last executing test programs: 1m0.080071539s ago: executing program 1 (id=262): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) (async) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000140)=0x107dc, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x488840, 0x0) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180400000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x2a, 0xc, @val=@uprobe_multi={0x0, 0x0}}, 0x40) (async) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) (async) recvfrom(r3, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x4}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0xc}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x2}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1f}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x84}, 0x40010) (async) ioctl$TCSETS(r2, 0x5402, &(0x7f00000000c0)={0x9, 0x2, 0x0, 0x7f, 0xb, "5b01803533dc8a08ec2c2e4b63670000c34296"}) (async) socket(0x1e, 0x4, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x9, 0x80008071, 0x3, 0x44e, 0x1, 0xb, 0x5, 0x3e, 0x8e, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0xffff, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xbe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x7, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x3, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xd, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x83, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0xd1c0) 59.991533025s ago: executing program 1 (id=263): r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000880), 0x280, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0xc0b45545, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000ec0)={0xffffffffffffffff, 0x2, {0x0, 0x0, 0x0, 0x6540000000, 0xfffffffffffffff5, 0x0, 0x2, 0x11, 0xc, "41d0bc8a658635a8284faa9680ffd8ae1019e683c9ce1688599c2ff36e163e643155b04f99c6db5bd97b4f1bea35f631cef2ac8b956accb93fee1f23d23b9b13", "a5a73aead9c30def9d7a4f89f914b4db341dcea6d8b4891ff5d146d20c0c01e52888e45349ab782e88e7058a9b58c0dfc9a9a292430cbafef2b4fb3b37edcbb7", "cfa2d9dcf3ad287122b02c9325d08d6d0064568342802135bf2c187fa989e6d9", [0xe44, 0x3d2b]}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000801000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) io_uring_setup(0xd, &(0x7f0000000040)={0x0, 0x24c8a1, 0x1c891, 0x8, 0xd1}) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000140)={0x18}) r2 = accept4$tipc(r0, 0x0, &(0x7f0000000000), 0x80000) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/mnt\x00') ioctl$DVB_DVR_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f0000000100)={0x8, 0x80000, r3}) 59.98510349s ago: executing program 1 (id=265): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) pread64(r0, &(0x7f00000024c0)=""/209, 0xfd36, 0x698) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x2, &(0x7f00000000c0)={{0x0, 0x3938700}, {r1, r2+60000000}}, &(0x7f0000000100)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@ipv4_getroute={0x1c, 0x1a, 0x200, 0x70bd2c, 0x25dfdbfe, {0x2, 0x20, 0x0, 0xf0, 0xfd, 0x4, 0xff, 0xa, 0x1780}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) 59.911366156s ago: executing program 1 (id=266): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x808e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x718bb647156ec3b7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x3}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x70bd27, 0x25dfdbfc, {0x1}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) chdir(&(0x7f0000000000)='./bus\x00') linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000180)='./file0\x00', 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$peek(0x2, r5, &(0x7f0000000180)) fcntl$lock(r4, 0x24, &(0x7f0000000140)={0x1, 0x0, 0x1, 0x8, r5}) rename(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='./file0\x00') 59.841400396s ago: executing program 1 (id=267): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) 59.731444043s ago: executing program 1 (id=268): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010400000000fedbdf2500000000708d5b31ae3f23607791082e42bf4d58e8b6258e32a77e79a5545301ad72f4c27fd2d5426ab356e9c9e99b5f0ef905aecfe84a99b7bf4e1c656971e7323fb931cbe4c544f3a6309b733ba1f492181ad5704245ca8f812ae3cc3cdf3c3ba5dd7e", @ANYRES32=0x0, @ANYBLOB="004900008a0a03001c0012800b00010067726574617000000c0002800500130001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10004}, 0x4080) 59.704551932s ago: executing program 32 (id=268): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010400000000fedbdf2500000000708d5b31ae3f23607791082e42bf4d58e8b6258e32a77e79a5545301ad72f4c27fd2d5426ab356e9c9e99b5f0ef905aecfe84a99b7bf4e1c656971e7323fb931cbe4c544f3a6309b733ba1f492181ad5704245ca8f812ae3cc3cdf3c3ba5dd7e", @ANYRES32=0x0, @ANYBLOB="004900008a0a03001c0012800b00010067726574617000000c0002800500130001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10004}, 0x4080) 53.341192923s ago: executing program 4 (id=332): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)=ANY=[@ANYBLOB="4c0000001400010125bd7000fddbdf2501"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x20044000) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x600000d, 0x12, r0, 0x100000000) 53.230076418s ago: executing program 4 (id=334): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x1, "92f3aec889aead4372495190f56f10fe4852f3e47eb566d7f3e56dd754345844", 0x1, 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], 0x24}}, 0x0) 53.149937794s ago: executing program 4 (id=335): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x180, 0x111, 0x4b4, 0x8, 0xd4feffff, 0x290, 0x20a, 0x278, 0x290, 0x278, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00'}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ipv6={@mcast1, @empty, [], [], 'xfrm0\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8a000, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x400454da, &(0x7f0000000000)) (async) r3 = userfaultfd(0x80001) (async, rerun: 32) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async, rerun: 32) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, 0x0) (async, rerun: 64) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) (async, rerun: 64) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGKEY(r7, 0x80404518, &(0x7f00000002c0)=""/183) write$FUSE_NOTIFY_INVAL_ENTRY(r6, &(0x7f0000001fc0)=ANY=[@ANYBLOB="42000000030000000000000000000000000000000000000021"], 0x42) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000140), 0x4) (async) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r9, 0xc0745645, &(0x7f0000000200)={0x8, [0x0, 0x6, 0xfc41, 0xf4f, 0x9, 0x200, 0x101, 0x6, 0xffff, 0x4, 0x40, 0x1, 0x2d, 0x6, 0x1, 0x6, 0x4, 0x0, 0x7, 0x4, 0xddf, 0x4, 0xd, 0x6, 0x9, 0x7, 0x2, 0x5, 0xd, 0x9, 0x6, 0x80, 0xff, 0x7fff, 0x2, 0x15, 0x0, 0x1, 0x9, 0x3, 0x7, 0x400, 0xb90, 0x400, 0x4, 0x6, 0x8, 0x3], 0x7}) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async, rerun: 64) r10 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000016c0)={0x0, &(0x7f0000000540)=[@set_irq_handler={0xc8, 0x20, {0xe4, 0x2}}, @enable_nested={0x12c, 0x18}, @rdmsr={0x66, 0x18, {0x37e}}, @nested_create_vm={0x12d, 0x18, 0x2}, @in_dx={0x69, 0x20, {0x6350, 0x3}}], 0x88}) ioctl$KVM_GET_NESTED_STATE(r10, 0xc080aebe, &(0x7f0000000640)=@svm={0x0, 0x1, 0x1080, {0xdddd0000}, {"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"}}) (async) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000193000/0x1000)=nil, &(0x7f00002da000/0x3000)=nil, 0x1000}) (async) move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000600)=[0x0], 0x0) 53.037563937s ago: executing program 4 (id=336): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) lseek(r1, 0x0, 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000680)=0x522, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x1000000000005, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x8, 0x8, 0xffff, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffff7, 0x4, 0x0, 0x4, 0x5, 0x8, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x8, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x406, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x8, 0x3, 0x4]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="dbaa00000071", @ANYRESOCT=r0], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x842, 0x2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000440)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xa101a, 0x0) mount$bind(&(0x7f0000000580)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x9, 0x0, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000140)='./file0/../file0\x00', 0x2) io_setup(0x1, &(0x7f00000004c0)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$TCFLSH(r7, 0x400455c8, 0x2) ioctl$TIOCSETD(r7, 0x5412, &(0x7f0000000140)=0xffffffc0) 52.500554294s ago: executing program 4 (id=338): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0xda, 0x0, 0x80, 0x3, 0x4, "e3875adbfb935482e90a02528cdcaf89a7209f", 0x2, 0xff}) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000000c0)) writev(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)="92d8391b9b2b7f69f1c0bb293160316e60c9084e0f563017", 0x18}, {&(0x7f0000000200)="082c3f5a617b7569b2e723050679fc", 0xf}], 0x2) r2 = socket$packet(0x11, 0x2, 0x300) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000c) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000280)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x7}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000340)={r4, 0x81, 0x401, 0x5, 0x62, 0x8}, &(0x7f0000000380)=0x14) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000003c0)=0x2, 0x4) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000400)={0xff, 0x6, 0x401, 0x4, 0x8, "0957d58614653fa84501198cc5ef58be112b10", 0x4, 0x10}) fremovexattr(r2, &(0x7f0000000440)=@known='com.apple.system.Security\x00') r5 = openat$cgroup_pressure(r3, &(0x7f0000000480)='cpu.pressure\x00', 0x2, 0x0) close_range(r0, r5, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x406000, 0x0) ppoll(&(0x7f0000000500)=[{r6, 0xc0}, {r6, 0x2401}, {r6, 0x40}, {r3, 0x4440}], 0x4, &(0x7f0000000540)={0x0, 0x989680}, &(0x7f0000000580)={[0xfffffffffffffffb]}, 0x8) r7 = open$dir(&(0x7f00000005c0)='./file0\x00', 0x628800, 0xe) unlinkat(r7, &(0x7f0000000600)='./file0\x00', 0x200) syz_open_pts(r3, 0x2000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0, {0xfffff8b4}}, './file1\x00'}) ioctl$PTP_EXTTS_REQUEST2(r8, 0x40103d0b, &(0x7f0000000680)={0x5, 0xd}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r9, 0x0, 0x20, &(0x7f00000006c0)="01ee85e3012894f4b76ebcc519478034c9ba089ae8a051b0fe1603bd4a19aab421d39eed138a5f66b0e890e16deab799ebe524198191b63b41da264dbbb1ca2f286d535e497ed327cbc698db0d6237d6166920cabed3d7ea18e99796f26db4fadc946ae3f4380804849d8cc14aabc2ad7b315359316a86946bb5261e7c3dcf83ee80e87ef3ce6c8a800b2b3f0027551d177d32adcd318330ccb66ca108fac3f6e2243fd4097e35e9", 0xa8) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000780), 0x111000, 0x0) ioctl$OCFS2_IOC_GROUP_ADD(r5, 0x40186f02, &(0x7f00000007c0)={0x10001, 0xbc, 0xc, 0x7}) ioctl$XFS_IOC_FSGEOMETRY(r8, 0x8100587e, &(0x7f0000000800)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r8, 0xc0505350, &(0x7f0000000900)={{0x5, 0x40}, {0x7, 0x2}, 0x5, 0x1, 0xa}) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000980)={'veth0_to_batadv\x00', 0x4ac92aee}) 52.181061219s ago: executing program 4 (id=342): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000440), 0x800) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xb77}, 0xfffffc00, 0x0, 0x4, 0x8, 0x9, 0x11, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}}}}]}, 0x78}}, 0x0) 52.002529616s ago: executing program 33 (id=342): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000440), 0x800) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xb77}, 0xfffffc00, 0x0, 0x4, 0x8, 0x9, 0x11, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}}}}]}, 0x78}}, 0x0) 25.840595581s ago: executing program 5 (id=730): r0 = getpid() (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES8=r2], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x24020000) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8180, &(0x7f0000001dc0)={0xd, 0x8, 0x100000}, 0x20) (async) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) sigaltstack(&(0x7f0000000240)={&(0x7f0000001c00)=""/4095, 0x80000000, 0xfff}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r8, &(0x7f0000000480)=""/154, 0x9a, 0xe4) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) (async) ioctl$KVM_KVMCLOCK_CTRL(r5, 0xaead) setxattr$trusted_overlay_nlink(&(0x7f0000000100)='./cgroup.net/devices.allow\x00', &(0x7f0000000140), 0x0, 0x0, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x284d026, 0x0) (async) pidfd_getfd(r3, r9, 0x0) 25.780391509s ago: executing program 5 (id=732): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@local, @private0, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {}, {}, 0x2b, 0x1, 0x3, 0x18}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x8001, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0x2a}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, &(0x7f0000000100)={0x8, [[0x8, 0x3, 0xdb6, 0x2, 0x8, 0x7, 0x3, 0xb63], [0x3, 0x6bfe97b4, 0x10, 0x0, 0x0, 0x39d5, 0x2, 0x1], [0x40, 0x3ee3, 0xf, 0x0, 0xc, 0x7, 0x3, 0x2]], '\x00', [{0x1, 0xd}, {0x8, 0xd, 0x0, 0x0, 0x1, 0x1}, {0x52, 0x1000, 0x1, 0x1, 0x1, 0x1}, {0x3, 0xe, 0x1, 0x1}, {0xb9, 0x1, 0x1, 0x1}, {0x7, 0x1, 0x0, 0x1}, {0x3, 0x7ff, 0x1, 0x1, 0x0, 0x1}, {0x4, 0x7, 0x1, 0x1, 0x0, 0x1}, {0x3, 0x7, 0x1}, {0x8, 0x6, 0x1, 0x1, 0x1}, {0x3, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x0, 0x70e, 0x0, 0x1, 0x1}], '\x00', 0x1}) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x7ff, @remote, 0xb}, 0x1c) (async) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) (async) ppoll(&(0x7f0000000040)=[{r0, 0xa541}, {r0, 0x2000}, {r0, 0x2048}], 0x3, 0x0, 0x0, 0x0) 25.710745115s ago: executing program 5 (id=735): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r2, 0x331, 0x70bd2d, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'ip_vti0\x00', r4, 0x700, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x68, 0x0, 0x0, 0x4, 0x0, @loopback, @multicast1}}}}) 25.659328158s ago: executing program 5 (id=738): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000980)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000380), &(0x7f00000003c0)=0xe) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(&(0x7f0000003280)={0xc000200, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)=0x0, {0xd}, &(0x7f00000021c0)=""/4096, 0x1000, &(0x7f00000031c0)=""/109, &(0x7f0000003240)=[r2, r2, r2], 0x3}, 0x58) kcmp(r5, r2, 0x3, r4, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000800)=""/237) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000008340)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0xfa, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r10, r11, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000340)=0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000600)=ANY=[@ANYBLOB="f001000000000000", @ANYRES64=0x0, @ANYBLOB="0400000000000000030000000000000009000000000000000600000000000000070000000900000003000000000000004000000000000000c4780000000000000500000000000000514c0000000000000000000020000000081000000f000000090000000020000001000000", @ANYRES32=r7, @ANYRES32=r11, @ANYBLOB="ffffffff09000000000000000400000000000000e8000000000000000300000006000000397000000000000005000000000000000000000000000000010000000000000000f0ffffffffffff05000000100000000300000000000000a2050000000000005ddde579000000000800040000000000fcffffffffffffff68000000000000000100000008000000fbffffff00a00000d5000000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0300000005000000000000000100000000000000c4a7000000000000010000000d0000000000000000000000030000000000000003000000000000000500000000000000a850000000000000090000000f0000000100000000000000500000000000000002000000000000000300000000000000890b000000000000c4710000000000001dc80000080000000000000000a000000c000000", @ANYRES32=r12, @ANYRES32=r11, @ANYBLOB="07000000de000000000000000500000000000000000000000000000006000000010000002a26283af4400000"], 0x1f0) 24.730017353s ago: executing program 5 (id=759): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) (async, rerun: 32) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x7fff, @loopback, 0x6}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x54) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYRES64=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, r1, 0x8, &(0x7f0000000040)={0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) 24.562587537s ago: executing program 5 (id=762): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x7}, {0x6, 0xb}, {0xc, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c8e0}, 0x20004080) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x72bd27, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7, 0x8}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) ioctl$sock_ifreq(r0, 0x8942, &(0x7f00000014c0)={'ip6tnl0\x00', @ifru_names='vlan0\x00'}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$poke(0x4, r3, &(0x7f00000011c0), 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020}, 0x2020) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 24.381602432s ago: executing program 34 (id=762): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x7}, {0x6, 0xb}, {0xc, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c8e0}, 0x20004080) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x72bd27, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7, 0x8}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) ioctl$sock_ifreq(r0, 0x8942, &(0x7f00000014c0)={'ip6tnl0\x00', @ifru_names='vlan0\x00'}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$poke(0x4, r3, &(0x7f00000011c0), 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020}, 0x2020) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 4.961140872s ago: executing program 3 (id=982): r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@netrom, @netrom, @bcast, @default, @remote, @netrom, @netrom, @bcast]}, &(0x7f0000000080)=0x48) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x4000010, r0, 0x55402000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) socket$qrtr(0x2a, 0x2, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6tnl0\x00', r1, 0x4, 0x1, 0x8, 0x1, 0x20, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x7, 0x8, 0x4e89}}) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=@setlink={0x1c4, 0x13, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, 0x800, 0x1}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xdff}, @IFLA_VFINFO_LIST={0x19c, 0x16, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5, 0x7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7ff, 0x9afc}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x8, @remote}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x8000}}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x10, 0x8d57}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x0, 0x4}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0x2}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x5, @remote}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x1, 0x6}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x100, 0x100}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5cd, 0x1ff}}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x7, 0x9, 0x61fa}}, @IFLA_VF_TRUST={0xc, 0x9, {0x9f, 0x5}}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xffffff15, 0x3ee, 0x5, 0x8100}}, {0x14, 0x1, {0x3, 0x132, 0xffffffff, 