last executing test programs: 4m32.064631382s ago: executing program 2 (id=275): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x97}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) mount$9p_fd(0x0, 0x0, 0x0, 0x200044, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 4m32.063884469s ago: executing program 2 (id=276): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000001b40)={{0x1, 0x0, 0x1080, {0xa000, 0x3000}}, "9ebd47d2e83c577844831f9a3b9c5723c6367682bded71b58c307c9bc83e884d3037a2eac58a334d8a2abb8a0e455af6b96ef304ac67681aa96858efeca09ae4245b7a3b57e8c5cf943265a8d82cc010b766637b6ce828f9b6d9740120799820b53e98754c538e01c8c13786c74d4a8d9dfb4c7f0e1e9277b3082dc1cb31888684cf5451ba2263ab9b64d236cfc60d044c1bef8d5781db7fefcd680c9dc45670e3d8c70e32a9d9e99c9f744460ba6c95f4b8e258cf376aaf18502d2c62bd8482c81baf130faca71237c374505449dbe926617f6057d993bf1cbc18b983c1a04e11de10b8c1b2de8fcc5bcdaea8fd977524e55c80c61c84f79cc59c406eaa4470cf61d81a4083bc38034097971123dc89f7107d2e355849b855f2be1f0a7d6e1d9f630ba5978b8e854dbd4db71f99eb2ffb9b8a34924c9f3f3b413226425601d32e6f731ab2369549245bf5c2b466c534e6da24ea1347ad9b83b61d2e8b72fe2971888c907779fd02789cdb225454529fb8cbd07bd6c41256f354aa889cd6703dcc5841527d6fa27a4822fb9c0656565a5f68ee0b21a1150a6557d733231ee07f746c0962dc946ac997de965462308ce7b3f54a9c62b413956d301723c5152d46554a735dc024feb25fc576b01df2d6b8d0e3fed55bf47eb8d3ca2948ce677a429db87c71431e1558a3923b1829d6ee4cb229733b7d34132d45cdc42ae0cda7e99185921a66ccca4d94a541880c2512dfed0a0a367c9074e204d381ba0eaf9da3f33cd4571a4908d4e73dac803e149b901198d97be241b74145ed37645fa42bd22af4d61488c91f8201f03a8a60af8366a1cff27e78579b55832d85e07efdeb63f12dac0c266bbff11fa25059cbe296c560e70b497de92e8932f538a461dca283d75ab595050a129c80afdfb9cef6cc2aabbf5dedbae5894ce2a012e83ca13a7ab6d9a345f3e670aa3dca00af5fe42e97e5d7e8764b048d20a30ce0b7cdfb5142254c6b97f0f1b6dc56a5b6df710fa3cb42a1c9817b529cb2bb8c8641e1a5795b872535b9f7bfa0191da600f90edc6bc75e8d46d4f31f9d05260c9fd8dd8046d2247a38a5e4571eafcdba1225e44d629ca174de6152d07ce39dc2d1a44590a7dbfb9c1d19e324a2aca67823d504ea98c304729c2b31ae09249000f73041de62ad6f22519b2ec1d1849c139bdf62f71950b886759c300cc1bb489e30a834a52052c77ae93202348f9f961ac597045b87e2736f5ce2646f2415e3ddc25ad6390035296b8da3d50c6e7c4780ac583d4d0b9d1e618e48e2a4494edeb2d6210fd0cafb991fda0f244f2faea8d763c64e01d52054dac4b78da082f4605af88b225e0ea02072675fef490705bc7f2e340b1f9b090df6c7425c0247a931002d53b6e14d6f2384f446f11ecce4d4b6288d973800d9c37630575b0dca0570f4da2317ef5bdf3467f023685de835e4bd6002096967fac86e169a59f8ec8bdfe5ddd73b1294b8e615d19e865182dba81372ef961c4978befa71780e61dd7676cfc0f23d7e2d367c80e4e04a4606acb7cb182006302a15d6e25dcfd041ef1651613d7cad09e0abd54aa1db69fb59566089263cce47850d5cd1b066c37616937217d5d446a2fe7b1f48c6762b6d440b52905e006e72ca12ce03e770e58c4eb36a7ee50cfc691f3592f476171201274b3e193d37d192366bca8b9d5266c0a4b3db2db8e1c43a64c74e01e6eb224d91a197b1b3c46eb8236e882cbbe5491ed33afbf5239010ada27263c38ccd4c6e9fc75810b9fc4a830bf82f8172ae2c7a6aaf84e69e652ed1b3b6b267bc243dcbb707d071a43a08468741b71cde3b28f57d8b41c4742efe5aab8d463305078b0fd4423096c54ee7deddd65ab0974df122033e672f5554941077d09ef3b46938ae7afa1d76c9cfcea9468bc3c354d8ffe74b2db857a4f6a14d034e8f0e874226eef0bcd0648622c90fa6821fb4acf4ace5def718322d6bcd762281aa79eb948b6522bd0b96edd9bfdf6603eebb73f8243491d50b49c09fdfd11f39341f9e1531b611eac6055e480316b9d7bc0891a623d4bd6fe96ec272dcf2e4fee6b4be9f87f65f3acea0c5bd3d4b1dd836aae34b5a46627577590b89fd6eed4dda15d090f2b79a1abaa84d60dd1b4bc1d4f20b6f7296bc7e7a2e32c9cc157ea518099197fd5c281287e8aded6604f20891771e4ac5c0bf1762c9fcc69816e6a7b31e7ccd852ffb3a0b70f8804e9963b8840e766209d2b906425eea7b30344e015b4ef7886cbe06d8f590bdec8c94e93b47cf4b0f7602b4ebeff79ae0be29887af3b3e6bd36e71d2fea1959ad5f0948cbbda6a8e13a127ad0a2ae3cc2345ec88c98f15332462fc0870b8a21c48816efe07b1cf2f9f568db988dcc882a57ec16e384d29cbe3e2be149a1246ac7d009e6f51c91ee6f5621cc624c04820b51e4c18f225ee4faa17d2a1ef90fab91b962ff41d0971b81169d8ad252a3750b5f3cc73c20fd210fb89f51b405dd597afcc780bc50c185b51d406b0499a0b449cafc51deb54a091d7199e2fb97b765035b02804931b55cf857a20f044040c97227cbcb410978624097576156c8158d6b7fbc856ed46f04c5eb5869f62f2e00092ef10bc77b10dbc3d0a99a1116fc5a34fe3c2d7d82cdfd2402d76d8bbf93f5ecbe3f4b9ca204f389da2d0a845c9431a226456b4097d2ef0eb2b4735ff45f4857080b968fffc3ad34f10f54aa6767fc23a11134223d2f3f44554a6d28b660deb6d5ffe78dd42f852aa86f63f80f569c57d39e78d9a6d9ab9ba58a5899a0461a0b15d3587604a3d3145e47dd9cc7d3264c1bf866e143cf5290e080744250277b7807dce3aababb2ba6e7385b95693f7c34ebc63fb5f894f545434a755cfec67d384c1b01b5dbefd6b76b2e2b320af8e8b75f84d40ee747f02df12e09cb695a2942f5400167feef55e3eeb7dddda405fd06be45a402ececc3bc87facce0afd49f8ada6c095f83a400f67c8672249e7d8fdd257ab2dfba877f4e5a8d28144048c526497ce245861464fb802beaf5736d815cf0b147dc13c14eb84999456c4d595ac9b90ded1e5f139f743dadee7ecfecdf96f16cc41a9d7525b706aa15970851e22d58ef12907134b7ab025c2262b8744d6b4bbf3a2f5c203ffb2d5c5b53f0a9365a805c196c8d8c96e182c3ba43b3faf47a155d9f161cad850e27d817804a03955aaae384ffd2960299bfa00880cd72ec038ff6bc5fc6acb5200ec2d1e862f16ad42001a9c4889452347024941680688d4e4233111d46ca5e2dd8379177368c033a9b2114f66ccb4292ab1c4c02db15ebe3a4f582d1fe19716b8179892f8119115d438581c5ff0dfb7c5cd8aed2be094f9b525b295a20095a1e36e78a0cc453c659da76586829c4a4f1e73c89bfcba64c2129cac513fbe30cbc9d8f2f2a353ddfa928bcf251547501e50fabf00e81dac5d9863e7bc28e63d88bcda6a41eadd0f50e87fc33402b7939f660a1bb2c946386e069856c955d6e58ba8370e8e2f6ae600cab975bdd3350a9192937e0b8e7214c5da0ec9db03e7d9a4895f622aea3fb52fc85abec9edac9e1761d7c827ee74727366bdf06c12e12db57e32dc8bee0ac28c1037684918f4bd75e9072bbe13efe493d7299db4f9d332ff8bec9be355c9b74a2219ba915c11adfbc74b6d4594a5cd81f32020258c6bf5c2213205e9d2a578ef2bf88a03c8c29bf58a4dc0ef26efd4efc23823a7959f5523fc7d135ad993b419cb653100449f7c0c54d61199504ad0a26ddae8540af1af1961ff108f21af5e842622a31c40350c6fb737a6dd43032449deeccbedf3e183289e0dc8ca0e221649f468f9dff678e59541240ca439b3cae1b8839dcedc7abc7938489b5fc755a8ad05d4ccbf3a9c26ad8e66d655c4f770b50bdf2736e9e8108f2b36ea42e1241eb066a8d0afcc3def1d8f68475f29b8291436849c68a14ff80e82033138bd0c9757f257e6f77f6e6bddeb3069081332d1774803ea5e1b1ce4704bbebc5ac8a7559ca9a8b0668dc3315b2bb790c722f50158900c0b1c6c2462806958c361f5ce0b78202b701d5efc8581cc21ba02c0f165b1de97ce766e94249ce1b76c571e4d9d26ffecd46c20dac29c3645be7b615268983cfc87157cfa82499fddfd9502108e8a647f2a5f10bf2ad9db26bf4e40805d98d38e5fb2fdd75bc4874fdaaefee429087226f91beec3a958e628faf4aa932bdb6fb6fe9be08c1ac903c9d4c8f9662958891e0a206b26c9cafd00d4981a2c17cb39a235fc6d6b67e086815989a992f21340cb044c8e4a067189da47d2608d71b7144e54f985f9b6abf7e9aa323c2919018409c89f2044df6e189dc5fa8ee56a9df049213cce64fa1414f9be886309339c20bdc1bd9315ae7713c9ca3acced7d2f9b6373c45e5777caba9de28af6d824d9b35ed5f8b8fa3bd4682170b1d6783172361087930e7ca1f3b498bda80d838d75e946e0e76b2c0a0d940d75704702d164508d91ce4f63da4e88c2391445289c9ab1f79dd3272ae65994fd23824adfa271aa9494a6bb16714c0bd11091e3b96f89815d82188599ccd602583f019ed3c3fb30a5de9ebb33f795d5f983c4886eace740a0b7433b5c987f9f15632513ca189733717205120a302bba1d80063768a04dfdecce762169db1f283d6e9c9cddecc1000cb8f82e1162947f529445f476d776201e2e5b727b9f07cff49dd3f5f70ac18521d8a519ecce07a6a3fd8d4027826072bcf85bd8f502787aeb5f737fe3ce4f6b57f4bb95a3a4d9be0e0cab5eeb9dd3d86c033ff23d74f72301fd0c332ffc6b6e4fb77738b108cde7996a2dbe6dc033da1d1806f16a5a9d341d90d0daeefad589c3a4fc044fac55cc50583e279c9f7b1d10f42f9170bef60619895c0956713ca6cd03f9f799bb5fa2585f29504647d2ad2aa1e39330a83d7db5e3d183496b4e115fd3f0bcba26be9d6eaf4d4f2bfab3d81511ff797dd02deb9474e516f106e9d3c7b6344dcd96285d8caa654592447d065dd092c44cd40b52795bc086850183cc4dafcc4d7d2e626f02dc5d80b5d66ef8092897bbc77a58bd6a474ed92042472d2eba0ee78d3492d194cd874a2f5f93ef9f4233cbd3a7cb088b3c07b967e2cc12a8a965b730e58909d475091662070f0a7f9482f5ac252ea3f5d06d28d0a2b2223d659939b8d96ce0dd3429255c31806526eee7cc081f216bad83e913190bc08cfb59e66beb8e6f86f2a603da0e7b2b834b713801b2c6b01f868b251b94cc2aee80d54277094b6993f8a480242e20248b7cb5ccf4336e1381230a359191c87df334bda06035346cd62b5de16510cf448502373f2cb6c7cabc12eef65020805b3179e3515353cc58e014a8ca1db39bb8d1719aed5f24173b15811ee534f803ff01aaf48ba94588efec630b3f79f60e92d15e5635561a5330ba9e046b2144a11714c697e3dba36d4052312edfad860782e7d471e55b700cd3a834c9d15152b6930551a4644e0bff61d89891737069a5d0a8d11edacf92501db6787103d70333071bc367c29468309481484bc4d3f046c2d04088d804c8c0a9617eb12a10302dc6a24dcc08c48a1fc5d5593ad41095898e7d754732db7e63f94ad67625e7984de67377f716ebb68c84be1c21ea00b9789496f1c0d78ffbf06e6b80f4d7a010998e7442e3ee7dfd0145acfb50c8a361c5929b0b3bbf1abac2688a670c28d06fe6491839fe4b8ed91c842b14510682efabad6c359974d21249d2727960b2108ef03285e56b92770a83c98374aa6f3b8ccaa119b39e97c", "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"}) pipe2(&(0x7f0000000640)={0xffffffffffffffff}, 0x4800) vmsplice(r3, &(0x7f0000000440)=[{&(0x7f0000000800)="99", 0x1}], 0x1, 0x3) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "f7395072", {0x3, 0x101, 0x0, 0x2, 0x3, 0x0, 0x3}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000083e000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) io_uring_setup(0x2bd8, &(0x7f0000000040)={0x0, 0x36e, 0x4000, 0x9, 0xa0002f5}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd3283d0368e269b2, 0x8031, 0xffffffffffffffff, 0x1000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r5 = open(&(0x7f00009e1000)='./file2\x00', 0x8060, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2a100, 0x0) fcntl$setlease(r5, 0x400, 0x0) close(0xffffffffffffffff) rename(&(0x7f0000000040)='./file2\x00', &(0x7f0000000100)='./file0\x00') 4m31.904886927s ago: executing program 3 (id=279): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x4, 0x6ff9, 0xfff9, 0x1, 0x2, "61858c842dbb48dd"}) r1 = syz_open_dev$video(&(0x7f0000000000), 0x100000001, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000040)=0x3) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10, 0xffffffff}, {@host=0x10, 0x1}, 0x400, "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"}, 0x418, 0x2001}) close_range(r2, r2, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000080)=0x7c) 4m31.900561001s ago: executing program 3 (id=280): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) write$cgroup_pid(r1, &(0x7f0000000040)=r3, 0x12) readv(r1, &(0x7f0000000280), 0x0) 4m31.792258448s ago: executing program 3 (id=282): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@multiplanar_overlay={0x4, 0x0, 0x4, 0x100000, 0x686, {r1, r2/1000+60000}, {0x3, 0x1, 0x7, 0xf1, 0x4, 0x5, "2624c8d6"}, 0x8eeb, 0x3, {&(0x7f0000000100)=[{0xd, 0x7fffffff, {0xff}, 0x40}, {0x4, 0x0, {0x8}, 0x5}]}, 0x80}) gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000002c0)="355c80a8a2af836f75896bacfcbb178c9ec23a9e30072e7c37c8c5d8602d216c569abeee61fafa7b654a0481ca7b100f4394957dc3b8cc68f8f82fffbf7bb37b", &(0x7f0000000480)="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"}}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000300)=@v={0x93, 0x3, 0x80, 0x0, @generic}) clock_settime(0x7, &(0x7f0000000200)={0x77359400}) timer_delete(r3) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x791080, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r8) getsockname$packet(r8, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x38, r7, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r9}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff0f000000000000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x80044d0c, &(0x7f0000000280)) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) 4m31.206562417s ago: executing program 1 (id=293): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x20000) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000001c0)={0xdad9, 0x0, 0x3, 0xcd, &(0x7f0000000040)=""/205, 0x29, &(0x7f0000000140)=""/41, 0x3f, &(0x7f0000000180)=""/63}) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r1, &(0x7f0000000200)={{0xcc, 0x7f, 0x80, 0x247, 0x5e, 0x4, 0x185}, "cf6afface4c93f38699264be434cd4d0542725bf36"}, 0x35) (async) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000280)={0x2, 0x1, 0x5c38, 0x84880, 0xffffffffffffffff}) (async) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f0000000600)={{&(0x7f0000000580)={'Accelerator1\x00', {&(0x7f0000000380)=@adf_dec={@bank={'Bank', '4', 'InterruptCoalescingTimerNs\x00'}, {0x296a}, {&(0x7f00000002c0)=@adf_str={@normal='NumberDcInstances\x00', {"98a6a3347a9e7cabceb943c6600e4516a1da602c6bc66241176a9a2a9d02a8b867f8a17f2194727a303885dd1f6353e60d6688cc99ce3d71b5c2c6479a09073c"}}}}}, {&(0x7f0000000500)={'GENERAL\x00', {&(0x7f0000000440)=@adf_str={@bank={'Bank', '1', 'CoreAffinity\x00'}, {"fc41ce64c84cf73b395b4899be7137b73f2437908690901a043818a30aad0f0b6b7e7a8db304ba4fce93e2adb65bf58e0994c1f051275b1d842f0be99f668a3f"}}}}}}}, 0x7}) (async) sendto$x25(r2, &(0x7f0000000640)="dcebd617c7ff98090bd12c84e6539d0accb4fc6bb47505651281f53785943c9b04e532baa869e456347d11a073a3226da8454d291d8a19cab209990bb64e796a6c81443992e98ce08bf3143d81cd43de9f2981ac2f7b4b3ef19703df7f322ebe178e135d2748b8bd74ee5eaeab0f07a12d097fb1f4abff82d8a217aaec6a8901582c586b0ef4413496c1c85af59ce58f4f2929429454df3f1d3c45a39b1666ee7d796e88c098abd7", 0xa8, 0x4001, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000700)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000740)={r4}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x156, 0x4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r2) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1c0, r5, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x69}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x53}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd0000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfd1}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}]}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) (async) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000a40)) (async) bind$qrtr(r2, &(0x7f0000000a80)={0x2a, 0xffffffff, 0x1}, 0xc) (async) r6 = socket$rds(0x15, 0x5, 0x0) (async) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) fcntl$getownex(r7, 0x10, &(0x7f0000000ac0)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000b00)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0xdd1f000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, 0x3, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44880}, 0x4000) (async) syz_open_dev$dri(&(0x7f0000000c40), 0x8, 0x0) (async) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r6) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x40010, 0xffffffffffffffff, 0x8000000) (async) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa, 0x8010, r2, 0x10000000) syz_io_uring_submit(r8, r9, &(0x7f0000000c80)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000d00)=[@text32={0x20, &(0x7f0000000cc0)="260f0766baf80cb841ed9e8bef66bafc0cb073ee640f09360fc72ecc66b8df008ee00fc775062e0f09660f510066b8d5008ee8", 0x33}], 0x1, 0x4c, &(0x7f0000000d40), 0x0) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) (async) r10 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) ioctl$VFAT_IOCTL_READDIR_BOTH(r10, 0x82307201, &(0x7f0000000d80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 4m31.203699968s ago: executing program 1 (id=294): ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, &(0x7f0000000040)=@hsk={0x0, 0x2, "b51a3c2a85"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) r0 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, 0xee00, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)='+\fER', 0x4) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x204000) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 4m31.192917859s ago: executing program 3 (id=295): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101600, 0x0) read(0xffffffffffffffff, &(0x7f0000001a00)=""/177, 0xb1) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @ipv4={'\x00', '\xff\xff', @remote}, 0x337}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r3}, 0x10) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r4}, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000005000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2a24a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9877399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a8449f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d2943e6f5f828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000056c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137000059aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c072083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a00000000000000000000d550c9f15fbb2324a3f37dc4ba"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000001840)={0x0, [{0x1, 0x598, 0xe, &(0x7f0000000040)="46905ec57a78a9881dc2c86dc81ff164dfc5595ce8307a66380a0e1d02afb5ed1c909cccfe6c7c4a7bab4190def7975d913f02ab7e02d74332bf61c41a0fa4304c433770864d56d46099431ecacc84706f1b69f505fabca4240c599ef67ac01ee04f5416c04c10936e9b09af056cb7774958ac2dc6965821b7f89e8ac41d398c4c4c91953b4ac3c3922825473533bff5d930c2a78c3ac9a379cb4d517da9fd4574c644ed4797c15f94aae3c2d2879c41b31243"}, {0x1, 0x228, 0x6, &(0x7f0000000100)="a01273ad326008b59e321af290c0c0d8ce85009447d067f9cc5a32d4494905d2f89d34aa1cb539d5baf02702191d0dd905d186232904ca1901a869ca7db4a42dbdcc17a165"}, {0x3, 0x260, 0x0, &(0x7f0000000180)="08aacdb044ffe1e5e87a8acfe9927c0c1356620fb3eee9ab30f30e935deff5037611ebbcb52a771092c4f4860e6dbd0c2b4795a539815a4f91a72f4cebb5fb32477f001667bb8d649f7488a7"}, {0x2, 0x1c0, 0x9, &(0x7f0000000200)="98bdda4a2a3f5af9e6c14694c1513507120e917b69feb57295e394ddebe0806b27d57e992de5356e840d83368dc9747739b99ac4e6480368"}, {0x3, 0x640, 0x0, &(0x7f0000000240)="6077b82510a066681e781f6b6c4265f3b365b0f46213ffe553cc8a65ce77792a3758633671b69acee7966875738ef90ae4f0bb19e32eedb4d3c7ab19a2717aa5cf21218b7e72caab1c218caa4e9ebe380a705fd1cb3769391c1c87c782fa321c955b813d94d78370a9a98a8bed6166eb29943f2093b78cd5f06531184a6d138e4db002b93db4c1db0e2b8498c3e47e7978ee84b47e3f2a24460b84e4d3e835b6b465576da64a7a40f586f4a5489d2bacadb80a2484be3c1a8d9119436b0eb68a633d621de2c3447f"}, {0x2, 0x300, 0x800, &(0x7f0000000340)="d9375f52c8ecef4b0c46f67dd7fbb6ad04dc97f0e78e32dff112a81adcd4834435961a09efdaa69513fba6a8c26faec6620edce1407e429359ea177057afd5bda0f56bc4b001a88c29b6458ed63b9746bfda2dfc4d0d5ab142ceb124b087ee5f"}, {0x1, 0x288, 0x8, &(0x7f00000003c0)="23891be45e4a7e1d9231d3ec076b370f178842d200a196efc80dfbd150cbdc7dd4d4f3345e885e3f5cd5cc8c46c518684a355746195fd3d42bbe08cec28478f6014d67123c458f8fe9cb1db7756ca884ad"}, {0x1, 0x50, 0x6, &(0x7f0000000440)="066aa7b7a45c7aabc077"}, {0x2, 0xf0, 0xffffffff, &(0x7f0000000480)="facfac1f696e25cebe6dc085f81a93a1eb2ffe314a4854332882a5e3c17a"}, {0x1, 0x2b8, 0xe69c, &(0x7f00000004c0)="cbd7f78c0f58e75f20e9270c7fd93c7a1a30ac31a8e4dcd0af86e62daeb71b220d4b237ab6bb036e9458c62a3243c8365052e7b17afc669951ae2043f566235ec8223844f8874d49128ad856eb659123687503dcf24878"}, {0x2, 0x4e8, 0x10001, &(0x7f0000000540)="dd8e016d0a5805cc617fa8cab8e63351f063cefd194f4477228bc381600e70310abcaffd163a805e529d88b4ebe31022459f0ba01caca5605a203457d491f37007a754a25ca0127c498ec3fd4ff6f08610697e80cf6aba7e90c19240971cd574c419d3056fbeef2c2f06c869026312c24ad051749841a2af4eeb498db53153a341a8bbaecef8f959d649ab8b3eda28cecb430f6d2817fd4c9594a753b0"}, {0x1, 0x8000, 0x2, &(0x7f0000000600)="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"}, {0x1, 0x438, 0x5, &(0x7f0000001600)="a7238ae19c262dbd4ef9c8dd1cb497aae2f2d5e5ef2ac2fdf2261d6c6d265717e13ab0d056ea318fc9281dc23baa44acc0ca3fef9f4cfd119d52b976a4a31e9e4e4a2693dc271913d6f1353ba19694b2b2b7c7cb0d359108ba32d493533cefd369931ba2f48620665ff3e0184a6a11c3dae769dcad5a778ad9f408b396fdd1ec07525a41abfcec"}, {0x0, 0x1e0, 0x100, &(0x7f00000016c0)="545271faa7cb02bc0b18cab7577cff53029dd78a4b7b5ab046c8b2dc2c957321cc33289eff951d606717343b59bdad08ea9c3f863392b47e01242817"}, {0x4, 0x0, 0x1000, &(0x7f0000001700)}, {0x0, 0x6b0, 0x2, &(0x7f0000001740)="3fc081492b4320ac893c77ede9bd7fdbb1b65bb6fe1afec3512802258e93ab407e5f98214a8854f981f862c0b5847cd03f780b5c903b1f6429f00f531e3f61c1bd442a1992eab2584c690bbf88be57d89fa6eba6819a52d8f60045b41268e3776b9b08a1bd73abb88c29016aebf9bf29bb4fe2fa0116469482eb9371713f4935286febfa1f837d92439463bf838dae16de4357d1f791afa5d6cfe29581863f1f86dd6936655b7e0e4a7e35d0c2264547e278bebbce11fba7530d5a7b0778b3357e0d1983e0d3275a09171e03d3496b652b574a0f16cd"}]}) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) 4m31.096002729s ago: executing program 1 (id=296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0xa, 0x1) write(r1, &(0x7f0000000200)="1c0000001a009b8a070000003b9b701f400004000000eb3f7a7f1de2", 0x1c) setreuid(0xee00, 0x0) r2 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$yama_ptrace_scope(r2, 0x0, 0x0) setreuid(0xee00, 0x0) dup(r0) r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x40000006, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r4, r4, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f00000001c0), 0x4) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f00000000c0)=@sr0, r4, &(0x7f0000000100)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES16=r3], 0x5c}, 0x1, 0x0, 0x0, 0x48001}, 0x40005) 4m31.095867006s ago: executing program 3 (id=297): r0 = socket(0x6, 0x4, 0x7) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10) (async) close(r0) 4m31.027397709s ago: executing program 1 (id=298): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x40080) read$FUSE(r1, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 4m30.95048637s ago: executing program 1 (id=299): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x80002, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000002, 0x8c012, r2, 0x343e2000) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) sendmsg$nl_route(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) (async) ioctl$TIOCSCTTY(r0, 0x540e, 0xfff) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$netlink(r2, &(0x7f0000000140)=@unspec, 0xc) socket(0x1, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x78}, 0x94) (async) set_mempolicy(0x0, 0x0, 0x1) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x400, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_LEARNING={0x5, 0x8, 0xff}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0xc050) (async) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000004380)={0x34, r6, 0x20d, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xffff]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x34}}, 0x4010) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)={0x10e0, 0x14, 0x1, 0x800000, 0x0, "", [@nested={0x10d0, 0xb1, 0x0, 0x1, [@generic="70f27c688353f2a9eb8e069021", @generic="7467230216d85812232fe0a08694b60d6077e877ebfa8cfe7572e49af01117463c3e21bf78572a49797da18a98f9af31a28db1ccd68ed0a4d204cb5ecc1405c0050699ddc421dba9f123967ba2101d39c5b94cf254ebdb22ff6b70ce8a2e8d783c8aa630b652461156789ba96a8e5d16cb5f11406376c1df7943a6f27fbc90f59d4cf7da6910733a0e62b9f4722d8a20bb129270b38bfd75da88a3984d14db0569edf652af0773183babea7b2af5581bafd104a16601ab7526e19d224ca610", @generic="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"]}]}, 0x10e0}], 0x1}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000240)={0x24, r10, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x3808}]}, 0x24}, 0x1, 0x0, 0x0, 0x805}, 0x40084) ioctl$sock_netdev_private(r4, 0x89f2, &(0x7f00000000c0)="005d9892ed80c1d6df7b7210bf06c2cf6caf52fafd5e000000") 4m30.948995876s ago: executing program 1 (id=300): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) close(r1) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) close(r1) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 4m30.887153818s ago: executing program 3 (id=301): r0 = mq_open(&(0x7f0000000140)='*+@[^#^\x00', 0x40, 0x65, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x60, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @gre={{0x8}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x3}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1ff}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) sendto$packet(r1, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e6669d3c865c6b96e84000050016f37fe8c0295f5c", 0x3d, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r4, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) mq_notify(r0, &(0x7f0000000300)={0x0, 0x1b, 0x1}) mq_notify(r0, 0x0) (async) mq_notify(r0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x640000, 0x0) bind$llc(r5, &(0x7f0000000080)={0x1a, 0x30b, 0x1, 0x8, 0xf, 0x8, @random="c552a8889b63"}, 0x10) (async) bind$llc(r5, &(0x7f0000000080)={0x1a, 0x30b, 0x1, 0x8, 0xf, 0x8, @random="c552a8889b63"}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) sendto$inet6(r8, &(0x7f00000002c0)="a644aebac2f418a0267314e7440e32159c", 0x11, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) (async) sendto$inet6(r8, &(0x7f00000002c0)="a644aebac2f418a0267314e7440e32159c", 0x11, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) shutdown(r8, 0x1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fcdbdf2530000000080006000000000018000180140002006272696467655f736c6176655f31"], 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800) 4m30.347728976s ago: executing program 2 (id=304): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000840)={0x0, 0x0, 0x3b8}) 4m30.287710288s ago: executing program 2 (id=305): r0 = socket$netlink(0x10, 0x3, 0x0) (async) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) (async) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x6, 