hcd [ 677.457380][T21548] usb 14-1: device descriptor read/8, error -71 [ 677.535807][ T5491] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 677.726883][T21548] usb 14-1: new low-speed USB device number 16 using dummy_hcd [ 677.745832][T21548] usb 14-1: device descriptor read/8, error -71 [ 677.773861][ T5513] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 677.834223][ T40] audit: type=1400 audit(1771861427.297:5679): avc: denied { map } for pid=5516 comm="syz.4.5558" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 677.873576][T21548] usb usb14-port1: unable to enumerate USB device [ 677.962747][ T5533] __nla_validate_parse: 5 callbacks suppressed [ 677.962766][ T5533] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5562'. [ 677.969764][ T5533] netlink: 'syz.7.5562': attribute type 30 has an invalid length. [ 677.973153][ T5533] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5562'. [ 678.184145][ T5557] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5571'. [ 678.324548][T20680] IPVS: starting estimator thread 0... [ 678.427989][ T5569] IPVS: using max 48 ests per chain, 115200 per kthread [ 679.170397][ T5581] kvm: kvm [5580]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000004) = 0x7 [ 679.173750][ T5581] overlayfs: conflicting options: nfs_export=on,index=off [ 679.178467][ T5583] kvm: kvm [5580]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000004) = 0x7 [ 679.314885][ T40] audit: type=1800 audit(1771861428.685:5680): pid=5599 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.5579" name="bus" dev="overlay" ino=952 res=0 errno=0 [ 679.379870][ T5603] netlink: 56 bytes leftover after parsing attributes in process `syz.9.5581'. [ 679.404118][ T5606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5582'. [ 679.440649][ T5611] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5584'. [ 679.447959][ T5611] vlan2: entered promiscuous mode [ 679.449603][ T5611] macsec0: entered promiscuous mode [ 679.451855][ T5611] vlan2: entered allmulticast mode [ 679.453513][ T5611] macsec0: entered allmulticast mode [ 679.455179][ T5611] veth1_macvtap: entered allmulticast mode [ 679.494475][ T5618] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 679.496979][ T5618] ALSA: mixer_oss: invalid index 1374389 [ 679.520536][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.523400][ T5618] bridge_slave_1: left allmulticast mode [ 679.525273][ T5618] bridge_slave_1: left promiscuous mode [ 679.530045][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.537361][ T5930] Bluetooth: hci3: command tx timeout [ 679.751259][ T5649] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5592'. [ 679.760175][ T5649] gtp0: entered promiscuous mode [ 680.141953][ T5676] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5598'. [ 680.180821][ T5710] xt_hashlimit: size too large, truncated to 1048576 [ 680.190614][ T5676] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5676 comm=syz.2.5598 [ 680.327387][ T5758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5601'. [ 680.781169][ T5784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5606'. [ 680.973536][ T5801] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 680.976264][ T5801] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 680.980100][ T5801] vhci_hcd vhci_hcd.0: Device attached [ 680.983596][ T5802] vhci_hcd: connection closed [ 680.983832][T15517] vhci_hcd vhci_hcd.4: stop threads [ 680.989221][T15517] vhci_hcd vhci_hcd.4: release socket [ 680.991076][T15517] vhci_hcd vhci_hcd.4: disconnect device [ 681.455086][ T40] audit: type=1400 audit(1771861430.682:5681): avc: denied { append } for pid=5823 comm="syz.2.5613" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 681.549743][ T5840] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 681.559226][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.618184][ T5851] netlink: 'syz.2.5618': attribute type 1 has an invalid length. [ 681.635927][ T5851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5851 comm=syz.2.5618 [ 681.648471][ T5852] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 681.653745][ T5851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 681.659291][T15503] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 681.740378][ T5900] program syz.2.5621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 681.781165][T15517] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 681.947245][ T5996] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 682.107527][ T5996] usb 9-1: Using ep0 maxpacket: 8 [ 682.112179][ T5996] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 682.115774][ T5996] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 682.120896][ T5996] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 682.124184][ T5996] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 682.128995][ T5996] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 682.133377][ T5996] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 682.136336][ T5996] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.148258][ T5925] netlink: 'syz.7.5627': attribute type 7 has an invalid length. [ 682.341695][ T62] Bluetooth: hci3: command 0x0405 tx timeout [ 682.357598][ T5996] usb 9-1: GET_CAPABILITIES returned 0 [ 682.360148][ T5996] usbtmc 9-1:16.0: can't read capabilities [ 682.498822][ T5954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 682.574189][ T5890] CIFS: Unable to determine destination address [ 682.583074][ T5972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.586427][ T5972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.599561][T21553] usb 9-1: USB disconnect, device number 19 [ 683.069975][ T6017] sctp: [Deprecated]: syz.2.5637 (pid 6017) Use of int in max_burst socket option. [ 683.069975][ T6017] Use struct sctp_assoc_value instead [ 683.294082][T13028] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.298659][T13028] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.302963][T13028] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.305647][T13028] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.312712][ T6011] __nla_validate_parse: 5 callbacks suppressed [ 683.312724][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5636'. [ 683.318395][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5636'. [ 683.408455][ T40] audit: type=1400 audit(1771861432.511:5682): avc: denied { setopt } for pid=6038 comm="syz.4.5640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 683.479449][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5643'. [ 683.823089][ T6059] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 683.940145][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5647'. [ 683.943704][ T6072] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5647'. [ 683.946924][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5647'. [ 684.011729][ T40] audit: type=1804 audit(1771861433.083:5683): pid=6074 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.5648" name="/newroot/41/file0" dev="tmpfs" ino=245 res=1 errno=0 [ 684.012052][ T6074] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: 1 [ 684.022257][ T6074] ref_ctr increment failed for inode: 0xf5 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880481124c0 [ 684.058863][ T6073] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: -1 [ 684.067152][ T6073] ref_ctr decrement failed for inode: 0xf5 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880481124c0 [ 684.078868][ T6073] uprobe: syz.4.5648:6073 failed to unregister, leaking uprobe [ 684.198215][ T6094] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5652'. [ 