0x8100}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0x5}}, @IFLA_VF_VLAN={0x10, 0x2, {0x8, 0x24, 0x1}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1, 0x7}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x55, 0x3}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2}}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x10, r2}, 0x18) (async) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) (async) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000500)='wg1\x00', 0x4) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) (async) sendmmsg$inet(r2, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000005c0)="846477f9da1703d422c5a9b5c0611029d89ba3edcda9aa9b3912fa03d1678d7f0e67f34ad71d863838927701f12ff52cac19fd30c9078ca7b5c1322e336b8a8813edbb725ecc48e5dc86c8b7a46eb0db4efec3312c5972aab58d0e0ed36c917dd31716dedf3192c4d1fd666744e9972157", 0x71}, {&(0x7f0000000640)="3e7b81f5f1820aa1b10b165af6fc56ddb360c6cd5105ee7230dcfad2f8da23e1e4abd880971dde7acdfa2af8157366c284dc0325aa7ba0fd024e92ce5a24bd1f9b03ec18f43da4ce4954f760831d5f7cd26871c9dd7dbed9de1b1ca29d5cec1069b52db6b849cbfe8e135c4b5455e620589ec120f59660d7f08cc7f0aff8929ea2e4a6cdd097a83940deb3e5b7b8c96712be812db76ac59f309fd7b8a349de577c8accd8063fc01d0f197e2bdf30", 0xae}, {&(0x7f0000000700)="0d64c924f9351cd466e4fa62051994f01da3467165eea5fd824aca6fb097a891ecdb06408292a4769939ddb408ffe9dba31bc583ac02fc7c81ecd7a9db7c1735c05e61dc279a363ff9eb7622d268198a16693ae498014a3477d7086b6130718a4672f7bcd5c7e001d89ef935d738e727785e75801cf8265ca1eec606ef63d1828ca00b57891e2de08bf55d0a165c6615f09bef12b27ff92d7799ad2febb4d1ca0c9e11d932d5a9c80affaa664830c9e45d", 0xb1}], 0x3, &(0x7f0000000800)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast1, @dev={0xac, 0x14, 0x14, 0x39}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}], 0x38}}], 0x1, 0x20000050) (async) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000880)={0x2, 0x4e24, @remote}, 0x10) (async) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000002, 0x11, r0, 0x91318000) (async) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r6, 0xb101, 0x0) (async, rerun: 32) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f00000008c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) (async, rerun: 32) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000900), 0x6dce0c7977b2dd54, 0x0) ioctl$CDROMSTART(r7, 0x5308) r8 = syz_open_dev$vcsa(&(0x7f0000000940), 0x101, 0x840) read$eventfd(r8, &(0x7f0000000980), 0x8) (async) r9 = accept4$tipc(r8, &(0x7f00000009c0)=@id, &(0x7f0000000a00)=0x10, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r9, 0x10f, 0x81, &(0x7f0000000a40)=0x8a, 0x4) (async, rerun: 32) ioctl$TIOCL_UNBLANKSCREEN(r8, 0x541c, &(0x7f0000000a80)) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000bc0)={@cgroup=r8, 0x35, 0x1, 0x9, &(0x7f0000000ac0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000b00)=[0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0], &(0x7f0000000b80)=[0x0], 0x0}, 0x40) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c40)={0x8, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c00)={@map=r8, r8, 0x35, 0x30, 0x0, @void, @void, @void, @value=r11, r10}, 0x20) 4.863155625s ago: executing program 3 (id=985): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r10, &(0x7f0000000000)={0x2020}, 0x96) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@getchain={0x4c, 0x66, 0x400, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x7, 0xb}, {0x8, 0xfff2}, {0xd, 0x8}}, [{0x8, 0xb, 0x7f}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xfff}, {0x8, 0xb, 0x5}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r12) getsockname$packet(r12, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@delchain={0x3c, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r13, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 4.578770931s ago: executing program 3 (id=989): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8803, 0x12) cachestat(r0, &(0x7f0000000040)={0x3, 0x6}, &(0x7f0000000080), 0x0) chmod(&(0x7f00000000c0)='./file0\x00', 0x36) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x7) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='memory.swap.current\x00', 0x0, 0x0) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f00000001c0)={0x35, &(0x7f0000000140)=[{0x19, '\x00', @buffer={"6f46dd8a3d40cb52cb1d1bfb16e54d5b512b695e2785b487cd02051694c75282", 0x20}, 0x9}]}) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) r4 = getgid() lchown(&(0x7f0000000200)='./file0\x00', r3, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x600, 0x0) close(r1) ioctl$KVM_RUN(r0, 0xae80, 0x0) fcntl$setownex(r6, 0xf, &(0x7f0000000300)={0x2, r2}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x2c}}, 0x1) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2002, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r8, 0x3ba0, &(0x7f0000000500)={0x48, 0xb, r1, 0x0, r9}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0xf04c, 0x3, 0xe9, 0x349}]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000600)=@assoc_value, &(0x7f0000000640)=0x8) inotify_init1(0x80000) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000680)={0xa, 0x0, [{0xb40, 0x0, 0x80000000}, {0x0, 0x0, 0x8}, {0xaa0, 0x0, 0x3}, {0x97a, 0x0, 0x100000000}, {0xace, 0x0, 0xfffffffffffffff9}, {0x10d, 0x0, 0x55}, {0x40000091, 0x0, 0x2}, {0xbbb, 0x0, 0x7f}, {0x9c0, 0x0, 0x94}, {0xb73, 0x0, 0x9}]}) write$P9_RSTATu(r0, &(0x7f0000000740)={0x6c, 0x7d, 0x1, {{0x0, 0x53, 0x1c, 0x1, {0x2, 0x1, 0x8}, 0x0, 0xf, 0x5, 0x100000000, 0xa, '/dev/vcsu\x00', 0x2, '$\x95', 0xa, '/dev/vcsu\x00', 0xa, '/dev/vcsu\x00'}, 0x4, 'wg1\x00', r3, 0xee00, r3}}, 0x6c) r10 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) fgetxattr(r10, &(0x7f0000000800)=@random={'user.', '$\x95'}, &(0x7f0000000840)=""/33, 0x21) openat(r6, &(0x7f0000000880)='./file0\x00', 0x2000, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000008c0)={0x1, 0x1000, "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"}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001900)={0x0, 0x5}, 0x8) 4.515248928s ago: executing program 3 (id=991): r0 = socket$kcm(0x2a, 0x5, 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0xac7c56fbddb4c575, 0x6) (async) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) (async) getxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@random={'trusted.', '/dev/vsock\x00'}, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x2f, 0xfd, 0x5, 0xfffffff2, 0x50, @local, @loopback, 0x0, 0x700, 0x4353, 0x7d}}) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@newchain={0x68, 0x64, 0x100, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x6, 0xe}, {0x5, 0xc}, {0x9, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x10000000}, @filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x4}, @TCA_U32_HASH={0x8, 0x2, 0x101}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000300)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) unshare(0x8000280) r3 = syz_clone(0x8804200, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0xff07) getpid() (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 32) syz_emit_ethernet(0xeb, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb810014008848000007000000010000006189dd89cfa1759caa11e9473cdae94b26a1b759bb4cfd4fa6e62cc1684cc34ee39ff3ff85ff939eea57bafda71ab862f4ba2287969d7bc68303ae0314c116a562e7588467468a132c0c291842cfb94fd5d51d86fbf4e241e97237e5a956f406e54742c987806c7492597e82183fe4ee3106d75cb30a2f3acb8be5ffa68f5bf50e2666b3780449205675a651eb750ffc9fd94727cb443391028853b1eecec5d7a3a3d7b1b18b8caee24d75c41a095088a31f1c9d16c13e0ff1642e93871ac11292a882124734332d"], 0x0) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@gettaction={0x34, 0x32, 0x89910f7975f42df, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x34}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010800000048000000000016c3ce", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b0000000000"], 0x30}}, 0x0) 4.433671563s ago: executing program 0 (id=992): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100ac1e000108000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e01010800020000000000080007400000000024000e80"], 0x88}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) fsopen(&(0x7f0000000240)='sysfs\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)='\x00'/14, 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @remote, @private2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x3}, {0x8, 0x22eb, 0x3f000000}}}}}}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x802, 0x0, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x70bd2a, 0x0, {0x2}, [@nested={0x9, 0x1, 0x0, 0x1, [@generic="fcffffff87"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40091}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x48050) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100ac1e000108000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e01010800020000000000080007400000000024000e80"], 0x88}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) (async) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) (async) fsopen(&(0x7f0000000240)='sysfs\x00', 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)='\x00'/14, 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @remote, @private2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x3}, {0x8, 0x22eb, 0x3f000000}}}}}}}, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x802, 0x0, 0x0, 0x4}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x70bd2a, 0x0, {0x2}, [@nested={0x9, 0x1, 0x0, 0x1, [@generic="fcffffff87"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40091}, 0x0) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x48050) (async) 4.337209297s ago: executing program 0 (id=994): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async, rerun: 32) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) (rerun: 32) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0xe82) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000240)=[{0x9, '\x00', @data=0x800, 0x5}]}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x2b, 0x0, @void}, 0x10) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4014) (async) ptrace(0x10, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x403, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x8c01, 0x55007}}, 0x20}, 0x1, 0x0, 0x0, 0x20008801}, 0x20040000) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) sendmsg$inet6(r5, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000000240)="acf06107f5eb8424b05e48097aff59bf00d4e9c3576013af3701d6b24090719c83663ac6ccc70804d454ef289adc0decb8d98f524c964f40b22747898e372853e6a5860c3c4efe4e676c98544f1809b3051333c7f4e8a24c8291caffa5e87937fab57fbc8243873ba14a427b5ce8692b6d96b304d88f41c028c61f5599e55dcee1f093a4385f1e07378f89e9a0a8c84624b21419053d8af6249948ef35518db4483c7bd5ab869bea43e0e8f3d70c4ce6bc132a72a5e4b599ae1c13c9165caef34bdc71323de8a2e0a8ea38698920588362690f2f55c9621f4ca9fa07b136fd2ad723a680d5a185e6d663c505c20399de77b8250a26ae21", 0xf7}, {&(0x7f0000002000)="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", 0x1000}, {&(0x7f0000003000)="f596876714984e16c7278c6704a5d18c3d7d385611686b2945b2e905d46731eddcb09327d3c33a7cf3491593f20654d34ac3f97bc736f5a3937b0e0d497cf72326bc1780f1ea836b277b905472fb0a4b1b320deba5c98abf30bbbeb428bcbbec785718a0eed19e0cdf55a2f926fc8fa8b11ede1e9f9846ada9ec0d11cad84bf7efa85306fd728c1b4f1b2fad38d233b8d5ad3424d7ee719da5f4bc9a2e33eab0a4ab37bd1b51d0a4aabc44ac31e4", 0xae}, {&(0x7f00000030c0)="e4d6c972ce12f0ed8dc08546feb382bd4fdd1798f9b499d1a9b55efc9cf93b670304d6e5887c5a2c8e16737e67", 0x2d}, {&(0x7f0000003100)="1fc0c5b3677d2b0a43086c63a1900b6b4d87ccb5230ef0c12de4ecb28de66a65f59fcf5e07094f0e6b10a23b50fb2f20baeb47d50c094cee2f4cfffed45d1d01b78c72c368cfa59ae4677e8e63e003f39345dd616daf2d131f30a174921e4a5854755cccc86ef0d1b12495f7cdab50950683dfda709b721a08cd1bb5511561def61cdb414b97d2b51ec6d9bb87333411f56ef8cf7f226c0778ba240dbdc88485aada3122b0cdd1ddc1e86647581019f47bdb6230bae1babf8c6c95618443eed3c2ac5e0b52c62fca6d861bf8943abd24cac9338ee89ff31ba27aba48", 0xdc}], 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="380000000000000029000000040000002f030000000000000502943f6b0002c20400000005000100c2040000007f000100040102050200012a6ca37e4957de611d450f2d81e93c4034fe2fa13d6ef8a0c7b98b4d6512f4be5bb584647f0b307d85158c48598b67cd8b38b47822981deb9232bd6c6819c55e1567c87adb170b377e1b4625afb66c9afc0dcdcece007ca1e71d6d987828866299a66fd2c187de53df174c2e43ad74dc849f249a40ec7410e5a51d41bb09fb15b61d0cac2a62911348"], 0x38}, 0x240000c4) 4.336839249s ago: executing program 3 (id=995): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x34, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x80000001}]}, 0x34}}, 0x4044) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000000000), 0x4) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="180100002e00010000000000fedbdf250501fa8008001800", @ANYRES32=r2, @ANYBLOB="14000a000000000000000000000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c0400e90008002300", @ANYRES32=0x0, @ANYBLOB='\n\x00\x00\x00'], 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x4844) 4.127498157s ago: executing program 0 (id=997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) fchdir(r1) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000c80)=""/231, 0xd5, 0x0, 0x3, 0x2}}, 0x60) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) fchdir(r1) (async) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000c80)=""/231, 0xd5, 0x0, 0x3, 0x2}}, 0x60) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (async) 4.047504676s ago: executing program 0 (id=998): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0xc, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], {0x2c00, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'syzkaller1\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "0ac2e90db8ea9b42ab9c0000000000000000000000000000000fe4ffffff00", "2c4216954ce13f9ac712efe0c94f7781d625a196e19abceb603800", "23f8b4d3ea8e139730273ece0ff6857b7df74650f39df12c7943ecd802899a7a", "195d7b4b16aae8800a2c650cb9743e00", "41cb0a4600aa99f48f0c01728a0ba0b9cf6a2c2c5ed1992ad9214f556ed91842", "e642a87f7cfbf1f6e52eaf1e", 0x3000, 0x4, 0x84, 0x8f, 0x8}}) r4 = syz_usb_connect_ath9k(0x3, 0xb7, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45}}]}}, 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000080)={0xf8, 0x5, 0x4, 0xea, 0x10, "1012a2c2e0d99745e394509d287560250d00"}) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, &(0x7f0000000040)=0xa) syz_usb_disconnect(r5) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) close_range(r8, r6, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000010401020000000000000000010000071d00064002030000610d5cff29b34fda233e074e6dc9d65339b05adf095b8e158a72ae408fbcdee53ee6691330764412d4596adb742f2c3588b2ab2ac7b2fbdece5b1c2b81fb5305726064dd80e79be30b926d78ba57dedd9aab56f1dbec2f00c6aa04e6daafa74e4927926d81f529ead0ae28eba6c434cff5c1bab99e92c25cc642721d8209d65dfd02d1d4c9779e325f55215e61711560a7ff040eb1e61556acd5508ed7188bcfbe194398b4650546f656b5dd3e69bea224"], 0x1c}}, 0x10) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f00000010c0)='*', 0x1}], 0x1, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) lsm_get_self_attr(0x65, &(0x7f0000000000)={0x0, 0x0, 0xd6, 0xb6, ""/182}, &(0x7f0000000680)=0xd6, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r11 = accept4(r10, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r11) openat$cgroup(r8, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) 3.151898618s ago: executing program 3 (id=1008): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) r3 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) (async) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = fcntl$getown(r2, 0x9) (async) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) read(r6, 0x0, 0x0) (async) prlimit64(r5, 0x7, &(0x7f0000000140)={0x0, 0x4}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x118) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async) utime(&(0x7f0000000640)='./file0\x00', &(0x7f0000000540)={0x4, 0x3}) (async) write$cgroup_pid(r3, &(0x7f00000001c0)=r4, 0x12) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) mkdirat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r2, r2, 0x0, 0x9) 3.105039766s ago: executing program 35 (id=1008): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) r3 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) (async) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = fcntl$getown(r2, 0x9) (async) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) read(r6, 0x0, 0x0) (async) prlimit64(r5, 0x7, &(0x7f0000000140)={0x0, 0x4}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x118) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async) utime(&(0x7f0000000640)='./file0\x00', &(0x7f0000000540)={0x4, 0x3}) (async) write$cgroup_pid(r3, &(0x7f00000001c0)=r4, 0x12) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) mkdirat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r2, r2, 0x0, 0x9) 2.678774048s ago: executing program 6 (id=1014): r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x2c202, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000040)={0x2, "b075"}, 0x3) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x1b1002, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000000c0)={0x0, 0x0}) getsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$CDROM_MEDIA_CHANGED(r0, 0x5325, 0x3) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = dup2(r3, r1) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000001c0)={r2, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000200)={r5}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@security={'security\x00', 0xe, 0x4, 0x3c0, 0xffffffff, 0x258, 0x168, 0x258, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, &(0x7f0000000240), {[{{@uncond, 0x0, 0x108, 0x168, 0x0, {}, [@common=@addrtype={{0x30}, {0x2, 0x210, 0x1}}, @common=@inet=@iprange={{0x68}, {@ipv4=@loopback, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x4, 0x4, 0x0, 0x0, 0x3, 0x3], 0x2, 0x5}, {0x4, [0x4, 0x4, 0x4, 0x0, 0x3, 0x1], 0x5, 0x5}}}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, 0x4, 0x10, [0x2f, 0x1f, 0x1b, 0x22, 0x20, 0x22, 0xe, 0x6, 0x30, 0x20, 0x6, 0x2e, 0x3c, 0x21, 0x32, 0x1c], 0x0, 0x6, 0x2}}}, {{@uncond, 0x0, 0x90, 0xd0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7d, 0x5, "a9df77ecb733bf6063821944b401754da473d2ca937210e1b1b40e4d9517"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) (async, rerun: 64) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000700)={0x0, @loopback, @remote}, &(0x7f0000000740)=0xc) (rerun: 64) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000880)={'veth0_to_bond\x00'}) (async) ioctl$VHOST_VDPA_GET_STATUS(r1, 0x8001af71, &(0x7f00000008c0)) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000900)={0x0, 0x6, 0x8, 0x1}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000d00)={r8, 0x5, 0x3}) (async) ioctl$XFS_IOC_FSGEOMETRY(r3, 0x8100587e, &(0x7f0000001100)) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001200)={'geneve0\x00'}) (async, rerun: 32) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000001340)={'nat\x00', 0x0, 0x3, 0x4c, [0x4, 0x1, 0x0, 0x1, 0x10, 0x100000001], 0x8, &(0x7f0000001240)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000012c0)=""/76}, &(0x7f00000013c0)=0x78) (async, rerun: 32) socket$alg(0x26, 0x5, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001400), 0x80c00, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000001440)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000001480)={r9}) (async) getsockopt$inet_int(r4, 