0x0, @SEQ_NOTEON=@note=0x1d, 0x2, 0x8, 0x8b}) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x69) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000300001c70ee000c000100626f6e64000000000c00020008000100060f"], 0x3c}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000125bd7000fbdbdf256300000008000300a4207aa0bbd3f1145705fd87e42a7420457f15d328c15b31db19a96796ca63b2e18c0820821d3b26a8dc", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x10000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004001000"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r5}, 0x38) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000440)=""/30, &(0x7f0000000380), &(0x7f0000000280), 0x1, r5}, 0x38) 4m30.287293478s ago: executing program 2 (id=306): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001400)=@newqdisc={0x50, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0x4}, {0x0, 0x5}, {0x6, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_ALPHA={0x8, 0x4, 0x19}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x4}]}}]}, 0x50}}, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) sendto$packet(r1, &(0x7f0000000080)="39c394e534ecf02e7e0e9ca208004b54", 0x34, 0x0, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x95, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="91800300000000001800128008000100677265000c0002800600020021"], 0x4c}}, 0x10) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0x1}, 0x6) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m30.217475367s ago: executing program 2 (id=307): r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8101) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x206, 0x8, 0x6, 0xf, 0x5, @broadcast}, 0x10) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) close_range(r0, r0, 0x2) open$dir(&(0x7f00000000c0)='./file0\x00', 0x208602, 0x5a) (async) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x208602, 0x5a) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000100)={@desc={0x1, 0x0, @desc3}}) (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000100)={@desc={0x1, 0x0, @desc3}}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x490000, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000180)={0x5, 0x2, 0x7fffffff, 0x20, 0xffff8000, 0x7}) close_range(r0, r0, 0x0) (async) close_range(r0, r0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000001c0)={0x100, 0x4, {0x0}, {0xee00}, 0x0, 0x3}) syz_open_procfs$namespace(r3, &(0x7f0000000200)='ns/uts\x00') (async) syz_open_procfs$namespace(r3, &(0x7f0000000200)='ns/uts\x00') openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240), 0x1040, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000280)={'filter\x00', 0xac, "01004ae4610ed266af0873b881ab24727c646ea9563c26eedac1aaffa56abe625a2cb2c65ea05316bc5117090dce049872d49c4f94f9214712f8502c89e831a4386d38517531856fbbad10bde037de0ddb4ede414e33d61771e5b6f3d130d38eef74086f71c66683a97e9bc50590d728c2cfb1c19c4761dc97a2d0b7ce874612074d5f6faf787d4dc4095a1cd1fdd32c14dcd1214ab43b7dee9fa188f321e0556b956a69f943d8a1b9183120"}, &(0x7f0000000380)=0xd0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000003c0)=0xf4240) (async) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000003c0)=0xf4240) r4 = accept4$inet(r2, &(0x7f0000000400)={0x2, 0x0, @empty}, &(0x7f0000000440)=0x10, 0x80000) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f00000005c0)={'broute\x00', 0x0, 0x4, 0xcd, [0xefa, 0x4, 0x200, 0x10000, 0x7, 0x2], 0x0, &(0x7f0000000480), &(0x7f00000004c0)=""/205}, &(0x7f0000000640)=0x78) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r2) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040815}, 0x44000) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000007c0), 0x8040, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000800)="2435176414a3312fafdc650ae3d17301820e44ead0585fc94eaa19bf6ac0d0b10f0cac777df6e921fa2bf7ac312db166245d949974005ed373aabe7a1ad76da809b938fb8f72c1e625ed6a04acc349767f5c34ddcfb5fa18edce9af4415fb9a918a34428320c1247ed5d7b2d660e2c8606a2b64f76f0357a91b2bd30326f9091b20e34e9fff99855cf61f46e2506ad1ff669d49070c984684f0dd63e085432696666074cf93332da0465643cb86d30591ac1e22ae16e0bbb87bfe37c31f7114510500d2faf2e9d0c90fc2dccdc357782dea66d7b9f7410eafece70b370925f3f4845", 0xe2) (async) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000800)="2435176414a3312fafdc650ae3d17301820e44ead0585fc94eaa19bf6ac0d0b10f0cac777df6e921fa2bf7ac312db166245d949974005ed373aabe7a1ad76da809b938fb8f72c1e625ed6a04acc349767f5c34ddcfb5fa18edce9af4415fb9a918a34428320c1247ed5d7b2d660e2c8606a2b64f76f0357a91b2bd30326f9091b20e34e9fff99855cf61f46e2506ad1ff669d49070c984684f0dd63e085432696666074cf93332da0465643cb86d30591ac1e22ae16e0bbb87bfe37c31f7114510500d2faf2e9d0c90fc2dccdc357782dea66d7b9f7410eafece70b370925f3f4845", 0xe2) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), r6) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r7, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x40c00) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r7, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x40c00) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000a40)={0x108, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x8}]}, 0x10) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000b80)={r2, 0x0, 0x45, 0x0, &(0x7f0000000a80)="fd6b633d64bf289db16b7accb669e23c52eaac3f00a6feb096afafe8bc3b8bcdeec84e8ce9d6b22f521522d6bbb834a224afefe60122dbef54a708ec95d717daa55c29c8ad", 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000b00)="6cc08dc1fbb1713126092bfe69476ac0b6546256d7b261ad688bf306fca88484caa23c2e740ca9c69bd8b8a0eaa0d0bf3641c54460d332b7b74646c77226ec5e387c76e4b70b73f11eab75bbe9d3e30d47732f4a981cd4dec0e5ace20001cc6bc806a3826b0af4cdc6be7de956f174581b580fe23eebe93c", 0x0, 0x2, 0x0, 0x400}, 0x50) (async) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000b80)={r2, 0x0, 0x45, 0x0, &(0x7f0000000a80)="fd6b633d64bf289db16b7accb669e23c52eaac3f00a6feb096afafe8bc3b8bcdeec84e8ce9d6b22f521522d6bbb834a224afefe60122dbef54a708ec95d717daa55c29c8ad", 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000b00)="6cc08dc1fbb1713126092bfe69476ac0b6546256d7b261ad688bf306fca88484caa23c2e740ca9c69bd8b8a0eaa0d0bf3641c54460d332b7b74646c77226ec5e387c76e4b70b73f11eab75bbe9d3e30d47732f4a981cd4dec0e5ace20001cc6bc806a3826b0af4cdc6be7de956f174581b580fe23eebe93c", 0x0, 0x2, 0x0, 0x400}, 0x50) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) write$tun(r9, &(0x7f0000000c40)={@void, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @val={@void, {0x8100, 0x7, 0x1, 0x4}}, {@can={0xc, {{0x4, 0x1}, 0x0, 0x0, 0x0, 0x0, "4f42fd812e0f8f4c"}}}}}, 0x22) mknodat$loop(r6, &(0x7f0000000c80)='./file0\x00', 0x10, 0x0) 4m15.752052248s ago: executing program 32 (id=303): sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="7f2bfd32ffa801a34e3671a8c51a32f8ca7cdc3de4759df7771c84e21ff1381afd3e1b3414c908b79b50fe1329d12790af086ad818385492c7a704089c549753d3dba8b5400905823f63d9dff702", 0x4e}], 0x1, &(0x7f00000002c0)=[@ip_retopts={{0x68, 0x0, 0x7, {[@cipso={0x86, 0x55, 0x1, [{0x7, 0xe, "0274b996c0e51ceeeab72cd0"}, {0x7, 0x9, "8980cef24bedde"}, {0x1, 0x6, "c4c0cc6f"}, {0x6, 0xf, "5d7a396e9e9e2192674b6276d5"}, {0x5, 0xb, "a8b1a820f48e20a5aa"}, {0x0, 0x9, "6be69847434d1a"}, {0x7, 0x3, '?'}, {0x6, 0xc, "8da53e145d25ef94556a"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r0, @rand_addr=0x64010101, @rand_addr=0x64010100}}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0x7a, 0x1, 0x1, [{@multicast1, 0xd2d}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x7}, {@broadcast, 0x4}, {@local, 0x1}, {@private=0xa010102, 0x9}, {@multicast1, 0xb}]}, @timestamp_prespec={0x44, 0x1c, 0xc5, 0x3, 0x5, [{@broadcast, 0x6d2}, {@multicast2, 0xd9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @timestamp={0x44, 0x10, 0x68, 0x0, 0x6, [0x3, 0x7, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xbf, 0x3, 0xc, [{@remote, 0x7}, {@local, 0x6cfa}, {@private=0xa010100, 0x81}, {@broadcast, 0x1}, {@rand_addr=0x64010102, 0x7}, {@loopback}, {@remote, 0x3}, {@remote, 0x40000000}]}, @ra={0x94, 0x4}]}}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@cipso={0x86, 0x43, 0xffffffffffffffff, [{0x1, 0xc, "299ee416e862a1b6a5ff"}, {0x72f06c33f863eff3, 0xc, "b8b8ab5560452904651a"}, {0x6, 0xc, "f4829fabc2720917f0f0"}, {0x1, 0x3, "fc"}, {0x7, 0xf, "4c0d839ab2a75621c56f1095c1"}, {0x2, 0x7, "95d2d429bb"}]}, @generic={0x88, 0x9, "a9f1e94ab60248"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff9}}], 0x1e0}}, {{&(0x7f00000004c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000500)="5eac800644c7b24d185f918ba7162505d0357a9a13ff59da2d80d38d8494ead8c895874f432fac6973", 0x29}], 0x1, &(0x7f0000000580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x80000001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x20}, @rand_addr=0x64010102}}}], 0x38}}], 0x2, 0x2000c840) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000640)={0x0, 0xfffffffd}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000006c0)={r1, 0x6}, &(0x7f0000000700)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@getnetconf={0x14, 0x52, 0x1, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x8005) mount$bind(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x4000, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000900)={r2, 0xc}, 0x8) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000940)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x9c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x2}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x4c}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x4}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x1}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x3d}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x8}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x35fe, 0x63}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x41}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x75}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x38}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x44081}, 0x8080) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000d80)=0x0) syz_pidfd_open(r6, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000dc0)={r1, 0x63, "3e45fa057d55966bcccf5ba997a375465772f031414e918f2185a98e844fbc9fe2894ad458af7256a45e9db1d9b79c6d73474acb843e54c84ab668e8c2636601468c399fb8037a93cbb89f5b056831c122e6c7df8c6f59479d353099866abe9dac27f0"}, &(0x7f0000000e40)=0x6b) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000e80)={r8, 0x8, 0x7fff, 0x3, 0x3, 0x1}, &(0x7f0000000ec0)=0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r9, &(0x7f00000010c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f80)={0xc0, r10, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x1f}}}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @default, @random="dd068df310ce", @broadcast}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x33, 0x33, @mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1}, {0xc}, @device_b, @device_b, @initial, {0x7}}, @tdls_disc_req={0xc, 0xa, {0xf7, {0x65, 0x12, {@random="95c32cbc624d", @device_a, @device_b}}}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0xd7}}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x20004801) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001140), r9) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r9, &(0x7f0000001380)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001180)={0x18c, r11, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5302}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x10}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x100}, {0x8, 0x15, 0x7fffffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x61d4}, {0x6}, {0x8, 0x15, 0xffffffff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x200}, {0x8, 0x15, 0xfb79}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xb}, {0x8, 0x15, 0x10000}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x880}, 0x5) umount2(&(0x7f00000013c0)='./file0\x00', 0x3) socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$IP_VS_SO_GET_INFO(r7, 0x0, 0x481, &(0x7f0000001400), &(0x7f0000001440)=0xc) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001580)={'ip6_vti0\x00', &(0x7f0000001500)={'ip6gre0\x00', r0, 0x2f, 0x6, 0x7, 0x7, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x1, 0x3}}) getpeername$packet(0xffffffffffffffff, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001600)=0x14) sendmsg$ETHTOOL_MSG_EEE_SET(r9, &(0x7f0000001780)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001740)={&(0x7f0000001640)={0xec, r12, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x1ff}, @ETHTOOL_A_EEE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0xec}, 0x1, 0x0, 0x0, 0x40040}, 0x80) 4m15.700679339s ago: executing program 33 (id=300): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) close(r1) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) close(r1) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 4m15.699098969s ago: executing program 34 (id=301): r0 = mq_open(&(0x7f0000000140)='*+@[^#^\x00', 0x40, 0x65, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x60, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @gre={{0x8}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x3}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1ff}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) sendto$packet(r1, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e6669d3c865c6b96e84000050016f37fe8c0295f5c", 0x3d, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r4, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) mq_notify(r0, &(0x7f0000000300)={0x0, 0x1b, 0x1}) mq_notify(r0, 0x0) (async) mq_notify(r0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x640000, 0x0) bind$llc(r5, &(0x7f0000000080)={0x1a, 0x30b, 0x1, 0x8, 0xf, 0x8, @random="c552a8889b63"}, 0x10) (async) bind$llc(r5, &(0x7f0000000080)={0x1a, 0x30b, 0x1, 0x8, 0xf, 0x8, @random="c552a8889b63"}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) sendto$inet6(r8, &(0x7f00000002c0)="a644aebac2f418a0267314e7440e32159c", 0x11, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) (async) sendto$inet6(r8, &(0x7f00000002c0)="a644aebac2f418a0267314e7440e32159c", 0x11, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) shutdown(r8, 0x1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fcdbdf2530000000080006000000000018000180140002006272696467655f736c6176655f31"], 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800) 4m14.683367518s ago: executing program 35 (id=307): r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8101) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x206, 0x8, 0x6, 0xf, 0x5, @broadcast}, 0x10) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) close_range(r0, r0, 0x2) open$dir(&(0x7f00000000c0)='./file0\x00', 0x208602, 0x5a) (async) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x208602, 0x5a) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000100)={@desc={0x1, 0x0, @desc3}}) (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000100)={@desc={0x1, 0x0, @desc3}}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x490000, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000180)={0x5, 0x2, 0x7fffffff, 0x20, 0xffff8000, 0x7}) close_range(r0, r0, 0x0) (async) close_range(r0, r0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000001c0)={0x100, 0x4, {0x0}, {0xee00}, 0x0, 0x3}) syz_open_procfs$namespace(r3, &(0x7f0000000200)='ns/uts\x00') (async) syz_open_procfs$namespace(r3, &(0x7f0000000200)='ns/uts\x00') openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240), 0x1040, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000280)={'filter\x00', 0xac, "01004ae4610ed266af0873b881ab24727c646ea9563c26eedac1aaffa56abe625a2cb2c65ea05316bc5117090dce049872d49c4f94f9214712f8502c89e831a4386d38517531856fbbad10bde037de0ddb4ede414e33d61771e5b6f3d130d38eef74086f71c66683a97e9bc50590d728c2cfb1c19c4761dc97a2d0b7ce874612074d5f6faf787d4dc4095a1cd1fdd32c14dcd1214ab43b7dee9fa188f321e0556b956a69f943d8a1b9183120"}, &(0x7f0000000380)=0xd0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000003c0)=0xf4240) (async) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000003c0)=0xf4240) r4 = accept4$inet(r2, &(0x7f0000000400)={0x2, 0x0, @empty}, &(0x7f0000000440)=0x10, 0x80000) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f00000005c0)={'broute\x00', 0x0, 0x4, 0xcd, [0xefa, 0x4, 0x200, 0x10000, 0x7, 0x2], 0x0, &(0x7f0000000480), &(0x7f00000004c0)=""/205}, &(0x7f0000000640)=0x78) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r2) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040815}, 0x44000) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000007c0), 0x8040, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000800)="2435176414a3312fafdc650ae3d17301820e44ead0585fc94eaa19bf6ac0d0b10f0cac777df6e921fa2bf7ac312db166245d949974005ed373aabe7a1ad76da809b938fb8f72c1e625ed6a04acc349767f5c34ddcfb5fa18edce9af4415fb9a918a34428320c1247ed5d7b2d660e2c8606a2b64f76f0357a91b2bd30326f9091b20e34e9fff99855cf61f46e2506ad1ff669d49070c984684f0dd63e085432696666074cf93332da0465643cb86d30591ac1e22ae16e0bbb87bfe37c31f7114510500d2faf2e9d0c90fc2dccdc357782dea66d7b9f7410eafece70b370925f3f4845", 0xe2) (async) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000800)="2435176414a3312fafdc650ae3d17301820e44ead0585fc94eaa19bf6ac0d0b10f0cac777df6e921fa2bf7ac312db166245d949974005ed373aabe7a1ad76da809b938fb8f72c1e625ed6a04acc349767f5c34ddcfb5fa18edce9af4415fb9a918a34428320c1247ed5d7b2d660e2c8606a2b64f76f0357a91b2bd30326f9091b20e34e9fff99855cf61f46e2506ad1ff669d49070c984684f0dd63e085432696666074cf93332da0465643cb86d30591ac1e22ae16e0bbb87bfe37c31f7114510500d2faf2e9d0c90fc2dccdc357782dea66d7b9f7410eafece70b370925f3f4845", 0xe2) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), r6) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r7, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x40c00) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r7, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x40c00) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000a40)={0x108, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x8}]}, 0x10) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000b80)={r2, 0x0, 0x45, 0x0, &(0x7f0000000a80)="fd6b633d64bf289db16b7accb669e23c52eaac3f00a6feb096afafe8bc3b8bcdeec84e8ce9d6b22f521522d6bbb834a224afefe60122dbef54a708ec95d717daa55c29c8ad", 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000b00)="6cc08dc1fbb1713126092bfe69476ac0b6546256d7b261ad688bf306fca88484caa23c2e740ca9c69bd8b8a0eaa0d0bf3641c54460d332b7b74646c77226ec5e387c76e4b70b73f11eab75bbe9d3e30d47732f4a981cd4dec0e5ace20001cc6bc806a3826b0af4cdc6be7de956f174581b580fe23eebe93c", 0x0, 0x2, 0x0, 0x400}, 0x50) (async) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000b80)={r2, 0x0, 0x45, 0x0, &(0x7f0000000a80)="fd6b633d64bf289db16b7accb669e23c52eaac3f00a6feb096afafe8bc3b8bcdeec84e8ce9d6b22f521522d6bbb834a224afefe60122dbef54a708ec95d717daa55c29c8ad", 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000b00)="6cc08dc1fbb1713126092bfe69476ac0b6546256d7b261ad688bf306fca88484caa23c2e740ca9c69bd8b8a0eaa0d0bf3641c54460d332b7b74646c77226ec5e387c76e4b70b73f11eab75bbe9d3e30d47732f4a981cd4dec0e5ace20001cc6bc806a3826b0af4cdc6be7de956f174581b580fe23eebe93c", 0x0, 0x2, 0x0, 0x400}, 0x50) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) write$tun(r9, &(0x7f0000000c40)={@void, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @val={@void, {0x8100, 0x7, 0x1, 0x4}}, {@can={0xc, {{0x4, 0x1}, 0x0, 0x0, 0x0, 0x0, "4f42fd812e0f8f4c"}}}}}, 0x22) mknodat$loop(r6, &(0x7f0000000c80)='./file0\x00', 0x10, 0x0) 2m52.026170522s ago: executing program 4 (id=488): r0 = epoll_create1(0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) 2m51.136982264s ago: executing program 4 (id=496): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000a9a8b9952b94036720000000000000000000000003597709d86b59dc9383bfee77d6391776542d81865004525829dd115699ae1a9c02833623ab3d757689ae69bab07d9c9f07eb", @ANYRES32=0x0, @ANYBLOB="115a01000000000010001280080001006873720004000280"], 0x30}}, 0x44) 2m51.13629862s ago: executing program 4 (id=497): r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0xfffffffc, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x40, &(0x7f0000001400)={0x0, 0x3938700}, 0x1, 0x40}) io_uring_enter(r0, 0x6b4d, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, 0x0}, 0x94) write$binfmt_aout(r3, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x48) io_uring_enter(r0, 0x0, 0x3, 0x7, 0x0, 0x0) 2m50.225699055s ago: executing program 4 (id=508): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_emit_ethernet(0x15e, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x48040) sendto$unix(r0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000019c0)={0x14, 0x1e, 0x21, 0x70bd2b, 0x0, {0x2a}}, 0x14}}, 0x0) getsockopt$sock_int(r2, 0x1, 0xf, 0x0, &(0x7f0000000040)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@mcast1, @in=@dev}}, {{@in6=@private0}, 0x0, @in=@broadcast}}, &(0x7f0000000380)=0xe8) mkdir(&(0x7f00000000c0)='./file0\x00', 0x88) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') socket$inet6(0xa, 0x2, 0x0) mount$cgroup2(0x0, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x80, 0x0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}}) r4 = syz_clone(0x240000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$poke(0x5, r4, &(0x7f0000000300), 0x72) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0xc0089364, &(0x7f0000000180)) syz_clone3(&(0x7f0000000740)={0x2008000, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240), {0x1d}, &(0x7f00000005c0)=""/185, 0xb9, &(0x7f0000000680)=""/172, &(0x7f0000000340)=[r4, 0x0, r5], 0x3, {r6}}, 0x58) 2m50.162836018s ago: executing program 4 (id=511): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1, 0xc1cec2645649c048}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x510, 0x1f0, 0x0, 0x148, 0x1f0, 0x148, 0x478, 0x240, 0x240, 0x478, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x8000000, 0x1, 0x1, 'syz1\x00', 0x5}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x1, @sdr={0x34325842, 0x7}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'vlan0\x00'}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x141000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0xffe, 0x5, 0x86c}}) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000500)={0x9, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000080)={0xb, @raw_data="435330386d7045c07d0ced83659145ec87cda60fea0195e62c84f08c70a667dd931f3e0944ae0769d1db71d24638f00994f04ca9318da48efe59ecd5c4bc7e620f0052cf7501c6cb0bc9d6ea9d7f7fd580f51ffdc2205484a488b21c86765b2b6b13822337775fbb604bc443655025b4e6aab93c145aa062dab666d7bee24b65b2f7bed94cbd28be632bb7f7c6c5b301700f7c4af1bf90dd769f7de1d2e4a3e7c70f55979f51c2a89922c00cb68b7869210e8a823b63f4f65558c6d4688870907c1ad8e7ef553988"}) ioctl$KVM_CAP_DISABLE_QUIRKS(r8, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, 0xf1}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000100)=@ethtool_sset_info={0x2b}}) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) r12 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r12, &(0x7f0000000300)={0xa, 0x2, 0xffd, @loopback}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000200)={@broadcast, @link_local, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "d6e7f0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x1a0, 0x0, 0x1fe}]}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000540)=0xc) setresuid(r13, r13, r13) 2m49.923977204s ago: executing program 4 (id=517): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) lseek(r0, 0x7, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000002700)={0x53, 0x0, 0x6, 0x7, @buffer={0x0, 0x0, 0x0}, &(0x7f0000002680)="a1cea1791a1a", 0x0, 0x1000, 0x0, 0x1, 0x0}) 2m49.811622729s ago: executing program 36 (id=517): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) lseek(r0, 0x7, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000002700)={0x53, 0x0, 0x6, 0x7, @buffer={0x0, 0x0, 0x0}, &(0x7f0000002680)="a1cea1791a1a", 0x0, 0x1000, 0x0, 0x1, 0x0}) 1m20.979766322s ago: executing program 8 (id=1825): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$cgroup_devices(r2, &(0x7f0000000180)={'b', ' *:* ', 'rw\x00'}, 0x9) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000000)=0x6, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = openat$ttyprintk(0xffffff9c, &(0x7f0000001b40), 0x101000, 0x0) r7 = dup2(r0, r3) sendmmsg$unix(r7, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="daa9fd574a434b1e52cc590a88ea89c203540b107f1f", 0x16}, {&(0x7f0000000240)="4275845751973c2d776cb147c0dd4902be2b5b045199d96be41851115fcb6dcbcfd9c3ef3d009e5a3d541d7d25460d57be297658dc12b0867adcaea66649f52b57aeb508dde76e1f2c6090699be2a2b2aa7af6d3765bbf997a49c2164edf731644124afc3adced7aea271ee975910257c723d0da745021cbb5442a2f497eb8c3e0faf45b075e63f78bc91f6e2fb3760fe3f9a8f6602cee4c2872a460a7150d09fb60b2202de539fdf39d88fc5eb3cb4c620aa91c75f91d0872c1c2eda3561a77544d6ce84bfc39b606aa7dd9905588709c8cf8f7c1f27a6961f7b1f0", 