684.352851][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5653'. [ 684.463791][ T6250] usb 14-1: new full-speed USB device number 17 using dummy_hcd [ 684.492489][ T6105] tipc: Failed to remove unknown binding: 66,0,0/4269801494:190249125/190249126 [ 684.496259][ T6105] fuse: Bad value for 'fd' [ 684.602556][ T6250] usb 14-1: device descriptor read/64, error -71 [ 684.858517][ T6250] usb 14-1: new full-speed USB device number 18 using dummy_hcd [ 685.007631][ T6250] usb 14-1: device descriptor read/64, error -71 [ 685.125240][ T6250] usb usb14-port1: attempt power cycle [ 685.489296][ T6250] usb 14-1: new full-speed USB device number 19 using dummy_hcd [ 685.509494][ T6250] usb 14-1: device descriptor read/8, error -71 [ 685.687079][ T6136] hpfs: Bad magic ... probably not HPFS [ 685.692193][ T6136] hpfs: Bad magic ... probably not HPFS [ 685.765352][ T6250] usb 14-1: new full-speed USB device number 20 using dummy_hcd [ 685.797484][ T6250] usb 14-1: device descriptor read/8, error -71 [ 685.914906][ T6250] usb usb14-port1: unable to enumerate USB device [ 686.566212][ T6134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 686.610380][ T6147] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5665'. [ 686.754376][ T40] audit: type=1400 audit(1771861435.652:5684): avc: denied { mount } for pid=6156 comm="syz.4.5666" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 687.024790][ T5996] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 687.184944][ T6180] QAT: Invalid ioctl -2144835806 [ 687.185071][ T5996] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.191210][ T5996] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 687.195284][ T5996] usb 9-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.00 [ 687.198979][ T5996] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.210094][ T5996] usb 9-1: config 0 descriptor?? [ 687.433967][ T5996] usb 9-1: USB disconnect, device number 20 [ 687.564385][ T6266] qnx4: no qnx4 filesystem (no root dir). [ 687.688092][ T6281] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 687.729539][ T6291] netlink: 'syz.7.5681': attribute type 16 has an invalid length. [ 687.732064][ T6291] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.5681'. [ 687.756632][ T6291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6291 comm=syz.7.5681 [ 687.792521][ T6299] netlink: 'syz.9.5682': attribute type 30 has an invalid length. [ 688.012138][ T6345] veth0_vlan: left promiscuous mode [ 688.014625][ T6345] veth0_vlan: entered promiscuous mode [ 688.020262][ T6378] netlink: 'syz.2.5687': attribute type 29 has an invalid length. [ 688.025383][ T6382] netlink: 'syz.2.5687': attribute type 29 has an invalid length. [ 688.035062][ T6387] PM: Enabling pm_trace changes system date and time during resume. [ 688.035062][ T6387] PM: Correct system time has to be restored manually after resume. [ 688.047165][ T6387] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 688.051796][ T6387] batman_adv: batadv0: Adding interface: gretap1 [ 688.053947][ T6387] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.068494][ T6387] batman_adv: batadv0: Interface activated: gretap1 [ 688.624452][ T6451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6451 comm=syz.4.5698 [ 688.738683][ T6466] netlink: 'syz.7.5702': attribute type 1 has an invalid length. [ 688.746326][ T6466] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 688.880949][ T6513] __nla_validate_parse: 4 callbacks suppressed [ 688.880961][ T6513] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5706'. [ 688.989305][ T6525] netlink: 4456 bytes leftover after parsing attributes in process `syz.9.5710'. [ 688.993532][ T6522] netlink: 'syz.7.5709': attribute type 10 has an invalid length. [ 689.000858][ T6522] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode [ 689.014680][ T6521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 689.099498][ T6536] netlink: 'syz.9.5713': attribute type 2 has an invalid length. [ 689.115947][ T62] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 689.194429][ T6550] netlink: 'syz.9.5715': attribute type 1 has an invalid length. [ 689.197028][ T6550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 689.289172][ T6559] syz.2.5720 (6559): /proc/6558/oom_adj is deprecated, please use /proc/6558/oom_score_adj instead. [ 689.378775][ T6564] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5721'. [ 689.624973][ T6577] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5725'. [ 689.689873][ T5996] usb 14-1: new high-speed USB device number 21 using dummy_hcd [ 689.852672][ T5996] usb 14-1: config index 0 descriptor too short (expected 39, got 27) [ 689.855613][ T5996] usb 14-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 689.858713][ T5996] usb 14-1: config 0 interface 0 has no altsetting 0 [ 689.863133][ T5996] usb 14-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 689.866205][ T5996] usb 14-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 689.868946][ T5996] usb 14-1: Product: syz [ 689.870706][ T5996] usb 14-1: Manufacturer: syz [ 689.872325][ T5996] usb 14-1: SerialNumber: syz [ 689.875256][ T5996] usb 14-1: config 0 descriptor?? [ 689.880434][ T5996] hub 14-1:0.0: bad descriptor, ignoring hub [ 689.882682][ T5996] hub 14-1:0.0: probe with driver hub failed with error -5 [ 689.887042][ T5996] usb 14-1: selecting invalid altsetting 0 [ 690.150218][ T6592] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5722'. [ 690.154868][ T6592] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5722'. [ 690.208147][ T6598] i2c i2c-1: Invalid block write size 34 [ 690.210979][ T6598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5727'. [ 690.366611][ T6629] syzkaller0: entered promiscuous mode [ 690.368684][ T6629] syzkaller0: entered allmulticast mode [ 690.376362][ T6592] program syz.9.5722 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 690.444632][ T6629] kvm: kvm [6628]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0x60000000 [ 690.448363][ T6629] kvm: kvm [6628]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0x60000000 [ 690.464495][ T6629] kvm: kvm [6628]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x60000000 [ 690.686904][ T6648] netlink: 'syz.2.5730': attribute type 5 has an invalid length. [ 690.732015][ T6655] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 690.841421][T20680] usb 14-1: USB disconnect, device number 21 [ 690.917711][ T6679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5736'. [ 690.920803][ T6679] netlink: 'syz.2.5736': attribute type 7 has an invalid length. [ 690.928750][ T6679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5736'. [ 690.932007][ T8125] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.934704][ T8125] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.938417][ T8125] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.941701][ T8125] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.991547][T20680] usb 14-1: new full-speed USB device number 22 using dummy_hcd [ 691.130438][T20680] usb 14-1: device descriptor read/64, error -71 [ 691.163682][ T6716] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6716 comm=syz.2.5742 [ 691.189996][ T40] audit: type=1326 audit(1771861439.816:5685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.7.5744" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf959bf79 code=0x7ffc0000 [ 691.200706][ T40] audit: type=1326 audit(1771861439.816:5686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.7.5744" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf959bf79 