0x0, 0x22, &(0x7f00000014c0), &(0x7f0000001500)=0x4) mount$tmpfs(0x0, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580), 0x1000000, &(0x7f00000015c0)={[{@size={'size', 0x3d, [0x67, 0x34, 0x2d, 0x25, 0x78]}}, {@huge_always}, {@inode32}, {@usrquota}, {@inode64}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x6b, 0x31, 0x25, 0x65]}}, {@huge_within_size}], [{@obj_role={'obj_role', 0x3d, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}) (async, rerun: 32) r10 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) (rerun: 32) write$yama_ptrace_scope(r10, &(0x7f0000001680)='0\x00', 0x2) (async, rerun: 64) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f00000016c0)) (rerun: 64) 2.591187626s ago: executing program 6 (id=1015): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f00004c5000/0x3000)=nil, 0x3000, 0x8) (async) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x0, 0x1, 0x5, 0x4}) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) (rerun: 64) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pipe(&(0x7f0000000300)) (async) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) syz_open_procfs(r1, &(0x7f0000000040)='attr/prev\x00') (async) mknod(&(0x7f0000000100)='./bus\x00', 0x100, 0x0) 2.105735701s ago: executing program 6 (id=1019): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x10) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'bridge_slave_0\x00', {0x2, 0x4e23, @private=0xa010102}}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r2, 0x8949, &(0x7f0000000000)) r3 = eventfd(0x5ef) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x81, @bcast, @bpq0, 0x8, [@null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ioctl$SIOCRSSCAUSE(r4, 0x89e1, &(0x7f0000000040)=0x68ed) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0xd000, 0x0, r3}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000140)={0xffff0000, 0x106000}) 2.099755532s ago: executing program 6 (id=1021): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x1, 0x4, 0xf, 0x0, 0x0, [{0x2, 0x2, 0x0, '\x00', 0xd}, {0x4e, 0x7d, 0x7, '\x00', 0x9}, {0x0, 0x9, 0xa, '\x00', 0x7}, {0x2, 0x81, 0x1, '\x00', 0x3}, {0x91, 0xb, 0x0, '\x00', 0x6}, {0x7, 0xd, 0x7, '\x00', 0x5}, {0x4, 0x8, 0xf6, '\x00', 0x4}, {0xfe, 0xff, 0x8c, '\x00', 0x2}, {0x4, 0x6, 0x8, '\x00', 0x5}, {0x3, 0x81, 0x9, '\x00', 0x4}, {0x6e, 0xd, 0x3f, '\x00', 0x53}, {0x8, 0xf9, 0x5, '\x00', 0x7}, {0x7, 0x5, 0x0, '\x00', 0x80}, {0x5, 0x5, 0x0, '\x00', 0x1}, {0xff, 0x1, 0x2, '\x00', 0x80}, {0x1, 0xc, 0x67, '\x00', 0x3}, {0xfb, 0x4, 0x9, '\x00', 0x7}, {0x7, 0x5, 0xf, '\x00', 0x6}, {0x7, 0xfe, 0x46, '\x00', 0x7f}, {0x7f, 0x0, 0x8, '\x00', 0x7}, {0xf9, 0x5, 0xc, '\x00', 0x5}, {0x5, 0xdd, 0x4, '\x00', 0x5e}, {0x2, 0x9, 0xee, '\x00', 0x1}, {0xf, 0x4c, 0xc, '\x00', 0x8}]}}) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089"], 0x50) 1.126641055s ago: executing program 6 (id=1024): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x400300, 0x24000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_TTL={0x5, 0x8, 0xf7}]}}}]}, 0x48}, 0x1, 0xba01, 0x0, 0x44844}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x40}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, r3, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x20003}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd1}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x2040001) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) socket$alg(0x26, 0x5, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x8, 0x803, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r8, @ANYBLOB="08002600851600000a00180000000000000000001c005a"], 0x4c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="67358d6609000000000000000000000002200000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r12) sendmsg$ETHTOOL_MSG_COALESCE_SET(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x24, r13, 0x1, 0x0, 0xffffffff, {0x10}, [@ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x3}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0xb8a6}]}, 0x24}}, 0x4004044) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRESOCT, @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x2000048c}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000015000008100000000000000002000000", @ANYRES32=r14], 0x18}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0x15}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="a208a6434960f900375237d2f1ff7e14793cd1c0fd7445da984304770b125290efdc5c36ab08ceded881e56e502b7f91f3d73fa0efca4fc0f6b3a9dd844258b3c4832f939deba524aad6c5e3947f3c0f1034f15a671135b40e78192841abd50d60a6f9a18d4c6f3347f144ed3e1f4e7bac3695a2bf5648b22dbc905921b68e190f7c00259851c4f47036b11b8478c7ba61f4b8c4c0992b3b107d14cedcb87b361d9a308eda2508df4268a92a22e5d265bc41", 0xb2) socket$inet_tcp(0x2, 0x1, 0x0) 1.120591944s ago: executing program 6 (id=1026): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="839e00000000000089c7730000000002000003000200000000000002030000000800040053170000"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x4100) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xc8, r2, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0x72, 0x2a, [@dsss={0x3, 0x1, 0xb5}, @measure_req={0x26, 0x3b, {0x2, 0x7, 0xf3, "6afe47b51cd09f166bf3bae1f6dd8286f4d4695af9d98ed43d1158af7344b423eaeac57679b65127b13528b44509d254377285dc5acbb055"}}, @peer_mgmt={0x75, 0x8, {0x1, 0x2, @val=0xb, @val=0x33, @void}}, @prep={0x83, 0x1f, {{}, 0x1, 0x6e, @broadcast, 0x6, @void, 0x1, 0xa0d, @device_b, 0x7}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_IE={0x1e, 0x2a, [@link_id={0x65, 0x12, {@random="12f80969e746", @device_b, @broadcast}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0xb, 0x9}}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8}, @NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}]}, 0xc8}, 0x1, 0x0, 0x0, 0x84}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8080) setsockopt$inet_udp_encap(r6, 0x11, 0x64, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000180)=0x6, 0x9, 0x2) socket$unix(0x1, 0x5, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x3, 0x82040) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0x1, 0x0, &(0x7f0000000000)="ff", 0x0, 0x1498, 0x503, 0x0, 0xfffffffffffffede, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r10 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="08b4fffffede", 0x0, 0xfffffffe, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_int(r0, 0x6, 0x2f, &(0x7f0000000040)=0x79b, 0x4) 1.031066509s ago: executing program 2 (id=1028): r0 = fsopen(&(0x7f00000002c0)='vfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x22, &(0x7f0000000080)}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}]}}}]}, 0x3c}}, 0x0) 876.763213ms ago: executing program 7 (id=1016): modify_ldt$write2(0x11, &(0x7f0000000100)={0x9, 0x0, 0xffffffffffffffff, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000000)={0x4, 0x20000800, 0x1000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, r1}]) shutdown(r0, 0x0) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) 799.856877ms ago: executing program 2 (id=1029): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="55179a5300000000000000000000000000e24e7d7b83b22e13237200"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="000000000000000071000000000000009500010000000000"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r3], 0x5c}}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x7, 0x19, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, 0x80, 0x8, 0x2, 0x7}}) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xfff3}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x55b1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}]}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x8}, "a68e78"}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x80, 0x7, 0x2, 0x1, {{0xc, 0x4, 0x2, 0x5, 0x30, 0x64, 0x0, 0xa5, 0x4, 0x0, @loopback, @remote, {[@timestamp_prespec={0x44, 0x1c, 0x51, 0x3, 0x9, [{@remote, 0x7f}, {@private=0xa010101, 0x88e}, {@empty, 0x7}]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000700)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x8000, 0x7, 0x4, 0x6, {{0x1a, 0x4, 0x3, 0x2f, 0x68, 0x65, 0x0, 0x0, 0x29, 0x0, @local, @private=0xa010101, {[@timestamp_addr={0x44, 0x54, 0xf7, 0x1, 0x7, [{@multicast1, 0xfffffffd}, {@rand_addr=0x64010100, 0x2}, {@rand_addr=0x64010100, 0x9}, {@empty, 0x5}, {@multicast2, 0x6}, {@broadcast, 0x7}, {@remote, 0x1f}, {@multicast2}, {@loopback, 0x8}, {@remote, 0x2}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r0, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x0, 0xce, &(0x7f0000000900)=[{}], 0x8, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0xc, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000bc0)={'ip_vti0\x00', &(0x7f0000000b40)={'syztnl2\x00', 0x0, 0x7800, 0x1, 0x200, 0x7efc, {{0x17, 0x4, 0x2, 0x6, 0x5c, 0x66, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @remote, {[@timestamp={0x44, 0x10, 0xd2, 0x0, 0x7, [0x9, 0x8, 0x5]}, @timestamp_addr={0x44, 0x2c, 0x29, 0x1, 0xa, [{@rand_addr=0x64010100, 0x1}, {@multicast1, 0xdad}, {@loopback, 0x7ff}, {@remote, 0x5}, {@empty, 0x9}]}, @end, @generic={0x94, 0x9, "9854a1561f0013"}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001140)={&(0x7f0000000e80)={0x2b4, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) 670.926865ms ago: executing program 2 (id=1030): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0xfffc, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x0, 0x9, 0x10009, 0x8, 0x155f, 0x6, 0x80, 0x25cd, 0x1, 0xb4, 0xa, 0xb2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000000, 0x2, 0xbbd, 0x1000, 0x3, 0x0, 0xd, 0x4, 0x12a0, 0x8000, 0x1, 0x7, 0x8, 0x7, 0x81, 0x8a, 0x0, 0x2, 0x10001, 0x5, 0x91, 0x4, 0x4, 0x16, 0x0, 0x7fffffff, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xffffff81, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x4, 0x40000007, 0xbe, 0x4007f, 0xffffffff, 0x9212], [0x9, 0x16e, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000077, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffd, 0x80a, 0x4, 0x5, 0x1000, 0x3, 0x200b395, 0x400004, 0x80000000, 0x4, 0x19, 0x7, 0x1, 0x3, 0x1, 0x8, 0x9, 0x400, 0x6, 0x4c2336d3, 0x96, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x104, 0xab00060, 0x5, 0x1, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1ca, 0x4, 0x80000004, 0x80000001, 0x6, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x1ff, 0x7fffffff, 0x5, 0x405, 0x491, 0x5, 0x200006, 0x8, 0x3fe, 0xfffffffe, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x8000, 0x8000003, 0x6, 0x89, 0x3, 0x3, 0x9, 0x0, 0xc7, 0xfff, 0x10000a, 0x8000, 0x401, 0x3e59, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x0, 0xdd80, 0x60a0, 0x80, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x7, 0x0, 0x3, 0xd502, 0x8, 0x77, 0x9, 0x6, 0x10000, 0x203, 0x5, 0x1], [0xa772, 0x3, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x6, 0xff, 0x1005, 0x1, 0x8000005, 0x1e, 0x7f, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x7, 0x5, 0x936, 0x106, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xffffffff, 0x7fffffff, 0x9, 0xf, 0x32d, 0x3, 0x200, 0x2000803, 0x2, 0x10000, 0x0, 0x8004, 0x7fff, 0x0, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x1, 0xfffffff9, 0xd, 0xc, 0x463f, 0x7fffffff, 0x7fffffff, 0x8006, 0x20008, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x23) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000001200)={0xa03bde73c3fd9dd2, 0x0, @pic={0x5, 0x2, 0x4, 0xc, 0x3f, 0xbb, 0xf, 0x2, 0xff, 0x3, 0x81, 0x2, 0xe, 0x0, 0x9a, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0xfffffffa}, &(0x7f00000001c0)=0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000001780)}}, {{&(0x7f0000000500)=@ll={0x11, 0x16, r2, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000600)="ea19a6cd956cec436c74787246d13ca11081dbabebcb76c1d2e8b7d0c8c1aabdd95fc51096c8d57e818ce768ccceed4d115abed88468be323c820ade265a87419a77736785f202fe11a5dd77773ba9a4c83087f956929503b1e1ff5b37da9fe53fb758af2d89f01e0df78efd88cf4a01c0b8766c480a0394b6c8fc9fc12099c5bb81de2cb7a9f7cda5c9b265453e575767fb58b840bfe5d709889eea7579a18472fdd1630e7fbbe9d68f75a7a51eb7e00854a1f71f", 0xb5}, {&(0x7f0000000740)="efded85c2c542acacf9d79eea389735832330080b0afe68599b4b850531e65e89deb1e", 0x23}], 0x2}}, {{&(0x7f0000000880)=@pptp={0x18, 0x2, {0x3, @private=0xa010100}}, 0x80, &(0x7f00000010c0)}}], 0x3, 0x200000c0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078005001500120000000800084000000090050005000a000000050001000600000012000300686173683a6e6574"], 0x60}}, 0x0) 499.331555ms ago: executing program 2 (id=1031): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000100)={'wlan1\x00', @random="0a0000000100"}) (async) userfaultfd(0x1) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xf0f021}) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x854) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r3) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)={0x204, r4, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xac}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3db}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xb0, 0x3, "0688841871ef07ed06778dc5b46b8ba445ec72d4c03169b890671a6e0c4ac562ceb0f4ea04ef13c1e2868b6143154c5eb6b73e77df3ce336cdcca456672330eea6d0c0fdd8e26d4682ad216f5c383c63a73cf90a58096e6c742090266ccedab83c0b5f4cb9a2f5c83d05bc80c51935e084b850dc8a76c9eac47c2f60e50802142eec2adca38828f5e395f4d9128b8b791feb352374385ff7bb92b40b8fe28d0ecc432abfc125a16be85f0702"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ba}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x412}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x40000}, 0x20004015) recvmmsg(r3, &(0x7f0000004580)=[{{0x0, 0xfffffffffffffece, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000340)=""/157, 0x9d}], 0x1}, 0x3f}], 0x2, 0x2041, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)) (async, rerun: 32) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async, rerun: 32) r6 = socket(0x6, 0x6, 0x1) read(r6, &(0x7f0000000140)=""/157, 0x9d) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000200), 0xffffffffffffffff) (async) r9 = fanotify_init(0x10, 0x101000) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r11 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\\\\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) write$tun(r3, &(0x7f0000002ac0)=ANY=[@ANYBLOB="000086dd000011000008000000006396811010b0000020010000000000000000000000000001000000000000000000000000000000003201"], 0x10e6) (async) move_pages(r2, 0x1, &(0x7f0000000740)=[&(0x7f00007c7000/0x3000)=nil], 0x0, 0x0, 0x0) 200.149387ms ago: executing program 2 (id=1034): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4008054) write$nci(0xffffffffffffffff, 0x0, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4048aecb, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110009, &(0x7f0000000300)=0xd8}) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)=0x3) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x1a9c65) write$dsp(r5, &(0x7f0000000280)='\x00', 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000000)={0x0, 0x1fffffe, 0x800007, 0x100080000000006, 0x346a, 0x100000001, 0xfffdfffffffffffe, 0x4, 0x4, 0x2, 0xfffffffd, 0x1}) close(r5) inotify_init1(0x800) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r7, &(0x7f0000002080)={0x2020}, 0x2020) sendmsg$nl_route(r0, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r8, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x3400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd26, 0x27dfdbfb, {0x60, 0x0, 0x0, r11, {}, {0xc, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0xfffffffd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r8, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 197.569588ms ago: executing program 0 (id=1035): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0xe8, 0x111, 0x4b4, 0x0, 0x700, 0x2b8, 0x278, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@loopback, @private1, [], [0x0, 0x0, 0x0, 0xff], 'macvlan0\x00', 'team_slave_0\x00', {}, {0x1fe}, 0x0, 0x0, 0x0, 0x48}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x10, "f0b35f334454456b5a1bc219fb6b2168a1daee9330995069d01067dcc709"}}}, {{@ipv6={@private1, @private1, [0x0, 0xffffffff, 0xff000000, 0xff000000], [0xff, 0x0, 0xffffffff, 0xffffffff], 'ipvlan1\x00', 'wlan0\x00', {0x80f0adaf0a7b4ff8}, {0xff}, 0x1d, 0x81, 0x2, 0x30}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:dhcpd_state_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@known='user.incfs.metadata\x00') 91.071522ms ago: executing program 0 (id=1036): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0xf1d, 0x1, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0xb, "c3d78f7fea9e683c3883214bf0d7f72e"}}}, @TCA_RATE={0x6, 0x5, {0x55, 0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8810}, 0x24040041) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)={0x28, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x8, 0x31, 0x0, 0x0, @ipv4=@local}]}, 0x28}], 0x1}, 0x0) r6 = socket(0x10, 0x803, 0x4) write$selinux_access(0xffffffffffffffff, &(0x7f0000000040)={'system_u:object_r:pinentry_exec_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x95}, 0x51) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r9, 0x0) preadv(r9, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r9, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@delchain={0x3c, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r11, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 376.298µs ago: executing program 7 (id=1037): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x6364, 0x0, r0, 0x80000000, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000140)={0x8, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r2, 0x35c9, 0x10}, 0xc) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r4, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0xb, @media='eth\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x8015}, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, 0x1, 0x7, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x81}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xa}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffc01}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffff}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x100000000000}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xcb}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x20000050) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480), 0x22041, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x4, [@enum={0xd, 0x8, 0x0, 0x6, 0x4, [{0xb, 0x6}, {0xe, 0x7}, {0x3, 0x2}, {0x9, 0x4}, {0xb, 0x680}, {0x7, 0x5}, {0x1, 0x3}, {0xe, 0x5}]}]}, {0x0, [0x0, 0x30]}}, &(0x7f0000000680)=""/16, 0x68, 0x10, 0x1, 0x6, 0x10000}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r3, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x1a, &(0x7f00000004c0)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb9bb}], &(0x7f00000005c0)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x0, r7, 0x8, &(0x7f0000000700)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0xa, 0x1ff, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000840)=[r0, r8], &(0x7f0000000880)=[{0x4, 0x5, 0x1, 0x3}, {0x4, 0x4, 0x10, 0x7}, {0x3, 0x4, 0x7, 0x9}, {0x1, 0x1, 0xc, 0x2}], 0x10, 0x8000}, 0x94) ioctl$KVM_TDX_INIT_VM(r6, 0xc008aeba, &(0x7f0000000c00)={0x1, 0x0, &(0x7f0000000980)={0x4000000000000000, 0x1, [0x55, 0xff, 0x8, 0x6, 0x200, 0x1ff], [0x7, 0x5, 0x0, 0x2, 0xec], [0x7, 0x3ff, 0x1, 0x7000000000000000, 0x80, 0x9], '\x00', {0x9, 0x0, [{0xd, 