0xdc}, {&(0x7f00000000c0)="e7a7c51536d5c054e930adb74a6b098105b2b1a9ea576c0196b1329de92dff535081b5efbed83bed78b09b07cdec18a6b65c5727b4253d1a11ca521658d69d0b35a6a2cc79f66435f533d670f4ace07d1abc7d8b954fd9942d60156ff40b4e79918fa1e3d4ee31207d65c1a36284837c3be8ebb6a471a84a66f2cbf3e1b407d39c04d90fb56e0a65ae06a92266ad4549618fac72d7bf56a4ebb61ad8507d512b30e5e4d8", 0xa4}, {&(0x7f0000000340)="75e51df9f5257cfbabd5f5b5e24007d1088e15297af75e879d82b079f5fd1eac488bc2c3c72bf2e10f851e4df25e3dab60ac00ae0218207f4944608ac45bd4e340a5045f47b0cef53d019e5d752ff8694a0f68f26b307b0a2ce105ec3dfc330bd06bbccbd4d4d98723", 0x69}, {&(0x7f00000003c0)="4589a26a8934164dc465927de79c0a4ab5ca9bc7ef7fbc23b7ff2e353304e49648ec4503456f1fd820325ed35276b16d600c20e277afd8e970d5c11f2c2e2fd41a0ba98698864707afe2aeaebf83497419d76766b43e2ab85fb2402aa146ea9a2acd5db03575887541c383a960beb06d42083badd5c1d3a412b3bffe0a92c760dd604f487549c757ba81321b10193b539bafd85db1e23fd497fd968aa8e9595b3cb578f5f0f0c1cba05c6e71270384aabec02775f034efa69215da013948fca64d6b59de45c2d585da160a65f85398", 0xcf}], 0x5, &(0x7f00000001c0)=[@rights={{0x18, 0x1, 0x1, [r6, r3]}}], 0x18, 0x4001}}], 0x1, 0x4000080) ioctl$TIOCGSOFTCAR(r6, 0x5419, &(0x7f0000001b80)) r8 = getpid() capget(&(0x7f0000000000)={0x19980330, r8}, &(0x7f0000000040)={0xc, 0xd, 0x174, 0x0, 0x9, 0x6}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xffff1000, 0x6000, 0xa, 0x20, 0x6, 0xff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1}, {0x8000000, 0x8080000, 0x3, 0x1, 0x40, 0x3, 0x4, 0x9, 0x0, 0x0, 0x0, 0x42}, {0xeeef0000, 0x6000, 0x13, 0x8, 0x0, 0x0, 0xb, 0x0, 0x4, 0xe, 0x84, 0x3}, {0x100000, 0xa000, 0x0, 0x0, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, 0x10, 0xf6}, {0x11000, 0xd000, 0x0, 0x0, 0x0, 0x80, 0x84, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x100000, 0x8000000, 0xd, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xdddd0000, 0x3000, 0x9, 0xf0, 0x0, 0xfe, 0xfd, 0x0, 0x2}, {0x1, 0x0, 0x0, 0xf9, 0x0, 0x2, 0x4, 0x0, 0x0, 0x3, 0x0, 0x40}, {0x6000, 0x699}, {0x1000, 0xfffe}, 0x0, 0x0, 0x8000000, 0x0, 0xb, 0x4001, 0x900, [0x5, 0x0, 0x0, 0x3ffffffffffe]}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = eventfd2(0x2, 0x0) ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r11, 0xb}) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c5, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(r12, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000d5e7800000000000000000004eeb5"], 0x30}}, 0x0) 1m18.374682125s ago: executing program 8 (id=1874): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x118) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) pwritev2(r0, &(0x7f0000000680)=[{&(0x7f0000000340)="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", 0xfe}, {&(0x7f0000000280)="db4c0bec28fecb2e78610ff9a5159fb5cbbd177c5bef45a0b6825222cc890c608deba349abc132a8b7013243118439de66bf505d112996b5426b9c70af90825ece1f7cf6e0f57e5a5f526d5e7db5bd6eb212e78c1016", 0x56}, {&(0x7f0000000080)="a0ed97d3fa5cb66cf47544655147b0fe", 0x10}, {&(0x7f0000000500)="f7332591c11339a6beabd329faea9b3f125a67967a4654d2eb80d9ae46142bbebeb898e41e4486c8874141390a4d12eb31f6f173d7ae653a17f9f25257ece0186dc10a31468214630bcad0ab4507333ceae1032c7dc21589e8f4277e531c5ecef5e6013d89560624d307d3ea570bdc05f53649a6008a83d801a6b934b6bf8de25a0ac0500a6022d871a7a1456e1ef222b620efc517ad61b72dfb29b193ba3264ca74a731b5001a56cf7f7c6f3cced91b3d69400bcb785cb227a29b297761b06eba1f7944a442bbcff9f80999dad212e08ea4664176f27e", 0xd7}, {&(0x7f0000000100)="71de788d2beaae4f1262c4ed4acd7d5217", 0x11}, {&(0x7f0000000600)="b8ae067b82b1f5be914efc1e83f2cb92c2c3ccad6c0c697b47f755b82679dc3ea087fcd2c1e0a36623d71a925790f5d62b25e66ea6fdaa551e22f42009e392a33c14bb79104cb9f5f562c36358ac234ae208da1f8f9148cd6eb993a3aae5b0c7baf1f2a65f1a7f779fddf99985deaad688a06e017a12ad03a605b835af", 0x7d}], 0x6, 0x7f, 0x6, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6ac81, 0x19d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x9}}, 0x20) pipe2(&(0x7f0000000040), 0x80800) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {0x0, 0x3, {0xa, 0x4e24, 0x1, @local, 0x4}}}, 0x38) 1m18.374360417s ago: executing program 8 (id=1875): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x9, 0x0, r0, 0xfffffffd, '\x00', 0x0, r2, 0x5, 0x2, 0x5}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8, 0x8, 0x0, 0x2000}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x40000000}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m18.314196735s ago: executing program 8 (id=1876): r0 = syz_io_uring_complete(0x0) ioctl$TCXONC(r0, 0x540a, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') syz_clone(0x10c0000, &(0x7f0000000180)="02d4d37b15bca915dfee0c77aa7c848fc969c707c2422b7c84044feb6cff5c683ba1b4a9b3cf707338915bffe629caeef780af43291f4e95f7c58ed295dd1c6bef899bbb3a917c375a9dc7c199715b73a9e6763c73093ab42766c895d6127bc7778c196826aff4d12f008f0986a24fcd10c2e2b5ef481400ff8523ab58838b985bc09b4cf3ad28b13968e5fa65bd1e7b832bffc92eb4c65eff12e0866750", 0x9e, &(0x7f0000000100), &(0x7f0000000240), &(0x7f0000000500)="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") r1 = socket(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000440)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0xd, 0x3, 0x1, [{@broadcast, 0x6}]}]}}}], 0x20}}], 0x1, 0x4000810) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') symlink(&(0x7f00000012c0)='.\x00', &(0x7f0000001300)='./bus\x00') openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x404800, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x2) 1m18.254177837s ago: executing program 8 (id=1877): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) r2 = fanotify_init(0x1, 0x101801) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x9a3a, 0x3a, 0x0, 0x0, 0x1a800000}, 0xfffffffffffffe90) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000440)=ANY=[@ANYRESDEC], 0x0) fanotify_mark(r2, 0x8, 0x40001032, r1, 0x0) fcntl$setlease(r1, 0x400, 0x0) read$FUSE(r2, &(0x7f0000000b00)={0x2020}, 0x2020) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1300, 0x1d) 1m17.943460047s ago: executing program 8 (id=1879): socket$isdn_base(0x22, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000080)='\x00', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x7, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x5, 0x3, 0x0, 0x2}, 0xe) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0xfffffff7}], 0x1, 0x100, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m17.893806285s ago: executing program 37 (id=1879): socket$isdn_base(0x22, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000080)='\x00', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x7, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x5, 0x3, 0x0, 0x2}, 0xe) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0xfffffff7}], 0x1, 0x100, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 59.121786989s ago: executing program 9 (id=2150): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r2 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x0, r2}}, 0x40) prlimit64(r2, 0xa, &(0x7f0000000000)={0x715, 0x7fffffff}, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0x0) 58.96653837s ago: executing program 9 (id=2152): arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000080)) socket$kcm(0xa, 0x6e9d7e13c658a597, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) tee(0xffffffffffffffff, r0, 0xe5ab, 0x8) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000, 0x0, 0x1}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {}, {0x7}}}, 0x24}}, 0x0) 58.819984152s ago: executing program 9 (id=2156): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000006800000068000000040000000000000005000007"], 0x0, 0x84, 0x0, 0x1}, 0x28) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f0000000040)={0x0, 0x82, 0x1, 0x8b, 0x0, 0x3e}) 58.749037588s ago: executing program 9 (id=2158): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=0x0, @ANYBLOB="020028bd"], 0x14}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000480)=0x1, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0xc0f85403, &(0x7f00000000c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000580)=ANY=[@ANYBLOB='F\x00'], 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x400}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000003c0)=@IORING_OP_OPENAT={0x12, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x1ae, 0x40, 0x12345}) unshare(0x24020400) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r9 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) io_uring_enter(r9, 0x7277, 0x0, 0x28, 0x0, 0x0) io_uring_enter(r6, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000040)={0x30, r5, 0x1, 0x4000003, 0x0, {{}, {}, {0x5, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x840) 58.670432554s ago: executing program 9 (id=2161): r0 = socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f0000000180)='./file0\x00', 0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r2 = accept$alg(r1, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000700)={0xa, 0x0, 0x1, {0x10002, 0xffffffff, 0x401}}) sendmmsg$alg(r2, &(0x7f000000a980)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)="e6e7f648378ee1989d9aac5bae7722f84d2e0bc9a102b13942fd2ecee9de98b3dbbeb6086ebf08fd7d78a6c4a55a03027fff9b07417a4232200d7c7ddce8ad301c7659617feac522407793cf4ffacb77e9e80bb7e9b4d7f0dfa962ad9d163cb04b1c4ea33c7c08039e4ba1efdc2c432da92cb83a129123", 0x77}, {&(0x7f0000000200)="6114635da82c2a1dfcd659ea5029a516c8ac73c0364ed0dec732bf04a542", 0x1e}, {&(0x7f0000000440)="d22140b1df88ccc825f63f4efcaa3227deb09803f8a815d118e50c34ad845e7121fd49cfb3b8fe6fab02ea0d5680126518c84bd00b79bc35bcd26bc4f6e20abbd19a920f9506fb0527b1333d12cadd2e1eb3896278c4888d4539d1b67f7ed11025a475a2e44e1c3bc5456233bcf6312bfca9e38b3bf3e7dd3c346f882f6691b0552e9e5a947dc83e2d6f3514bf3f936a4ead5b98bff7601382df2c", 0x9b}], 0x3, 0x0, 0x0, 0x40}], 0x1, 0x40c0855) recvmmsg(r2, &(0x7f0000006700)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1}, 0x4}], 0x1, 0x160, 0x0) sendmsg$alg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000580)="b984f6728650758238d7a8af94ead36ca8cc22609af55600c101a85318d13ae36ec10d4b372155afa16a186fbb0e832c8ccd633ea2d2aca71c4e5b76bc598a34f20b79e41b7801bb13c4b6bcac875f32dbb9ee0ee1e166c9b3e56d3393fa1c50f579efc2b6973b9c9bec29915907ed9074f38265bff5108df4ab51b7e8ce398b8503b0f867248482e728361cba5f583532c417c7523ef03bb2e07ccd93999974e14b48f2a5478f56e288", 0xaa}, {&(0x7f0000000640)="93581d5dff12110e18445aaedc2fb87a7f66e2756772778753f47d6e1e6bd7024d2d15141ffb54806150d23a16951bdec4dbdb2199d537bf52c08dd9002a0a3c9f50e7f54e1a4f57c911d062f7a3a9bf49fb2e7e17ff4a072d1ec50d59c9c63ad1a616b13589492757832560418eaf3b76a805a36e8bb40482c89147879c82a68d6cb0ba00deeddcf9cdf8663eb5f661cb3c730320f8304429df009cc157", 0x9e}, {&(0x7f0000000780)="0230948e00147ab3fd53c90aabd2bd6945d932bf3503e2cf0aeceaa7c391f34b10233b9a0f4398955f7d7d3a87c7261c7603ca916e8a1871ed9eecc39c64f4002d0dcdf7e81d9d58160fadcd36af38b117e317d3cffc3ad36fe3dc62da6ea149221e8cbf1708fd5d3d95c2190334fbb251812f44dcac9d1fa8206e7b1451084cee1da881af1d1beaca05b5865d5eba406cfae9db07746c419f41c0f3ba8d50dcd33f71fe6dee611265ee221d8d857b1543fca7d817804f113b0858054713180e0487f84d399bfd1dc6c6c72fde9d", 0xce}, {&(0x7f0000000280)="49b6173a674e1baa0adba0306b1fe4eac7dc73ba2ea8ee", 0x17}, {&(0x7f0000000880)="b8b500ca9bc40ebe7c68681d8213be4fac7ae1752cf3c547b15b7d55711bbccdcc5931434a79bbb48a008664ef36362b72ba3fbd91d5eea5541fcff938d0cbee93fbdb632d2e7fe448e64764ed4501e896a943d5aa4902d02ed0115cc51809ed483959be7e35201847dc04959f1329d4648ae23698e4f29d05e2b1dea19c23c94a956e69be9a18977b81cea038f9d982ecaa5d3ce842c575b1aa9ba1adac", 0x9e}, {&(0x7f0000000940)="33fd1f42d7732158791741a06cb12eeca318be12769fbf01a25ab25c7c52223cc14e26ea51b48ab9f11336f1684877aaad2c19d332a0fbbae92599936beae588bdc1937ef179ee6ac4c1eff19a34e53207e1ebd9382b69b26cbbc89feee52070bb0f2ffbbf0c60b2aa7981687bb371c9c3f1a01b83ba5dd9ccbf312f5276b6f355392a705a72dc46fb62aa7436281596929302e9602af13ed327dee7149677b921f6b56597785c31092452c1c917538b15a169cfdee97fc236c24132e6ab3f", 0xbf}, {&(0x7f00000002c0)="0f111d4c23c85f153b3b", 0xa}, {&(0x7f0000000a00)="441a6c27c1afc9ae195b56b793f2dd347f36474b7c7116b2d209c481e98e86cb8cdb88b97ae1d5b2a7be1a63ffb6771309b3d079b3ec0d56e43bc20c8e4c9960682427fd4d4fa56b0976176f57af1a7e649bdcc9d5f68d738ffedd2e224058b5fcab62984908de74a2c2ee7174862b617bdfa9de6a5562e5d867874541b4d965f9d9c50d819c99fb9d87e0acb9f74fbb4291c12157d422067127d8fc68e0aed8dbfe0bec033a310acea00b8ce7579ed1fe4f3e06e3172b9274591bd06d37ab7bfd076d482ff753bf16e2", 0xca}, {&(0x7f0000000b00)="3afd58f4333eb71a3317422ca5224289f1ef37a82541dba02c73eb165fb1122c3268d0098ce03c2ede9c66e82b534454f13658b97f023702d764fd7f46b58656f7948123755eb6a07d6354aea0c045eec91e4feebef3d9216a176ad1a203fd51b57c1ac6683fb6e8f9c51e98ee2308a800", 0x71}, {&(0x7f0000000b80)="4d897bc3b6bd3c27f59888259839e19ac2e2a6336d68ed470e0cb68381837e0947d274aec893935541dc7eca450aa34a6a152132629f59f67063276b4d08180bd81c92212fca148f740835f1de819898f6f908e5f5bdf274b4c880186a253b5f5b50d398f79424a9ccd93579ba02eb992925f53db7c5ebfbe1d7fdf52fce497e2b6812398313e57c9af3af3c571c3339be9aec3aa9e6bd84d8d1eb1ba51f305fd51e18ef459ccaaee76ec2316e1260f2b8553d9bac8c269690e11a8e", 0xbc}], 0xa, 0x0, 0x0, 0x8092}, 0x44080) mount$tmpfs(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x1002800, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x8}}]}, 0x38}}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f00000000c0)={0x2}) sendfile(r4, r0, &(0x7f0000000140)=0x9, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d00)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c000004004280d404000006000600800a09005b2f56ee54403d9bc75c9bda627efc06e90155fc1b81489dc5a0a961b503b586ae50528197828b3ee9bdc0f4465750934ee5c47a659d19c2c50c5111977fd32300"/113, @ANYRES32=0x0, @ANYBLOB="04000280"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='f2fs\x00', 0x800401, &(0x7f0000000040)='usrquota') 58.579324669s ago: executing program 9 (id=2162): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x1) pwrite64(r1, &(0x7f00000001c0)="69325b869ba4e52381d768a6ca44521bdb1b93ed7cc07a41bd409b7fc77384b42ea677e924e87c6468cf284305f8b2c040aca46f126e683bfeda5bc1c3202a80f172da09f04af483b89a377cd71e107d9bafa1b1ebe3478e61f7d45b435f337cf3228afc202b09a6a6b6bc9d5d90f62adbf88e0fd69787fad4e5fd942a07b2d183ba9250a7117118", 0x88, 0x7f) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000000c0)="0f01c9baf80c66b8bcad328166efbafc0c66ed0f01c266b9f20300000f32d356970f060f09b817010f00d00f1c1e00780f79c4", 0x33}], 0x1, 0x18, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100ffff0000000000000000b500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='block_bio_remap\x00', r4}, 0x18) sync() ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x88e00) read(r5, &(0x7f00000002c0)=""/200, 0x39) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000002c0)="ba4300edba420066b8000000000f23d80f21f86635400000800f23f80f20d86635080000000f22d8ba4100ecba2100edb807008ee0cf0fc7370f20c06635020000000f22c02e0fc734", 0x49}], 0x1, 0x1, 0x0, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r6, r6, 0x0) sync() ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 43.507110179s ago: executing program 38 (id=2162): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x1) pwrite64(r1, &(0x7f00000001c0)="69325b869ba4e52381d768a6ca44521bdb1b93ed7cc07a41bd409b7fc77384b42ea677e924e87c6468cf284305f8b2c040aca46f126e683bfeda5bc1c3202a80f172da09f04af483b89a377cd71e107d9bafa1b1ebe3478e61f7d45b435f337cf3228afc202b09a6a6b6bc9d5d90f62adbf88e0fd69787fad4e5fd942a07b2d183ba9250a7117118", 0x88, 0x7f) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000000c0)="0f01c9baf80c66b8bcad328166efbafc0c66ed0f01c266b9f20300000f32d356970f060f09b817010f00d00f1c1e00780f79c4", 0x33}], 0x1, 0x18, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100ffff0000000000000000b500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='block_bio_remap\x00', r4}, 0x18) sync() ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x88e00) read(r5, &(0x7f00000002c0)=""/200, 0x39) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000002c0)="ba4300edba420066b8000000000f23d80f21f86635400000800f23f80f20d86635080000000f22d8ba4100ecba2100edb807008ee0cf0fc7370f20c06635020000000f22c02e0fc734", 0x49}], 0x1, 0x1, 0x0, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r6, r6, 0x0) sync() ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.059631561s ago: executing program 6 (id=3130): syz_usb_connect(0x4, 0xfffffffffffffee7, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) r1 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000e900010002000000e52831f32d7cd7ea3b07bc00d280b1000000000a00806e"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001d00010429bd7000fedbdf2507000000", @ANYRES8=r2, @ANYBLOB="4000e6030a000200aaaaaaaaaa1b"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x20000040) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r3, 0x8000000000000003, {0x1}}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@getchain={0x24, 0x66, 0x20, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xffff, 0x9}, {0x6, 0xfff1}, {0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x240088d5) close(r0) 1.48835313s ago: executing program 6 (id=3151): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create(0x7) r4 = epoll_create1(0x0) r5 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)) sendmsg$nl_route_sched(r2, 0x0, 0x4004010) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), 0x0, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000180)={0xc, {0x48, "add3fb45626c45857988d41b43f2ec90d3474993d4150e3b2ba952d54e9f3599e494f337cfee4b169ef55bd15fff9f61639a2bfe0f9a9e057f95a26a92fefc3d8aef512cdd7d7b53"}}, 0x4e) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, 0x0, &(0x7f0000000300)='%+9llu \x00'}, 0x20) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000140)=@data_frame={@a_msdu=@type10={{0x0, 0x2, 0x2, 0x1, 0x0, 0x1, 0x1}, {0x1}, @from_mac=@broadcast, @device_b, @from_mac=@broadcast, {0xb, 0xc}}}, 0x18) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000000)={0xfffffffe, 0x8, 0xfffffffb}) 1.371515602s ago: executing program 5 (id=3153): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f00000000c0)={0x8, 'vlan0\x00', {'ip6gretap0\x00'}, 0x6}) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) read$FUSE(r2, &(0x7f0000001500)={0x2020}, 0x2020) write$FUSE_NOTIFY_RESEND(r2, &(0x7f0000003900)={0x14}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x95) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.281900844s ago: executing program 5 (id=3154): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000000c0)={0x1}) ioctl$KVM_RESET_DIRTY_RINGS(r0, 0xaec7) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000040)=0x2, 0x4) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) futex(&(0x7f000000cffc)=0x1, 0x4, 0x1, 0x0, &(0x7f0000000200), 0x1) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0xb, 0x0, 0x0, 0x3, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x1, 0x9}]}, 0x18}, 0x1, 0x7}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@updsa={0x10c, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@mcast1, 0x4d2, 0x2b}, @in=@rand_addr=0x64010101, {}, {0x4f5, 0x0, 0x0, 0xcb66}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x42}, [@encap={0x1c, 0x4, {0xad4ab344a903da57, 0x4e21, 0x4e23, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}}]}, 0x10c}}, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x7) ioctl$TCSETSF2(r5, 0x8910, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x78}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x90) 1.13948622s ago: executing program 5 (id=3156): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x85, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x93, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000700)=ANY=[@ANYRESHEX], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x4, 0x0, &(0x7f0000002300)) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xfffffffffffffffe, 0xb, 0x3) 1.139138224s ago: executing program 7 (id=3157): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) connect$netrom(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @null, 0x6}, [@bcast, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000080)={0x40, &(0x7f0000000100)}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/3:0:0:0\x00', 0x2000, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x0, 0x0, 0xfffffffe, 0x800}, 0x0, 0xfffffffd, 0x0, 0x0, 0x0}}) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000040)=0x1) 1.137645581s ago: executing program 5 (id=3159): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYRES64=r3]) splice(r4, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f00000016c0)=[{0x6, 0xfc}]}) ioctl$PPPIOCSDEBUG(r6, 0x40047440, &(0x7f0000000040)=0x5d) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) write(r7, &(0x7f00000002c0)="23000000010006", 0x7) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$ppp(r8, &(0x7f0000000140), 0x0) write$ppp(r6, &(0x7f00000005c0)='6\x00', 0x2) ptrace(0x10, 0x1) close(0x4) 1.040278988s ago: executing program 0 (id=3160): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x400, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) r0 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f0000000000)={0x2, 0x0, 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0xff00}, 0x0, r3}) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100002000000000020000000000000008be128a73fed001971ae2277653f45cd40f6b951bcc7f46a9a4b00c27b6553f3409646b4d9907de8702ae27a682be134d82137201ea564e09a90e138a909c73ba1419994676d029d894eda9baa98d233af048f306b53f7bdae9254e469767d05f1a8b6709dbc5ad5ff2cefb77f3241e81fd1e0f08a61f56fc45cb0da452a3ca544ea2301fae39f60ac5cb9151e6ee2faa07501b994ed0d6771"], 0x24, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "121008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_request={0x80, 0x0, 0x0, 0xfffc}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xffffffffffffff77}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) 949.96548ms ago: executing program 7 (id=3161): syz_init_net_socket$ax25(0x3, 0x5, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$SIOCAX25DELUID(r0, 0x541b, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 947.446465ms ago: executing program 7 (id=3162): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0) (async) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000440), 0x8a0043, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000680)=0x2) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x700}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 871.414378ms ago: executing program 7 (id=3163): ioctl$VHOST_VDPA_GET_IOVA_RANGE(0xffffffffffffffff, 0x8010af78, &(0x7f0000000000)) (async) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x8, 0x7ff, {}, {0x0}, 0x0, 0x9}) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, r1, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x1}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000140)={0x5, 0x38, '\x00', 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) write$tcp_congestion(r0, &(0x7f0000000200)='dctcp\x00', 0x6) (async) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) read$rfkill(r3, &(0x7f0000000280), 0x8) (async) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f00000002c0), 0x4) (async) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) fcntl$getflags(r4, 0x40a) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x6, &(0x7f0000000340)=[{0x1ff, 0x2, 0x4f, 0xbac}, {0x9, 0x2, 0x4, 0xfffffe00}, {0xf000, 0x2, 0x7, 0x7}, {0xb, 0xc0, 0x1, 0x3}, {0x0, 0x8, 0x3, 0xff}, {0xf4c, 0xb, 0xa7, 0xfffff609}]}) r5 = dup3(r3, r0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x5, 0x2, 0x22, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x1, 0x7880, 0x8a8, 0x3}}) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)=@newqdisc={0x1e0, 0x24, 0x200, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x6, 0xffe0}, {0xc, 0x1}, {0xc, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x6}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @qdisc_kind_options=@q_hhf={{0x8}, {0x54, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x1}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x4}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x3}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x3}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x200}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xe23}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xfffffffb}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x800}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x5}]}}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x100, 0x7ff, 0x3, 0x6, 0xe}, 0x2, 0x800, 0x9, 0x4, 0x3, 0x12, 0xb, 0x7, 0x8, 0x40, {0x2, 0x6, 0x4, 0x5, 0x18, 0x5}}}}, @TCA_EGRESS_BLOCK={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_STAB={0x8c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfd, 0x2, 0x5, 0xff, 0x1, 0x3, 0x3, 0x7}}, {0x12, 0x2, [0x5, 0x2, 0x7f, 0x0, 0x9, 0x0, 0x6]}}, {{0x1c, 0x1, {0x6, 0x2, 0x8, 0x8000, 0x1, 0xcac, 0x6, 0x6}}, {0x10, 0x2, [0xeb1e, 0x8, 0x0, 0x7, 0x9, 0x8]}}, {{0x1c, 0x1, {0x4, 0x80, 0xdd66, 0xfffffff2, 0x2, 0x0, 0x3, 0x6}}, {0x10, 0x2, [0x7be, 0x1, 0x38e, 0xfffa, 0xcf4, 0x4]}}]}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x8, 0x5, 0x6, 0x1, 0x4, 0x4, 0x4}}, {0xc, 0x2, [0x81, 0x8, 0xfffd, 0x3]}}, {{0x1c, 0x1, {0x7, 0x3, 0x6, 0x8, 0x2, 0xffff, 0x1eb, 