code=0x7ffc0000 [ 691.208291][ T40] audit: type=1326 audit(1771861439.825:5687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.7.5744" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fadf959bf79 code=0x7ffc0000 [ 691.216079][ T40] audit: type=1326 audit(1771861439.825:5688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.7.5744" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf959bf79 code=0x7ffc0000 [ 691.226732][ T40] audit: type=1326 audit(1771861439.825:5689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.7.5744" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fadf959bf79 code=0x7ffc0000 [ 691.237207][ T40] audit: type=1326 audit(1771861439.825:5690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.7.5744" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf959bf79 code=0x7ffc0000 [ 691.248690][ T40] audit: type=1326 audit(1771861439.825:5691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.7.5744" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fadf959bf79 code=0x7ffc0000 [ 691.260005][ T40] audit: type=1326 audit(1771861439.825:5692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.7.5744" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf959bf79 code=0x7ffc0000 [ 691.270379][ T40] audit: type=1326 audit(1771861439.825:5693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.7.5744" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf959bf79 code=0x7ffc0000 [ 691.280590][ T40] audit: type=1326 audit(1771861439.825:5694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.7.5744" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fadf959bf79 code=0x7ffc0000 [ 691.376430][ T6723] tls_set_device_offload: netdev not found [ 691.385640][T20680] usb 14-1: new full-speed USB device number 23 using dummy_hcd [ 691.470527][ T5930] Bluetooth: hci5: command 0x1003 tx timeout [ 691.473559][ T62] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 691.523852][T20680] usb 14-1: device descriptor read/64, error -71 [ 691.538179][ T6730] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5746'. [ 691.569368][ T6732] xt_hashlimit: Unknown mode mask 84, kernel too old? [ 691.643586][T20680] usb usb14-port1: attempt power cycle [ 691.993962][ T6749] bond1: entered promiscuous mode [ 691.995872][ T6749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 692.011882][ T6749] bond1: (slave bridge2): making interface the new active one [ 692.014170][T20680] usb 14-1: new full-speed USB device number 24 using dummy_hcd [ 692.014472][ T6749] bridge2: entered promiscuous mode [ 692.019733][ T6749] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 692.036204][T20680] usb 14-1: device descriptor read/8, error -71 [ 692.127903][ T6789] program syz.4.5753 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 692.225544][ T5930] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 692.230836][ T5930] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 692.233899][ T5930] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 692.236844][ T5930] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 692.240043][ T5930] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 692.302134][T20680] usb 14-1: new full-speed USB device number 25 using dummy_hcd [ 692.321994][ T6827] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 692.336559][T20680] usb 14-1: device descriptor read/8, error -71 [ 692.382189][ T6791] chnl_net:caif_netlink_parms(): no params data found [ 692.452298][T20680] usb usb14-port1: unable to enumerate USB device [ 692.460950][ T6791] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.463877][ T6791] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.466306][ T6791] bridge_slave_0: entered allmulticast mode [ 692.472150][ T6791] bridge_slave_0: entered promiscuous mode [ 692.509248][ T6791] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.511557][ T6791] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.513907][ T6791] bridge_slave_1: entered allmulticast mode [ 692.517055][ T6791] bridge_slave_1: entered promiscuous mode [ 692.553222][ T6791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.578480][ T6791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.667589][ T6791] team0: Port device team_slave_0 added [ 692.670953][ T6791] team0: Port device team_slave_1 added [ 692.684925][ T6791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.688637][ T6791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.696865][ T6791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.701995][ T6791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.704140][ T6791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.712333][ T6791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.743165][T13028] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 692.754160][ T7052] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 692.791389][ T7054] vcan1: entered allmulticast mode [ 692.812481][ T6791] hsr_slave_0: entered promiscuous mode [ 692.815054][ T6791] hsr_slave_1: entered promiscuous mode [ 692.817469][ T6791] debugfs: 'hsr0' already exists in 'hsr' [ 692.819367][ T6791] Cannot create hsr debugfs directory [ 692.859529][T13028] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 692.888618][ T9] usb 7-1: new low-speed USB device number 28 using dummy_hcd [ 692.975780][T13028] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.048872][ T7170] "syz.9.5769" (7170) uses obsolete ecb(arc4) skcipher [ 693.049360][ T7171] "syz.9.5769" (7171) uses obsolete ecb(arc4) skcipher [ 693.052036][ T9] usb 7-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 693.058092][ T9] usb 7-1: config 0 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 693.061535][ T9] usb 7-1: config 0 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 693.064889][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 693.069351][ T9] usb 7-1: string descriptor 0 read error: -22 [ 693.071006][ T7168] loop6: detected capacity change from 0 to 524288000 [ 693.072561][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 693.087897][ T7178] netlink: 'syz.9.5770': attribute type 11 has an invalid length. [ 693.091535][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.097150][ T9] usb 7-1: config 0 descriptor?? [ 693.102078][ T7015] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 693.104343][T13028] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.114621][ T9] cdc_ncm 7-1:0.1: CDC Union missing and no IAD found [ 693.116825][ T9] cdc_ncm 7-1:0.1: bind() failure [ 693.221234][ T7209] tmpfs: Cannot change global quota limit on remount [ 693.224362][ T7209] tmpfs: Cannot change global quota limit on remount [ 693.227430][ T7209] tmpfs: Cannot change global quota limit on remount [ 693.231043][ T7209] tmpfs: Cannot change global quota limit on remount [ 693.236043][ T7209] tmpfs: Cannot change global quota limit on remount [ 693.240339][ T7209] tmpfs: Cannot change global quota limit on remount [ 693.244664][ T7209] tmpfs: Cannot change global quota limit on remount [ 693.247845][ T7209] tmpfs: Cannot change global quota limit on remount [ 693.251489][ T7209] tmpfs: Cannot change global quota limit on remount [ 693.253937][ T7209] tmpfs: Cannot change global quota limit on remount [ 693.258806][ T7209] tmpfs: Cannot change global quota limit on remount [ 693.259971][T13028] bridge_slave_1: left allmulticast mode [ 693.261271][ T7209] tmpfs: Cannot change global quota limit on remount [ 693.263925][T13028] bridge_slave_1: left promiscuous mode [ 693.265934][ T7209] tmpfs: Cannot change global quota limit on remount [ 