0x1000, 0x4, 0x7, 0x7, 0x8, 0x9}, {0x1, 0x8, 0x1, 0x1, 0x7, 0x32, 0x54}, {0xb, 0x9, 0x0, 0x40, 0x0, 0x9, 0x7}, {0x40000000, 0x8, 0x1, 0x8000, 0x3, 0xb8, 0x5}, {0x80000019, 0xffff, 0x4, 0x2, 0x9, 0x101, 0x1}, {0xa, 0x81, 0x5, 0xfffffffa, 0xffff, 0xffffffff, 0x4}, {0xd, 0x7, 0x5, 0xd9e, 0x5, 0x3, 0x7}, {0x0, 0x5a82c7c4, 0x7, 0xb, 0x7, 0x1, 0x8e1}, {0x6, 0xffffffff, 0xd, 0x4, 0x28, 0x401, 0x3}]}}}) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r6, 0x4068aea3, &(0x7f0000000c40)={0xdb, 0x0, 0x5}) ioctl$CEC_G_MODE(r6, 0x80046108, &(0x7f0000000cc0)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d40), r6) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r10, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x2400809c) r11 = open(&(0x7f0000000e40)='./file0\x00', 0x10000, 0x4c) setsockopt$inet_tcp_int(r11, 0x6, 0x1b, &(0x7f0000000e80)=0x3, 0x4) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f00), r9) sendmsg$IPVS_CMD_DEL_DEST(r6, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x6c, r12, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x77a1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x78}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008044}, 0x800) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f0000001040)=0x0) sendmsg$kcm(r6, &(0x7f00000011c0)={&(0x7f0000001080)=@nfc={0x27, r13, 0xffffffffffffffff, 0x7}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001100)="d44b445b15cc4c7c8d868e7c28612afcdf25dc4433b4b3ecb33eb89912c66e3feca9570a1f4dbbf5a9bcea652128899021c8c03d011ab4b6f0305a7abc661ba341e6504ea67abf41174d1ddba234a2b5f4c3e13c81dcae486d536a8d3fba07c314831ee518ee70fcfd7971ec7c", 0x6d}], 0x1}, 0x4008000) timer_create(0x0, &(0x7f0000001300)={0x0, 0x33, 0x1, @thr={&(0x7f0000001200)="493b53b2aa676f74712b36d9f5f7e947890f910ff6d668f900663de526f2453000d36075173a259fe35bd825ec2ce192a17f1802b575eed11aaf4d04b918da61b069e9a2f723391a9e034cd22fa244f340c215b0b5c84201fcb2b0007b363156091abbc021e67c4140c4ae41f7b2958eae7431bb8a17d0e4949aaa8aa5caad264381923fe22f9829d66cdb5b3bfc96a762a19f101478c1c4de1247deb32a1d328b6f", &(0x7f00000012c0)="03b0403d8329a1e05703c341d1addbc27924aea0150710e90388348e0d701d3e89f82ed8629b37b2770875280ce471ed15ef4512679c6772195198ff96111549"}}, &(0x7f0000001340)) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0xe113, r8, 0xba4e6000) close_range(r0, r0, 0x2) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r14, &(0x7f0000001740)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8201}, 0xc, &(0x7f0000001700)={&(0x7f0000001400)={0x2c8, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x150, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ada}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c6c1f15}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x79a8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8132}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a06ce78}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b57649}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ca75e2f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb134}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8b47}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec98}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x80d5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x368a0e49}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x889d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62a3a927}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48cca2d2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8335}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd203}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaa06}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27cede5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x409c8c50}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7595}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2356f30a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d04bcb0}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc58}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73f58eb7}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4bae3bb9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65742671}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd107}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8593}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed57}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa7c7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x275cb1b2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f621170}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x390f0b53}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19e71b4c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33e120f5}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e2db7d3}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x60, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6563ae93}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fb2d91f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x568f04c5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x104, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9b88cf0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1108775}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x403a9688}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48d92c52}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x403486ea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56b84d8e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c980ef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcd080fe}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f6013a4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d59ab21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f19a2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x111703da}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd03bcd7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc4}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e9597b0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x572bf901}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65289238}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x725a131}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x782eb3be}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c06f2a7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe8be2d7}]}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x4000850}, 0xc800) 0s ago: executing program 7 (id=1038): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x400}, &(0x7f0000001100)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0xffffffffffffff8e}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="24040000", @ANYRES16=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="1c02028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040003000000080007000000000040000100240001006d625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff01000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100008040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040008000000080001"], 0x424}, 0x1, 0x0, 0x0, 0x408c0}, 0x40001) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000000480)={&(0x7f00000003c0)=[0x0], &(0x7f0000000040)=[0x81], 0x2000000000ea25, 0x1, 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000140)={&(0x7f0000000080)=[0x0], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000700)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r0, 0xc0106450, &(0x7f00000007c0)={0x0, 0x1, 0x3}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r0, 0xc0186445, &(0x7f0000000840)={0xd, 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000880)={0x0, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f0000000200)={&(0x7f0000000180)=[r1, r5], &(0x7f0000000100)=[0xffffffffffffa820], 0xea25, 0x2, 0xe}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r6, 0xc03064ca, &(0x7f0000000100)={&(0x7f00000000c0), &(0x7f0000000200), 0x2, 0xffffffffffffffe9, 0xf}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x3ff, 0x303d03) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r8, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r8, 0xc03064ca, &(0x7f0000000200)={&(0x7f0000000180)=[r9], &(0x7f0000000100)=[0xffffffffffffa820], 0xea25, 0x1, 0x9}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000001140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000001180)={0x0}) ioctl$DRM_IOCTL_PANTHOR_VM_BIND(r0, 0xc0186443, &(0x7f0000001340)={0x0, 0x0, {0x30, 0x5, &(0x7f0000001240)=[{0x10000000, 0x0, 0x550, 0x200, 0x7fff, {0x10, 0x2, &(0x7f00000002c0)=[{0xfe, 0x0, 0xba34}, {0x80000000}]}}, {0x4, 0x0, 0x3ff, 0x9, 0x67e, {0x10, 0xa, &(0x7f0000000540)=[{0xff, 0x0, 0x5}, {0x80000000, 0x0, 0x80041}, {0x80000000, 0x0, 0x1000}, {0x80000000, 0x0, 0x5}, {0x80000000, 0x0, 0x7}, {0x80000000, 0x0, 0x7}, {0x1, 0x0, 0x9}, {0xfe, 0x0, 0x800}, {0x1, 0x0, 0x7}, {0xff, 0x0, 0x2}]}}, {0x2, 0x0, 0x2f, 0x2, 0x9, {0x10, 0x7, &(0x7f0000000740)=[{0x1, 0x0, 0x9}, {0xff, r9}, {0xff}, {0x0, 0x0, 0x1}, {0x1, r3, 0x10f9c98d}, {0xff, 0x0, 0x2}, {0xff, r7, 0x4000000000}]}}, {0x0, r2, 0xfffffffffffffff8, 0x1, 0x5, {0x10, 0x0, &(0x7f0000000800)}}, {0x1, r2, 0x8, 0xa5ef, 0xfffffffffffffe01, {0x10, 0x6, &(0x7f00000011c0)=[{0x80000000, r3, 0x1000}, {0x0, r5, 0x7ff}, {0x80000000, r7, 0x21}, {0x80000000, r9, 0x80000000}, {0x80000000, r10, 0x5}, {0x0, r11, 0x6}]}}]}}) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) read(r13, &(0x7f0000000200)=""/85, 0x55) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x180000, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000000)={r15}) kernel console output (not intermixed with test programs): 88.624109][ T7147] hfsplus: unable to find HFS+ superblock [ 88.798463][ T7147] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 88.801779][ T7147] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 88.804946][ T7147] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 88.808065][ T7147] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 88.811183][ T7147] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 88.816014][ T7147] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 88.883968][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.321'. [ 88.893712][ T7153] ip6gretap0: entered promiscuous mode [ 88.896525][ T7153] macsec1: entered promiscuous mode [ 88.899368][ T7153] macsec1: entered allmulticast mode [ 88.901794][ T7153] ip6gretap0: entered allmulticast mode [ 88.906809][ T7153] ip6gretap0: left allmulticast mode [ 88.909246][ T7153] ip6gretap0: left promiscuous mode [ 89.012910][ T7155] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 89.015947][ T7155] ALSA: mixer_oss: invalid index 1374389 [ 89.048114][ T40] audit: type=1400 audit(1775478715.807:566): avc: denied { create } for pid=7157 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 89.058242][ T40] audit: type=1400 audit(1775478715.807:567): avc: denied { getopt } for pid=7157 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 89.087325][ T40] audit: type=1400 audit(1775478715.847:568): avc: denied { bind } for pid=7162 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.116060][ T7165] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 89.119067][ T7165] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 89.127252][ T7165] vhci_hcd vhci_hcd.0: Device attached [ 89.128267][ T7163] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2625528780 (84016920960 ns) > initial count (7406735072 ns). Using initial count to start timer. [ 89.131089][ T7166] vhci_hcd: unknown pdu 2 [ 89.149461][ T7037] vhci_hcd vhci_hcd.3: stop threads [ 89.152168][ T7037] vhci_hcd vhci_hcd.3: release socket [ 89.154336][ T7037] vhci_hcd vhci_hcd.3: disconnect device [ 89.287303][ T6021] usb 7-1: USB disconnect, device number 4 [ 89.432685][ T7181] netlink: 'syz.2.327': attribute type 1 has an invalid length. [ 89.483266][ T7185] netlink: 24 bytes leftover after parsing attributes in process `syz.0.329'. [ 89.724086][ T7191] netlink: 28 bytes leftover after parsing attributes in process `syz.2.331'. [ 90.055751][ T40] audit: type=1400 audit(1775478716.817:569): avc: denied { map } for pid=7192 comm="syz.4.332" path="socket:[17514]" dev="sockfs" ino=17514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 90.079912][ T40] audit: type=1400 audit(1775478716.817:570): avc: denied { read accept } for pid=7192 comm="syz.4.332" path="socket:[17514]" dev="sockfs" ino=17514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 90.264299][ T7201] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '#! [ 90.264299][ T7201] cct.usage_percpu_sys' [ 90.323068][ T40] audit: type=1400 audit(1775478717.077:571): avc: denied { setopt } for pid=7205 comm="syz.4.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.412793][ T7037] Bluetooth: (null): Invalid header checksum [ 90.521876][ T7038] Bluetooth: (null): Invalid header checksum [ 90.688601][ T40] audit: type=1400 audit(1775478717.447:572): avc: denied { getattr } for pid=7208 comm="syz.3.337" name="/" dev="9p" ino=79691923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 90.690432][ T7209] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 90.723899][ T40] audit: type=1400 audit(1775478717.487:573): avc: denied { setattr } for pid=7208 comm="syz.3.337" name="file1" dev="overlay" ino=79691947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.735291][ T5940] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.810001][ T5940] Bluetooth: hci2: command 0x0419 tx timeout [ 90.810254][ T5942] Bluetooth: hci3: command 0x0c1a tx timeout [ 90.810722][ T5289] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.226922][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.333993][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.399250][ T7227] binder: 7226:7227 ioctl c0306201 200000000180 returned -14 [ 91.455126][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.521378][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.522376][ T5940] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.536264][ T5940] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.540282][ T5940] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.543530][ T5940] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.546949][ T5940] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.773475][ T13] bridge_slave_1: left allmulticast mode [ 91.775952][ T13] bridge_slave_1: left promiscuous mode [ 91.778544][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.784113][ T7232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.346'. [ 91.790371][ T13] bridge_slave_0: left allmulticast mode [ 91.792880][ T13] bridge_slave_0: left promiscuous mode [ 91.797873][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.020525][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.033363][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.038911][ T13] bond0 (unregistering): Released all slaves [ 92.065883][ T7232] bridge_slave_1: left allmulticast mode [ 92.068417][ T7232] bridge_slave_1: left promiscuous mode [ 92.075662][ T7232] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.104482][ T7232] bridge_slave_0: left allmulticast mode [ 92.106811][ T7232] bridge_slave_0: left promiscuous mode [ 92.114130][ T7232] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.319903][ T3548] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 92.357684][ T7233] chnl_net:caif_netlink_parms(): no params data found [ 92.450214][ T3548] usb 5-1: device descriptor read/64, error -71 [ 92.484829][ T7233] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.487247][ T7233] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.490760][ T7233] bridge_slave_0: entered allmulticast mode [ 92.494809][ T7233] bridge_slave_0: entered promiscuous mode [ 92.498395][ T7233] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.500877][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.503348][ T7233] bridge_slave_1: entered allmulticast mode [ 92.506255][ T7233] bridge_slave_1: entered promiscuous mode [ 92.523109][ T7233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.528526][ T7233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.547113][ T7233] team0: Port device team_slave_0 added [ 92.554830][ T13] hsr_slave_0: left promiscuous mode [ 92.557148][ T13] hsr_slave_1: left promiscuous mode [ 92.559457][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.563117][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.573497][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.576713][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.582482][ T13] veth1_macvtap: left promiscuous mode [ 92.584393][ T13] veth0_macvtap: left promiscuous mode [ 92.586394][ T13] veth1_vlan: left promiscuous mode [ 92.588472][ T13] veth0_vlan: left promiscuous mode [ 92.719913][ T3548] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 92.768281][ T13] team0 (unregistering): Port device team_slave_1 removed [ 92.783479][ T13] team0 (unregistering): Port device team_slave_0 removed [ 92.860092][ T3548] usb 5-1: device descriptor read/64, error -71 [ 92.886952][ T7233] team0: Port device team_slave_1 added [ 92.904553][ T7269] NILFS (nullb0): couldn't find nilfs on the device [ 92.948906][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.952912][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.964315][ T7233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.970461][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.972038][ T3548] usb usb5-port1: attempt power cycle [ 92.973015][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.985120][ T7233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.022545][ T7233] hsr_slave_0: entered promiscuous mode [ 93.025343][ T7233] hsr_slave_1: entered promiscuous mode [ 93.027542][ T7233] debugfs: 'hsr0' already exists in 'hsr' [ 93.029386][ T7233] Cannot create hsr debugfs directory [ 93.224945][ T7233] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 93.258996][ T7233] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 93.271333][ T7233] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.279251][ T7233] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 93.327620][ T7299] netlink: 20 bytes leftover after parsing attributes in process `syz.3.356'. [ 93.363938][ T7233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.377032][ T7233] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.395909][ T7038] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.399077][ T7038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.412815][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.413467][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 93.413481][ T40] audit: type=1400 audit(1775478720.167:588): avc: denied { getopt } for pid=7305 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.415272][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.434722][ T3548] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 93.460770][ T3548] usb 5-1: device descriptor read/8, error -71 [ 93.580064][ T40] audit: type=1400 audit(1775478720.337:589): avc: denied { mounton } for pid=7309 comm="syz.2.358" path="/86/bus" dev="tmpfs" ino=477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 93.594879][ T7310] gfs2: not a GFS2 filesystem [ 93.613929][ T40] audit: type=1400 audit(1775478720.377:590): avc: denied { getopt } for pid=7311 comm="syz.3.