0x1}}, {0x6, 0x2, [0x7001]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7d2}, @qdisc_kind_options=@q_mq={0x7}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x1}, 0x8800) (async) mprotect(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0) (async) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x18c, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xe7, 0x6, "1744472f7905300dcfd1fa8550a40c06d2e66dbc107cd7f6a185cbb6cc5b2b90f6a6f0e3d89f74e43a3512594186e5d481de37dc5421ed53bf1bcafde47fabe5ec1a81d5fa4597fad42d907427641fba8fa41a82b99a756a1c6f315ea2bee223784d13252d5ed4c8f08ef50cf96f04691f983d9c52474a7b0ee0b0ba637f1bc213feac1b079675fd0c544451fc6cdb112708745cb5dce8f09ee61d9744e23b2169eb23dc254c2b064aaf507b10e04cbf06e01ae69b087fa9bb247f264cc1d9b05fc24b036671df91e2bc4a98d0bf7e4ae81e76026356234ecf4a4f51b2269ce1d09af7"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x3e, 0x6, "69bbfcf962690a0be9e18f339e6ad789315a608fd4a3f141b49356aaf1acc831f1652e68c5fb5290efe80c17bf0cd28ca2c1944cddac6e838e6b"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4051}, 0x4040004) (async) pwritev(r0, &(0x7f0000000bc0)=[{&(0x7f00000009c0)="9c6981a674f1b105cae13352377c656c9b301202584d46b1132ecf81f80c3e10cdee716d74aa912a85e6e9246df9fc17a1e588105c775962c3156dfdbcdf24a10ddfa9675df3da00f7bc4b0b650342ee91445e38dcb21bbc15fc5be946bc1a62123a77546e58a576d7cc5bc16d6bad15436fc469c7c17889a16a4a18bafda9a961f7d150a1b5e4da8f8b75db60f670f230e3237be949dc68e947b1e72f6e81e3a6c9e9", 0xa3}, {&(0x7f0000000a80)="66fbef429f31a8fd7517e7271b43cc697b8350a7ffe1e4c498c4b2cabee4d2027ed7603956bc6b237e89e786617bad1d22945f6fc16fcd123d616aa4f950c0091f78e231512f611b6ab874d81136bd7f9abd747a13e55e74330a614f634bd56fb476ea8cd0896704e1c747b7eb3a40e95cce75fc40", 0x75}, {&(0x7f0000000b00)="9fdebaae5640602c153740093ac8f1fc755da90a8ac4b4be26", 0x19}, {&(0x7f0000000b40)="a14da488bc0f164d0090a7d27466b70766696998f14baa823b5e4445e378e6145390eda125abdab421838508b9666b65786bc9937b", 0x35}, {&(0x7f0000000b80)="21125cee01609b56f2a882461c0dd88e732adaa6535b45eb021bd7384791c8d8f935a6c404b424dedc2702fdd8", 0x2d}], 0x5, 0x220af549, 0xff) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c80), r5) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x40, r7, 0x200, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000dc0)={0x1, &(0x7f0000000d80)=[{0x1, 0x10, 0x9, 0x6}]}) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e40), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan0\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wpan3\x00', 0x0}) (rerun: 64) sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x3c, r9, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000006}, 0x20040081) syz_open_dev$sndpcmp(&(0x7f0000000fc0), 0x9, 0x200) 787.399261ms ago: executing program 7 (id=3164): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYBLOB="900f38af028691ea2ad3f9b8a06686b6f0e45c8d210c46b8d420d241e4"], 0x125) (async) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/180, 0xb4}], 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="0100ffffffff000000000700400008000300", @ANYRES32=r3, @ANYBLOB="0c009900070000002c000000140004006e69637666300000000000000000000008000500060000000c0017"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x8c01, 0x0) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000180)=0x200000) 787.079326ms ago: executing program 7 (id=3165): r0 = socket$nl_route(0x10, 0x3, 0x0) futex(&(0x7f0000000140)=0x4, 0x8, 0xfffffffe, 0x0, 0x0, 0x2) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @multicast1}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x12, 0xc2, 0xa, 0x0, 0x1, {[@sack={0x5, 0xa, [0x0, 0x7]}, @md5sig={0x13, 0x12, '\a\x00'}, @window={0x3, 0x3, 0x82}, @md5sig={0x13, 0x12, "f200"}]}}}}}}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) exit(0x4b09) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffa, 0xf}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x40000) close_range(r0, 0xffffffffffffffff, 0x0) 451.72902ms ago: executing program 0 (id=3166): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000000)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in=@remote, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {}, 0x0, 0x0, 0xa, 0x2, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x119, 0x487, 0x0, &(0x7f0000000480)) 451.250807ms ago: executing program 0 (id=3167): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_open_procfs(r3, &(0x7f0000000580)='net/ip_vs_stats\x00') r4 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="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", 0x169, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r2, r4}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000280)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1114}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000040)=0x7) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r9, 0xc1004111, &(0x7f00000003c0)={0x100000, [0x51, 0x8, 0x7], [{0x8, 0x4, 0x0, 0x1, 0x0, 0x1}, {0x6, 0x4, 0x1, 0x0, 0x1}, {0xfffffff9, 0x2, 0x1, 0x0, 0x1, 0x1}, {0x4, 0x1000, 0x0, 0x0, 0x0, 0x1}, {0x2, 0xfffff04e, 0x1, 0x0, 0x1, 0x1}, {0x4, 0x3}, {0x1, 0x10001, 0x1, 0x0, 0x0, 0x1}, {0x2, 0xe0, 0x1, 0x0, 0x1, 0x1}, {0xe, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x13f, 0x5, 0x0, 0x0, 0x0, 0x1}, {0xd, 0x4, 0x1, 0x1}, {0x5, 0x5, 0x1, 0x1, 0x0, 0x1}], 0x5}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r6], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='smbus_result\x00', r10, 0x0, 0x6}, 0x18) r11 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r11, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x6, &(0x7f0000000080)={0x10, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) 247.999693ms ago: executing program 0 (id=3168): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_dev$rtc(0x0, 0x0, 0x8000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000240)="640fc71c660f71e6d0c4c3adce69005f0f015f000fd5744aea040097000f2216b853000f00d8b884000f00d866b80500000066b9000000000f01c1"}], 0xaaaaaaaaaaaabfd, 0x4, 0x0, 0x0) r2 = socket(0xa, 0x5, 0x0) r3 = userfaultfd(0x801) r4 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$inet6(r2, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000500)}, {&(0x7f0000000600)="d1a75a1596128c62e1a54cdce27b10c886aba86c6984512723139121091f323ea7d8140bf18a01c9c26c276bf48f99f81646de6331281fd9fa888ba2f9edd17442ed87a5543871d04e112b1431", 0x4d}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd", 0x33}, {0x0}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b", 0x5a}], 0x5}}], 0x1, 0x810) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0xe) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000280)="b805000000b90a4bc8180f01c10f00d4b9dd0b00000f32f30f001d01000000640fc7b76aac206566b8d0008ee8c4c2b59d080f01c3c4e1925fa43244a600000f012444", 0x43}], 0x1, 0x9, &(0x7f0000000340), 0x0) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffff75) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1, 0x0, 0x27}}], 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010025bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100804000000fb000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRESDEC=r3], 0x8) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00002fb000/0x4000)=nil, 0x400000, 0x2, 0x2}) 238.75114ms ago: executing program 0 (id=3169): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x2}}, 0x20) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r2, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0xfee1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x10000000000000e0, 0x1) setpgid(0x0, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) (async, rerun: 32) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (rerun: 32) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r3, 0x0) (async) ptrace$setopts(0x4200, r3, 0x3, 0x70) (async, rerun: 32) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) (rerun: 32) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000000)=0x200000000) (async) write$vhost_msg(r4, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f0000000400)={0x2, 0x0, {&(0x7f0000000080)=""/169, 0xa9, 0x0, 0x2, 0x2}}, 0x48) (async) write$vhost_msg_v2(r4, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xfffffefd, 0x0, 0x3, 0x2}}, 0x48) (async) write$vhost_msg_v2(r4, &(0x7f0000000300)={0x2, 0x0, {&(0x7f00000002c0)=""/3, 0x3, 0x0, 0x1, 0x2}}, 0x48) (async, rerun: 64) write$vhost_msg_v2(r4, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000e40)=""/187, 0xbb, 0x0, 0x2, 0x3}}, 0x48) (async, rerun: 64) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async, rerun: 32) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async, rerun: 32) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x6000001, 0x3032, 0xffffffffffffffff, 0x0) 180.064788ms ago: executing program 5 (id=3170): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r1, r0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000040)={0x0, 0x960000000, 0x0, 0xfe, 0x2, [0x24e, 0x80000000, 0x3734, 0x5]}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000080)={0x1, 0x20000006, 0x0, 0x0, 0xc}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000140)={0x579f, 0x2, {0x0, 0x3, 0x1, 0x0, 0x2}, 0xffff}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) 179.028433ms ago: executing program 0 (id=3171): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_usb_connect(0x6, 0x64b, &(0x7f0000000740)={{0x12, 0x1, 0x110, 0x3e, 0x35, 0x59, 0xff, 0x2770, 0x913d, 0xaba8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x639, 0x4, 0x6, 0x6, 0x30, 0x40, [{{0x9, 0x4, 0x96, 0x78, 0x3, 0x95, 0x46, 0x76, 0x40, [], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x55, 0xdd, 0xd, [@generic={0x92, 0x2f, "877bf3bc1ebd78db85a09d6e74eebbeb585eaae504e879e453f6fa7a3c91aca51139b771ae31bdab7617ba7671e02cfa34bedb708e11e08cb60bc4fc620be8d00392180214db487d02988ea9b629c497a8e7cffab197ba81a8fdc306b53ebe7f063be56f74f7d1c6b5eae03587d8c8b3fb3874cd8049230e2ce7fcde277fd851a98c52de51821c9d729947b32340fa9b"}, @generic={0xc3, 0x0, "072059f21586f3dc40feaecdc6ac897ee8f56747614d3bcb03fe9cd85e9c6f0bddf67423cce458779251b19a3730177edde30f4acb2c7a6c103a967692afc4eb199fa81fff1b74fd566d72d8bb6b935acccf832e1fae8a50ac9f03ad320bc18a03f6faf8b250666acb6328c2a64465b1fea6de54bb3080eae7e9980bd30e215a6aed18d43c2ea8ffd2f0d7f40c411b64a2a33a317f67097d7bad6a2334323a00dbd5b9c7bde793ee6578867fb2ec7801d92a9689c422a6b2be4a521b9dbd2f93d0"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x10, 0x3, 0x5, 0x4}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x1, 0x81, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x208faa74cd3a07b5, 0x9, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xfe, 0xff}]}}]}}, {{0x9, 0x4, 0x4, 0x3, 0x5, 0x22, 0xdd, 0xad, 0x1, [], [{{0x9, 0x5, 0x0, 0x0, 0x40, 0x2, 0x10, 0x91, [@generic={0x3c, 0x2, "ef78becdaa04bdc9f4db7fe3bc153d59c80770013d5296c6cdbe86e5aa0c9c39b2e0eb3a42c834e0eb5dee012cf49264a50867d0df20c0e60488"}, @generic={0x56, 0x22, "59fce390e4ca52f69f801d50d50508a49245c7660d6ad85df4f402e96f048901b99f2ed6646fc04044747201b8e88631c06a218b899874c039922bd2ffa3da2e2db10670d91699b4346e46566713e18aaff90954"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x9, 0x4, 0xe, [@generic={0x88, 0x23, "c4b690020dbb0793493f3cc88f87457c545de0d8ddc289b3d2c539f6cf704182bc06a61fca8d27667e6404d56091680e507e40f19f6a6ef701eca1b67cc739fe8d62d14b0e960c47c0e2eae08eeef14cbdb06e1ea70ef67c977f62ec11fbfbd8d6d29c313508061ecf03ff1f44b6b4ee2d0b59d804b5df8813a165a3ecc8546325f9d9ebdc38"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x40, 0x2, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0x81}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x9, 0x7, 0x1}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x6, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xee, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x2}]}}]}}, {{0x9, 0x4, 0x38, 0x1, 0x3, 0xff, 0x84, 0xd0, 0x8, [], [{{0x9, 0x5, 0x80, 0x8, 0x0, 0x8, 0x7, 0x9}}, {{0x9, 0x5, 0x5, 0x3, 0x40, 0x7, 0x3}}, {{0x9, 0x5, 0x8f, 0x0, 0x8, 0x4, 0xa, 0xfd, [@generic={0xa0, 0xc, "303f3484354f535edd76345273604e57b3499f5f4c8ad784bf5b4ada4171e4858141ce84e7c564320089f727bb22740aeeaed578a1991da792fbe7c3e7befb56a1a5d0f21085bf9e18888eb5a6f841edfa816e851d7eb429d811b132305c532c241db588e50f6c16b7a8956f8fa6892a967576950455bb7e3d2bb365e17d0dca89fc962091cfa67e5dc0349cda25ef2ee3e2b101094411853f02e583bc4c"}, @generic={0x10, 0x23, "1f4585e430ec62de500b9eb334b6"}]}}]}}, {{0x9, 0x4, 0x63, 0x4, 0x5, 0xff, 0x3, 0xd, 0x9, [@generic={0x102, 0x29, "d057ca9c9a71526d54e757e8af441c965c30a9fd6b0782202a974796347c7feb38825c8cc62fed04f187e3c45b7818dbcc6c1096bc21b7a9a901b336ba95bc59a8571c5130800e2525fa0fab3c58922f5256d38d55143ab8e3de976000baca8485eb252d96d84beb5e0beb652f81d48d8b5bc513b7e407099e64b87cdb41d73171974a5c3c885825dc0a628cedc6ab15c4bf9c4613b296a1d6c1d266e8d3eca9b30e4b1779bf237d9167d6fce70479d451fa85c0e8fc1c3ca382bdb9747da83ae848846d9bc2de1229036ed4e716611305c40a0b3cb349ae1dac7079a2a8110cbff395a4d3d08814df53c3b36c5500eb2c0d737df845815fdc1e495e794c20cc"}], [{{0x9, 0x5, 0x7, 0x0, 0x400, 0xb7, 0x3, 0xa}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x9, 0x9, 0x67}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x7, 0x4, 0x10, [@generic={0x31, 0x23, "bf910ddaa8a5e7ea06ab2a95eb1a1c0e68018314d156364a6b55bc9328f57da3de9a9e2c1057bb9d69cc61b0cbcf92"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0xff, 0xf9, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0x5}, @generic={0x5b, 0x6, "8d19777d21827c2ab192237ae0574e0e86339029bb6773862e5ea3a9fefb3e31dca91e89e33c9fcc88e9334313df2a82a28308824e01ff9c08d1af40f75aea56090a70f8b4fd7b4a5c7d93b0252053f8b84b4cd9ef2fbbaa79"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0x9, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x1}, @generic={0x9e, 0x3, "72d4be00587031f6121cbe744f2136b52bcc707febadefacec9c798346e9285470dc2267d53f2d8721b2490912598966d82ccf4e2638c2cd2ae416344d889c5262caec77f611237e02fc4fa0b101b013fe7b0d937d67589d9bb410cd566cf9f8920d6772de3d5d502373a84a2a826268808e7f8b9705df881386e2698bb828871a45c17864e99627e955ffd6465f878d3e7fe925f51b0daacd4642bf"}]}}]}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x8, 0x6, 0x4, 0xff, 0xea}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x5, [{0x8a, &(0x7f0000000280)=@string={0x8a, 0x3, "7f1ef7f11670429fe189bf0487bfa5bd21d6f4b2d68ad306b0cf72798521ccb3b8a58b376a9af48f2c2b6ef8e0fa97fd7105e3162e0a7cc5bc3bf5dfc71829dec413f0dde382d26ec7259fdf6b6ebde658369429aac201a31a080779beea9b0926647f0e44fa9f6b3d3ad1efc92726c6246b8c512287a5cb24de1cf00f44cd3f61d05e528057890f"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44c}}, {0xf9, &(0x7f00000004c0)=@string={0xf9, 0x3, "bfb7d9eae15499077d9129c0042ae538ded6e22b45c59a62f77ce1db8c4ab2c5423eccff27bf296ca660e5ccdabd7041063d9f2e08d3a42a4cf3620104dde965a13bdab240aa31f405c5ee1f635943ebd96279a4e70fd04c52f5c7b553f1d811dcaa45015f47ac4b94ec436796247cc6bd9c7e193523f2196029c4c65ed10fa8d80035b51f34790edc88ffd172168df37bf3afff768d74a56487e129e9433c782aad9625370fe656c89eab6ab08941f59fc3a96a6d8ade8f8ca5b7cd0ac074243ed91ee01289337a8a9435b10afc1329f47491c2a6b36c4173de487f8290f19afa8525c4fc831999c28a992e3d26c46f9ab0e0bb0b422c"}}]}) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x40) syz_usb_disconnect(r1) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r4, r3, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r3, r3, 0x2f, 0x4, 0x4, @void, @value=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2, 0x0, 0x4}, 0x18) 91.509887ms ago: executing program 6 (id=3172): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03"], 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03"], 0x40}}, 0x0) (async) 91.135491ms ago: executing program 6 (id=3173): r0 = socket(0x1a, 0x2, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x428, 0x218, 0x0, 0xffffffff, 0x218, 0x0, 0x390, 0x390, 0xffffffff, 0x390, 0x390, 0x5, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x48, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x3, 0x2, 0x1}}, @common=@set={{0x40}, {{0x2, [0x7, 0x1], 0x1, 0x3314c3c935501c84}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0xb, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv6=@empty, @gre_key, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "d4e6", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x10, @loopback, @remote, @gre_key=0x2, @icmp_id=0x64}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x6, 0x2, 0x46}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542"}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffe08) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x6a, 0x5, 0x0, &(0x7f0000000000)) 1.415328ms ago: executing program 6 (id=3174): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8917, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x4e24, @rand_addr=0xac14141d}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 244.222µs ago: executing program 6 (id=3175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$video(&(0x7f00000002c0), 0x20000000005, 0x8100) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x3, 0x7f, 0x50424752, 0x9, 0x1, [{0x400, 0x2}, {0x0, 0x4}, {0xd4, 0x8}, {0x6, 0x8}, {0xf3, 0x1}, {0x17e, 0xffffff93}, {0x2, 0x3}, {0x9}], 0x9, 0x7, 0x9, 0x2, 0x4}}) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ptrace(0x11, r3) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900014073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x200088d0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000309000000000000004000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x40088c0}, 0x40) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_read_page_scan_activity={{0xf9}, {0x2, 0x4, 0x4}}}}, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0x0, 0xb6}, "fe7d4eac7abbfa63326c473c1ae12dfeb33c45ed904e320ad91234c97d73442dc0b242a47cd28fa4cd016af1190aa09b2ee47beec632c708456777a22a9778a887ba7d8fd6744fe6fba644253da52ae582c4eeaff4b45b58955e3708ae160a565a3208b18d736eb91464fc6004315d9fe01200e066079e0b5cd2ff690f5abc888ae491aa7c46fe94bf6b77495fee62cb8a439993073eb6f0a92ec0375e5a2e00bd5eecd4ccae71266ca2db99a3c45cf21bf7f444368a"}, 0xba) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 0s ago: executing program 5 (id=3176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a300000000008000440000000000900010073797a30000000000800034000000004"], 0x64}}, 0x0) kernel console output (not intermixed with test programs): 12 bytes leftover after parsing attributes in process `syz.5.2224'. [ 299.520666][ T5992] usb 12-1: new high-speed USB device number 34 using dummy_hcd [ 299.700058][ T5992] usb 12-1: Using ep0 maxpacket: 8 [ 299.711500][ T5992] usb 12-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 299.715894][ T5992] usb 12-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 300.668330][T14187] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2235'. [ 300.671990][T14187] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2235'. [ 300.675113][T14187] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2235'. [ 300.767426][T14190] lo: left allmulticast mode [ 300.772093][T14190] vxcan1: left allmulticast mode [ 300.777700][T14190] macsec2: left promiscuous mode [ 300.779704][T14190] macsec2: left allmulticast mode [ 300.781824][T14190] bridge8: left promiscuous mode [ 300.784190][T14190] batman_adv: batadv0: Interface deactivated: gretap1 [ 300.791120][T14190] vlan2: left allmulticast mode [ 300.792918][T14190] bond0: left allmulticast mode [ 300.794600][T14190] bond_slave_0: left allmulticast mode [ 300.796494][T14190] bond_slave_1: left allmulticast mode [ 300.798440][T14190] ipip0: left promiscuous mode [ 300.800062][T14190] ipip0: left allmulticast mode [ 300.806446][T14190] ip6gre1: left promiscuous mode [ 300.808187][T14190] ip6gre1: left allmulticast mode [ 300.834069][T14190] gretap2: left promiscuous mode [ 301.036054][ T5950] Bluetooth: hci11: unexpected event for opcode 0x204e [ 301.086752][T14208] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2241'. [ 301.089376][T14212] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2242'. [ 301.091608][T14208] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2241'. [ 301.269265][T14220] binder: 14219:14220 ioctl 400c620e 2000000001c0 returned -22 [ 301.324131][T14220] kvm: kvm [14219]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 301.348321][T14220] kvm: kvm [14219]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 301.494304][T14229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12321 sclass=netlink_route_socket pid=14229 comm=syz.5.2247 [ 301.687010][ T3793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.689701][ T3793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.108960][T14236] netlink: 'syz.6.2249': attribute type 8 has an invalid length. [ 302.302162][ T5992] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 302.306973][ T5992] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.309883][ T5992] usb 12-1: Product: à ‡ [ 302.313136][ T5992] usb 12-1: can't set config #1, error -71 [ 302.316162][ T5992] usb 12-1: USB disconnect, device number 34 [ 302.922242][T14279] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2265'. [ 302.926178][T14279] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 303.021352][T14290] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1050 sclass=netlink_xfrm_socket pid=14290 comm=syz.5.2269 [ 303.049280][T14297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2271'. [ 303.072326][T14300] netlink: 190972 bytes leftover after parsing attributes in process `syz.6.2272'. [ 303.099114][T14306] netlink: 'syz.6.2274': attribute type 14 has an invalid length. [ 303.136838][T14309] kvm: user requested TSC rate below hardware speed [ 303.167007][T14315] 9pnet_fd: p9_fd_create_unix (14315): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 303.346602][T14323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.404649][T14340] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2284'. [ 303.407436][T14338] /dev/nullb0: Can't lookup blockdev [ 303.414320][T14338] /dev/nullb0: Can't lookup blockdev [ 303.961669][T14382] overlayfs: failed to clone lowerpath [ 303.964927][T14382] overlayfs: failed to clone lowerpath [ 303.997889][T14384] tmpfs: Bad value for 'mpol' [ 304.380879][T14422] vlan2: entered promiscuous mode [ 304.383256][T14422] bridge0: entered promiscuous mode [ 304.461265][ T40] kauditd_printk_skb: 257 callbacks suppressed [ 304.461286][ T40] audit: type=1400 audit(1767214982.739:48494): avc: denied { read } for pid=14425 comm="syz.5.2308" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 304.472545][ T40] audit: type=1400 audit(1767214982.739:48495): avc: denied { open } for pid=14425 comm="syz.5.2308" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 304.480666][ T40] audit: type=1400 audit(1767214982.739:48496): avc: denied { ioctl } for pid=14425 comm="syz.5.2308" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 304.557356][T14431] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.561673][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.566328][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.570398][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.574464][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.578471][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.583754][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.587744][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.591661][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.597423][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.601255][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.605110][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.609157][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.613263][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.618331][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.623065][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.627809][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.631874][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.635508][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.639172][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.642861][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.646685][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.650292][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.653804][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.657503][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.663539][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.667208][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.670903][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.674506][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.678079][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.682564][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.686099][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.689943][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.693941][T14432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 304.726495][ T40] audit: type=1400 audit(1767214982.998:48497): avc: denied { prog_load } for pid=14433 comm="syz.5.2311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 304.732964][ T40] audit: type=1400 audit(1767214982.998:48498): avc: denied { prog_run } for pid=14433 comm="syz.5.2311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 304.744464][ T40] audit: type=1400 audit(1767214983.018:48499): avc: denied { read } for pid=14433 comm="syz.5.2311" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 304.752391][ T40] audit: type=1400 audit(1767214983.018:48500): avc: denied { open } for pid=14433 comm="syz.5.2311" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 304.918228][ T40] audit: type=1400 audit(1767214983.198:48501): avc: denied { mounton } for pid=14438 comm="syz.5.2312" path="/493/file1" dev="tmpfs" ino=2630 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 304.926258][ T40] audit: type=1400 audit(1767214983.198:48502): avc: denied { mount } for pid=14438 comm="syz.5.2312" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 304.937001][ T40] audit: type=1400 audit(1767214983.198:48503): avc: denied { unmount } for pid=14438 comm="syz.5.2312" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 304.961542][T14442] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 304.972928][T14441] [U] J"—E:ÀÆ" [ 305.206700][T14461] tmpfs: Group quota block hardlimit too large. [ 305.206859][T14459] fuse: Bad value for 'user_id' [ 305.211236][T14459] fuse: Bad value for 'user_id' [ 305.501889][T14478] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 306.065876][T14501] xt_CT: No such helper "pptp" [ 306.160365][T14514] netlink: 'syz.5.2336': attribute type 5 has an invalid length. [ 306.164248][T14514] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 306.168186][T14514] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 306.178284][T14514] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 306.180787][T14516] tmpfs: Bad value for 'mpol' [ 306.192048][T14511] __nla_validate_parse: 5 callbacks suppressed [ 306.192062][T14511] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2335'. [ 306.271230][T14526] xt_connbytes: Forcing CT accounting to be enabled [ 306.434564][T14538] sp0: Synchronizing with TNC [ 306.455929][T14538] [U] è [ 306.585494][T14545] netlink: 'syz.5.2344': attribute type 1 has an invalid length. [ 306.692862][T14552] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 306.900799][T14555] xfrm0 speed is unknown, defaulting to 1000 [ 306.937303][T14555] xt_l2tp: v2 tid > 0xffff: 2031748 [ 306.993219][T14569] IPv6: NLM_F_CREATE should be specified when creating new route [ 306.996993][T14569] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2349'. [ 307.099192][T14583] overlayfs: failed to clone upperpath [ 307.141335][T14585] sp0: Synchronizing with TNC [ 307.486098][T14607] afs: Unknown parameter 'dyn00000000000000000003' [ 307.501349][T14584] [U] è [ 307.591823][T14620] 9pnet_virtio: no channels available for device syz [ 307.909588][ T5299] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 307.916442][ T5299] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 307.923573][ T5299] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 307.927858][ T5299] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 307.931885][ T5299] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 307.956950][T14640] xfrm0 speed is unknown, defaulting to 1000 [ 308.029671][T14640] chnl_net:caif_netlink_parms(): no params data found [ 308.073212][T14640] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.075610][T14640] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.078066][T14640] bridge_slave_0: entered allmulticast mode [ 308.081067][T14640] bridge_slave_0: entered promiscuous mode [ 308.084392][T14640] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.086905][T14640] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.089430][T14640] bridge_slave_1: entered allmulticast mode [ 308.092764][T14640] bridge_slave_1: entered promiscuous mode [ 308.109016][T14640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.113841][T14640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.129732][T14640] team0: Port device team_slave_0 added [ 308.133246][T14640] team0: Port device team_slave_1 added [ 308.148060][T14640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.150442][T14640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.159852][T14640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.165208][T14640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.167688][T14640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.176436][T14640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.198993][T14640] hsr_slave_0: entered promiscuous mode [ 308.201839][T14640] hsr_slave_1: entered promiscuous mode [ 308.402048][ T11] block nbd0: Possible stuck request ffff888028740000: control (read@0,1024B). Runtime 120 seconds [ 308.405895][ T11] block nbd0: Possible stuck request ffff888028740200: control (read@1024,1024B). Runtime 120 seconds [ 308.409646][ T11] block nbd0: Possible stuck request ffff888028740400: control (read@2048,1024B). Runtime 120 seconds [ 308.414076][ T11] block nbd0: Possible stuck request ffff888028740600: control (read@3072,1024B). Runtime 120 seconds [ 308.579255][T14658] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2376'. [ 308.579332][T14659] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2376'. [ 308.629907][T14640] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 308.635761][T14640] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 308.640289][T14640] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 308.647189][T14640] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 308.699461][T14640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.717077][T14640] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.725978][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.728991][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.736789][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.739965][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.833531][ T5992] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 308.867433][T14640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.993398][T14640] veth0_vlan: entered promiscuous mode [ 308.998602][T14640] veth1_vlan: entered promiscuous mode [ 309.004697][ T5992] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.008671][ T5992] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.011035][T14640] veth0_macvtap: entered promiscuous mode [ 309.011845][ T5992] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 309.018456][ T5992] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 309.018522][T14640] veth1_macvtap: entered promiscuous mode [ 309.021367][ T5992] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.028406][ T5992] usb 10-1: config 0 descriptor?? [ 309.038113][T14640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.046871][T14640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.054041][ T4061] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.057139][ T4061] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.060464][ T4061] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.064450][ T4061] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.115669][ T4061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.118392][ T4061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.134211][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.136869][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.260593][T14688] program syz.6.2380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 309.272972][T14688] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2380'. [ 309.436441][ T5992] hid_parser_main: 4086 callbacks suppressed [ 309.436455][ T5992] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x1 [ 309.441048][ T5992] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 309.443819][ T5992] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 309.450657][ T5992] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 309.696459][ T142] usb 10-1: USB disconnect, device number 20 [ 309.712797][ T40] kauditd_printk_skb: 205 callbacks suppressed [ 309.712812][ T40] audit: type=1400 audit(1767214987.982:48709): avc: denied { read } for pid=14660 comm="syz.5.2377" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 309.725719][ T40] audit: type=1400 audit(1767214987.992:48710): avc: denied { open } for pid=14660 comm="syz.5.2377" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 309.735211][ T40] audit: type=1400 audit(1767214987.992:48711): avc: denied { ioctl } for pid=14660 comm="syz.5.2377" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 309.993527][ T5950] Bluetooth: hci1: command tx timeout [ 310.175736][ T40] audit: type=1400 audit(1767214988.452:48712): avc: denied { create } for pid=14693 comm="syz.6.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 310.184021][ T40] audit: type=1400 audit(1767214988.462:48713): avc: denied { write } for pid=14693 comm="syz.6.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 310.191776][ T40] audit: type=1400 audit(1767214988.462:48714): avc: denied { read } for pid=14693 comm="syz.6.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 310.201433][ T40] audit: type=1400 audit(1767214988.472:48715): avc: denied { ioctl } for pid=14693 comm="syz.6.2382" path="/dev/video36" dev="devtmpfs" ino=1067 ioctlcmd=0x565c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 310.419529][ T40] audit: type=1400 audit(1767214988.691:48716): avc: denied { mount } for pid=14697 comm="syz.5.2384" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 310.429802][ T40] audit: type=1400 audit(1767214988.701:48717): avc: denied { create } for pid=14697 comm="syz.5.2384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 310.438798][ T40] audit: type=1400 audit(1767214988.701:48718): avc: denied { shutdown } for pid=14697 comm="syz.5.2384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 310.493971][ T142] usb 11-1: new full-speed USB device number 22 using dummy_hcd [ 310.520116][T14700] binder: 14699:14700 ioctl 7ac 200000000280 returned -22 [ 310.645636][ T142] usb 11-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 310.649039][ T142] usb 11-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 310.653655][ T142] usb 11-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 310.656806][ T142] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.659468][ T142] usb 11-1: Product: syz [ 310.660884][ T142] usb 11-1: Manufacturer: syz [ 310.662528][ T142] usb 11-1: SerialNumber: syz [ 310.726057][T14704] netlink: 'syz.5.2387': attribute type 10 has an invalid length. [ 310.902186][T14696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.908486][T14696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.065327][ T5299] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 311.070111][ T5299] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 311.073019][ T5299] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 311.077304][ T5299] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 311.080303][ T5299] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 311.115877][T14721] xfrm0 speed is unknown, defaulting to 1000 [ 311.270919][T14721] chnl_net:caif_netlink_parms(): no params data found [ 311.347193][T14721] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.360073][T14721] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.362567][T14721] bridge_slave_0: entered allmulticast mode [ 311.365688][T14721] bridge_slave_0: entered promiscuous mode [ 311.368911][T14721] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.371216][T14721] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.373614][T14721] bridge_slave_1: entered allmulticast mode [ 311.377025][T14721] bridge_slave_1: entered promiscuous mode [ 311.394017][T14721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.398744][T14721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.417086][T14721] team0: Port device team_slave_0 added [ 311.420784][T14721] team0: Port device team_slave_1 added [ 311.430880][ T59] usb 11-1: USB disconnect, device number 22 [ 311.433611][T14721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.436071][T14721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.445036][T14721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.449619][T14721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.451860][T14721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.461261][T14721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.485472][T14721] hsr_slave_0: entered promiscuous mode [ 311.487802][T14721] hsr_slave_1: entered promiscuous mode [ 311.489975][T14721] debugfs: 'hsr0' already exists in 'hsr' [ 311.491883][T14721] Cannot create hsr debugfs directory [ 311.620524][T14740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.674653][T14742] program syz.6.2398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 311.679164][T14743] program syz.6.2398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 311.855895][T14750] kvm: requested 137447 ns i8254 timer period limited to 200000 ns [ 311.883196][T14750] kvm: requested 137447 ns i8254 timer period limited to 200000 ns [ 311.887704][T14750] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 311.893702][T14750] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 311.898671][T14750] kvm: requested 62019 ns i8254 timer period limited to 200000 ns [ 311.977281][T14721] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 311.987664][T14721] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 311.991939][T14721] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 311.997701][T14721] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 312.024705][T14721] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.027501][T14721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.030398][T14721] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.033061][T14721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.079612][T14721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.086350][ T5299] Bluetooth: hci1: command tx timeout [ 312.092503][T11087] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.096198][T11087] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.108153][T14721] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.117094][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.119758][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.133277][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.135775][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.216368][T14790] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2411'. [ 312.281629][T14721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.337915][T14721] veth0_vlan: entered promiscuous mode [ 312.349292][T14721] veth1_vlan: entered promiscuous mode [ 312.386839][T14721] veth0_macvtap: entered promiscuous mode [ 312.393863][T14721] veth1_macvtap: entered promiscuous mode [ 312.404919][T14721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.411169][T14812] xt_nat: multiple ranges no longer supported [ 312.413567][T14721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.421966][ T3981] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.425804][ T3981] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.433011][ T3981] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.435966][ T3981] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.482997][ T4061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.485998][ T4061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.503697][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.506777][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.529382][T14819] macvtap1: entered promiscuous mode [ 312.531334][T14819] macvtap1: entered allmulticast mode [ 312.533371][T14819] team0: Device macvtap1 is already an upper device of the team interface [ 312.650475][T14825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2419'. [ 312.654652][T14825] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2419'. [ 312.672127][ T4202] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.676021][ T4202] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.681926][T14825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2419'. [ 312.687056][ T4202] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.690793][T14825] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2419'. [ 312.694694][ T4202] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.745957][T14833] netlink: 'syz.6.2421': attribute type 1 has an invalid length. [ 312.769873][T14833] bond1: entered promiscuous mode [ 312.772434][T14833] 8021q: adding VLAN 0 to HW filter on device bond1 [ 312.802714][T14833] 8021q: adding VLAN 0 to HW filter on device bond1 [ 312.806084][T14833] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 312.810712][T14833] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 312.816262][T14833] bond1: (slave ip6gre1): making interface the new active one [ 312.819567][T14833] ip6gre1: entered promiscuous mode [ 312.822595][T14833] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 312.828920][T14833] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2421'. [ 312.905461][T14830] fuse: Invalid rootmode [ 312.908137][T14830] 9pnet_fd: p9_fd_create_tcp (14830): problem connecting socket to 127.0.0.1 [ 312.919293][T14833] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 312.922266][T14833] ip6gre1: left promiscuous mode [ 312.927673][T14833] bond1 (unregistering): Released all slaves [ 312.998830][T14837] bond1 (unregistering): Released all slaves [ 313.117159][ T5299] Bluetooth: hci2: command tx timeout [ 313.162406][T14846] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2422'. [ 313.166525][T14846] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2422'. [ 313.174924][T14846] input: syz0 as /devices/virtual/input/input26 [ 313.185886][T14851] netlink: 'syz.0.2425': attribute type 1 has an invalid length. [ 313.359209][T14859] nbd1: detected capacity change from 0 to 127 [ 313.364500][ T5299] block nbd1: Receive control failed (result -104) [ 313.412396][T14875] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2431'. [ 313.432599][T14868] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=30 sclass=netlink_tcpdiag_socket pid=14868 comm=syz.0.2428 [ 313.482603][T14886] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2434'. ./file0/file0[ 313.763586][T14905] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 313.815919][T14919] netlink: 'syz.0.2444': attribute type 15 has an invalid length. [ 313.837590][T14917] ipvlan2: entered allmulticast mode [ 313.839701][T14917] team0: entered allmulticast mode [ 313.843101][T14917] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 313.897227][T14925] binder: Binderfs stats mode cannot be changed during a remount [ 313.901823][T14925] netlink: 'syz.7.2445': attribute type 1 has an invalid length. [ 313.906317][T14919] ./bus: Can't lookup blockdev [ 313.955824][T14933] Bluetooth: MGMT ver 1.23 [ 313.979093][T14925] bond7: (slave gretap1): making interface the new active one [ 313.981807][T14925] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 313.991295][T14925] 8021q: adding VLAN 0 to HW filter on device bond7 [ 314.025407][T14943] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 314.156155][T14956] netlink: 'syz.5.2455': attribute type 30 has an invalid length. [ 314.158727][ T5950] Bluetooth: hci1: command tx timeout [ 314.182400][T14949] tmpfs: Bad value for 'mpol' [ 314.195835][T14959] netlink: 'syz.6.2456': attribute type 10 has an invalid length. [ 314.200206][T14959] team0: Device ipvlan1 failed to register rx_handler [ 314.245731][ T53] IPVS: starting estimator thread 0... [ 314.328547][T14962] IPVS: using max 45 ests per chain, 108000 per kthread [ 314.886072][ T40] kauditd_printk_skb: 345 callbacks suppressed [ 314.886087][ T40] audit: type=1400 audit(1767214993.146:49064): avc: denied { read } for pid=14963 comm="syz.0.2458" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 314.898465][ T40] audit: type=1400 audit(1767214993.146:49065): avc: denied { open } for pid=14963 comm="syz.0.2458" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 314.909226][ T40] audit: type=1400 audit(1767214993.156:49066): avc: denied { ioctl } for pid=14963 comm="syz.0.2458" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 314.920903][ T40] audit: type=1400 audit(1767214993.176:49067): avc: denied { create } for pid=14963 comm="syz.0.2458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 314.930718][ T40] audit: type=1400 audit(1767214993.176:49068): avc: denied { ioctl } for pid=14963 comm="syz.0.2458" path="socket:[65425]" dev="sockfs" ino=65425 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 314.930763][ T40] audit: type=1400 audit(1767214993.186:49069): avc: denied { map_create } for pid=14963 comm="syz.0.2458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 314.930799][ T40] audit: type=1400 audit(1767214993.186:49070): avc: denied { map_read map_write } for pid=14963 comm="syz.0.2458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 314.930835][ T40] audit: type=1400 audit(1767214993.186:49071): avc: denied { prog_load } for pid=14963 comm="syz.0.2458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 314.930924][ T40] audit: type=1400 audit(1767214993.186:49072): avc: denied { prog_run } for pid=14963 comm="syz.0.2458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 314.930960][ T40] audit: type=1400 audit(1767214993.186:49073): avc: denied { unmount } for pid=7139 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 315.201193][ T5950] Bluetooth: hci2: command tx timeout [ 315.224655][T14994] No source specified [ 315.431608][ T5950] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 315.522301][T15030] could not allocate digest TFM handle tgr192-generic [ 315.575725][T15038] sd 0:0:0:0: PR command failed: 1026 [ 315.577537][T15038] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 315.579717][T15038] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 315.583182][T15039] i2c i2c-1: Invalid block write size 34 [ 315.639844][ T59] usb 11-1: new high-speed USB device number 23 using dummy_hcd [ 315.685014][T15061] chnl_net:caif_netlink_parms(): no params data found [ 315.771827][T15065] vxcan1: entered allmulticast mode [ 315.820015][ T59] usb 11-1: Using ep0 maxpacket: 8 [ 315.822992][ T59] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 315.826032][ T59] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 315.829491][ T59] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 315.834150][ T59] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 315.837757][ T59] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.843086][ T59] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 315.846735][ T59] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.907835][T15079] usb usb8: usbfs: process 15079 (syz.5.2490) did not claim interface 0 before use [ 315.916304][T15077] netlink: 'syz.7.2489': attribute type 3 has an invalid length. [ 315.927651][T15077] ufs: You didn't specify the type of your ufs filesystem [ 315.927651][T15077] [ 315.927651][T15077] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 315.927651][T15077] [ 315.927651][T15077] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 315.940592][T15077] ufs: ufstype=old is supported read-only [ 316.072715][ T59] usb 11-1: GET_CAPABILITIES returned 0 [ 316.075197][ T59] usbtmc 11-1:16.0: can't read capabilities [ 316.240474][ T5950] Bluetooth: hci1: command tx timeout [ 316.639582][T15104] tmpfs: Bad value for 'mpol' [ 316.795486][ T5992] usb 11-1: USB disconnect, device number 23 [ 316.820302][T15113] 9pnet_virtio: no channels available for device syz [ 316.993482][T15123] program syz.5.2506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 317.036293][ T64] Bluetooth: hci3: sending frame failed (-49) [ 317.040141][ T5950] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 317.155333][T15134] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 317.160260][T15134] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 317.196658][T15136] veth0_to_team: entered promiscuous mode [ 317.201111][T15141] openvswitch: netlink: Missing key (keys=40, expected=100) [ 317.229576][T15143] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 317.352906][T15150] __nla_validate_parse: 11 callbacks suppressed [ 317.352917][T15150] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2517'. [ 317.358802][T15150] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2517'. [ 317.370249][T15150] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2517'. [ 317.373609][T15150] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2517'. [ 317.376561][T15150] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2517'. [ 317.379655][T15150] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2517'. [ 317.383482][T15150] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2517'. [ 317.386627][T15150] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2517'. [ 317.389971][T15150] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2517'. [ 317.393732][T15150] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2517'. [ 317.426993][T15154] 9pnet_virtio: no channels available for device syz [ 317.702124][ T53] usb 12-1: new full-speed