693.267782][T13028] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.270042][ T7209] tmpfs: Cannot change global quota limit on remount [ 693.284089][T13028] bridge_slave_0: left allmulticast mode [ 693.286203][T13028] bridge_slave_0: left promiscuous mode [ 693.288701][T13028] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.325332][ T9] usb 7-1: USB disconnect, device number 28 [ 693.405616][ T7233] Unsupported ieee802154 address type: 0 [ 693.593712][ T5996] usb 14-1: new high-speed USB device number 26 using dummy_hcd [ 693.752460][ T5996] usb 14-1: Using ep0 maxpacket: 32 [ 693.756304][ T5996] usb 14-1: config index 0 descriptor too short (expected 156, got 27) [ 693.759937][ T5996] usb 14-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 693.764696][ T5996] usb 14-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 693.769167][ T5996] usb 14-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 693.774714][ T5996] usb 14-1: config 0 interface 0 has no altsetting 0 [ 693.783232][ T5996] usb 14-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 693.787161][ T5996] usb 14-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 693.790808][ T5996] usb 14-1: Product: syz [ 693.792628][ T5996] usb 14-1: Manufacturer: syz [ 693.794669][ T5996] usb 14-1: SerialNumber: syz [ 693.799668][ T5996] usb 14-1: config 0 descriptor?? [ 693.804341][ T5996] ldusb 14-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 693.810606][ T5996] ldusb 14-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 693.902442][T13028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 693.906786][T13028] bond_slave_0: left allmulticast mode [ 693.910372][T13028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 693.915409][T13028] bond_slave_1: left allmulticast mode [ 693.918179][T13028] bond0 (unregistering): Released all slaves [ 693.925953][T13028] bond1 (unregistering): Released all slaves [ 693.937071][T13028] bond2 (unregistering): Released all slaves [ 693.949183][T13028] bond3 (unregistering): (slave veth3): Releasing active interface [ 693.953433][T13028] bond3 (unregistering): Released all slaves [ 693.965080][T13028] bond4 (unregistering): Released all slaves [ 693.979010][T13028] bond5 (unregistering): Released all slaves [ 694.006246][T13028] bond6 (unregistering): Released all slaves [ 694.019127][T13028] bond7 (unregistering): Released all slaves [ 694.023823][ T29] usb 14-1: USB disconnect, device number 26 [ 694.025856][ C1] ldusb 14-1:0.0: usb_submit_urb failed (-19) [ 694.032163][ T29] ldusb 14-1:0.0: LD USB Device #0 now disconnected [ 694.141994][T13028] : left promiscuous mode [ 694.236802][ T7221] ldusb: No device or device unplugged -19 [ 694.263121][T13028] tipc: Disabling bearer [ 694.265840][T13028] tipc: Left network mode [ 694.409013][ T7314] IPVS: set_ctl: invalid protocol: 1 10.1.1.2:20001 [ 694.456343][ T5930] Bluetooth: hci5: command tx timeout [ 694.588731][ T7345] __nla_validate_parse: 3 callbacks suppressed [ 694.588742][ T7345] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5792'. [ 694.594606][ T7345] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5792'. [ 694.710024][ T7367] xt_cgroup: xt_cgroup: no path or classid specified [ 694.826804][ T7383] program syz.9.5796 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 694.829757][ T24] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 694.911821][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5799'. [ 694.920510][ T7395] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5799'. [ 694.997062][ T24] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 695.003048][ T24] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 695.007249][T13028] hsr_slave_0: left promiscuous mode [ 695.009768][T13028] hsr_slave_1: left promiscuous mode [ 695.010860][ T24] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 695.015392][T13028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.018362][T13028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.022039][T13028] pim6reg (unregistering): left allmulticast mode [ 695.022333][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.032564][ T7348] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 695.043153][ T24] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 695.079811][ T7415] comedi: valid board names for 8255 driver are: [ 695.082388][ T7415] 8255 [ 695.083643][ T7415] comedi: valid board names for vmk80xx driver are: [ 695.087911][ T7415] vmk80xx [ 695.089916][ T7415] comedi: valid board names for usbduxsigma driver are: [ 695.092450][ T7415] usbduxsigma [ 695.093690][ T7415] comedi: valid board names for usbduxfast driver are: [ 695.097027][ T7415] usbduxfast [ 695.098277][ T7415] comedi: valid board names for usbdux driver are: [ 695.100492][ T7415] usbdux [ 695.101461][ T7415] comedi: valid board names for ni6501 driver are: [ 695.103631][ T7415] ni6501 [ 695.104686][ T7415] comedi: valid board names for dt9812 driver are: [ 695.107977][ T7415] dt9812 [ 695.108991][ T7415] comedi: valid board names for ni_labpc_cs driver are: [ 695.111366][ T7415] ni_labpc_cs [ 695.112797][ T7415] comedi: valid board names for ni_daq_700 driver are: [ 695.115121][ T7415] ni_daq_700 [ 695.116279][ T7415] comedi: valid board names for labpc_pci driver are: [ 695.118998][ T7415] labpc_pci [ 695.120374][ T7415] comedi: valid board names for adl_pci9118 driver are: [ 695.122721][ T7415] pci9118dg [ 695.123873][ T7415] pci9118hg [ 695.125045][ T7415] pci9118hr [ 695.126256][ T7415] comedi: valid board names for 8255_pci driver are: [ 695.128871][ T7415] 8255_pci [ 695.130272][ T7415] comedi: valid board names for s526 driver are: [ 695.132440][ T7415] s526 [ 695.133369][ T7415] comedi: valid board names for multiq3 driver are: [ 695.135603][ T7415] multiq3 [ 695.137474][ T7415] comedi: valid board names for pcmuio driver are: [ 695.141537][ T7415] pcmuio48 [ 695.142764][ T7415] pcmuio96 [ 695.143875][ T7415] comedi: valid board names for pcmmio driver are: [ 695.146015][ T7415] pcmmio [ 695.147021][ T7415] comedi: valid board names for pcmda12 driver are: [ 695.149592][ T7415] pcmda12 [ 695.150702][ T7415] comedi: valid board names for pcmad driver are: [ 695.152815][ T7415] pcmad12 [ 695.153827][ T7415] pcmad16 [ 695.154843][ T7415] comedi: valid board names for ni_labpc driver are: [ 695.156981][ T7415] lab-pc-1200 [ 695.158073][ T7415] lab-pc-1200ai [ 695.159276][ T7415] lab-pc+ [ 695.160568][ T7415] comedi: valid board names for atmio16 driver are: [ 695.163060][ T7415] atmio16 [ 695.164394][ T7415] atmio16d [ 695.165784][ T7415] comedi: valid board names for ni_at_ao driver are: [ 695.168612][ T7415] at-ao-6 [ 695.169970][ T7415] at-ao-10 [ 695.172225][ T7415] comedi: valid board names for ni_at_a2150 driver are: [ 695.174843][ T7415] ni_at_a2150 [ 695.175958][ T7415] comedi: valid board names for adq12b driver are: [ 695.178042][ T7415] adq12b [ 695.179019][ T7415] comedi: valid board names for mpc624 driver are: [ 695.181165][ T7415] mpc624 [ 695.183179][ T7415] comedi: valid board names for c6xdigio driver are: [ 695.186275][ T7415] c6xdigio [ 695.187692][ T7415] comedi: valid board names for aio_iiro_16 driver are: [ 695.190686][ T7415] aio_iiro_16 [ 695.192722][ T7415] comedi: valid board names for aio_aio12_8 driver are: [ 695.192907][T13028] team0 (unregistering): Port device team_slave_1 removed [ 695.195665][ T7415] aio_aio12_8 [ 695.199513][ T7415] aio_ai12_8 [ 695.200970][ T7415] aio_ao12_4 [ 695.202370][ T7415] comedi: valid board names for fl512 driver are: [ 695.205677][ T7415] fl512 [ 695.206914][ T7415] comedi: valid board names for dmm32at