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 93.620506][ T5940] Bluetooth: hci2: command tx timeout [ 93.644086][ T7329] netlink: 16 bytes leftover after parsing attributes in process `syz.2.360'. [ 93.676927][ T7233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.720270][ T3548] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 93.733527][ T7336] netlink: 'syz.3.361': attribute type 3 has an invalid length. [ 93.742469][ T3548] usb 5-1: device descriptor read/8, error -71 [ 93.850621][ T3548] usb usb5-port1: unable to enumerate USB device [ 93.868892][ T7233] veth0_vlan: entered promiscuous mode [ 93.875847][ T7233] veth1_vlan: entered promiscuous mode [ 93.890370][ T6192] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 93.898501][ T7233] veth0_macvtap: entered promiscuous mode [ 93.903383][ T7233] veth1_macvtap: entered promiscuous mode [ 93.913810][ T7233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.920463][ T7233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.926580][ T7038] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.929666][ T7038] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.934827][ T7038] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.937657][ T7038] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.991307][ T7349] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7349 comm=syz.3.364 [ 93.995665][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.999011][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.019881][ T6192] usb 7-1: device descriptor read/64, error -71 [ 94.023837][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.027355][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.088868][ T40] audit: type=1400 audit(1775478720.847:591): avc: denied { getopt } for pid=7350 comm="syz.3.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 94.139089][ T7361] loop5: detected capacity change from 0 to 4095 [ 94.199489][ T7368] bond2: entered promiscuous mode [ 94.204364][ T7368] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.269994][ T6192] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 94.410422][ T6192] usb 7-1: device descriptor read/64, error -71 [ 94.489056][ T7376] netlink: 20 bytes leftover after parsing attributes in process `syz.3.370'. [ 94.530350][ T6192] usb usb7-port1: attempt power cycle [ 94.535780][ T40] audit: type=1400 audit(1775478721.297:592): avc: denied { execute_no_trans } for pid=7379 comm="syz.3.371" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.589198][ T7387] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7387 comm=syz.3.372 [ 94.889852][ T6192] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 94.920524][ T6192] usb 7-1: device descriptor read/8, error -71 [ 95.040008][ T39] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 95.085849][ T7397] binder: 7396:7397 ioctl 6611 0 returned -22 [ 95.146842][ T7403] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 95.172412][ T6192] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 95.187168][ T7404] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.200557][ T6192] usb 7-1: device descriptor read/8, error -71 [ 95.206259][ T7409] netlink: 'syz.0.378': attribute type 15 has an invalid length. [ 95.209538][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.378'. [ 95.212439][ T39] usb 8-1: Using ep0 maxpacket: 8 [ 95.216585][ T39] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 95.216899][ T7411] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 95.224281][ T39] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 95.225435][ T7409] netlink: 'syz.0.378': attribute type 15 has an invalid length. [ 95.227294][ T7037] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 95.227368][ T7037] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 95.231519][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.378'. [ 95.234812][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.235831][ T7037] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 95.250324][ T39] usb 8-1: config 0 descriptor?? [ 95.288708][ T7404] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 95.294560][ T7404] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.313604][ T6192] usb usb7-port1: unable to enumerate USB device [ 95.331201][ T7417] netlink: 'syz.5.380': attribute type 30 has an invalid length. [ 95.389052][ T7404] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 95.393968][ T7404] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.464315][ T39] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 95.478873][ T7404] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 95.484474][ T7404] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.555862][ T40] audit: type=1400 audit(1775478722.317:593): avc: denied { watch watch_reads } for pid=7418 comm="syz.5.381" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=2052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.578359][ T1146] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 95.581163][ T1146] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.590250][ T1146] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 95.593848][ T1146] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.604081][ T1146] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 95.607604][ T1146] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.618827][ T1146] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 95.622745][ T1146] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.663883][ T5931] usb 8-1: USB disconnect, device number 7 [ 95.673543][ T7425] netlink: 'syz.0.382': attribute type 2 has an invalid length. [ 95.676315][ T7425] netlink: 'syz.0.382': attribute type 1 has an invalid length. [ 95.679294][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 95.689040][ T40] audit: type=1400 audit(1775478722.447:594): avc: denied { mounton } for pid=7424 comm="syz.0.382" path="/file0" dev="ramfs" ino=17223 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 95.693893][ T5940] Bluetooth: hci2: command tx timeout [ 95.701719][ T7425] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 95.704167][ T7425] overlayfs: failed to set xattr on upper [ 95.705961][ T7425] overlayfs: ...falling back to redirect_dir=nofollow. [ 95.708138][ T7425] overlayfs: ...falling back to index=off. [ 95.710948][ T7425] overlayfs: ...falling back to uuid=null. [ 95.718948][ T7425] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 95.884321][ T7428] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 95.961305][ T7428] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 95.963555][ T7428] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 95.965539][ T7428] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 95.967549][ T7428] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 95.969493][ T7428] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 95.972828][ T7428] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 96.016386][ T7434] input: syz0 as /devices/virtual/input/input13 [ 96.064799][ T7437] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7437 comm=syz.0.385 [ 96.198221][ T7442] [U] [ 96.199516][ T7442] [U] [ 96.200713][ T7442] [U] [ 96.201937][ T7442] [U] [ 96.204089][ T7442] [U] [ 96.205325][ T7442] [U] [ 96.206546][ T7442] [U] [ 96.207642][ T7442] [U] [ 96.208722][ T7442] [U] [ 96.209713][ T7442] [U] [ 96.210696][ T7442] [U] [ 96.211689][ T7442] [U] [ 96.213908][ T7443] netlink: 56 bytes leftover after parsing attributes in process `syz.3.388'. [ 96.214638][ T7442] [U] [ 96.217850][ T7037] Bluetooth: Error in BCSP hdr checksum [ 96.218156][ T7442] [U] [ 96.220995][ T7442] [U] [ 96.222137][ T7442] [U] [ 96.227832][ T7440] [U] [ 96.329155][ T7447] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.343673][ T7447] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 96.386051][ T40] audit: type=1400 audit(1775478723.147:595): avc: denied { setattr } for pid=7448 comm="syz.5.391" name="sg1" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 96.453160][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.393'. [ 96.457371][ T7453] lo: Master is either lo or non-ether device [ 96.520047][ T34] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 96.661673][ T40] audit: type=1326 audit(1775478723.427:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.2.396" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cc99c819 code=0x50000 [ 96.669743][ T40] audit: type=1326 audit(1775478723.427:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.2.396" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cc99c819 code=0x50000 [ 96.669862][ T34] usb 5-1: Using ep0 maxpacket: 16 [ 96.680875][ T34] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 226 [ 96.687121][ T34] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 96.690415][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.694003][ T34] usb 5-1: Product: syz [ 96.695817][ T34] usb 5-1: Manufacturer: syz [ 96.698088][ T34] usb 5-1: SerialNumber: syz [ 96.705925][ T34] usb 5-1: config 0 descriptor?? [ 96.710260][ T7445] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 96.714507][ T34] hub 5-1:0.0: bad descriptor, ignoring hub [ 96.717223][ T34] hub 5-1:0.0: probe with driver hub failed with error -5 [ 96.724789][ T34] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input14 [ 96.737716][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 97.080383][ T6021] usb 5-1: USB disconnect, device number 11 [ 97.536294][ T7478] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 97.692057][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.400'. [ 97.720693][ T7489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.785191][ T7494] netlink: 'syz.5.401': attribute type 1 has an invalid length. [ 98.010533][ T5940] Bluetooth: hci3: command 0x0c1a tx timeout [ 98.021083][ T5940] Bluetooth: hci2: command 0x0419 tx timeout [ 98.023165][ T5940] Bluetooth: hci1: command 0x0c1a tx timeout [ 98.025437][ T5940] Bluetooth: hci0: command 0x0c1a tx timeout [ 98.250093][ T5289] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 98.250106][ T5942] Bluetooth: hci4: command 0x1003 tx timeout [ 98.420471][ T40] kauditd_printk_skb: 14030 callbacks suppressed [ 98.420491][ T40] audit: type=1326 audit(1775478725.187:14628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.2.396" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cc99c819 code=0x50000 [ 98.434078][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'. [ 98.438363][ T7529] netlink: 'syz.0.408': attribute type 6 has an invalid length. [ 98.440125][ T40] audit: type=1326 audit(1775478725.197:14629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.2.396" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cc99c819 code=0x50000 [ 98.442072][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'. [ 98.450921][ T40] audit: type=1326 audit(1775478725.197:14630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.2.396" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cc99c819 code=0x50000 [ 98.450967][ T40] audit: type=1326 audit(1775478725.197:14631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.2.396" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cc99c819 code=0x50000 [ 98.451001][ T40] audit: type=1326 audit(1775478725.197:14632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.2.396" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cc99c819 code=0x50000 [ 98.451034][ T40] audit: type=1326 audit(1775478725.197:14633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.2.396" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cc99c819 code=0x50000 [ 98.451066][ T40] audit: type=1326 audit(1775478725.197:14634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.2.396" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cc99c819 code=0x50000 [ 98.451108][ T40] audit: type=1326 audit(1775478725.197:14635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.2.396" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cc99c819 code=0x50000 [ 98.470756][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'. [ 98.474704][ T40] audit: type=1326 audit(1775478725.197:14636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.2.396" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cc99c819 code=0x50000 [ 98.475799][ T7038] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 98.475851][ T7038] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 98.475874][ T7038] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 98.475897][ T7038] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 98.506899][ T7529] netlink: 'syz.0.408': attribute type 6 has an invalid length. [ 98.515853][ T40] audit: type=1326 audit(1775478725.197:14637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.2.396" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cc99c819 code=0x50000 [ 98.517966][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'. [ 98.850572][ T34] IPVS: starting estimator thread 0... [ 98.950370][ T7553] IPVS: using max 26 ests per chain, 62400 per kthread [ 99.286868][ T7567] netlink: 'syz.5.417': attribute type 89 has an invalid length. [ 99.289420][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.417'. [ 99.545803][ T7584] netlink: 16 bytes leftover after parsing attributes in process `syz.5.420'. [ 99.747538][ T7601] netlink: 60 bytes leftover after parsing attributes in process `syz.2.422'. [ 99.752375][ T7602] netlink: 60 bytes leftover after parsing attributes in process `syz.2.422'. [ 99.973168][ T7620] loop3: detected capacity change from 0 to 7 [ 99.980743][ T7620] loop3: [POWERTEC] p1 [ 99.983063][ T7620] loop3: p1 size 8 extends beyond EOD, truncated [ 100.002502][ T7624] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7624 comm=syz.2.429 [ 100.007023][ T7624] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2568 sclass=netlink_tcpdiag_socket pid=7624 comm=syz.2.429 [ 100.008897][ T7625] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7625 comm=syz.2.429 [ 100.011830][ T7624] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2563 sclass=netlink_tcpdiag_socket pid=7624 comm=syz.2.429 [ 100.019875][ T7625] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2568 sclass=netlink_tcpdiag_socket pid=7625 comm=syz.2.429 [ 100.022007][ T7624] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=7624 comm=syz.2.429 [ 100.026869][ T7625] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2563 sclass=netlink_tcpdiag_socket pid=7625 comm=syz.2.429 [ 100.044894][ T6208] udevd[6208]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 100.050795][ T7625] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=7625 comm=syz.2.429 [ 100.089948][ T5289] Bluetooth: hci2: command 0x0419 tx timeout [ 100.134921][ T7634] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 100.233174][ T7647] IPv6: sit1: Disabled Multicast RS [ 100.236673][ T7647] sit1: entered allmulticast mode [ 100.340220][ T7661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55160 sclass=netlink_route_socket pid=7661 comm=syz.5.437 [ 100.387531][ T7665] pimreg9: entered allmulticast mode [ 100.545410][ T7684] netlink: 20 bytes leftover after parsing attributes in process `syz.3.444'. [ 100.630202][ T7691] loop3: detected capacity change from 0 to 7 [ 100.634655][ T7691] loop3: [POWERTEC] p1 [ 100.636389][ T7691] loop3: p1 size 8 extends beyond EOD, truncated [ 100.689532][ T6208] udevd[6208]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 100.721576][ T7697] MINIX-fs: unable to read superblock [ 100.749548][ T7702] netlink: 72 bytes leftover after parsing attributes in process `syz.5.447'. [ 100.766220][ T7705] dlm: no locking on control device [ 100.894280][ T7726] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 100.932349][ T7730] loop3: detected capacity change from 0 to 7 [ 100.937141][ T6208] loop3: [POWERTEC] p1 [ 100.938750][ T6208] loop3: p1 size 8 extends beyond EOD, truncated [ 100.958720][ T7730] loop3: [POWERTEC] p1 [ 100.968375][ T7730] loop3: p1 size 8 extends beyond EOD, truncated [ 100.971343][ T7733] f2fs: Unknown parameter 'barrier' [ 100.986145][ T6208] udevd[6208]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 101.006019][ T6208] udevd[6208]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 101.046429][ T7738] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 101.063789][ T7743] tmpfs: Bad value for 'mpol' [ 101.071115][ T7745] tmpfs: Bad value for 'mpol' [ 101.089947][ T3548] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 101.127063][ T7747] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 101.170686][ T7758] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 101.267008][ T7763] loop3: detected capacity change from 0 to 7 [ 101.271290][ T3548] usb 7-1: not running at top speed; connect to a high speed hub [ 101.275286][ T6208] loop3: [POWERTEC] p1 [ 101.277056][ T6208] loop3: p1 size 8 extends beyond EOD, truncated [ 101.281949][ T3548] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 101.284717][ T3548] usb 7-1: can't read configurations, error -61 [ 101.289309][ T7763] loop3: [POWERTEC] p1 [ 101.293205][ T7763] loop3: p1 size 8 extends beyond EOD, truncated [ 101.321392][ T6208] udevd[6208]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 101.333825][ T6208] udevd[6208]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 101.384663][ T7769] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 101.430037][ T3548] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 101.481317][ T7780] netlink: 'syz.3.473': attribute type 10 has an invalid length. [ 101.486989][ T7780] netlink: 'syz.3.473': attribute type 1 has an invalid length. [ 101.581206][ T3548] usb 7-1: not running at top speed; connect to a high speed hub [ 101.585725][ T3548] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 101.589181][ T3548] usb 7-1: can't read configurations, error -61 [ 101.594304][ T3548] usb usb7-port1: attempt power cycle [ 101.722080][ T7786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46447 sclass=netlink_route_socket pid=7786 comm=syz.3.476 [ 101.929930][ T3548] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 101.939290][ T7792] loop3: detected capacity change from 0 to 7 [ 101.943656][ T7792] loop3: [POWERTEC] p1 [ 101.945803][ T7792] loop3: p1 size 8 extends beyond EOD, truncated [ 101.952749][ T3548] usb 7-1: not running at top speed; connect to a high speed hub [ 101.958693][ T3548] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 101.962387][ T3548] usb 7-1: can't read configurations, error -61 [ 101.979458][ T6208] udevd[6208]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 102.069929][ T841] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 102.089870][ T3548] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 102.111420][ T3548] usb 7-1: not running at top speed; connect to a high speed hub [ 102.116393][ T3548] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 102.120170][ T3548] usb 7-1: can't read configurations, error -61 [ 102.123190][ T3548] usb usb7-port1: unable to enumerate USB device [ 102.169965][ T5289] Bluetooth: hci2: command 0x0419 tx timeout [ 102.231657][ T841] usb 8-1: config 0 has no interfaces? [ 102.236242][ T841] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 102.240354][ T841] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.244273][ T841] usb 8-1: Product: syz [ 102.246137][ T841] usb 8-1: Manufacturer: syz [ 102.248189][ T841] usb 8-1: SerialNumber: syz [ 102.254360][ T841] usb 8-1: config 0 descriptor?? [ 102.292860][ T841] IPVS: starting estimator thread 0... [ 102.399923][ T7813] IPVS: using max 23 ests per chain, 55200 per kthread [ 102.478747][ T7789] ptrace attach of "/syz-executor exec"[7818] was attempted by "/syz-executor exec"[7789] [ 102.569972][ T3548] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 102.733643][ T3548] usb 5-1: unable to get BOS descriptor or descriptor too short [ 102.737689][ T3548] usb 5-1: not running at top speed; connect to a high speed hub [ 102.741437][ T3548] usb 5-1: no configurations [ 102.743598][ T3548] usb 5-1: can't read configurations, error -22 [ 102.870099][ T3548] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 103.031869][ T3548] usb 5-1: unable to get BOS descriptor or descriptor too short [ 103.036595][ T3548] usb 5-1: not running at top speed; connect to a high speed hub [ 103.040388][ T3548] usb 5-1: no configurations [ 103.042372][ T3548] usb 5-1: can't read configurations, error -22 [ 103.045526][ T3548] usb usb5-port1: attempt power cycle [ 103.389912][ T3548] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 103.412562][ T3548] usb 5-1: unable to get BOS descriptor or descriptor too short [ 103.416513][ T3548] usb 5-1: not running at top speed; connect to a high speed hub [ 103.419965][ T3548] usb 5-1: no configurations [ 103.422015][ T3548] usb 5-1: can't read configurations, error -22 [ 103.549871][ T3548] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 103.583061][ T3548] usb 5-1: unable to get BOS descriptor or descriptor too short [ 103.586863][ T3548] usb 5-1: not running at top speed; connect to a high speed hub [ 103.590683][ T3548] usb 5-1: no configurations [ 103.592749][ T3548] usb 5-1: can't read configurations, error -22 [ 103.596622][ T3548] usb usb5-port1: unable to enumerate USB device [ 103.931817][ T7834] fuse: Unknown parameter '0x0000000000000003' [ 103.949598][ T40] kauditd_printk_skb: 7670 callbacks suppressed [ 103.949615][ T40] audit: type=1400 audit(1775478730.707:22308): avc: denied { setopt } for pid=7835 comm="syz.5.