USB device number 35 using dummy_hcd [ 317.751462][T15171] 9pnet_virtio: no channels available for device syz [ 317.788596][T15175] dlm: Unknown command passed to DLM device : 20 [ 317.788596][T15175] [ 317.859599][T15159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.865964][T15159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.873624][T15159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.876721][T15159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.879844][T15159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.884302][T15159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.887402][T15159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.890347][T15159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.893515][T15159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.896411][T15159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.029207][T15188] netlink: 'syz.5.2528': attribute type 3 has an invalid length. [ 318.031955][T15188] netlink: 'syz.5.2528': attribute type 3 has an invalid length. [ 318.039001][T15188] IPv6: addrconf: prefix option has invalid lifetime [ 318.058638][T15190] overlayfs: failed lookup in lower (newroot/38, name='file0', err=-40): overlapping layers [ 318.072632][T15190] overlayfs: failed lookup in lower (newroot/38, name='file0', err=-40): overlapping layers [ 318.083798][T15190] overlayfs: failed lookup in lower (newroot/38, name='file0', err=-40): overlapping layers [ 318.131777][T15196] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 318.141812][T15199] macvtap0: refused to change device tx_queue_len [ 318.256746][T15215] netlink: 'syz.5.2538': attribute type 1 has an invalid length. [ 318.292186][T15215] 8021q: adding VLAN 0 to HW filter on device bond6 [ 318.296489][T15215] bond5: (slave bond6): making interface the new active one [ 318.299447][T15215] bond5: (slave bond6): Enslaving as an active interface with an up link [ 318.314122][T15215] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 318.321999][T15218] mkiss: ax0: crc mode is auto. [ 318.328823][T15215] 8021q: adding VLAN 0 to HW filter on device bond5 [ 318.392592][T15223] sp0: Synchronizing with TNC [ 318.396005][T15223] /dev/nullb0: Can't lookup blockdev [ 318.400017][T15223] netdevsim netdevsim5: Direct firmware load for . failed with error -2 [ 318.407034][T15223] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 318.495471][T15231] trusted_key: encrypted_key: key trusted:syz not found [ 319.013175][T15248] netlink: 'syz.0.2549': attribute type 30 has an invalid length. [ 319.196668][T15222] [U] è [ 319.423945][ T6103] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 319.576476][ T6103] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.580353][ T6103] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.584514][ T6103] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 319.590005][ T6103] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 319.595788][ T6103] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.606842][ T6103] usb 5-1: config 0 descriptor?? [ 319.915628][ T40] kauditd_printk_skb: 277 callbacks suppressed [ 319.915643][ T40] audit: type=1400 audit(1767214998.181:49351): avc: denied { write } for pid=15290 comm="syz.6.2564" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 319.929520][T15291] random: crng reseeded on system resumption [ 319.938329][ T40] audit: type=1400 audit(1767214998.191:49352): avc: denied { open } for pid=15290 comm="syz.6.2564" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 319.957580][ T40] audit: type=1400 audit(1767214998.221:49353): avc: denied { ioctl } for pid=15290 comm="syz.6.2564" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 320.027099][ T6103] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 320.036666][T15292] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 320.042479][T15292] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 320.044631][ T40] audit: type=1400 audit(1767214998.301:49354): avc: denied { load_policy } for pid=15290 comm="syz.6.2564" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 320.046745][T15292] SELinux: failed to load policy [ 320.137978][ T40] audit: type=1400 audit(1767214998.401:49355): avc: denied { read write } for pid=14640 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 320.148672][ T40] audit: type=1400 audit(1767214998.401:49356): avc: denied { open } for pid=14640 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 320.159758][ T40] audit: type=1400 audit(1767214998.401:49357): avc: denied { ioctl } for pid=14640 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 320.172439][ T40] audit: type=1400 audit(1767214998.431:49358): avc: denied { ioctl } for pid=15295 comm="syz.6.2565" path="socket:[70164]" dev="sockfs" ino=70164 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 320.184729][ T40] audit: type=1400 audit(1767214998.431:49359): avc: denied { module_request } for pid=15295 comm="syz.6.2565" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 320.194404][ T40] audit: type=1400 audit(1767214998.451:49360): avc: denied { sys_module } for pid=15295 comm="syz.6.2565" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 320.377422][T15252] 8021q: adding VLAN 0 to HW filter on device bond3 [ 320.497163][ T53] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 320.500790][ T53] usb 12-1: can't read configurations, error -71 [ 320.523799][T15306] netlink: 'syz.7.2568': attribute type 10 has an invalid length. [ 320.529900][T15306] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 320.570277][T15311] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 320.591301][T15311] xfrm0 speed is unknown, defaulting to 1000 [ 320.625189][T11097] bond0: (slave vxlan0): interface is now down [ 320.626042][T15304] 9p: Could not find request transport: v [ 320.629164][T11097] bond0: now running without any active interface! [ 321.125918][ T5992] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 321.175782][ T6103] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 321.275771][ T5992] usb 10-1: Using ep0 maxpacket: 8 [ 321.279813][ T5992] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 321.284555][ T5992] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 321.288398][ T5992] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 321.291714][ T5992] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 321.296123][ T5992] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 321.299118][ T5992] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.325756][ T6103] usb 11-1: Using ep0 maxpacket: 8 [ 321.329519][ T6103] usb 11-1: config 179 has an invalid interface number: 65 but max is 0 [ 321.332379][ T6103] usb 11-1: config 179 has no interface number 0 [ 321.334585][ T6103] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 321.338348][ T6103] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 321.342081][ T6103] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 321.346194][ T6103] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 321.350062][ T6103] usb 11-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 321.354614][ T6103] usb 11-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 321.357780][ T6103] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.362350][T15328] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 321.475987][ T59] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 321.505073][ T5992] usb 10-1: GET_CAPABILITIES returned 0 [ 321.507994][ T5992] usbtmc 10-1:16.0: can't read capabilities [ 321.574785][ T53] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:179.65/input/input28 [ 321.584415][ T6027] usb 10-1: USB disconnect, device number 21 [ 321.863399][ C3] xpad 11-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 321.863417][ T7480] usb 11-1: USB disconnect, device number 24 [ 321.869419][ C3] xpad 11-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 322.257528][ T839] usb 5-1: USB disconnect, device number 3 [ 322.498943][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.510967][T15390] __nla_validate_parse: 32 callbacks suppressed [ 322.510981][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2592'. [ 322.775325][T15420] netlink: 'syz.6.2602': attribute type 1 has an invalid length. [ 322.777675][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 322.849952][T15429] sctp: [Deprecated]: syz.0.2605 (pid 15429) Use of struct sctp_assoc_value in delayed_ack socket option. [ 322.849952][T15429] Use struct sctp_sack_info instead [ 322.891667][T15436] bridge: RTM_NEWNEIGH with invalid ether address [ 322.894050][T15436] bridge: RTM_NEWNEIGH with invalid ether address [ 323.101162][T15446] xfrm0 speed is unknown, defaulting to 1000 [ 323.117802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 323.127703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 323.145466][T15446] MTD: Couldn't look up './bus': -15 [ 323.189020][T15453] 9pnet_virtio: no channels available for device syz [ 323.285081][T15459] overlayfs: empty lowerdir [ 323.385269][T15466] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 323.424675][T15466] overlayfs: missing 'lowerdir' [ 323.446736][T15471] qrtr: Invalid version 0 [ 323.600700][T15480] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2622'. [ 323.605420][T15480] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 323.743533][T15498] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2629'. [ 323.751200][T15494] netlink: 'syz.7.2627': attribute type 19 has an invalid length. [ 323.754588][T15494] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2627'. [ 323.759670][T15494] netlink: 'syz.7.2627': attribute type 19 has an invalid length. [ 323.762109][T15498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.762289][T15494] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2627'. [ 323.799904][T15498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.052483][T15506] kvm_intel: kvm [15505]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xfffffff7 [ 324.105151][T15514] 9pnet_fd: Insufficient options for proto=fd [ 324.168923][T15520] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2634'. [ 324.177933][T15520] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 324.325791][T15527] binder: BINDER_SET_CONTEXT_MGR already set [ 324.332255][T15527] binder: 15524:15527 ioctl 4018620d 200000000100 returned -16 [ 324.365762][T15527] 9p: Could not find request transport: fd=0x0000000000000009 [ 324.373257][T15525] binder: 15524:15525 ioctl c0306201 2000000003c0 returned -14 [ 324.380675][T15525] binder: 15524:15525 ioctl 8208ae63 200000000200 returned -22 [ 324.384804][T15525] 9pnet_virtio: no channels available for device syz [ 324.564847][T15537] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 324.687164][T15550] xt_nat: multiple ranges no longer supported [ 324.690245][T15551] xt_nat: multiple ranges no longer supported [ 324.693278][T15551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2645'. [ 324.693698][T15554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2645'. [ 324.701199][T15550] 9pnet_virtio: no channels available for device syz [ 324.716046][T15551] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2645'. [ 324.720476][T15550] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2645'. [ 324.851346][T15567] usb usb4: usbfs: process 15567 (syz.6.2649) did not claim interface 0 before use [ 324.929951][ T40] kauditd_printk_skb: 351 callbacks suppressed [ 324.929962][ T40] audit: type=1400 audit(1767215003.186:49712): avc: denied { execute } for pid=15573 comm="syz.6.2651" name="file0" dev="tmpfs" ino=423 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 324.941552][ T40] audit: type=1400 audit(1767215003.186:49713): avc: denied { create } for pid=15577 comm="syz.7.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 324.950191][ T40] audit: type=1400 audit(1767215003.206:49714): avc: denied { ioctl } for pid=15577 comm="syz.7.2652" path="socket:[72888]" dev="sockfs" ino=72888 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 325.011445][ T40] audit: type=1400 audit(1767215003.266:49715): avc: denied { create } for pid=15583 comm="syz.0.2655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 325.018439][ T40] audit: type=1400 audit(1767215003.266:49716): avc: denied { write } for pid=15583 comm="syz.0.2655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 325.026582][ T40] audit: type=1400 audit(1767215003.286:49717): avc: denied { read } for pid=15583 comm="syz.0.2655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 325.034715][ T40] audit: type=1400 audit(1767215003.296:49718): avc: denied { ioctl } for pid=15583 comm="syz.0.2655" path="socket:[71502]" dev="sockfs" ino=71502 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 325.035082][T15584] 9pnet_virtio: no channels available for device syz [ 325.048328][T15586] netlink: 'syz.6.2656': attribute type 8 has an invalid length. [ 325.049495][T15584] overlayfs: failed to clone upperpath [ 325.051256][ T40] audit: type=1400 audit(1767215003.306:49719): avc: denied { ioctl } for pid=15587 comm="syz.7.2657" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 325.055432][ T40] audit: type=1400 audit(1767215003.306:49720): avc: denied { read } for pid=15585 comm="syz.6.2656" dev="nsfs" ino=4026532960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 325.071553][ T40] audit: type=1400 audit(1767215003.306:49721): avc: denied { open } for pid=15585 comm="syz.6.2656" path="net:[4026532960]" dev="nsfs" ino=4026532960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 325.147575][T15595] overlayfs: failed to clone upperpath [ 325.254660][T15607] Bluetooth: hci3: Frame reassembly failed (-84) [ 325.313750][ T7155] IPVS: starting estimator thread 0... [ 325.380904][T15620] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 325.396485][T15620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15620 comm=syz.5.2665 [ 325.409832][T15616] IPVS: using max 45 ests per chain, 108000 per kthread [ 326.073452][T15618] netlink: 'syz.5.2665': attribute type 1 has an invalid length. [ 326.080426][T15618] netlink: 'syz.5.2665': attribute type 3 has an invalid length. [ 326.126704][T15622] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 326.143130][T15622] CIFS mount error: No usable UNC path provided in device string! [ 326.143130][T15622] [ 326.147265][T15622] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 326.161963][T15622] overlayfs: failed to clone upperpath [ 326.403270][T15649] Process accounting resumed [ 326.435833][T15655] netlink: 'syz.5.2679': attribute type 1 has an invalid length. [ 326.603239][T15663] f2fs: Unknown parameter 'usrquotaƒ' [ 326.809598][T15672] 9pnet_virtio: no channels available for device syz [ 327.075783][T15685] team0: Port device team_slave_0 removed [ 327.217896][T15692] sctp: [Deprecated]: syz.5.2688 (pid 15692) Use of int in maxseg socket option. [ 327.217896][T15692] Use struct sctp_assoc_value instead [ 327.254206][T15694] overlayfs: failed to resolve './file0': -2 [ 327.292063][ T64] Bluetooth: hci3: command 0x1003 tx timeout [ 327.292084][ T5950] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 327.622134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 327.651081][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 327.655435][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 327.659267][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 327.662680][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 327.666210][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 327.696200][T15733] xfrm0 speed is unknown, defaulting to 1000 [ 327.747360][T15729] xfrm0 speed is unknown, defaulting to 1000 [ 327.931278][T15755] kAFS: unable to lookup cell '/,c¾ûL' [ 327.955138][T15755] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 328.001885][T15757] sysfs: cannot create duplicate filename '/class/ieee80211/4Ï€!FõïVl‘uc'f`å”Þ†’;œ1µx%ñ†‹M¹Fœ-ôÁõîI' [ 328.012595][T15757] CPU: 0 UID: 0 PID: 15757 Comm: syz.7.2710 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.012615][T15757] Tainted: [L]=SOFTLOCKUP [ 328.012619][T15757] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 328.012627][T15757] Call Trace: [ 328.012631][T15757] [ 328.012636][T15757] dump_stack_lvl+0x16c/0x1f0 [ 328.012655][T15757] sysfs_warn_dup+0x7f/0xa0 [ 328.012670][T15757] sysfs_do_create_link_sd+0x124/0x140 [ 328.012686][T15757] sysfs_create_link+0x61/0xc0 [ 328.012700][T15757] device_add+0x652/0x1980 [ 328.012717][T15757] ? __pfx_device_add+0x10/0x10 [ 328.012728][T15757] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 328.012743][T15757] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 328.012762][T15757] wiphy_register+0x1ea1/0x2cc0 [ 328.012778][T15757] ? __rtnl_unlock+0x68/0xf0 [ 328.012792][T15757] ? __netdev_update_features+0x1040/0x1fe0 [ 328.012809][T15757] ? __pfx_wiphy_register+0x10/0x10 [ 328.012825][T15757] ? __asan_memset+0x23/0x50 [ 328.012841][T15757] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 328.012859][T15757] ieee80211_register_hw+0x2bb2/0x4160 [ 328.012881][T15757] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 328.012897][T15757] ? __pfx___debug_object_init+0x10/0x10 [ 328.012915][T15757] ? find_held_lock+0x2b/0x80 [ 328.012933][T15757] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 328.012946][T15757] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 328.012959][T15757] ? __hrtimer_setup+0x176/0x280 [ 328.012977][T15757] mac80211_hwsim_new_radio+0x3323/0x5150 [ 328.013043][T15757] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 328.013064][T15757] ? __asan_memcpy+0x3c/0x60 [ 328.013078][T15757] hwsim_new_radio_nl+0xba2/0x1330 [ 328.013102][T15757] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 328.013124][T15757] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 328.013143][T15757] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 328.013163][T15757] genl_family_rcv_msg_doit+0x209/0x2f0 [ 328.013181][T15757] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 328.013204][T15757] ? bpf_lsm_capable+0x9/0x10 [ 328.013218][T15757] ? security_capable+0x7e/0x260 [ 328.013231][T15757] ? ns_capable+0xd7/0x110 [ 328.013248][T15757] genl_rcv_msg+0x55c/0x800 [ 328.013266][T15757] ? __pfx_genl_rcv_msg+0x10/0x10 [ 328.013281][T15757] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 328.013300][T15757] ? __lock_acquire+0x436/0x2890 [ 328.013315][T15757] netlink_rcv_skb+0x158/0x420 [ 328.013329][T15757] ? __pfx_genl_rcv_msg+0x10/0x10 [ 328.013345][T15757] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 328.013364][T15757] ? netlink_deliver_tap+0x1ae/0xd30 [ 328.013380][T15757] genl_rcv+0x28/0x40 [ 328.013394][T15757] netlink_unicast+0x5aa/0x870 [ 328.013409][T15757] ? __pfx_netlink_unicast+0x10/0x10 [ 328.013429][T15757] netlink_sendmsg+0x8c8/0xdd0 [ 328.013445][T15757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.013464][T15757] ____sys_sendmsg+0xa5d/0xc30 [ 328.013480][T15757] ? copy_msghdr_from_user+0x10a/0x160 [ 328.013491][T15757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 328.013504][T15757] ? preempt_schedule_thunk+0x16/0x30 [ 328.013519][T15757] ? try_to_wake_up+0xa67/0x1860 [ 328.013539][T15757] ___sys_sendmsg+0x134/0x1d0 [ 328.013551][T15757] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.013563][T15757] ? futex_private_hash_put+0x160/0x1b0 [ 328.013595][T15757] __sys_sendmsg+0x16d/0x220 [ 328.013606][T15757] ? __pfx___sys_sendmsg+0x10/0x10 [ 328.013617][T15757] ? __x64_sys_futex+0x1e0/0x4c0 [ 328.013642][T15757] do_syscall_64+0xcd/0xf80 [ 328.013658][T15757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.013669][T15757] RIP: 0033:0x7f5a6cf8f7c9 [ 328.013679][T15757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.013690][T15757] RSP: 002b:00007f5a6dea0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.013701][T15757] RAX: ffffffffffffffda RBX: 00007f5a6d1e5fa0 RCX: 00007f5a6cf8f7c9 [ 328.013708][T15757] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000c [ 328.013715][T15757] RBP: 00007f5a6d013f91 R08: 0000000000000000 R09: 0000000000000000 [ 328.013721][T15757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.013728][T15757] R13: 00007f5a6d1e6038 R14: 00007f5a6d1e5fa0 R15: 00007ffddd0203d8 [ 328.013743][T15757] [ 328.287549][T15778] fuse: Bad value for 'fd' [ 328.288575][T15729] chnl_net:caif_netlink_parms(): no params data found [ 328.289688][T15778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.381437][T15729] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.384127][T15729] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.386640][T15729] bridge_slave_0: entered allmulticast mode [ 328.390470][T15729] bridge_slave_0: entered promiscuous mode [ 328.397806][T15729] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.401029][T15729] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.404116][T15729] bridge_slave_1: entered allmulticast mode [ 328.406865][T15729] bridge_slave_1: entered promiscuous mode [ 328.429312][T15729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.434543][T15729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.450916][T15729] team0: Port device team_slave_0 added [ 328.455738][T15729] team0: Port device team_slave_1 added [ 328.470438][T15729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.473606][T15729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.482141][T15729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.487621][T15729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.489958][T15729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.502837][T15729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.573765][T15789] netlink: 'syz.6.2718': attribute type 4 has an invalid length. [ 328.583956][T15789] netlink: 'syz.6.2718': attribute type 4 has an invalid length. [ 328.596859][T15789] netlink: 'syz.6.2718': attribute type 4 has an invalid length. [ 328.600642][T15729] hsr_slave_0: entered promiscuous mode [ 328.603354][T15729] hsr_slave_1: entered promiscuous mode [ 328.605543][T15729] debugfs: 'hsr0' already exists in 'hsr' [ 328.607498][T15729] Cannot create hsr debugfs directory [ 328.610351][T15789] netlink: 'syz.6.2718': attribute type 4 has an invalid length. [ 328.617076][T15789] netlink: 'syz.6.2718': attribute type 4 has an invalid length. [ 328.621719][T15788] netlink: 'syz.6.2718': attribute type 4 has an invalid length. [ 328.670026][T15792] __nla_validate_parse: 10 callbacks suppressed [ 328.670046][T15792] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2716'. [ 328.757300][T15729] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.760953][T15729] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.809293][T15808] netlink: 'syz.7.2722': attribute type 29 has an invalid length. [ 328.868735][T15729] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.872150][T15729] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.909169][T15821] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.911805][T15821] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.916482][T15819] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 328.971239][T15729] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.976001][T15729] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.026486][T15834] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 329.143664][T15729] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.147543][T15729] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.231767][T15851] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 329.243172][T15857] (syz.7.2738,15857,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 329.246603][T15851] bond2: (slave lo): speed changed to 0 on port 1 [ 329.250176][T15851] bond2: (slave lo): Enslaving as a backup interface with an up link [ 329.257337][T15851] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 329.370657][T15729] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 329.384350][T15729] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 329.395794][T15729] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 329.405772][T15729] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 329.474251][T15729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.488130][T15729] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.494374][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.497607][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.502708][T15882] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2744'. [ 329.508324][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.511736][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.530725][T15882] 8021q: adding VLAN 0 to HW filter on device bond8 [ 329.564210][T15889] netlink: 75 bytes leftover after parsing attributes in process `syz.7.2746'. [ 329.656927][T15729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.708596][T15897] syzkaller1: entered promiscuous mode [ 329.710514][T15897] syzkaller1: entered allmulticast mode [ 329.774393][ T5950] Bluetooth: hci3: command tx timeout [ 329.820250][T15729] veth0_vlan: entered promiscuous mode [ 329.832955][T15729] veth1_vlan: entered promiscuous mode [ 329.857725][T15729] veth0_macvtap: entered promiscuous mode [ 329.865999][T15729] veth1_macvtap: entered promiscuous mode [ 329.876016][T15729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.882428][T15729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.889556][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.895585][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.900546][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.905983][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.932831][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.939357][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.955892][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.958466][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.968111][ T40] kauditd_printk_skb: 244 callbacks suppressed [ 329.968122][ T40] audit: type=1400 audit(1767215008.221:49966): avc: denied { mounton } for pid=15729 comm="syz-executor" path="/syzkaller.Q640c7/syz-tmp" dev="sda1" ino=2050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 329.984155][ T40] audit: type=1400 audit(1767215008.221:49967): avc: denied { mount } for pid=15729 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 329.991905][ T40] audit: type=1400 audit(1767215008.221:49968): avc: denied { mounton } for pid=15729 comm="syz-executor" path="/syzkaller.Q640c7/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 330.000898][ T40] audit: type=1400 audit(1767215008.221:49969): avc: denied { mount } for pid=15729 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 330.009265][ T40] audit: type=1400 audit(1767215008.221:49970): avc: denied { mounton } for pid=15729 comm="syz-executor" path="/syzkaller.Q640c7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 330.019288][ T40] audit: type=1400 audit(1767215008.221:49971): avc: denied { mounton } for pid=15729 comm="syz-executor" path="/syzkaller.Q640c7/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=75010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 330.029811][ T40] audit: type=1400 audit(1767215008.241:49972): avc: denied { unmount } for pid=15729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 330.043018][ T40] audit: type=1400 audit(1767215008.241:49973): avc: denied { module_request } for pid=15914 comm="syz.7.2750" kmod="crypto-echainiv(authenc(hmac(sha512),cbc(des)))" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 330.054839][ T40] audit: type=1400 audit(1767215008.241:49974): avc: denied { mounton } for pid=15729 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 330.069516][ T40] audit: type=1400 audit(1767215008.241:49975): avc: denied { mount } for pid=15729 comm="syz-executor" name="/" dev="gadgetfs" ino=20669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 330.212139][T15929] could not allocate digest TFM handle sha224-ni [ 330.396714][T15954] kvm: pic: non byte write [ 330.403340][T15946] kvm: kvm [15945]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 330.425971][T15946] kvm: kvm [15945]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 330.447313][ T5950] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 330.524488][ T59] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 330.643739][T15965] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2762'. [ 330.649623][T15965] openvswitch: netlink: Missing key (keys=40, expected=80) [ 330.663891][T15967] MINIX-fs: blocksize too small for device [ 330.686058][ T59] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 330.688757][ T59] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 330.692513][ T59] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 330.696255][ T59] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 330.699839][ T59] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 330.703967][ T59] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 330.707166][ T59] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.712779][ T59] usb 10-1: config 0 descriptor?? [ 330.715082][T15942] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 330.716624][T15971] overlayfs: failed to resolve './file1': -2 [ 330.775092][T15979] CIFS: Unable to determine destination address [ 330.924372][ T59] plantronics 0003:047F:FFFF.000E: reserved main item tag 0xd [ 330.933542][ T59] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 331.199752][ T59] usb 10-1: USB disconnect, device number 22 [ 331.227271][T16008] binder: 16007:16008 ioctl c0306201 200000000c40 returned -14 [ 331.362892][T16020] netlink: 184 bytes leftover after parsing attributes in process `syz.6.2779'. [ 331.411111][T16023] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2780'. [ 331.438911][T16028] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2782'. [ 331.475072][T16032] nfs4: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 331.478292][T16026] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2781'. [ 331.481405][T16026] bond0: entered promiscuous mode [ 331.483158][T16026] bond_slave_0: entered promiscuous mode [ 331.485599][T16026] bond_slave_1: entered promiscuous mode [ 331.487681][T16026] vxlan0: entered promiscuous mode [ 331.489702][T16026] bond0: entered allmulticast mode [ 331.491497][T16026] bond_slave_0: entered allmulticast mode [ 331.493455][T16026] bond_slave_1: entered allmulticast mode [ 331.496437][T16026] vxlan0: entered allmulticast mode [ 331.641090][T16055] fuse: Bad value for 'fd' [ 331.685035][T16060] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2793'. [ 331.865636][ T5950] Bluetooth: hci3: command tx timeout [ 331.928163][T16075] ptrace attach of "/syz-executor exec"[14640] was attempted by ""[16075] [ 332.286316][ T6027] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 332.458806][ T6027] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.464186][ T6027] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.468375][T16101] netlink: 'syz.5.2805': attribute type 9 has an invalid length. [ 332.469460][ T6027] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 332.471249][T16101] netlink: 'syz.5.2805': attribute type 11 has an invalid length. [ 332.473485][T16103] fuse: Bad value for 'fd' [ 332.477110][ T6027] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 332.479591][T16101] netlink: 'syz.5.2805': attribute type 12 has an invalid length. [ 332.481043][ T6027] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.482593][ T6027] usb 11-1: config 0 descriptor?? [ 332.484449][T16101] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.2805'. [ 332.528280][T16108] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 332.531341][T16108] overlayfs: missing 'lowerdir' [ 332.590213][T11094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.592877][T11094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.607830][T16117] i2c i2c-1: Invalid block write size 34 [ 332.633820][T16119] binder_alloc: 16118: binder_alloc_buf, no vma [ 332.637138][T16119] binder: 16118:16119 ioctl 8010640b 0 returned -22 [ 332.705113][T16125] fuse: Bad value for 'user_id' [ 332.706920][T16125] fuse: Bad value for 'user_id' [ 332.895230][ T6027] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 332.898517][ T6027] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 332.901090][ T6027] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 332.903560][ T6027] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 332.905972][ T6027] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 332.909156][ T6027] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 332.911653][ T6027] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 332.914137][ T6027] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 332.917107][ T6027] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 332.919604][ T6027] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 332.927726][ T6027] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 333.062098][ T5950] Bluetooth: hci2: unexpected event for opcode 0x080f [ 333.159260][ T7422] usb 11-1: USB disconnect, device number 25 [ 333.680073][T16180] xfrm0 speed is unknown, defaulting to 1000 [ 333.714876][T16186] validate_nla: 1 callbacks suppressed [ 333.714887][T16186] netlink: 'syz.5.2832': attribute type 16 has an invalid length. [ 333.722184][T16186] netlink: 'syz.5.2832': attribute type 17 has an invalid length. [ 333.735118][T16186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 333.740893][T16180] netlink: 'syz.5.2832': attribute type 16 has an invalid length. [ 333.747215][T16180] netlink: 'syz.5.2832': attribute type 17 has an invalid length. [ 333.753408][T16180] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 333.937357][ T5950] Bluetooth: hci3: command tx timeout [ 333.948703][T16209] __nla_validate_parse: 3 callbacks suppressed [ 333.948714][T16209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2839'. [ 333.954222][T16209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2839'. [ 334.008283][T16213] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 334.010521][ T64] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 334.013547][T16213] usb usb6: usbfs: process 16213 (syz.5.2841) did not claim interface 8 before use [ 334.014685][ T64] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 334.022697][ T64] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 334.030236][ T64] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 334.034519][ T64] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 334.059947][T11086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.062641][T16214] xfrm0 speed is unknown, defaulting to 1000 [ 334.063495][T11086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.111160][T16224] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2845'. [ 334.164611][T16214] chnl_net:caif_netlink_parms(): no params data found [ 334.205031][T16238] overlayfs: failed to clone upperpath [ 334.235517][T16241] /dev/nullb0: Can't lookup blockdev [ 334.248619][T16241] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 334.251409][T16214] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.254185][T16214] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.256748][T16214] bridge_slave_0: entered allmulticast mode [ 334.259822][T16214] bridge_slave_0: entered promiscuous mode [ 334.263361][T16214] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.265841][T16214] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.270207][T16214] bridge_slave_1: entered allmulticast mode [ 334.273564][T16214] bridge_slave_1: entered promiscuous mode [ 334.293241][T16214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.299313][T16214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.328298][T16214] team0: Port device team_slave_0 added [ 334.332847][T16214] team0: Port device team_slave_1 added [ 334.353275][T16214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.360053][T16214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.371412][T16214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.378453][T16214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.381729][T16214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.393233][T16214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.429939][T16214] hsr_slave_0: entered promiscuous mode [ 334.433410][T16214] hsr_slave_1: entered promiscuous mode [ 334.435677][T16214] debugfs: 'hsr0' already exists in 'hsr' [ 334.438069][T16214] Cannot create hsr debugfs directory [ 334.498133][ T64] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 334.502683][ T64] Bluetooth: hci2: Injecting HCI hardware error event [ 334.851739][T16260] netlink: 'syz.6.2855': attribute type 10 has an invalid length. [ 334.870986][T16260] team0: Port device dummy0 added [ 334.899201][T16214] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 334.903804][T16214] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 334.908665][T16214] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 334.921049][T16214] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 334.980215][T16214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.989605][T16214] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.991966][ T40] kauditd_printk_skb: 362 callbacks suppressed [ 334.991976][ T40] audit: type=1400 audit(1767215013.237:50338): avc: denied { unlink } for pid=16273 comm="syz.6.2858" name="#6e" dev="tmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 334.994784][T11095] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.004211][T11095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.011091][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.013513][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.056823][ T40] audit: type=1400 audit(1767215013.297:50339): avc: denied { sys_module } for pid=16214 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 335.121742][T16214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.149062][ T40] audit: type=1400 audit(1767215013.397:50340): avc: denied { create } for pid=16280 comm="syz.6.2859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 335.156228][ T40] audit: type=1400 audit(1767215013.397:50341): avc: denied { write } for pid=16280 comm="syz.6.2859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 335.165320][ T40] audit: type=1400 audit(1767215013.407:50342): avc: denied { read } for pid=16280 comm="syz.6.2859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 335.205278][ T40] audit: type=1400 audit(1767215013.447:50343): avc: denied { map } for pid=16286 comm="syz.6.2860" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=76743 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 335.215032][ T40] audit: type=1400 audit(1767215013.447:50344): avc: denied { read write } for pid=16286 comm="syz.6.2860" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=76743 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 335.230895][ T40] audit: type=1400 audit(1767215013.477:50345): avc: denied { read write } for pid=16286 comm="syz.6.2860" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 335.239904][ T40] audit: type=1400 audit(1767215013.477:50346): avc: denied { open } for pid=16286 comm="syz.6.2860" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 335.252249][T16214] veth0_vlan: entered promiscuous mode [ 335.257317][T16214] veth1_vlan: entered promiscuous mode [ 335.272967][T16214] veth0_macvtap: entered promiscuous mode [ 335.276961][T16214] veth1_macvtap: entered promiscuous mode [ 335.289084][T16214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.296962][T16214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.304262][T11090] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.306963][T11090] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.311021][T11090] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.314576][T11090] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.319316][T16291] Process accounting resumed [ 335.333245][ T40] audit: type=1400 audit(1767215013.577:50347): avc: denied { map_read map_write } for pid=16292 comm="syz.6.2862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 335.371806][T11086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.374376][T11086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.398147][T11086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.401991][T11086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.459716][T16303] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2840'. [ 335.462690][T16303] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2840'. [ 335.516067][T16315] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2868'. [ 335.732824][T16334] tipc: Trying to set illegal importance in message [ 336.029077][ T64] Bluetooth: hci3: command tx timeout [ 336.109166][ T64] Bluetooth: hci4: command tx timeout [ 336.717462][T16343] overlayfs: statfs failed on './file0' [ 336.722994][T16344] overlayfs: statfs failed on './file0' [ 336.877904][T16350] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2879'. [ 337.452696][T16372] netlink: 'syz.6.2884': attribute type 2 has an invalid length. [ 337.456226][T16372] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2884'. [ 337.567521][T16381] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2888'. [ 337.642600][T16387] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2890'. [ 337.980530][ T59] usb 12-1: new high-speed USB device number 37 using dummy_hcd [ 338.110906][ T59] usb 12-1: device descriptor read/64, error -71 [ 338.146240][T16397] netlink: 'syz.6.2894': attribute type 2 has an invalid length. [ 338.146354][T16398] netlink: 'syz.6.2894': attribute type 2 has an invalid length. [ 338.157321][T16397] !: entered promiscuous mode [ 338.159787][T16398] !: left promiscuous mode [ 338.180844][ T64] Bluetooth: hci4: command tx timeout [ 338.351156][ T59] usb 12-1: new high-speed USB device number 38 using dummy_hcd [ 338.442077][ T53] usb 11-1: new full-speed USB device number 26 using dummy_hcd [ 338.481020][ T59] usb 12-1: device descriptor read/64, error -71 [ 338.504944][ T11] block nbd0: Possible stuck request ffff888028740000: control (read@0,1024B). Runtime 150 seconds [ 338.508467][ T11] block nbd0: Possible stuck request ffff888028740200: control (read@1024,1024B). Runtime 150 seconds [ 338.512451][ T11] block nbd0: Possible stuck request ffff888028740400: control (read@2048,1024B). Runtime 150 seconds [ 338.516198][ T11] block nbd0: Possible stuck request ffff888028740600: control (read@3072,1024B). Runtime 150 seconds [ 338.601288][ T59] usb usb12-port1: attempt power cycle [ 338.612540][ T53] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 338.616591][ T53] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.622353][ T53] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 338.626434][ T53] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.912610][ T53] usb 11-1: usb_control_msg returned -71 [ 338.916150][ T53] usbtmc 11-1:16.0: can't read capabilities [ 338.923032][T16413] usb usb8: usbfs: process 16413 (syz.5.2900) did not claim interface 0 before use [ 338.927355][ T53] usb 11-1: USB disconnect, device number 26 [ 338.941485][ T59] usb 12-1: new high-speed USB device number 39 using dummy_hcd [ 338.961822][ T59] usb 12-1: device descriptor read/8, error -71 [ 339.007379][T16425] __nla_validate_parse: 2 callbacks suppressed [ 339.007390][T16425] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2904'. [ 339.034209][T16430] overlayfs: failed to clone upperpath [ 339.068483][T16431] overlayfs: missing 'lowerdir' [ 339.211895][ T59] usb 12-1: new high-speed USB device number 40 using dummy_hcd [ 339.232463][ T59] usb 12-1: device descriptor read/8, error -71 [ 339.248181][ T64] Bluetooth: hci2: unknown advertising packet type: 0x82 [ 339.248224][ T64] Bluetooth: hci2: Dropping invalid advertising data [ 339.254835][ T64] Bluetooth: hci2: Malformed LE Event: 0x02 [ 339.351991][ T59] usb usb12-port1: unable to enumerate USB device [ 339.379042][T16447] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2912'. [ 339.392670][T16447] bond4: option downdelay: invalid value (18446744073709551615) [ 339.395786][T16447] bond4: option downdelay: allowed values 0 - 2147483647 [ 339.399670][T16447] bond4 (unregistering): Released all slaves [ 339.403575][ T6023] usb 10-1: new low-speed USB device number 23 using dummy_hcd [ 339.436638][T16449] netlink: 'syz.0.2912': attribute type 1 has an invalid length. [ 339.465776][ T59] hid-generic 0005:15C2:079A.0010: item fetching failed at offset 0/1 [ 339.470108][ T59] hid-generic 0005:15C2:079A.0010: probe with driver hid-generic failed with error -22 [ 339.478182][T16449] bond4: (slave geneve2): making interface the new active one [ 339.482088][T16449] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 339.485739][T11092] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 339.489853][T11092] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 339.494312][T11092] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 339.498427][T11092] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 339.553362][ T6023] usb 10-1: No LPM exit latency info found, disabling LPM. [ 339.558400][ T6023] usb 10-1: config 178 has an invalid interface number: 35 but max is 0 [ 339.561605][ T6023] usb 10-1: config 178 has no interface number 0 [ 339.563969][ T6023] usb 10-1: config 178 interface 35 altsetting 73 endpoint 0x6 has invalid maxpacket 1023, setting to 8 [ 339.567982][ T6023] usb 10-1: config 178 interface 35 altsetting 73 endpoint 0xD has invalid maxpacket 512, setting to 8 [ 339.572709][ T6023] usb 10-1: config 178 interface 35 altsetting 73 has a duplicate endpoint with address 0x6, skipping [ 339.577267][ T6023] usb 10-1: config 178 interface 35 altsetting 73 has an invalid descriptor for endpoint zero, skipping [ 339.581309][ T6023] usb 10-1: config 178 interface 35 altsetting 73 endpoint 0xA has invalid maxpacket 1024, setting to 8 [ 339.585738][ T6023] usb 10-1: config 178 interface 35 has no altsetting 0 [ 340.262755][ T64] Bluetooth: hci4: command tx timeout [ 340.276459][T16452] overlayfs: statfs failed on './file0' [ 340.291423][ T40] kauditd_printk_skb: 147 callbacks suppressed [ 340.291434][ T40] audit: type=1400 audit(1767215018.533:50495): avc: denied { unmount } for pid=14640 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 340.314661][T16457] xt_hashlimit: max too large, truncated to 1048576 [ 340.322395][ T40] audit: type=1400 audit(1767215018.563:50496): avc: denied { create } for pid=16455 comm="syz.0.2914" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 340.329653][ T40] audit: type=1400 audit(1767215018.573:50497): avc: denied { ioctl } for pid=16455 comm="syz.0.2914" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=78317 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 340.339170][ T40] audit: type=1400 audit(1767215018.573:50498): avc: denied { prog_load } for pid=16458 comm="syz.6.2915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 340.346525][ T40] audit: type=1400 audit(1767215018.573:50499): avc: denied { bpf } for pid=16458 comm="syz.6.2915" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 340.353707][ T40] audit: type=1400 audit(1767215018.573:50500): avc: denied { perfmon } for pid=16458 comm="syz.6.2915" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 340.361785][ T40] audit: type=1400 audit(1767215018.573:50501): avc: denied { read } for pid=16458 comm="syz.6.2915" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 340.369935][ T40] audit: type=1400 audit(1767215018.573:50502): avc: denied { open } for pid=16458 comm="syz.6.2915" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 340.377826][ T40] audit: type=1400 audit(1767215018.583:50503): avc: denied { ioctl } for pid=16458 comm="syz.6.2915" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 340.386774][ T40] audit: type=1400 audit(1767215018.593:50504): avc: denied { accept } for pid=16458 comm="syz.6.2915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 340.599441][T16475] xfrm0 speed is unknown, defaulting to 1000 [ 340.639231][T16482] fuse: Bad value for 'fd' [ 340.655318][T16475] Process accounting resumed [ 340.687425][T16485] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2923'. [ 340.823543][T16486] could not open pipe file descriptor [ 341.197673][T16519] netlink: 'syz.6.2934': attribute type 8 has an invalid length. [ 341.198127][T16518] binder: 16515:16518 ioctl 941c 0 returned -22 [ 341.203182][T16517] delete_channel: no stack [ 341.410563][T16531] overlayfs: workdir and upperdir must reside under the same mount [ 341.602044][T16538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16538 comm=syz.0.2941 [ 341.662656][T16543] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2941'. [ 342.093392][T16552] netlink: 'syz.0.2945': attribute type 1 has an invalid length. [ 342.107207][T16552] bond5: entered promiscuous mode [ 342.109147][T16552] 8021q: adding VLAN 0 to HW filter on device bond5 [ 342.111839][T16552] netlink: 'syz.0.2945': attribute type 1 has an invalid length. [ 342.127362][T16554] bond5: (slave bridge2): making interface the new active one [ 342.129930][T16554] bridge2: entered promiscuous mode [ 342.132189][T16554] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 342.144709][T16553] bond5: (slave bridge3): Enslaving as a backup interface with an up link [ 342.148629][T16552] netlink: 'syz.0.2945': attribute type 1 has an invalid length. [ 342.151465][T16552] netlink: 'syz.0.2945': attribute type 1 has an invalid length. [ 342.154895][T16552] netlink: 'syz.0.2945': attribute type 1 has an invalid length. [ 342.158132][T16552] netlink: 'syz.0.2945': attribute type 1 has an invalid length. [ 342.160939][T16552] netlink: 'syz.0.2945': attribute type 1 has an invalid length. [ 342.163894][T16552] netlink: 'syz.0.2945': attribute type 1 has an invalid length. [ 342.222647][T16562] 8021q: adding VLAN 0 to HW filter on device bond3 [ 342.226504][T16562] bond0: (slave bond3): Enslaving as an active interface with an up link [ 342.233512][T16562] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2948'. [ 342.267643][ T6023] usb 10-1: New USB device found, idVendor=05ab, idProduct=0351, bcdDevice= 1.04 [ 342.270770][ T6023] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.273448][ T6023] usb 10-1: Product: à°Š [ 342.278810][ T6023] usb 10-1: can't set config #178, error -71 [ 342.282845][ T6023] usb 10-1: USB disconnect, device number 23 [ 342.287680][T16573] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2949'. [ 342.344923][ T64] Bluetooth: hci4: command tx timeout [ 342.411029][T16567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2950'. [ 342.414858][T16567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2950'. [ 342.421477][T16584] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2954'. [ 342.425821][T16584] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2954'. [ 342.455388][T16586] overlayfs: failed to resolve './file1': -2 [ 342.592712][T16594] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 342.945207][T16606] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 343.118059][T16618] overlayfs: failed to resolve './file1': -2 [ 343.231955][T16620] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16620 comm=syz.6.2966 [ 343.372225][T16633] bridge1: entered promiscuous mode [ 343.626833][ T25] block nbd1: Possible stuck request ffff8880287a0000: control (read@0,1024B). Runtime 30 seconds [ 343.631639][ T25] block nbd1: Possible stuck request ffff8880287a0200: control (read@1024,1024B). Runtime 30 seconds [ 343.638164][ T25] block nbd1: Possible stuck request ffff8880287a0400: control (read@2048,1024B). Runtime 30 seconds [ 343.642974][ T25] block nbd1: Possible stuck request ffff8880287a0600: control (read@3072,1024B). Runtime 30 seconds [ 344.164964][T16651] vlan2: entered promiscuous mode [ 344.168576][T16651] vlan2: entered allmulticast mode [ 344.170337][T16651] hsr_slave_1: entered allmulticast mode [ 344.220467][T16655] program syz.5.2978 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.510246][T16677] __nla_validate_parse: 8 callbacks suppressed [ 344.510259][T16677] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2985'. [ 344.575456][ T6023] usb 12-1: new high-speed USB device number 41 using dummy_hcd [ 344.575592][T16680] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2986'. [ 344.745740][ T6023] usb 12-1: Using ep0 maxpacket: 8 [ 344.749027][ T6023] usb 12-1: config 3 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.755657][ T6023] usb 12-1: config 3 interface 0 has no altsetting 0 [ 344.757922][ T6023] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 344.761004][ T6023] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.785270][T16704] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2993'. [ 344.793786][T16704] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2993'. [ 344.841881][T16711] tmpfs: Unknown parameter 'quoa_inodet' [ 344.951077][T16716] /dev/nullb0: Can't lookup blockdev [ 344.956010][T16713] Invalid logical block size (1) [ 345.007149][ T6023] usbhid 12-1:3.0: can't add hid device: -71 [ 345.009303][ T6023] usbhid 12-1:3.0: probe with driver usbhid failed with error -71 [ 345.012077][T16720] binder: 16718:16720 ioctl c0306201 200000000140 returned -22 [ 345.013267][ T6023] usb 12-1: USB disconnect, device number 41 [ 345.021933][T16719] bridge: RTM_NEWNEIGH with invalid ether address [ 345.047947][T16726] netlink: 18 bytes leftover after parsing attributes in process `syz.6.3000'. [ 345.145055][T16741] overlayfs: failed to resolve './file0': -2 [ 345.254539][T16749] validate_nla: 58 callbacks suppressed [ 345.254551][T16749] netlink: 'syz.0.3007': attribute type 2 has an invalid length. [ 345.265161][T16749] !: entered promiscuous mode [ 345.271845][T16749] netlink: 'syz.0.3007': attribute type 2 has an invalid length. [ 345.271886][T16749] !: left promiscuous mode [ 345.376441][ T40] kauditd_printk_skb: 225 callbacks suppressed [ 345.376457][ T40] audit: type=1400 audit(1767215023.619:50730): avc: denied { watch watch_reads } for pid=16753 comm="syz.7.3009" path="/36" dev="tmpfs" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 345.402908][ T40] audit: type=1400 audit(1767215023.639:50731): avc: denied { create } for pid=16756 comm="syz.0.3010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 345.403370][ T40] audit: type=1400 audit(1767215023.639:50732): avc: denied { ioctl } for pid=16756 comm="syz.0.3010" path="socket:[80478]" dev="sockfs" ino=80478 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 345.468866][ T40] audit: type=1400 audit(1767215023.709:50733): avc: denied { setopt } for pid=16756 comm="syz.0.3010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 345.509959][T16767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3011'. [ 345.509990][T16767] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3011'. [ 345.525259][ T1208] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.525286][ T1208] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.525305][ T1208] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.525332][ T1208] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.536617][ T40] audit: type=1400 audit(1767215023.779:50734): avc: denied { create } for pid=16770 comm="syz.7.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 345.587126][T16771] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3297542003 (105521344096 ns) > initial count (99957982560 ns). Using initial count to start timer. [ 345.588257][ T40] audit: type=1400 audit(1767215023.829:50735): avc: denied { set_context_mgr } for pid=16772 comm="syz.5.3014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 345.588697][T16776] binder: 16772:16776 ioctl c018620b 2000000000c0 returned -14 [ 345.590865][ T40] audit: type=1400 audit(1767215023.829:50736): avc: denied { create } for pid=16773 comm="syz.0.3013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 345.591212][ T40] audit: type=1400 audit(1767215023.829:50737): avc: denied { ioctl } for pid=16773 comm="syz.0.3013" path="socket:[80555]" dev="sockfs" ino=80555 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 345.634790][ T40] audit: type=1400 audit(1767215023.879:50738): avc: denied { mounton } for pid=16782 comm="syz.0.3016" path="/164/file0" dev="tmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 345.639639][T16783] overlayfs: failed to clone lowerpath [ 345.645560][T16785] ip6gre1: entered allmulticast mode [ 345.646668][ T40] audit: type=1400 audit(1767215023.879:50739): avc: denied { mount } for pid=16782 comm="syz.0.3016" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 345.649398][T16783] overlayfs: failed to clone lowerpath [ 345.662986][T16784] /dev/nullb0: Can't lookup blockdev [ 345.673002][T16783] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3016'. [ 345.676796][T16785] /dev/nullb0: Can't lookup blockdev [ 345.724330][T16789] tipc: Can't bind to reserved service type 0 [ 345.758671][T16794] overlayfs: workdir and upperdir must be separate subtrees [ 345.836898][T16804] netlink: 204 bytes leftover after parsing attributes in process `syz.5.3022'. [ 345.837864][T16802] batadv_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 345.940691][T16823] fuse: Bad value for 'fd' [ 345.954406][T16824] netlink: 'syz.7.3028': attribute type 1 has an invalid length. [ 345.959362][T16824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.970806][T16824] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3028'. [ 346.049522][T16834] program syz.5.3031 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 346.180563][T16854] sit0: entered promiscuous mode [ 346.206906][T16854] netlink: 'syz.6.3037': attribute type 1 has an invalid length. [ 346.280116][T16856] trusted_key: encrypted_key: insufficient parameters specified [ 346.342185][T16868] syzkaller1: entered promiscuous mode [ 346.344015][T16868] syzkaller1: entered allmulticast mode [ 346.370553][T16874] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 346.375217][T16874] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 346.379364][T16874] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 346.456125][T16880] openvswitch: netlink: Duplicate key (type 1). [ 346.500928][ T64] Bluetooth: hci2: unexpected event for opcode 0x0c0d [ 346.523654][T16886] netlink: 'syz.6.3051': attribute type 10 has an invalid length. [ 346.639649][T16893] overlayfs: failed to resolve './file0': -2 [ 346.697301][T16898] overlayfs: failed to resolve './file0': -2 [ 346.805169][T16912] No control pipe specified [ 346.870998][T16908] delete_channel: no stack [ 346.920641][T16923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=16923 comm=syz.6.3063 [ 346.928305][T16923] overlayfs: invalid origin (0000) [ 346.931986][T16923] No control pipe specified [ 346.973535][T16926] input: syz1 as /devices/virtual/input/input33 [ 347.072915][T16934] tmpfs: Bad value for 'mpol' [ 347.074786][T16928] erspan1: entered promiscuous mode [ 347.091021][T16934] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 347.094099][T16934] overlayfs: overlapping lowerdir path [ 347.153010][T16947] overlayfs: failed to resolve './file1': -2 [ 347.298137][T16954] vlan2: entered promiscuous mode [ 347.300670][T16954] vlan2: entered allmulticast mode [ 347.303048][T16954] hsr_slave_1: entered allmulticast mode [ 347.751173][T16987] overlayfs: failed to resolve './file1': -2 [ 347.762020][T16986] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 347.767856][ T59] usb 12-1: new high-speed USB device number 42 using dummy_hcd [ 347.889386][ T839] hid-generic 0005:0C45:1010.0011: item fetching failed at offset 0/1 [ 347.893597][ T839] hid-generic 0005:0C45:1010.0011: probe with driver hid-generic failed with error -22 [ 347.908016][ T59] usb 12-1: device descriptor read/64, error -71 [ 347.983224][T17007] netlink: 'syz.6.3091': attribute type 10 has an invalid length. [ 347.991187][T17007] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 347.995678][T17007] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 348.002894][T17007] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 348.148022][ T59] usb 12-1: new high-speed USB device number 43 using dummy_hcd [ 348.279985][ T59] usb 12-1: device descriptor read/64, error -71 [ 348.388289][ T59] usb usb12-port1: attempt power cycle [ 348.467933][T17034] ceph: Path missing in source [ 348.563140][T17041] gtp1: entered promiscuous mode [ 348.728570][ T59] usb 12-1: new high-speed USB device number 44 using dummy_hcd [ 348.750250][ T59] usb 12-1: device descriptor read/8, error -71 [ 348.978582][ T839] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 348.998572][ T59] usb 12-1: new high-speed USB device number 45 using dummy_hcd [ 349.032537][ T59] usb 12-1: device descriptor read/8, error -71 [ 349.138549][ T839] usb 10-1: Using ep0 maxpacket: 8 [ 349.141270][ T59] usb usb12-port1: unable to enumerate USB device [ 349.145290][ T839] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 349.148181][ T839] usb 10-1: config 179 has no interface number 0 [ 349.150860][ T839] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 349.154744][ T839] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 349.158937][ T839] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 349.162585][ T839] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 349.166302][ T839] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 349.170836][ T839] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 349.173776][ T839] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.179046][T17053] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 349.390846][ T839] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:179.65/input/input34 [ 349.633182][ T839] usb 10-1: USB disconnect, device number 24 [ 349.635371][ C2] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 349.635395][ C2] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 350.480457][T17069] __nla_validate_parse: 8 callbacks suppressed [ 350.480470][T17069] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3110'. [ 350.524087][ T40] kauditd_printk_skb: 285 callbacks suppressed [ 350.524103][ T40] audit: type=1400 audit(1767215028.756:51025): avc: denied { create } for pid=17070 comm="syz.7.3111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 350.534087][ T40] audit: type=1400 audit(1767215028.766:51026): avc: denied { read } for pid=17073 comm="syz.6.3113" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 350.543348][ T40] audit: type=1400 audit(1767215028.766:51027): avc: denied { open } for pid=17073 comm="syz.6.3113" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 350.551813][ T40] audit: type=1400 audit(1767215028.766:51029): avc: denied { bind } for pid=17070 comm="syz.7.3111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 350.557039][T17080] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3112'. [ 350.558000][ T40] audit: type=1400 audit(1767215028.766:51028): avc: denied { ioctl } for pid=17073 comm="syz.6.3113" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 350.558027][ T40] audit: type=1400 audit(1767215028.766:51030): avc: denied { read } for pid=17073 comm="syz.6.3113" name="dlm-monitor" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 350.580070][ T40] audit: type=1400 audit(1767215028.766:51031): avc: denied { open } for pid=17073 comm="syz.6.3113" path="/dev/dlm-monitor" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 350.587955][ T40] audit: type=1400 audit(1767215028.776:51032): avc: denied { write } for pid=17070 comm="syz.7.3111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 350.594939][ T40] audit: type=1400 audit(1767215028.776:51033): avc: denied { read } for pid=17070 comm="syz.7.3111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 350.601396][ T40] audit: type=1400 audit(1767215028.786:51034): avc: denied { ioctl } for pid=17077 comm="syz.5.3112" path="socket:[83244]" dev="sockfs" ino=83244 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 350.613242][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.616395][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.620353][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.623287][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.626078][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.629002][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.632816][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.636169][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.638999][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.641841][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.645077][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.647863][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.650755][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.653568][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.656509][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.659299][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.662432][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.665307][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.668477][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.672859][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.676236][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.679056][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.682054][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.685766][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.689124][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.692032][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.694797][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.698338][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.701255][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.704021][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.706914][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.717558][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 350.720815][T17083] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 351.138029][T17117] fuse: Bad value for 'fd' [ 351.409927][T17128] overlayfs: failed to clone upperpath [ 351.426506][T17130] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3130'. [ 351.712066][T17147] netlink: 'syz.5.3135': attribute type 1 has an invalid length. [ 351.715469][T17147] netlink: 'syz.5.3135': attribute type 1 has an invalid length. [ 351.718822][T17147] netlink: 9172 bytes leftover after parsing attributes in process `syz.5.3135'. [ 351.726580][T17147] netlink: 'syz.5.3135': attribute type 9 has an invalid length. [ 351.847343][T17149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3136'. [ 351.870381][ T5946] usb 12-1: new high-speed USB device number 46 using dummy_hcd [ 351.989703][T17156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=17156 comm=syz.5.3138 [ 352.023133][ T5946] usb 12-1: config index 0 descriptor too short (expected 39, got 27) [ 352.026690][ T5946] usb 12-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 352.031883][ T5946] usb 12-1: config 0 interface 0 has no altsetting 0 [ 352.036457][ T5946] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 352.040486][ T5946] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 352.043630][ T5946] usb 12-1: Product: syz [ 352.045507][ T5946] usb 12-1: Manufacturer: syz [ 352.047567][ T5946] usb 12-1: SerialNumber: syz [ 352.052618][ T5946] usb 12-1: config 0 descriptor?? [ 352.058221][ T5946] hub 12-1:0.0: bad descriptor, ignoring hub [ 352.061087][ T5946] hub 12-1:0.0: probe with driver hub failed with error -5 [ 352.066417][ T5946] usb 12-1: selecting invalid altsetting 0 [ 352.434771][T17165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3142'. [ 352.440688][T17144] usb 12-1: reset high-speed USB device number 46 using dummy_hcd [ 352.445197][T17144] usb 12-1: device reset changed ep0 maxpacket size! [ 352.448963][ T5946] usb 12-1: USB disconnect, device number 46 [ 352.453013][T17165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3142'. [ 352.595835][T17176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3146'. [ 352.600878][ T5946] usb 12-1: new high-speed USB device number 47 using dummy_hcd [ 352.753055][ T5946] usb 12-1: Using ep0 maxpacket: 32 [ 352.759732][ T5946] usb 12-1: unable to get BOS descriptor or descriptor too short [ 352.764036][ T5946] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 352.767413][ T5946] usb 12-1: can't read configurations, error -71 [ 353.159802][T17200] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.3154'. [ 353.176155][T17200] sp0: Synchronizing with TNC [ 353.344248][T17211] 9p: Bad value for 'wfdno' [ 353.400407][T17215] overlayfs: failed to clone upperpath [ 353.409774][T17216] ptrace attach of "/syz-executor exec"[15729] was attempted by "/syz-executor exec"[17216] [ 354.051970][T17240] bond7: option xmit_hash_policy: invalid value (6) [ 354.056105][T17240] bond7 (unregistering): Released all slaves [ 354.091452][T17242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3167'. [ 354.514861][ T5299] Bluetooth: hci2: hardware error 0x00 [ 354.521089][ T6025] ------------[ cut here ]------------ [ 354.523446][ T6025] workqueue: cannot queue hci_conn_timeout on wq hci2 [ 354.525691][ T6025] WARNING: kernel/workqueue.c:2251 at __queue_work+0xc9d/0x10e0, CPU#1: kworker/1:4/6025 [ 354.528848][ T6025] Modules linked in: [ 354.530392][ T6025] CPU: 1 UID: 0 PID: 6025 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 354.533866][ T6025] Tainted: [L]=SOFTLOCKUP [ 354.535262][ T6025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 354.538697][ T6025] Workqueue: events l2cap_chan_timeout [ 354.540471][ T6025] RIP: 0010:__queue_work+0xca1/0x10e0 [ 354.542231][ T6025] Code: 78 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 0c 04 00 00 48 8d 3d 53 f1 06 0f 48 8b 75 18 <67> 48 0f b9 3a e9 90 f7 ff ff e8 d0 31 3a 00 90 0f 0b 90 e9 15 f6 [ 354.548468][ T6025] RSP: 0018:ffffc90003ff79c8 EFLAGS: 00010046 [ 354.550438][ T6025] RAX: dffffc0000000000 RBX: ffff88801b49dc00 RCX: 1ffff1100566a14b [ 354.553024][ T6025] RDX: ffff888056867978 RSI: ffffffff8a6f2ae0 RDI: ffffffff908ba5e0 [ 354.555616][ T6025] RBP: ffff88802b350a40 R08: 0000000000000005 R09: 0000000000000000 [ 354.558218][ T6025] R10: 0000000000200000 R11: ffff8880289eaff0 R12: 0000000000000000 [ 354.560830][ T6025] R13: ffff888056867800 R14: ffff88802b350a88 R15: ffff888056867800 [ 354.563305][ T6025] FS: 0000000000000000(0000) GS:ffff8880d69f5000(0000) knlGS:0000000000000000 [ 354.566250][ T6025] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.568349][ T6025] CR2: 0000200000003000 CR3: 0000000052997000 CR4: 0000000000352ef0 [ 354.570983][ T6025] Call Trace: [ 354.572115][ T6025] [ 354.573125][ T6025] ? __cancel_work+0x2c8/0x340 [ 354.574726][ T6025] ? clear_pending_if_disabled+0xa8/0x210 [ 354.576576][ T6025] ? __pfx_clear_pending_if_disabled+0x10/0x10 [ 354.578502][ T6025] __queue_delayed_work+0x35b/0x460 [ 354.580198][ T6025] queue_delayed_work_on+0x1b5/0x200 [ 354.581975][ T6025] l2cap_chan_del+0x5a0/0x940 [ 354.583469][ T6025] l2cap_chan_close+0xfe/0xa80 [ 354.585073][ T6025] ? __pfx_l2cap_chan_close+0x10/0x10 [ 354.586830][ T6025] l2cap_chan_timeout+0x196/0x340 [ 354.588515][ T6025] process_one_work+0x9ba/0x1b20 [ 354.590188][ T6025] ? __pfx_process_one_work+0x10/0x10 [ 354.591933][ T6025] ? assign_work+0x1a0/0x250 [ 354.593606][ T6025] worker_thread+0x6c8/0xf10 [ 354.595151][ T6025] ? __kthread_parkme+0x19e/0x250 [ 354.596836][ T6025] ? __pfx_worker_thread+0x10/0x10 [ 354.598478][ T6025] kthread+0x3c5/0x780 [ 354.599863][ T6025] ? __pfx_kthread+0x10/0x10 [ 354.601397][ T6025] ? rcu_is_watching+0x12/0xc0 [ 354.602914][ T6025] ? __pfx_kthread+0x10/0x10 [ 354.604437][ T6025] ret_from_fork+0x983/0xb10 [ 354.605948][ T6025] ? __pfx_ret_from_fork+0x10/0x10 [ 354.607619][ T6025] ? __switch_to+0x7af/0x10d0 [ 354.609185][ T6025] ? __pfx_kthread+0x10/0x10 [ 354.610716][ T6025] ret_from_fork_asm+0x1a/0x30 [ 354.612306][ T6025] [ 354.613334][ T6025] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 354.615686][ T6025] CPU: 1 UID: 0 PID: 6025 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 354.619163][ T6025] Tainted: [L]=SOFTLOCKUP [ 354.620548][ T6025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 354.623933][ T6025] Workqueue: events l2cap_chan_timeout [ 354.625724][ T6025] Call Trace: [ 354.626823][ T6025] [ 354.627809][ T6025] dump_stack_lvl+0x3d/0x1f0 [ 354.629323][ T6025] vpanic+0x640/0x6f0 [ 354.630614][ T6025] ? __queue_work+0xc9d/0x10e0 [ 354.632156][ T6025] panic+0xca/0xd0 [ 354.633369][ T6025] ? __pfx_panic+0x10/0x10 [ 354.634794][ T6025] ? check_panic_on_warn+0x1f/0xb0 [ 354.636434][ T6025] check_panic_on_warn+0xab/0xb0 [ 354.638083][ T6025] __warn+0x108/0x3c0 [ 354.639381][ T6025] __report_bug+0x2a0/0x520 [ 354.640868][ T6025] ? __queue_work+0xc9d/0x10e0 [ 354.642440][ T6025] ? __pfx___report_bug+0x10/0x10 [ 354.644086][ T6025] ? do_raw_spin_unlock+0x172/0x230 [ 354.645794][ T6025] ? __pfx_hci_conn_timeout+0x10/0x10 [ 354.647599][ T6025] ? __pfx_debug_object_assert_init+0x10/0x10 [ 354.649675][ T6025] ? trace_sched_exit_tp+0xd1/0x110 [ 354.651389][ T6025] report_bug_entry+0xe1/0x290 [ 354.652811][ T6025] ? __queue_work+0xca1/0x10e0 [ 354.654349][ T6025] handle_bug+0x18a/0x260 [ 354.655793][ T6025] exc_invalid_op+0x17/0x50 [ 354.657330][ T6025] asm_exc_invalid_op+0x1a/0x20 [ 354.658909][ T6025] RIP: 0010:__queue_work+0xca1/0x10e0 [ 354.660641][ T6025] Code: 78 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 0c 04 00 00 48 8d 3d 53 f1 06 0f 48 8b 75 18 <67> 48 0f b9 3a e9 90 f7 ff ff e8 d0 31 3a 00 90 0f 0b 90 e9 15 f6 [ 354.666724][ T6025] RSP: 0018:ffffc90003ff79c8 EFLAGS: 00010046 [ 354.668727][ T6025] RAX: dffffc0000000000 RBX: ffff88801b49dc00 RCX: 1ffff1100566a14b [ 354.671274][ T6025] RDX: ffff888056867978 RSI: ffffffff8a6f2ae0 RDI: ffffffff908ba5e0 [ 354.673821][ T6025] RBP: ffff88802b350a40 R08: 0000000000000005 R09: 0000000000000000 [ 354.676314][ T6025] R10: 0000000000200000 R11: ffff8880289eaff0 R12: 0000000000000000 [ 354.678778][ T6025] R13: ffff888056867800 R14: ffff88802b350a88 R15: ffff888056867800 [ 354.681330][ T6025] ? __pfx_hci_conn_timeout+0x10/0x10 [ 354.683067][ T6025] ? __queue_work+0xc70/0x10e0 [ 354.684621][ T6025] ? __cancel_work+0x2c8/0x340 [ 354.686262][ T6025] ? clear_pending_if_disabled+0xa8/0x210 [ 354.688098][ T6025] ? __pfx_clear_pending_if_disabled+0x10/0x10 [ 354.690121][ T6025] __queue_delayed_work+0x35b/0x460 [ 354.691798][ T6025] queue_delayed_work_on+0x1b5/0x200 [ 354.693499][ T6025] l2cap_chan_del+0x5a0/0x940 [ 354.695054][ T6025] l2cap_chan_close+0xfe/0xa80 [ 354.696599][ T6025] ? __pfx_l2cap_chan_close+0x10/0x10 [ 354.698347][ T6025] l2cap_chan_timeout+0x196/0x340 [ 354.700026][ T6025] process_one_work+0x9ba/0x1b20 [ 354.701665][ T6025] ? __pfx_process_one_work+0x10/0x10 [ 354.703377][ T6025] ? assign_work+0x1a0/0x250 [ 354.704859][ T6025] worker_thread+0x6c8/0xf10 [ 354.706334][ T6025] ? __kthread_parkme+0x19e/0x250 [ 354.707916][ T6025] ? __pfx_worker_thread+0x10/0x10 [ 354.709581][ T6025] kthread+0x3c5/0x780 [ 354.710910][ T6025] ? __pfx_kthread+0x10/0x10 [ 354.712386][ T6025] ? rcu_is_watching+0x12/0xc0 [ 354.713917][ T6025] ? __pfx_kthread+0x10/0x10 [ 354.715452][ T6025] ret_from_fork+0x983/0xb10 [ 354.716980][ T6025] ? __pfx_ret_from_fork+0x10/0x10 [ 354.718665][ T6025] ? __switch_to+0x7af/0x10d0 [ 354.720245][ T6025] ? __pfx_kthread+0x10/0x10 [ 354.721817][ T6025] ret_from_fork_asm+0x1a/0x30 [ 354.723350][ T6025] [ 354.725148][ T6025] Kernel Offset: disabled [ 354.726613][ T6025] Rebooting in 86400 seconds..