driver are: [ 695.209635][ T7415] dmm32at [ 695.210200][T13028] team0 (unregistering): Port device team_slave_0 removed [ 695.210781][ T7415] comedi: valid board names for dt282x driver are: [ 695.215335][ T7415] dt2821 [ 695.216296][ T7415] dt2821-f [ 695.217327][ T7415] dt2821-g [ 695.218409][ T7415] dt2823 [ 695.219418][ T7415] dt2824-pgh [ 695.220824][ T7415] dt2824-pgl [ 695.221931][ T7415] dt2825 [ 695.222950][ T7415] dt2827 [ 695.223993][ T7415] dt2828 [ 695.225159][ T7415] dt2829 [ 695.226354][ T7415] dt21-ez [ 695.227364][ T7415] dt23-ez [ 695.228450][ T7415] dt24-ez [ 695.229515][ T7415] dt24-ez-pgl [ 695.230796][ T7415] comedi: valid board names for dt2817 driver are: [ 695.233022][ T7415] dt2817 [ 695.234021][ T7415] comedi: valid board names for dt2815 driver are: [ 695.236946][ T7415] dt2815 [ 695.237933][ T7415] comedi: valid board names for dt2814 driver are: [ 695.240054][ T7415] dt2814 [ 695.241032][ T7415] comedi: valid board names for dt2811 driver are: [ 695.243121][ T7415] dt2811-pgh [ 695.244228][ T7415] dt2811-pgl [ 695.245342][ T7415] comedi: valid board names for dt2801 driver are: [ 695.247425][ T7415] dt2801 [ 695.248370][ T7415] comedi: valid board names for das6402 driver are: [ 695.250721][ T7415] das6402-12 [ 695.251773][ T7415] das6402-16 [ 695.252846][ T7415] comedi: valid board names for das1800 driver are: [ 695.254990][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88803627c400: rx timeout, send abort [ 695.257723][ T7415] das-1701st [ 695.258855][ T7415] das-1701st-da [ 695.260025][ T7415] das-1702st [ 695.261347][ T7415] das-1702st-da [ 695.262684][ T7415] das-1702hr [ 695.263755][ T7415] das-1702hr-da [ 695.264937][ T7415] das-1701ao [ 695.266012][ T7415] das-1702ao [ 695.267612][ T7415] das-1801st [ 695.268740][ T7415] das-1801st-da [ 695.269958][ T7415] das-1802st [ 695.271147][ T7415] das-1802st-da [ 695.272316][ T7415] das-1802hr [ 695.273409][ T7415] das-1802hr-da [ 695.274620][ T7415] das-1801hc [ 695.275721][ T7415] das-1802hc [ 695.276820][ T7415] das-1801ao [ 695.277959][ T7415] das-1802ao [ 695.279103][ T7415] comedi: valid board names for das800 driver are: [ 695.281203][ T7415] das-800 [ 695.282216][ T7415] cio-das800 [ 695.283331][ T7415] das-801 [ 695.284464][ T7415] cio-das801 [ 695.286162][ T7415] das-802 [ 695.287187][ T7415] cio-das802 [ 695.288798][ T7415] cio-das802/16 [ 695.290256][ T7415] comedi: valid board names for isa-das08 driver are: [ 695.291887][ T7348] IPv6: sit1: Disabled Multicast RS [ 695.292708][ T7415] isa-das08 [ 695.292716][ T7415] das08-pgm [ 695.292721][ T7415] das08-pgh [ 695.292726][ T7415] das08-pgl [ 695.292730][ T7415] das08-aoh [ 695.292735][ T7415] das08-aol [ 695.292740][ T7415] das08-aom [ 695.292744][ T7415] das08/jr-ao [ 695.292749][ T7415] das08jr-16-ao [ 695.292754][ T7415] pc104-das08 [ 695.292758][ T7415] das08jr/16 [ 695.292763][ T7415] comedi: valid board names for das16m1 driver are: [ 695.297818][ T7348] sit1: entered allmulticast mode [ 695.298244][ T7415] das16m1 [ 695.298252][ T7415] comedi: valid board names for dac02 driver are: [ 695.298258][ T7415] dac02 [ 695.298262][ T7415] comedi: valid board names for rti802 driver are: [ 695.298268][ T7415] rti802 [ 695.319363][ T7415] comedi: valid board names for rti800 driver are: [ 695.321482][ T7415] rti800 [ 695.322448][ T7415] rti815 [ 695.323400][ T7415] comedi: valid board names for pcm3724 driver are: [ 695.323624][ T5996] usb 9-1: USB disconnect, device number 21 [ 695.325472][ T7415] pcm3724 [ 695.325479][ T7415] comedi: valid board names for pcl818 driver are: [ 695.331711][ T7415] pcl818l [ 695.333221][ T7415] pcl818h [ 695.334254][ T7415] pcl818hd [ 695.335345][ T7415] pcl818hg [ 695.336375][ T7415] pcl818 [ 695.337334][ T7415] pcl718 [ 695.338298][ T7415] pcm3718 [ 695.339303][ T7415] comedi: valid board names for pcl816 driver are: [ 695.341499][ T7415] pcl816 [ 695.342484][ T7415] pcl814b [ 695.343491][ T7415] comedi: valid board names for pcl812 driver are: [ 695.345538][ T7415] pcl812 [ 695.346523][ T7415] pcl812pg [ 695.347547][ T7415] acl8112pg [ 695.348599][ T7415] acl8112dg [ 695.349804][ T7415] acl8112hg [ 695.350880][ T7415] a821pgl [ 695.351915][ T7415] a821pglnda [ 695.353209][ T7415] a821pgh [ 695.354200][ T7415] a822pgl [ 695.355180][ T7415] a822pgh [ 695.356196][ T7415] a823pgl [ 695.357195][ T7415] a823pgh [ 695.358233][ T7415] pcl813 [ 695.359178][ T7415] pcl813b [ 695.360191][ T7415] acl8113 [ 695.361191][ T7415] iso813 [ 695.362181][ T7415] acl8216 [ 695.363840][ T7415] a826pg [ 695.364807][ T7415] comedi: valid board names for pcl730 driver are: [ 695.367040][ T7415] pcl730 [ 695.368022][ T7415] iso730 [ 695.368980][ T7415] acl7130 [ 695.370021][ T7415] pcm3730 [ 695.371053][ T7415] pcl725 [ 695.372012][ T7415] p8r8dio [ 695.372990][ T7415] acl7225b [ 695.374426][ T7415] p16r16dio [ 695.375470][ T7415] pcl733 [ 695.376416][ T7415] pcl734 [ 695.377358][ T7415] opmm-1616-xt [ 695.378466][ T7415] pearl-mm-p [ 695.379536][ T7415] ir104-pbf [ 695.380622][ T7415] comedi: valid board names for pcl726 driver are: [ 695.383086][ T7415] pcl726 [ 695.384297][ T7415] pcl727 [ 695.385269][ T7415] pcl728 [ 695.386277][ T7415] acl6126 [ 695.387328][ T7415] acl6128 [ 695.388344][ T7415] comedi: valid board names for pcl724 driver are: [ 695.390536][ T7415] pcl724 [ 695.391479][ T7415] pcl722 [ 695.392409][ T7415] pcl731 [ 695.393467][ T7415] acl7122 [ 695.399444][ T7415] acl7124 [ 695.402153][ T7404] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 695.417725][ T7415] pet48dio [ 695.418887][ T7415] pcmio48 [ 695.419902][ T7415] onyx-mm-dio [ 695.421051][ T7415] comedi: valid board names for pcl711 driver are: [ 695.421619][ T6791] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 695.423101][ T7415] pcl711 [ 695.423107][ T7415] pcl711b [ 695.433160][ T7415] acl8112hg [ 695.434253][ T7415] acl8112dg [ 695.434922][ T6791] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 695.435304][ T7415] comedi: valid board names for amplc_pc263 driver are: [ 695.440826][ T7404] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 695.442748][ T6791] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 695.447911][ T7415] pc263 [ 695.448964][ T7415] comedi: valid board names for amplc_pc236 driver are: [ 695.451227][ T7415] pc36at [ 695.452246][ T7415] comedi: valid board names for amplc_dio200 driver are: [ 695.454512][ T7415] pc212e [ 695.455561][ T6791] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 695.455658][ T7415] pc214e [ 695.459595][ T7415] pc215e [ 695.460579][ T7415] pc218e [ 695.461667][ T7415] pc272e [ 695.462640][ T7415] comedi: valid board names for comedi_parport driver are: [ 695.464986][ T7415] comedi_parport [ 695.466282][ T7415] comedi: valid board names for comedi_test driver are: [ 695.466324][ T7404] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 695.468709][ T7415] comedi_test [ 695.468718][ T7415] comedi: valid board names for comedi_bond driver are: [ 695.468724][ T7415] comedi_bond [ 695.476828][ T7404] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 695.499691][ T7404] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 695.515996][ T7404] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 695.518064][ T7404] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 695.519678][ T7463] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.5804'. [ 695.534422][ T7404] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 695.545554][ T6791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.552830][ T7404] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 