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 103.964635][ T7836] tipc: Enabling of bearer rejected, failed to enable media [ 104.031339][ T7842] __nla_validate_parse: 3 callbacks suppressed [ 104.031356][ T7842] netlink: 16 bytes leftover after parsing attributes in process `syz.5.493'. [ 104.235748][ T7854] netlink: 16 bytes leftover after parsing attributes in process `syz.5.495'. [ 104.240140][ T7854] netlink: 16 bytes leftover after parsing attributes in process `syz.5.495'. [ 104.244469][ T7854] netlink: 16 bytes leftover after parsing attributes in process `syz.5.495'. [ 104.248329][ T7854] netlink: 16 bytes leftover after parsing attributes in process `syz.5.495'. [ 104.252900][ T5289] Bluetooth: hci2: command 0x0419 tx timeout [ 104.257351][ T7854] netlink: 16 bytes leftover after parsing attributes in process `syz.5.495'. [ 104.261520][ T7854] netlink: 16 bytes leftover after parsing attributes in process `syz.5.495'. [ 104.265248][ T7854] netlink: 16 bytes leftover after parsing attributes in process `syz.5.495'. [ 104.269446][ T7854] netlink: 16 bytes leftover after parsing attributes in process `syz.5.495'. [ 104.274031][ T7854] netlink: 16 bytes leftover after parsing attributes in process `syz.5.495'. [ 104.413174][ T7861] fuse: Unknown parameter 'oroup_id' [ 104.455801][ T7866] netlink: 'syz.5.499': attribute type 29 has an invalid length. [ 104.784499][ T831] usb 8-1: USB disconnect, device number 8 [ 104.878570][ T7874] netlink: 'syz.3.501': attribute type 21 has an invalid length. [ 104.892809][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.895681][ T7874] netlink: 'syz.3.501': attribute type 21 has an invalid length. [ 104.898779][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.908372][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.916003][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.989930][ T7886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.114478][ T7891] netlink: 'syz.2.503': attribute type 16 has an invalid length. [ 105.117147][ T7891] netlink: 'syz.2.503': attribute type 17 has an invalid length. [ 105.133666][ T7891] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.161079][ T7893] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7893 comm=syz.5.504 [ 105.216835][ T7899] loop3: detected capacity change from 0 to 7 [ 105.220544][ T7899] loop3: [POWERTEC] p1 [ 105.222644][ T7899] loop3: p1 size 8 extends beyond EOD, truncated [ 105.247386][ T6208] udevd[6208]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 105.298019][ T40] audit: type=1400 audit(1775478732.057:22309): avc: denied { create } for pid=7903 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 105.364704][ T40] audit: type=1400 audit(1775478732.127:22310): avc: denied { write } for pid=7907 comm="syz.5.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 105.405073][ T40] audit: type=1400 audit(1775478732.167:22311): avc: denied { relabelfrom } for pid=7903 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 105.413966][ T40] audit: type=1400 audit(1775478732.167:22312): avc: denied { relabelto } for pid=7903 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 105.413989][ T7911] macvlan0: entered promiscuous mode [ 105.484967][ T7918] bond1: Removing last ns target with arp_interval on [ 105.681027][ T7934] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7934 comm=syz.5.513 [ 105.737825][ T7941] loop3: detected capacity change from 0 to 7 [ 105.744823][ T7937] netlink: 'syz.3.514': attribute type 1 has an invalid length. [ 105.752067][ T7943] zonefs (loop5) ERROR: Not a zoned block device [ 105.754367][ T7941] loop3: [POWERTEC] p1 [ 105.756825][ T7941] loop3: p1 size 8 extends beyond EOD, truncated [ 105.819254][ T6208] udevd[6208]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 105.958260][ T7958] syzkaller0: entered promiscuous mode [ 105.961757][ T7958] syzkaller0: entered allmulticast mode [ 106.015493][ T40] audit: type=1400 audit(1775478732.767:22313): avc: denied { mount } for pid=7960 comm="syz.5.523" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 106.023436][ T40] audit: type=1400 audit(1775478732.787:22314): avc: denied { mounton } for pid=7960 comm="syz.5.523" path="/59/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 106.034958][ T40] audit: type=1400 audit(1775478732.787:22315): avc: denied { watch } for pid=7960 comm="syz.5.523" path="/59/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 106.046767][ T40] audit: type=1400 audit(1775478732.807:22316): avc: denied { unmount } for pid=7233 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 106.071530][ T40] audit: type=1400 audit(1775478732.837:22317): avc: denied { append } for pid=7964 comm="syz.5.524" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 106.153421][ T7981] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 106.222884][ T7987] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7987 comm=syz.2.530 [ 106.279884][ T3548] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 106.302544][ T7997] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 106.362549][ T7996] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 106.373443][ T8008] loop3: detected capacity change from 0 to 7 [ 106.376068][ T8008] loop3: [POWERTEC] p1 [ 106.376586][ T7996] CIFS mount error: No usable UNC path provided in device string! [ 106.376586][ T7996] [ 106.377549][ T8008] loop3: p1 size 8 extends beyond EOD, truncated [ 106.382946][ T7996] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 106.436661][ T6208] udevd[6208]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 106.451542][ T3548] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 106.454578][ T3548] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 106.460040][ T3548] usb 8-1: config 0 interface 0 has no altsetting 0 [ 106.465155][ T3548] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 106.469323][ T3548] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 106.473109][ T3548] usb 8-1: Product: syz [ 106.474501][ T3548] usb 8-1: Manufacturer: syz [ 106.475944][ T3548] usb 8-1: SerialNumber: syz [ 106.480050][ T3548] usb 8-1: config 0 descriptor?? [ 106.484264][ T3548] hub 8-1:0.0: bad descriptor, ignoring hub [ 106.486471][ T3548] hub 8-1:0.0: probe with driver hub failed with error -5 [ 106.499463][ T3548] usb 8-1: selecting invalid altsetting 0 [ 106.506766][ T8015] Invalid argument reading file caps for ./file0 [ 106.691252][ T7996] cgroup: fork rejected by pids controller in /syz2 [ 107.101090][ T7963] usb 8-1: reset high-speed USB device number 9 using dummy_hcd [ 107.248270][ T8077] loop3: detected capacity change from 0 to 7 [ 107.252035][ T6208] loop3: [POWERTEC] p1 [ 107.253902][ T6208] loop3: p1 size 8 extends beyond EOD, truncated [ 107.267685][ T8077] loop3: [POWERTEC] p1 [ 107.271616][ T8077] loop3: p1 size 8 extends beyond EOD, truncated [ 107.295438][ T6208] udevd[6208]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 107.327032][ T6208] udevd[6208]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 107.690520][ T6021] usb 8-1: USB disconnect, device number 9 [ 108.193482][ T8124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=8124 comm=syz.2.559 [ 108.232227][ T8127] syzkaller1: entered promiscuous mode [ 108.234548][ T8127] syzkaller1: entered allmulticast mode [ 108.244236][ T8129] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1im]7(a H] [ 108.376148][ T8142] netlink: 'syz.5.564': attribute type 4 has an invalid length. [ 109.096617][ T8168] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8168 comm=syz.3.571 [ 109.097193][ T8166] pim6reg1: entered promiscuous mode [ 109.104793][ T8166] pim6reg1: entered allmulticast mode [ 109.231166][ T8175] netlink: 'syz.5.574': attribute type 30 has an invalid length. [ 109.255579][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 109.255591][ T40] audit: type=1400 audit(1775478736.017:22329): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 109.255698][ T8175] bond3: option arp_missed_max: invalid value (0) [ 109.267146][ T8175] bond3: option arp_missed_max: allowed values 1 - 255 [ 109.285330][ T8175] bond3 (unregistering): Released all slaves [ 109.363777][ T8192] nilfs2: Unknown parameter 'barier' [ 109.428589][ T40] audit: type=1400 audit(1775478736.177:22330): avc: denied { cmd } for pid=8199 comm="syz.3.581" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 109.588001][ T5289] Bluetooth: hci3: unexpected event for opcode 0x0404 [ 109.646305][ T8208] batadv_slave_1: entered promiscuous mode [ 109.649672][ T8207] batadv_slave_1: left promiscuous mode [ 109.700159][ T3548] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 109.858925][ T40] audit: type=1400 audit(1775478736.617:22331): avc: denied { watch } for pid=8219 comm="syz.3.588" path="pipe:[23820]" dev="pipefs" ino=23820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 109.869014][ T3548] usb 10-1: Using ep0 maxpacket: 32 [ 109.871855][ T40] audit: type=1400 audit(1775478736.627:22332): avc: denied { read } for pid=8216 comm="syz.2.587" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 109.872833][ T8217] erspan0: entered promiscuous mode [ 109.887161][ T3548] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 109.889873][ T40] audit: type=1400 audit(1775478736.627:22333): avc: denied { open } for pid=8216 comm="syz.2.587" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 109.891432][ T8217] __nla_validate_parse: 67 callbacks suppressed [ 109.891443][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.587'. [ 109.899856][ T3548] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 109.903266][ T40] audit: type=1400 audit(1775478736.627:22334): avc: denied { ioctl } for pid=8216 comm="syz.2.587" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x643a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 109.904800][ T3548] usb 10-1: config 0 interface 0 has no altsetting 0 [ 109.925461][ T3548] usb 10-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 109.928472][ T3548] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.935807][ T3548] usb 10-1: config 0 descriptor?? [ 110.045178][ T40] audit: type=1400 audit(1775478736.807:22335): avc: denied { create } for pid=8234 comm="syz.2.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 110.194600][ T8249] netlink: 'syz.2.597': attribute type 10 has an invalid length. [ 110.211947][ T8249] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 110.276859][ T8253] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 110.306442][ T8256] netlink: 28 bytes leftover after parsing attributes in process `syz.0.600'. [ 110.369320][ T8266] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.603'. [ 110.461842][ T8277] netdevsim netdevsim3: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 110.462458][ T8277] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8277 comm=syz.3.607 [ 110.474189][ T8269] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3642988519 (466302530432 ns) > initial count (459226025088 ns). Using initial count to start timer. [ 110.500956][ T8280] netlink: 60 bytes leftover after parsing attributes in process `syz.3.608'. [ 110.501552][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.608'. [ 110.502420][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.608'. [ 110.542920][ T40] audit: type=1400 audit(1775478737.297:22336): avc: granted { setsecparam } for pid=8282 comm="syz.3.609" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 110.564599][ T40] audit: type=1400 audit(1775478737.327:22337): avc: denied { cmd } for pid=8282 comm="syz.3.609" path="socket:[23305]" dev="sockfs" ino=23305 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 110.811604][ T8299] netlink: 'syz.3.615': attribute type 10 has an invalid length. [ 110.811667][ T8299] netlink: 40 bytes leftover after parsing attributes in process `syz.3.615'. [ 110.843955][ T8299] team0: Port device geneve0 added [ 110.848045][ T8300] hfsplus: unable to find HFS+ superblock [ 110.880130][ T5998] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 110.896081][ T8303] vlan2: entered allmulticast mode [ 110.896099][ T8303] bond0: entered allmulticast mode [ 110.961782][ T3548] usbhid 10-1:0.0: can't add hid device: -71 [ 110.964335][ T3548] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 110.973131][ T3548] usb 10-1: USB disconnect, device number 2 [ 111.029934][ T34] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 111.065165][ T5998] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 111.070626][ T5998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.074147][ T5998] usb 5-1: Product: syz [ 111.075641][ T5998] usb 5-1: Manufacturer: syz [ 111.077673][ T5998] usb 5-1: SerialNumber: syz [ 111.086656][ T5998] usb 5-1: config 0 descriptor?? [ 111.180212][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 111.184826][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.192167][ T34] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 111.196385][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.212170][ T34] usb 7-1: config 0 descriptor?? [ 111.301703][ T6021] usb 5-1: USB disconnect, device number 16 [ 111.313853][ T8327] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8327 comm=syz.3.621 [ 111.319141][ T8327] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8327 comm=syz.3.621 [ 111.417354][ T40] audit: type=1400 audit(1775478738.177:22338): avc: denied { connect } for pid=8333 comm="syz.3.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 111.482832][ T8340] netlink: 'syz.3.624': attribute type 3 has an invalid length. [ 111.624278][ T34] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 111.632314][ T34] usb 7-1: USB disconnect, device number 13 [ 111.779670][ T8351] program syz.5.628 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.819925][ T8296] netlink: 52 bytes leftover after parsing attributes in process `syz.2.614'. [ 111.835105][ T8353] netlink: 'syz.0.629': attribute type 1 has an invalid length. [ 112.013806][ T8359] loop3: detected capacity change from 0 to 7 [ 112.019639][ T6208] loop3: [POWERTEC] p1 [ 112.022057][ T6208] loop3: p1 size 8 extends beyond EOD, truncated [ 112.029574][ T8359] loop3: [POWERTEC] p1 [ 112.031346][ T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 112.034182][ T8359] loop3: p1 size 8 extends beyond EOD, truncated [ 112.062332][ T6208] udevd[6208]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 112.077380][ T6208] udevd[6208]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 112.191188][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 112.197631][ T10] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 112.202024][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.205086][ T10] usb 8-1: Product: syz [ 112.206540][ T10] usb 8-1: Manufacturer: syz [ 112.208101][ T10] usb 8-1: SerialNumber: syz [ 112.218834][ T10] usb 8-1: config 0 descriptor?? [ 112.279009][ T8372] netlink: 'syz.0.635': attribute type 16 has an invalid length. [ 112.284538][ T8372] netlink: 'syz.0.635': attribute type 17 has an invalid length. [ 112.315246][ T8372] 8021q: adding VLAN 0 to HW filter on device .