695.555489][ T7404] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 695.558411][ T6791] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.564670][ T8125] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.567043][ T8125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.571197][ T7404] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 695.573952][ T8125] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.576309][ T8125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.691091][ T6791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.786981][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88803627e400: rx timeout, send abort [ 695.789937][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88803627c400: abort rx timeout. Force session deactivation [ 695.848949][ T6791] veth0_vlan: entered promiscuous mode [ 695.854341][ T6791] veth1_vlan: entered promiscuous mode [ 695.871662][ T6791] veth0_macvtap: entered promiscuous mode [ 695.878969][ T6791] veth1_macvtap: entered promiscuous mode [ 695.887919][ T6791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.899027][ T6791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 695.909324][T15517] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.912925][T15517] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.917834][T15517] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.920740][T15517] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.981995][ T7507] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.5812'. [ 696.016759][T15517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.020968][T15517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.066696][ T8125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.070001][ T8125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.125331][ T7531] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5815'. [ 696.241063][ T7553] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5819'. [ 696.249107][ T7553] ip6gre2: entered promiscuous mode [ 696.250811][ T7553] ip6gre2: entered allmulticast mode [ 696.267394][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5819'. [ 696.270519][ T7553] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5819'. [ 696.273304][ T7553] validate_nla: 3 callbacks suppressed [ 696.273313][ T7553] netlink: 'syz.9.5819': attribute type 11 has an invalid length. [ 696.277431][ T7553] netlink: 'syz.9.5819': attribute type 7 has an invalid length. [ 696.312495][ T7562] efs: device does not support 512 byte blocks [ 696.314665][ T7562] device does not support 512 byte blocks [ 696.314665][ T7562] [ 696.322535][ T7562] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 696.323048][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88803627e400: abort rx timeout. Force session deactivation [ 696.391720][ T5930] Bluetooth: hci1: unexpected event for opcode 0x080c [ 696.461390][T20680] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 696.596573][ T7603] Process accounting resumed [ 696.628420][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 696.628431][ T40] audit: type=1400 audit(1771861444.917:5734): avc: denied { map } for pid=7604 comm="syz.7.5838" path="/9/file0" dev="9p" ino=77856783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 696.855560][T20680] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 696.858828][T20680] usb 9-1: can't read configurations, error -71 [ 697.380688][T13028] IPVS: stop unused estimator thread 0... [ 697.417127][ T7648] xt_hashlimit: max too large, truncated to 1048576 [ 697.423273][ T40] audit: type=1400 audit(1771861445.667:5735): avc: denied { accept } for pid=7647 comm="syz.4.5848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 697.493811][ T7644] kvm: kvm [7643]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0x60000000 [ 697.497302][ T7644] kvm: kvm [7643]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0x60000000 [ 697.518180][ T7644] kvm: kvm [7643]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x60000000 [ 697.541441][ T7644] kvm: kvm [7643]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0x60000000 [ 697.544817][ T7644] kvm: kvm [7643]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0x60000000 [ 697.596649][ T7672] trusted_key: encrypted_key: insufficient parameters specified [ 697.607015][ T7672] input: syz1 as /devices/virtual/input/input63 [ 697.624139][ T5930] Bluetooth: hci2: command 0x0c1a tx timeout [ 697.698392][ T5930] Bluetooth: hci5: command 0x040f tx timeout [ 697.701259][ T62] Bluetooth: hci3: command 0x0405 tx timeout [ 697.754739][ T7690] fuse: Bad value for 'fd' 0Vj  `  B[ 697.825882][ T7690] binder: Unknown parameter 'uid>00000000000000000000'  [ 697.978643][ T7715] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 698.469715][ T7780] netlink: 'syz.9.5871': attribute type 6 has an invalid length. [ 698.609687][ T7788] QAT: failed to copy from user. [ 698.952999][ T7805] netlink: 'syz.7.5878': attribute type 13 has an invalid length. [ 699.041150][ T7805] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.044686][ T7805] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.123193][ T7805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 699.134181][ T7805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 699.158270][ T7828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7828 comm=syz.9.5882 [ 699.173386][ T7830] set match dimension is over the limit! [ 699.317978][ T7815] bridge_slave_1: left allmulticast mode [ 699.320458][ T7815] bridge_slave_1: left promiscuous mode [ 699.324070][ T7815] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.335548][ T7815] bridge_slave_0: left allmulticast mode [ 699.337535][ T7815] bridge_slave_0: left promiscuous mode [ 699.339415][ T7815] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.347918][ T40] audit: type=1400 audit(1771861447.467:5736): avc: denied { write } for pid=7845 comm="syz.2.5890" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 699.357335][ T7846] random: crng reseeded on system resumption [ 699.357351][ T40] audit: type=1400 audit(1771861447.477:5737): avc: denied { ioctl } for pid=7845 comm="syz.2.5890" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 699.388166][ T7847] SELinux: ebitmap start bit (3072) is beyond the end of the bitmap (320) [ 699.397943][ T7847] SELinux: failed to load policy [ 699.424488][T15517] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.427755][T15517] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.435323][T15517] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.438679][T15517] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.634491][ T7877] netlink: 'syz.9.5896': attribute type 58 has an invalid length. [ 699.722538][ T7884] IPv6: NLM_F_CREATE should be specified when creating new route [ 699.735261][T21554] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 699.842126][ T5930] Bluetooth: hci2: command 0x0c1a tx timeout [ 699.907119][T21554] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 699.909883][T21554] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 699.913136][T21554] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 699.916105][T21554] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 699.919637][ T5930] Bluetooth: hci5: command 0x040f tx timeout [ 699.919896][ T62] Bluetooth: hci3: command 0x0405 tx timeout [ 699.922020][T21554] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 699.929597][T21554] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 699.932505][T21554] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 699.935034][T21554] usb 9-1: Product: syz [ 699.936495][T21554] usb 9-1: Manufacturer: syz [ 699.937810][T12223] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 699.944127][T21554] cdc_wdm 9-1:1.0: skipping garbage [ 699.946409][T21554] cdc_wdm 9-1:1.0: skipping garbage [ 699.950526][T21554] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 699.953031][T21554] cdc_wdm 9-1:1.0: Unknown control protocol [ 700.097817][T12223] usb 7-1: Using ep0 maxpacket: 8 [ 700.100704][T12223] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 700.103353][T12223] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 700.105986][T12223] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 700.109774][T12223] usb 7-1: config 250 has no interface number 0 [ 700.112354][T12223] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 700.115996][T12223] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 700.119427][T12223] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 700.122704][T12223] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 700.126204][T12223] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 700.131697][T12223] usb 7-1: config 250 interface 228 has no altsetting 0 [ 700.135643][T12223] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 700.139248][T12223] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 700.142863][T12223] usb 7-1: Product: syz [ 700.144436][T12223] usb 7-1: SerialNumber: syz [ 700.149949][T12223] hub 7-1:250.228: bad descriptor, ignoring hub [ 700.152164][T12223] hub 7-1:250.228: probe with driver hub failed with error -5 [ 700.218104][ T7920] __nla_validate_parse: 6 callbacks suppressed [ 700.218122][ T7920] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5903'. [ 700.365264][ T62] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 700.366576][T12223] usblp 7-1:250.228: usblp1: USB Bidirectional printer dev 29 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 700.677981][ T6250] usb 9-1: USB disconnect, device number 24 [ 700.748445][ T5926] usb 7-1: USB disconnect, device number 29 [ 700.755076][ T5926] usblp1: removed [ 701.171327][ T7988] binder: 7987:7988 ioctl c0306201 200000000680 returned -14 [ 701.316551][ T8009] netlink: 'syz.4.5920': attribute type 12 has an invalid length. [ 701.409114][ T8025] binder: 8024:8025 ioctl 1264 2000000001c0 returned -22 [ 701.467944][ T8031] netlink: 'syz.2.5925': attribute type 10 has an invalid length. [ 701.513384][ T8038] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5927'. [ 701.570553][ T8045] netlink: 'syz.2.5929': attribute type 29 has an invalid length. [ 701.580576][ T8045] netlink: 'syz.2.5929': attribute type 3 has an invalid length. [ 701.583105][ T8045] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5929'. [ 701.886443][ T8089] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5938'. [ 701.931038][ T40] audit: type=1400 audit(1771861449.887:5738): avc: denied { getopt } for pid=8092 comm="syz.4.5939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 701.951194][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5940'. [ 701.964805][ T8102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5941'. [ 702.035067][ T8116] netlink: 'syz.7.5943': attribute type 1 has an invalid length. [ 702.060262][ T62] Bluetooth: hci2: command 0x0c1a tx timeout [ 702.072492][ T8116] bond1: entered promiscuous mode [ 702.074642][ T8116] 8021q: adding VLAN 0 to HW filter on device bond1 [ 702.080267][ T8116] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5943'. [ 702.083590][ T8116] bond1: entered allmulticast mode [ 702.111021][ T8116] bond1: (slave bridge2): making interface the new active one [ 702.114860][ T8116] bridge2: entered promiscuous mode [ 702.116612][ T8116] bridge2: entered allmulticast mode [ 702.120612][ T8116] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 702.134656][ T62] Bluetooth: hci3: command 0x0405 tx timeout [ 702.134731][ T5930] Bluetooth: hci5: command 0x040f tx timeout [ 702.148350][ T8165] program syz.4.5946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 702.152993][ T8165] SELinux: policydb version 868479068 does not match my version range 15-35 [ 702.156954][ T8165] SELinux: failed to load policy [ 702.266642][ T8183] tmpfs: Unknown parameter '00000000000000000000' [ 702.271532][ T8185] tmpfs: Unknown parameter '00000000000000000000' [ 702.311712][ T8180] binder: 8179:8180 ioctl c0106440 200000000080 returned -22 [ 702.412778][ T8208] binder: Bad value for 'max' [ 702.558614][ T40] audit: type=1800 audit(1771861450.477:5739): pid=8237 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.5957" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 702.584304][ T40] audit: type=1400 audit(1771861450.477:5740): avc: denied { associate } for pid=8233 comm="syz.7.5956" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 702.624423][ T8240] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5958'. [ 702.682700][ T40] audit: type=1400 audit(1771861450.590:5741): avc: denied { bind } for pid=8250 comm="syz.4.5960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 702.745198][ T8256] ------------[ cut here ]------------ [ 702.747504][ T8256] 1 [ 702.747514][ T8256] WARNING: mm/page_alloc.c:5225 at __alloc_frozen_pages_noprof+0x23ea/0x2ba0, CPU#2: syz.4.5962/8256 [ 702.753711][ T8256] Modules linked in: [ 702.755441][ T8256] CPU: 2 UID: 0 PID: 8256 Comm: syz.4.5962 Tainted: G L syzkaller #0 PREEMPT(full) [ 702.760121][ T8256] Tainted: [L]=SOFTLOCKUP [ 702.761986][ T8256] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 702.765955][ T40] audit: type=1400 audit(1771861450.674:5742): avc: denied { write } for pid=5834 comm="syz-executor" path="pipe:[4021]" dev="pipefs" ino=4021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 702.766650][ T8256] RIP: 0010:__alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 702.776968][ T8256] Code: 00 45 31 c9 49 83 bc 24 70 05 00 00 00 4c 89 4c 24 50 0f 85 5f f8 ff ff c6 44 24 10 00 e9 f3 ea ff ff c6 05 43 b9 5a 0e 01 90 <0f> 0b 90 e9 69 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 702.784355][ T8256] RSP: 0018:ffffc90004c67790 EFLAGS: 00010246 [ 702.787481][ T8256] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 702.790832][ T8256] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0 [ 702.794137][ T8256] RBP: 0000000000000013 R08: 0000000000000005 R09: 0000000000000009 [ 702.797789][ T8256] R10: 0000000000000013 R11: 0000000000000000 R12: 0000000000040cc0 [ 702.801113][ T8256] R13: 1ffff9200098cf41 R14: 0000000000000013 R15: 1ffff9200098cf0b [ 702.804050][ T8256] FS: 00007f1a7a9c46c0(0000) GS:ffff8880d654d000(0000) knlGS:0000000000000000 [ 702.808295][ T8256] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 702.810618][ T8256] CR2: 000000110c37dcbc CR3: 0000000056d18000 CR4: 0000000000352ef0 [ 702.813860][ T8256] Call Trace: [ 702.815100][ T8256] [ 702.816076][ T8256] ? is_bpf_text_address+0x8a/0x1a0 [ 702.818588][ T8256] ? bpf_ksym_find+0x128/0x1c0 [ 702.820616][ T8256] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 702.822729][ T8256] ? is_bpf_text_address+0x94/0x1a0 [ 702.825246][ T8256] ? kernel_text_address+0x8d/0x100 [ 702.827643][ T8256] ? __kernel_text_address+0xd/0x30 [ 702.829884][ T8256] ? unwind_get_return_address+0x59/0xa0 [ 702.832226][ T8256] ? arch_stack_walk+0xa6/0xf0 [ 702.834254][ T8256] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 702.836479][ T8256] ? tomoyo_path_number_perm+0x46d/0x580 [ 702.838838][ T8256] ? stack_trace_save+0x8e/0xc0 [ 702.840877][ T8256] ? stack_depot_save_flags+0x27/0x9d0 [ 702.843165][ T8256] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 