` [ 112.321749][ T8372] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.359901][ T3548] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 112.416506][ T8376] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8376 comm=syz.2.637 [ 112.429514][ T10] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 112.478464][ T8380] vivid-000: ================= START STATUS ================= [ 112.483183][ T8380] vivid-000: Radio HW Seek Mode: Bounded [ 112.487890][ T8380] vivid-000: Radio Programmable HW Seek: false [ 112.491570][ T8380] vivid-000: RDS Rx I/O Mode: Block I/O [ 112.494415][ T8380] vivid-000: Generate RBDS Instead of RDS: false [ 112.499089][ T8380] vivid-000: RDS Reception: true [ 112.502301][ T8380] vivid-000: RDS Program Type: 0 inactive [ 112.506009][ T8380] vivid-000: RDS PS Name: inactive [ 112.509214][ T8380] vivid-000: RDS Radio Text: inactive [ 112.511057][ T3548] usb 10-1: Using ep0 maxpacket: 32 [ 112.513215][ T10] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 112.515031][ T3548] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 112.519973][ T8380] vivid-000: RDS Traffic Announcement: false inactive [ 112.521947][ T3548] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 112.523988][ T8380] vivid-000: RDS Traffic Program: false [ 112.527750][ T3548] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 112.528551][ T10] usb 8-1: USB disconnect, device number 10 [ 112.529488][ T3548] usb 10-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 112.529503][ T3548] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.529513][ T3548] usb 10-1: Product: syz [ 112.529521][ T3548] usb 10-1: Manufacturer: syz [ 112.529529][ T3548] usb 10-1: SerialNumber: syz [ 112.529660][ T8380] inactive [ 112.529685][ T8380] vivid-000: RDS Music: [ 112.534907][ T3548] usb 10-1: config 0 descriptor?? [ 112.538761][ T3548] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input15 [ 112.540290][ T8380] false inactive [ 112.540362][ T8380] vivid-000: ================== END STATUS ================== [ 112.576387][ C2] xpad 10-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 112.644103][ T8388] loop3: detected capacity change from 0 to 7 [ 112.647617][ T8388] loop3: [POWERTEC] p1 [ 112.650738][ T8388] loop3: p1 size 8 extends beyond EOD, truncated [ 112.697340][ T6208] udevd[6208]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 112.745323][ T34] usb 10-1: USB disconnect, device number 3 [ 112.745357][ C2] xpad 10-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 112.778882][ T8398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.643'. [ 112.785432][ T8398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.643'. [ 112.794752][ T8398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=8398 comm=syz.0.643 [ 112.856254][ T8408] overlayfs: failed to resolve './file0': -2 [ 113.032780][ T6021] IPVS: starting estimator thread 0... [ 113.120307][ T8426] IPVS: using max 25 ests per chain, 60000 per kthread [ 113.497264][ T8470] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 113.639157][ T8486] x_tables: duplicate underflow at hook 1 [ 113.704242][ T8492] netlink: 'syz.5.671': attribute type 21 has an invalid length. [ 113.707851][ T8492] netlink: 'syz.5.671': attribute type 4 has an invalid length. [ 113.714052][ T8492] netlink: 'syz.5.671': attribute type 5 has an invalid length. [ 113.767868][ T8498] erspan1: entered promiscuous mode [ 113.789109][ T8504] netlink: 'syz.5.674': attribute type 2 has an invalid length. [ 113.951557][ T5942] Bluetooth: hci1: unexpected event for opcode 0x0002 [ 113.995050][ T8532] loop3: detected capacity change from 0 to 7 [ 113.998604][ T8532] loop3: [POWERTEC] p1 [ 114.001535][ T8532] loop3: p1 size 8 extends beyond EOD, truncated [ 114.052435][ T8535] program syz.2.683 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.055988][ T6208] udevd[6208]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 114.341267][ T8549] tmpfs: Group quota inode hardlimit too large. [ 114.461109][ T8562] program syz.5.691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.526883][ T7027] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 114.536160][ T7027] Bluetooth: hci4: Frame reassembly failed (-84) [ 114.731390][ T40] kauditd_printk_skb: 54 callbacks suppressed [ 114.731408][ T40] audit: type=1400 audit(1775478741.497:22393): avc: denied { watch watch_reads } for pid=8563 comm="syz.5.693" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 114.948199][ T8583] loop3: detected capacity change from 0 to 7 [ 114.979695][ T8583] loop3: [POWERTEC] p1 [ 114.982384][ T8583] loop3: p1 size 8 extends beyond EOD, truncated [ 115.037637][ T8586] syz.0.698 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 115.038229][ T6208] udevd[6208]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 115.136241][ T8592] __nla_validate_parse: 10 callbacks suppressed [ 115.136263][ T8592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.704'. [ 115.193269][ T8597] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.235853][ T8607] netlink: 4 bytes leftover after parsing attributes in process `syz.5.707'. [ 115.289717][ T8609] JFS: discard option not supported on device [ 115.290493][ T40] audit: type=1400 audit(1775478742.057:22394): avc: denied { read } for pid=8615 comm="syz.5.710" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 115.296083][ T8609] Mount JFS Failure: -5 [ 115.313030][ T8609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.708'. [ 115.331924][ T40] audit: type=1400 audit(1775478742.097:22395): avc: denied { map } for pid=8615 comm="syz.5.710" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 115.333372][ T8616] validate_nla: 1 callbacks suppressed [ 115.333382][ T8616] netlink: 'syz.5.710': attribute type 21 has an invalid length. [ 115.340342][ T40] audit: type=1400 audit(1775478742.097:22396): avc: denied { write } for pid=8608 comm="syz.0.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 115.344383][ T8613] kvm: pic: non byte write [ 115.372251][ T8613] kvm: vcpu 0: requested 106496 ns lapic timer period limited to 200000 ns [ 115.440275][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.5.714'. [ 115.443457][ T8630] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 115.502068][ T8635] tmpfs: Unknown parameter 'nr_indes' [ 115.559717][ T8646] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8646 comm=syz.0.719 [ 115.560058][ T40] audit: type=1400 audit(1775478742.317:22397): avc: denied { write } for pid=8632 comm="syz.5.715" name="cpuset.effective_cpus" dev="9p" ino=79691963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.575865][ T40] audit: type=1400 audit(1775478742.337:22398): avc: denied { lock } for pid=8632 comm="syz.5.715" path="/117/file0/cpuset.effective_cpus" dev="9p" ino=79691963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.663663][ T40] audit: type=1400 audit(1775478742.427:22399): avc: denied { read } for pid=8649 comm="syz.0.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 115.789937][ T40] audit: type=1400 audit(1775478742.547:22400): avc: denied { append } for pid=8649 comm="syz.0.720" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 115.836902][ T8665] 9pnet_virtio: no channels available for device syz [ 115.898036][ T8668] syzkaller0: entered promiscuous mode [ 115.900753][ T8668] syzkaller0: entered allmulticast mode [ 116.043043][ T40] audit: type=1400 audit(1775478742.807:22401): avc: denied { read } for pid=8670 comm="syz.3.725" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 116.222817][ T40] audit: type=1400 audit(1775478742.987:22402): avc: denied { ioctl } for pid=8670 comm="syz.3.725" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 116.573315][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 116.576708][ T5289] Bluetooth: hci4: command 0x1003 tx timeout [ 117.467460][ T8681] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8681 comm=syz.2.728 [ 117.611800][ T8696] xt_CONNSECMARK: invalid mode: 0 [ 117.641462][ T8697] dvmrp0: entered allmulticast mode [ 117.818934][ T8710] nbd: must specify a size in bytes for the device [ 117.942274][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.742'. [ 117.974446][ T8734] hpfs: Bad magic ... probably not HPFS [ 117.982831][ T8734] Bluetooth: MGMT ver 1.23 [ 117.988625][ T8734] hpfs: Bad magic ... probably not HPFS [ 118.139015][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.749'. [ 118.157860][ T8762] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 118.664107][ T8793] netlink: 24 bytes leftover after parsing attributes in process `syz.2.758'. [ 118.775182][ T8801] netlink: 68 bytes leftover after parsing attributes in process `syz.3.761'. [ 118.867260][ T7027] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.959469][ T7027] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.083070][ T7027] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.088769][ T8811] netfs: Couldn't get user pages (rc=-14) [ 119.092771][ T8811] netfs: Zero-sized read [R=23] [ 119.158647][ T5940] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 119.164859][ T5940] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 119.174115][ T5940] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 119.178913][ T5940] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.194541][ T5940] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 119.195037][ T7027] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.261629][ T8829] xt_bpf: check failed: parse error [ 119.271188][ T8829] x_tables: duplicate underflow at hook 1 [ 119.302017][ T434] Bluetooth: hci4: Frame reassembly failed (-84) [ 119.393754][ T8821] chnl_net:caif_netlink_parms(): no params data found [ 119.430435][ T7027] bridge_slave_1: left allmulticast mode [ 119.432975][ T7027] bridge_slave_1: left promiscuous mode [ 119.435565][ T7027] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.447636][ T7027] bridge_slave_0: left allmulticast mode [ 119.449544][ T7027] bridge_slave_0: left promiscuous mode [ 119.452327][ T7027] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.477844][ T8845] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 119.516088][ T8845] netlink: 28 bytes leftover after parsing attributes in process `syz.3.768'. [ 119.633674][ T7027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.637923][ T7027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.642806][ T7027] bond0 (unregistering): Released all slaves [ 119.648491][ T7027] bond1 (unregistering): Released all slaves [ 119.655886][ T7027] bond2 (unregistering): Released all slaves [ 119.722882][ T8821] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.725870][ T8821] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.728558][ T8821] bridge_slave_0: entered allmulticast mode [ 119.733304][ T8821] bridge_slave_0: entered promiscuous mode [ 119.736797][ T8821] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.739212][ T8821] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.742632][ T8821] bridge_slave_1: entered allmulticast mode [ 119.746528][ T8821] bridge_slave_1: entered promiscuous mode [ 119.787525][ T8821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.811568][ T8821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.820299][ T8856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.775'. [ 119.823890][ T8856] netlink: 'syz.0.775': attribute type 18 has an invalid length. [ 119.830528][ T8821] team0: Port device team_slave_0 added [ 119.834081][ T8821] team0: Port device team_slave_1 added [ 119.847910][ T40] kauditd_printk_skb: 164 callbacks suppressed [ 119.847924][ T40] audit: type=1326 audit(1775478746.607:22567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8844 comm="syz.3.768" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdc2c79c819 code=0x7ffc0000 [ 119.882567][ T8821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.885574][ T8821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.903100][ T8821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.913891][ T40] audit: type=1400 audit(1775478746.677:22568): avc: denied { write } for pid=8859 comm="syz.3.777" name="usbmon6" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 119.915941][ T8821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.926860][ T8821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.938729][ T8821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.009960][ T5289] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.010359][ T5942] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 120.031227][ T8821] hsr_slave_0: entered promiscuous mode [ 120.034672][ T8821] hsr_slave_1: entered promiscuous mode [ 120.037740][ T8821] debugfs: 'hsr0' already exists in 'hsr' [ 120.041878][ T8821] Cannot create hsr debugfs directory [ 120.085690][ T40] audit: type=1400 audit(1775478746.847:22569): avc: denied { ioctl } for pid=8867 comm="syz.0.778" path="socket:[27391]" dev="sockfs" ino=27391 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.222892][ T7027] hsr_slave_0: left promiscuous mode [ 120.225083][ T7027] hsr_slave_1: left promiscuous mode [ 120.227631][ T7027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.231186][ T7027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.234349][ T7027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.236681][ T7027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.245141][ T7027] veth1_macvtap: left promiscuous mode [ 120.247385][ T7027] veth0_macvtap: left promiscuous mode [ 120.249339][ T7027] veth1_vlan: left promiscuous mode [ 120.252369][ T7027] veth0_vlan: left promiscuous mode [ 120.378058][ T40] audit: type=1400 audit(1775478747.137:22570): avc: denied { map } for pid=8877 comm="syz.3.779" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 120.419053][ T7027] team0 (unregistering): Port device team_slave_1 removed [ 120.431939][ T7027] team0 (unregistering): Port device team_slave_0 removed [ 120.581424][ T8821] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 120.590362][ T8821] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 120.597720][ T8821] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 120.604611][ T8821] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 120.650943][ T8821] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.653898][ T8821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.656869][ T8821] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.660125][ T8821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.728347][ T8821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.736302][ T7028] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.741954][ T7028] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.755242][ T8821] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.764755][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.767638][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.784681][ T7028] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.787432][ T7028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.904956][ T5942] Bluetooth: hci0: connection err: -111 [ 121.007967][ T8821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.129274][ T40] audit: type=1400 audit(1775478747.887:22571): avc: denied { create } for pid=8913 comm="syz.3.783" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 121.242477][ T8821] veth0_vlan: entered promiscuous mode [ 121.251958][ T8821] veth1_vlan: entered promiscuous mode [ 121.281880][ T8821] veth0_macvtap: entered promiscuous mode [ 121.292034][ T8821] veth1_macvtap: entered promiscuous mode [ 121.292347][ T5942] Bluetooth: hci2: command tx timeout [ 121.307285][ T8821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.319585][ T8821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.328665][ T7034] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.335655][ T7034] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.338749][ T7034] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.344756][ T7034] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.379936][ T5942] Bluetooth: hci4: command 0x1003 tx timeout [ 121.380176][ T5940] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 121.415831][ T7034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.420734][ T7034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.440085][ T40] audit: type=1400 audit(1775478748.197:22572): avc: denied { read } for pid=8926 comm="syz.0.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 121.452991][ T7027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.456601][ T7027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.477060][ T40] audit: type=1400 audit(1775478748.237:22573): avc: denied { mounton } for pid=8821 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 121.497767][ T8930] __nla_validate_parse: 3 callbacks suppressed [ 121.497782][ T8930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'. [ 121.545303][ T8934] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8934 comm=syz.6.763 [ 121.557427][ T8936] program syz.0.788 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.615072][ T8944] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=8944 comm=syz.0.790 [ 121.637368][ T8946] netlink: 48 bytes leftover after parsing attributes in process `syz.6.789'. [ 121.729555][ T8955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.794'. [ 121.743134][ T8955] sp0: Synchronizing with TNC [ 121.750298][ T8955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.794'. [ 121.755087][ T8955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.794'. [ 121.759932][ T8955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.794'. [ 121.765674][ T8956] netlink: 42788 bytes leftover after parsing attributes in process `syz.0.794'. [ 121.765771][ T8957] netlink: 42788 bytes leftover after parsing attributes in process `syz.0.794'. [ 121.781616][ T8954] [U] [ 121.832639][ T8961] overlayfs: overlapping lowerdir path [ 121.838057][ T40] audit: type=1400 audit(1775478748.597:22574): avc: denied { getopt } for pid=8960 comm="syz.6.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.870026][ T831] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 121.891274][ T8966] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8966 comm=syz.6.798 [ 122.029890][ T831] usb 8-1: Using ep0 maxpacket: 32 [ 122.034783][ T831] usb 8-1: config 0 has an invalid interface number: 6 but max is 0 [ 122.038594][ T831] usb 8-1: config 0 has no interface number 0 [ 122.042201][ T831] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 122.046190][ T831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.062413][ T831] usb 8-1: config 0 descriptor?? [ 122.067948][ T831] as10x_usb: device has been detected [ 122.070807][ T831] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 122.086096][ T831] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 122.103591][ T831] as10x_usb: error during firmware upload part1 [ 122.106568][ T831] Registered device nBox DVB-T Dongle [ 122.106711][ T40] audit: type=1400 audit(1775478748.867:22575): avc: denied { firmware_load } for pid=831 comm="kworker/1:2" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 122.125028][ T40] audit: type=1400 audit(1775478748.887:22576): avc: denied { bpf } for pid=8971 comm="syz.6.801" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 122.260631][ T6021] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 122.276862][ T39] usb 8-1: USB disconnect, device number 11 [ 122.304091][ T39] Unregistered device nBox DVB-T Dongle [ 122.308858][ T39] as10x_usb: device has been disconnected [ 122.326375][ T8988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.803'. [ 122.332364][ T8988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.803'. [ 122.424885][ T8993] netlink: 'syz.0.805': attribute type 7 has an invalid length. [ 122.442557][ T6021] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 122.450074][ T6021] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.454343][ T6021] usb 7-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 122.459460][ T6021] usb 7-1: config 0 interface 0 has no altsetting 0 [ 122.464170][ T6021] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 122.468016][ T6021] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 122.475156][ T6021] usb 7-1: Product: syz [ 122.477273][ T6021] usb 7-1: Manufacturer: syz [ 122.479713][ T6021] usb 7-1: SerialNumber: syz [ 122.487371][ T6021] usb 7-1: config 0 descriptor?? [ 122.504456][ T6021] hub 7-1:0.0: bad descriptor, ignoring hub [ 122.506563][ T6021] hub 7-1:0.0: probe with driver hub failed with error -5 [ 122.537836][ T9002] syzkaller0: entered promiscuous mode [ 122.539073][ T6021] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 122.540200][ T9002] syzkaller0: entered allmulticast mode [ 122.566831][ T6208] udevd[6208]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.804324][ T3548] usb 7-1: USB disconnect, device number 14 [ 122.873801][ T9029] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 122.879212][ T9029] openvswitch: netlink: Missing key (keys=40, expected=80) [ 123.139943][ T3548] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 123.258244][ T9044] tmpfs: Unknown parameter 'usrqde_hapdlimit' [ 123.302230][ T3548] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 123.305918][ T3548] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.312554][ T3548] usb 7-1: config 0 inteqemu-system-x86_64: vtd_iova_to_slpte: detected slpte permission error (iova=0xff327000, level=0x1, slpte=0x28a70001, write=1, pasid=0xffffffff) qemu-system-x86_64: vtd_iommu_translate: detected translation failure (dev=00:1f:02, iova=0xff327000) qemu-system-x86_64: New fault is not recorded due to compression of faults rface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 123.319353][ C2] DMAR: DRHD: handling fault status reg 2 [ 123.319622][ C2] DMAR: [DMA Write NO_PASID] Request device [00:1f.2] fault addr 0xff327000 [fault reason 0x05] PTE Write access is not set [ 123.331269][ T3548] usb 7-1: config 0 interface 0 has no altsetting 0 [ 123.336956][ T3548] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 123.342939][ T3548] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 123.345922][ T3548] usb 7-1: Product: syz [ 123.347451][ T3548] usb 7-1: Manufacturer: syz [ 123.349694][ T3548] usb 7-1: SerialNumber: syz [ 123.354334][ T3548] usb 7-1: config 0 descriptor?? [ 123.363109][ T3548] hub 7-1:0.0: bad descriptor, ignoring hub [ 123.366664][ T3548] hub 7-1:0.0: probe with driver hub failed with error -5 [ 123.384228][ T5940] Bluetooth: hci2: command tx timeout [ 123.432535][ T3548] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 123.448473][ T6208] udevd[6208]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.510432][ T9050] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 123.523082][ T9050] overlayfs: failed to set xattr on upper [ 123.525642][ T9050] overlayfs: ...falling back to redirect_dir=nofollow. [ 123.528754][ T9050] overlayfs: ...falling back to index=off. [ 123.532525][ T9050] overlayfs: ...falling back to uuid=null. [ 123.535188][ T9050] overlayfs: maximum fs stacking depth exceeded [ 124.202845][ T9069] program syz.6.822 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.888226][ T9061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.977945][ T9082] veth0_to_team: entered promiscuous mode [ 124.982299][ T9082] erspan0: entered promiscuous mode [ 125.123423][ T5931] usb 7-1: USB disconnect, device number 15 [ 125.157407][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 125.157428][ T40] audit: type=1400 audit(1775478751.917:22585): avc: denied { create } for pid=9092 comm="syz.6.