702.845619][ T8256] ? policy_nodemask+0xed/0x4f0 [ 702.847331][ T8256] alloc_pages_mpol+0x1fb/0x550 [ 702.849185][ T8256] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 702.851434][ T8256] ? find_held_lock+0x2b/0x80 [ 702.853337][ T8256] ? avc_has_extended_perms+0x33a/0x1080 [ 702.855662][ T8256] ? drm_syncobj_array_find+0x35/0x3a0 [ 702.858006][ T8256] ___kmalloc_large_node+0x104/0x150 [ 702.860356][ T8256] __kmalloc_large_node_noprof+0x1c/0x70 [ 702.862346][ T8256] __kmalloc_noprof+0x5be/0x850 [ 702.863979][ T8256] ? __lock_acquire+0x4a5/0x2630 [ 702.866055][ T8256] drm_syncobj_array_find+0x35/0x3a0 [ 702.868230][ T8256] drm_syncobj_timeline_wait_ioctl+0x236/0x390 [ 702.870454][ T8256] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 702.872978][ T8256] ? find_held_lock+0x2b/0x80 [ 702.874770][ T8256] ? drm_dev_exit+0x41/0x60 [ 702.876200][ T8256] ? drm_dev_exit+0x41/0x60 [ 702.877840][ T8256] drm_ioctl_kernel+0x1f3/0x3e0 [ 702.879876][ T8256] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 702.882128][ T8256] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 702.884101][ T8256] drm_ioctl+0x5e6/0xc60 [ 702.885823][ T8256] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 702.887973][ T8256] ? __pfx_drm_ioctl+0x10/0x10 [ 702.889828][ T8256] ? selinux_file_ioctl+0x139/0x290 [ 702.891899][ T8256] ? selinux_file_ioctl+0xb4/0x290 [ 702.893547][ T8256] ? __pfx_drm_ioctl+0x10/0x10 [ 702.895446][ T8256] __x64_sys_ioctl+0x18e/0x210 [ 702.897286][ T8256] do_syscall_64+0x106/0xf80 [ 702.898754][ T8256] ? clear_bhb_loop+0x40/0x90 [ 702.900578][ T8256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.902937][ T8256] RIP: 0033:0x7f1a79b9bf79 [ 702.904354][ T8256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.911286][ T8256] RSP: 002b:00007f1a7a9c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 702.914884][ T8256] RAX: ffffffffffffffda RBX: 00007f1a79e15fa0 RCX: 00007f1a79b9bf79 [ 702.918150][ T8256] RDX: 0000200000000180 RSI: 00000000c03064ca RDI: 0000000000000006 [ 702.921359][ T8256] RBP: 00007f1a79c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 702.924032][ T8256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 702.927292][ T8256] R13: 00007f1a79e16038 R14: 00007f1a79e15fa0 R15: 00007fffc46c1768 [ 702.930733][ T8256] [ 702.932045][ T8256] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 702.934445][ T8256] CPU: 2 UID: 0 PID: 8256 Comm: syz.4.5962 Tainted: G L syzkaller #0 PREEMPT(full) [ 702.938790][ T8256] Tainted: [L]=SOFTLOCKUP [ 702.940595][ T8256] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 702.944675][ T8256] Call Trace: [ 702.946092][ T8256] [ 702.947332][ T8256] dump_stack_lvl+0x100/0x190 [ 702.949070][ T8256] vpanic+0x552/0x970 [ 702.950715][ T8256] ? __pfx_vpanic+0x10/0x10 [ 702.952641][ T8256] panic+0xd1/0xe0 [ 702.954221][ T8256] ? __pfx_panic+0x10/0x10 [ 702.956085][ T8256] check_panic_on_warn.cold+0x19/0x34 [ 702.958203][ T8256] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 702.960200][ T8256] __warn.cold+0x191/0x348 [ 702.962094][ T8256] __report_bug+0x296/0x3d0 [ 702.963991][ T8256] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 702.966552][ T8256] ? __pfx___report_bug+0x10/0x10 [ 702.968541][ T8256] ? __lock_acquire+0x4a5/0x2630 [ 702.970113][ T8256] ? __lock_acquire+0x4a5/0x2630 [ 702.972135][ T8256] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 702.974651][ T8256] report_bug+0xb2/0x220 [ 702.976383][ T8256] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 702.978738][ T8256] handle_bug+0x166/0x2a0 [ 702.980165][ T8256] exc_invalid_op+0x17/0x50 [ 702.982033][ T8256] asm_exc_invalid_op+0x1a/0x20 [ 702.984074][ T8256] RIP: 0010:__alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 702.986876][ T8256] Code: 00 45 31 c9 49 83 bc 24 70 05 00 00 00 4c 89 4c 24 50 0f 85 5f f8 ff ff c6 44 24 10 00 e9 f3 ea ff ff c6 05 43 b9 5a 0e 01 90 <0f> 0b 90 e9 69 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 702.994648][ T8256] RSP: 0018:ffffc90004c67790 EFLAGS: 00010246 [ 702.996891][ T8256] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 702.999667][ T8256] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0 [ 703.002847][ T8256] RBP: 0000000000000013 R08: 0000000000000005 R09: 0000000000000009 [ 703.006000][ T8256] R10: 0000000000000013 R11: 0000000000000000 R12: 0000000000040cc0 [ 703.009320][ T8256] R13: 1ffff9200098cf41 R14: 0000000000000013 R15: 1ffff9200098cf0b [ 703.012447][ T8256] ? is_bpf_text_address+0x8a/0x1a0 [ 703.014345][ T8256] ? bpf_ksym_find+0x128/0x1c0 [ 703.016359][ T8256] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 703.018921][ T8256] ? is_bpf_text_address+0x94/0x1a0 [ 703.021037][ T8256] ? kernel_text_address+0x8d/0x100 [ 703.023124][ T8256] ? __kernel_text_address+0xd/0x30 [ 703.025239][ T8256] ? unwind_get_return_address+0x59/0xa0 [ 703.027581][ T8256] ? arch_stack_walk+0xa6/0xf0 [ 703.029554][ T8256] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 703.032122][ T8256] ? tomoyo_path_number_perm+0x46d/0x580 [ 703.034529][ T8256] ? stack_trace_save+0x8e/0xc0 [ 703.036538][ T8256] ? stack_depot_save_flags+0x27/0x9d0 [ 703.038842][ T8256] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 703.041256][ T8256] ? policy_nodemask+0xed/0x4f0 [ 703.042937][ T8256] alloc_pages_mpol+0x1fb/0x550 [ 703.045027][ T8256] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 703.047306][ T8256] ? find_held_lock+0x2b/0x80 [ 703.049284][ T8256] ? avc_has_extended_perms+0x33a/0x1080 [ 703.051697][ T8256] ? drm_syncobj_array_find+0x35/0x3a0 [ 703.053956][ T8256] ___kmalloc_large_node+0x104/0x150 [ 703.055925][ T8256] __kmalloc_large_node_noprof+0x1c/0x70 [ 703.058163][ T8256] __kmalloc_noprof+0x5be/0x850 [ 703.060120][ T8256] ? __lock_acquire+0x4a5/0x2630 [ 703.062187][ T8256] drm_syncobj_array_find+0x35/0x3a0 [ 703.064343][ T8256] drm_syncobj_timeline_wait_ioctl+0x236/0x390 [ 703.066852][ T8256] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 703.069565][ T8256] ? find_held_lock+0x2b/0x80 [ 703.071484][ T8256] ? drm_dev_exit+0x41/0x60 [ 703.073259][ T8256] ? drm_dev_exit+0x41/0x60 [ 703.075157][ T8256] drm_ioctl_kernel+0x1f3/0x3e0 [ 703.077146][ T8256] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 703.079868][ T8256] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 703.082055][ T8256] drm_ioctl+0x5e6/0xc60 [ 703.083780][ T8256] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 703.086502][ T8256] ? __pfx_drm_ioctl+0x10/0x10 [ 703.088500][ T8256] ? selinux_file_ioctl+0x139/0x290 [ 703.090678][ T8256] ? selinux_file_ioctl+0xb4/0x290 [ 703.092527][ T8256] ? __pfx_drm_ioctl+0x10/0x10 [ 703.094283][ T8256] __x64_sys_ioctl+0x18e/0x210 [ 703.096263][ T8256] do_syscall_64+0x106/0xf80 [ 703.098160][ T8256] ? clear_bhb_loop+0x40/0x90 [ 703.100007][ T8256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.102066][ T8256] RIP: 0033:0x7f1a79b9bf79 [ 703.103864][ T8256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.111741][ T8256] RSP: 002b:00007f1a7a9c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 703.115030][ T8256] RAX: ffffffffffffffda RBX: 00007f1a79e15fa0 RCX: 00007f1a79b9bf79 [ 703.117902][ T8256] RDX: 0000200000000180 RSI: 00000000c03064ca RDI: 0000000000000006 [ 703.121141][ T8256] RBP: 00007f1a79c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 703.124398][ T8256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 703.127686][ T8256] R13: 00007f1a79e16038 R14: 00007f1a79e15fa0 R15: 00007fffc46c1768 [ 703.130972][ T8256] [ 703.133062][ T8256] Kernel Offset: disabled [ 703.134905][ T8256] Rebooting in 86400 seconds..