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 125.219205][ T9097] loop3: detected capacity change from 0 to 7 [ 125.231214][ T6208] loop3: [POWERTEC] p1 [ 125.232769][ T6208] loop3: p1 size 8 extends beyond EOD, truncated [ 125.243260][ T9093] syzkaller0: entered promiscuous mode [ 125.245863][ T9093] syzkaller0: entered allmulticast mode [ 125.255578][ T9097] loop3: [POWERTEC] p1 [ 125.258875][ T9097] loop3: p1 size 8 extends beyond EOD, truncated [ 125.285962][ T6208] udevd[6208]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 125.304863][ T6208] udevd[6208]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 125.307786][ T9103] bridge_slave_1: left allmulticast mode [ 125.311781][ T9103] bridge_slave_1: left promiscuous mode [ 125.313927][ T9103] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.318938][ T9103] bridge_slave_0: left allmulticast mode [ 125.323329][ T9103] bridge_slave_0: left promiscuous mode [ 125.325255][ T9103] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.355654][ T40] audit: type=1400 audit(1775478752.117:22586): avc: denied { ioctl } for pid=9104 comm="syz.3.831" path="socket:[25571]" dev="sockfs" ino=25571 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 125.450815][ T5940] Bluetooth: hci2: command tx timeout [ 125.479989][ T34] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 125.495383][ T9118] openvswitch: netlink: Flow actions attr not present in new flow. [ 125.558382][ T9120] openvswitch: netlink: Multiple metadata blocks provided [ 125.562085][ T9118] openvswitch: netlink: Multiple metadata blocks provided [ 125.609930][ T34] usb 11-1: device descriptor read/64, error -71 [ 125.850451][ T34] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 125.858086][ T40] audit: type=1400 audit(1775478752.617:22587): avc: denied { create } for pid=9127 comm="syz.0.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 125.859087][ T9127] delete_channel: no stack [ 125.870672][ T9127] delete_channel: no stack [ 125.910033][ T9142] loop3: detected capacity change from 0 to 7 [ 125.914060][ T6208] loop3: [POWERTEC] p1 [ 125.916787][ T6208] loop3: p1 size 8 extends beyond EOD, truncated [ 125.929664][ T9142] loop3: [POWERTEC] p1 [ 125.931751][ T9142] loop3: p1 size 8 extends beyond EOD, truncated [ 125.970173][ T6208] udevd[6208]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 125.979978][ T34] usb 11-1: device descriptor read/64, error -71 [ 125.992616][ T6208] udevd[6208]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 126.090130][ T34] usb usb11-port1: attempt power cycle [ 126.099857][ T40] audit: type=1400 audit(1775478752.857:22588): avc: denied { unmount } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 126.397882][ T9175] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9175 comm=syz.3.848 [ 126.407294][ T9175] FAULT_INJECTION: forcing a failure. [ 126.407294][ T9175] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 126.413359][ T9175] CPU: 3 UID: 0 PID: 9175 Comm: syz.3.848 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.413386][ T9175] Tainted: [L]=SOFTLOCKUP [ 126.413392][ T9175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.413402][ T9175] Call Trace: [ 126.413414][ T9175] [ 126.413420][ T9175] dump_stack_lvl+0x100/0x190 [ 126.414005][ T9175] should_fail_ex.cold+0x5/0xa [ 126.414092][ T9175] _copy_from_user+0x2e/0xd0 [ 126.414272][ T9175] copy_msghdr_from_user+0x9f/0x4f0 [ 126.414506][ T9175] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 126.414539][ T9175] ___sys_sendmsg+0x106/0x1e0 [ 126.414559][ T9175] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.414606][ T9175] __sys_sendmsg+0x170/0x220 [ 126.414630][ T9175] ? __pfx___sys_sendmsg+0x10/0x10 [ 126.414667][ T9175] do_syscall_64+0x106/0xf80 [ 126.414959][ T9175] ? clear_bhb_loop+0x40/0x90 [ 126.414986][ T9175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.415006][ T9175] RIP: 0033:0x7fdc2c79c819 [ 126.415023][ T9175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.415041][ T9175] RSP: 002b:00007fdc2a9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.415060][ T9175] RAX: ffffffffffffffda RBX: 00007fdc2ca15fa0 RCX: 00007fdc2c79c819 [ 126.415073][ T9175] RDX: 0000000000004010 RSI: 0000200000000280 RDI: 0000000000000006 [ 126.415084][ T9175] RBP: 00007fdc2a9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 126.415095][ T9175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.415106][ T9175] R13: 00007fdc2ca16038 R14: 00007fdc2ca15fa0 R15: 00007fff61605318 [ 126.415130][ T9175] [ 126.500639][ T34] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 126.521595][ T34] usb 11-1: device descriptor read/8, error -71 [ 126.612649][ T40] audit: type=1400 audit(1775478753.377:22589): avc: denied { create } for pid=9186 comm="syz.2.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 126.630472][ T40] audit: type=1400 audit(1775478753.387:22590): avc: denied { sys_admin } for pid=9186 comm="syz.2.852" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 126.661177][ T9193] (syz.0.854,9193,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 126.664836][ T9193] (syz.0.854,9193,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 126.667939][ T9193] (syz.0.854,9193,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 126.674984][ T9193] (syz.0.854,9193,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 126.759915][ T34] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 126.774317][ T9178] __nla_validate_parse: 8 callbacks suppressed [ 126.774337][ T9178] netlink: 348 bytes leftover after parsing attributes in process `syz.3.850'. [ 126.774646][ T9200] loop7: detected capacity change from 0 to 2640 [ 126.780555][ T34] usb 11-1: device descriptor read/8, error -71 [ 126.786029][ T9200] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.793534][ T9200] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.797384][ T9200] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.801508][ T9200] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.804740][ T9200] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.808347][ T9200] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.813798][ T9200] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.817665][ T9200] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.822197][ T9200] ldm_validate_partition_table(): Disk read failed. [ 126.825420][ T9200] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.829591][ T9200] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.833895][ T9200] Dev loop7: unable to read RDB block 0 [ 126.835765][ T9200] loop7: unable to read partition table [ 126.850101][ T9200] loop_reread_partitions: partition scan of loop7 (3 ) failed (rc=-5) [ 126.893005][ T34] usb usb11-port1: unable to enumerate USB device [ 126.898939][ T9205] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9205 comm=syz.2.858 [ 126.908564][ T9205] FAULT_INJECTION: forcing a failure. [ 126.908564][ T9205] name failslab, interval 1, probability 0, space 0, times 1 [ 126.914211][ T9205] CPU: 3 UID: 0 PID: 9205 Comm: syz.2.858 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.914239][ T9205] Tainted: [L]=SOFTLOCKUP [ 126.914245][ T9205] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.914255][ T9205] Call Trace: [ 126.914262][ T9205] [ 126.914269][ T9205] dump_stack_lvl+0x100/0x190 [ 126.914306][ T9205] should_fail_ex.cold+0x5/0xa [ 126.914329][ T9205] should_failslab+0xc2/0x120 [ 126.914604][ T9205] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 126.914634][ T9205] ? __alloc_skb+0x140/0x710 [ 126.914664][ T9205] __alloc_skb+0x140/0x710 [ 126.914686][ T9205] ? __alloc_skb+0x5b7/0x710 [ 126.914708][ T9205] ? __pfx___alloc_skb+0x10/0x10 [ 126.914743][ T9205] netlink_alloc_large_skb+0x69/0x150 [ 126.914802][ T9205] netlink_sendmsg+0x680/0xda0 [ 126.914823][ T9205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.914838][ T9205] ? __might_fault+0x10/0x140 [ 126.914909][ T9205] ____sys_sendmsg+0x9e1/0xb70 [ 126.914928][ T9205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.914948][ T9205] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.914977][ T9205] ___sys_sendmsg+0x190/0x1e0 [ 126.914998][ T9205] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.915046][ T9205] __sys_sendmsg+0x170/0x220 [ 126.915072][ T9205] ? __pfx___sys_sendmsg+0x10/0x10 [ 126.915111][ T9205] do_syscall_64+0x106/0xf80 [ 126.915129][ T9205] ? clear_bhb_loop+0x40/0x90 [ 126.915148][ T9205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.915165][ T9205] RIP: 0033:0x7f12cc99c819 [ 126.915181][ T9205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.915198][ T9205] RSP: 002b:00007f12cd91a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.915215][ T9205] RAX: ffffffffffffffda RBX: 00007f12ccc15fa0 RCX: 00007f12cc99c819 [ 126.915226][ T9205] RDX: 0000000000004010 RSI: 0000200000000280 RDI: 0000000000000006 [ 126.915237][ T9205] RBP: 00007f12cd91a090 R08: 0000000000000000 R09: 0000000000000000 [ 126.915248][ T9205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.915258][ T9205] R13: 00007f12ccc16038 R14: 00007f12ccc15fa0 R15: 00007ffd97900168 [ 126.915281][ T9205] [ 126.987946][ T40] audit: type=1400 audit(1775478753.737:22591): avc: denied { bind } for pid=9208 comm="syz.0.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 127.080386][ T40] audit: type=1400 audit(1775478753.847:22592): avc: denied { listen } for pid=9208 comm="syz.0.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 127.256624][ T9217] block nbd0: shutting down sockets [ 127.312335][ T9221] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9221 comm=syz.2.863 [ 127.316180][ T9224] netlink: 'syz.0.864': attribute type 1 has an invalid length. [ 127.357328][ T9224] 8021q: adding VLAN 0 to HW filter on device bond3 [ 127.372027][ T40] audit: type=1400 audit(1775478754.137:22593): avc: denied { connect } for pid=9222 comm="syz.0.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 127.387482][ T9229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.866'. [ 127.394115][ T40] audit: type=1400 audit(1775478754.157:22594): avc: denied { search } for pid=9223 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.425036][ T9231] overlayfs: conflicting lowerdir path syzkaller syzkaller login: [ 127.530502][ T5940] Bluetooth: hci2: command tx timeout [ 127.606624][ T9246] netlink: 20 bytes leftover after parsing attributes in process `syz.2.871'. [ 127.610292][ T9246] netlink: 28 bytes leftover after parsing attributes in process `syz.2.871'. [ 127.632514][ T9251] netlink: 16 bytes leftover after parsing attributes in process `syz.0.872'. [ 127.675473][ T9251] program syz.0.872 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.830246][ T9272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.877'. [ 127.843580][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.877'. [ 127.936563][ T9283] netlink: 'syz.0.881': attribute type 3 has an invalid length. [ 127.988759][ T9285] fuse: Bad value for 'fd' [ 128.179585][ T9304] netlink: 232 bytes leftover after parsing attributes in process `syz.0.889'. [ 128.239229][ T9301] sit1: left allmulticast mode [ 128.283964][ T9297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9297 comm=syz.3.887 [ 128.289861][ T9297] netlink: 'syz.3.887': attribute type 13 has an invalid length. [ 128.294866][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.890'. [ 130.025482][ T9297] gretap0: refused to change device tx_queue_len [ 130.029011][ T9297] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 130.175750][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 130.175769][ T40] audit: type=1400 audit(1775478756.937:22614): avc: denied { create } for pid=9323 comm="syz.3.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 130.178800][ T9325] : renamed from vlan0 (while UP) [ 130.179377][ T9321] netlink: 'syz.2.893': attribute type 1 has an invalid length. [ 130.179403][ T9321] netlink: 96 bytes leftover after parsing attributes in process `syz.2.893'. [ 130.179411][ T9321] netlink: 'syz.2.893': attribute type 1 has an invalid length. [ 130.179419][ T9321] netlink: 'syz.2.893': attribute type 8 has an invalid length. [ 130.220438][ T40] audit: type=1400 audit(1775478756.977:22615): avc: denied { bind } for pid=9323 comm="syz.3.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 130.227354][ T40] audit: type=1400 audit(1775478756.977:22616): avc: denied { setopt } for pid=9323 comm="syz.3.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 130.249852][ T40] audit: type=1400 audit(1775478756.977:22617): avc: denied { accept } for pid=9323 comm="syz.3.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 130.256121][ T40] audit: type=1400 audit(1775478756.977:22618): avc: denied { write } for pid=9323 comm="syz.3.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 130.269848][ T40] audit: type=1400 audit(1775478756.977:22619): avc: denied { read } for pid=9323 comm="syz.3.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 130.284494][ T40] audit: type=1400 audit(1775478757.037:22620): avc: denied { shutdown } for pid=9323 comm="syz.3.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 130.393561][ T40] audit: type=1400 audit(1775478757.147:22621): avc: denied { setopt } for pid=9337 comm="syz.2.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 130.412547][ T9343] loop3: detected capacity change from 0 to 7 [ 130.416371][ T9343] loop3: [POWERTEC] p1 [ 130.418263][ T9343] loop3: p1 size 8 extends beyond EOD, truncated [ 130.464780][ T40] audit: type=1400 audit(1775478757.217:22622): avc: denied { ioctl } for pid=9330 comm="syz.0.897" path="socket:[31019]" dev="sockfs" ino=31019 ioctlcmd=0x6e88 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 130.729827][ T40] audit: type=1400 audit(1775478757.487:22623): avc: denied { associate } for pid=9350 comm="syz.0.901" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 130.785855][ T9367] bridge_slave_1: left allmulticast mode [ 130.788514][ T9367] bridge_slave_1: left promiscuous mode [ 130.791615][ T9367] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.796950][ T9367] bridge_slave_0: left allmulticast mode [ 130.799158][ T9367] bridge_slave_0: left promiscuous mode [ 130.802358][ T9367] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.814317][ T9373] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 13 out of range (51000000..2150000000) [ 130.857984][ T9379] IPVS: sh: FWM 3 0x00000003 - no destination available [ 130.860842][ C2] IPVS: sh: FWM 3 0x00000003 - no destination available [ 130.864927][ T9379] netlink: 'syz.2.906': attribute type 2 has an invalid length. [ 131.179905][ T34] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 131.342370][ T34] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 131.345016][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 131.348810][ T34] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.353142][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 131.357312][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 131.362157][ T34] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 131.364575][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 131.368047][ T34] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.372380][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 131.376396][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 131.380972][ T34] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 131.383365][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 131.386757][ T34] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.391112][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 131.394742][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 131.400870][ T34] usb 7-1: string descriptor 0 read error: -22 [ 131.403162][ T34] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 131.405993][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.420634][ T34] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 131.674269][ T34] usb 7-1: USB disconnect, device number 16 [ 133.533710][ T9351] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.593498][ T9427] program syz.0.911 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.598341][ T9427] program syz.0.911 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.641283][ T9431] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9431 comm=syz.0.913 [ 133.683405][ T9435] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 133.684245][ T9437] loop3: detected capacity change from 0 to 7 [ 133.687017][ T7028] Bluetooth: hci4: Frame reassembly failed (-84) [ 133.692000][ T9437] loop3: [POWERTEC] p1 [ 133.693886][ T9437] loop3: p1 size 8 extends beyond EOD, truncated [ 133.731198][ T6208] udevd[6208]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 134.124734][ T9468] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9468 comm=syz.2.924 [ 134.186506][ T8986] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 134.362273][ T8986] usb 5-1: config 0 has no interfaces? [ 134.364113][ T8986] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.367069][ T8986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.380131][ T8986] usb 5-1: config 0 descriptor?? [ 134.585445][ T5998] usb 5-1: USB disconnect, device number 17 [ 135.076322][ T9490] loop3: detected capacity change from 0 to 7 [ 135.081940][ T6208] loop3: [POWERTEC] p1 [ 135.084951][ T6208] loop3: p1 size 8 extends beyond EOD, truncated [ 135.097621][ T9490] loop3: [POWERTEC] p1 [ 135.100099][ T9490] loop3: p1 size 8 extends beyond EOD, truncated [ 135.129496][ T6208] udevd[6208]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 135.150666][ T6208] udevd[6208]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 135.690144][ T5942] Bluetooth: hci4: command 0x1003 tx timeout [ 135.690437][ T5940] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 135.820917][ T9504] netlink: 'syz.6.937': attribute type 10 has an invalid length. [ 135.825295][ T9504] bond0: (slave wlan1): Opening slave failed [ 135.833184][ T9504] __nla_validate_parse: 4 callbacks suppressed [ 135.833210][ T9504] netlink: 36 bytes leftover after parsing attributes in process `syz.6.937'. [ 136.035897][ T9514] loop3: detected capacity change from 0 to 7 [ 136.039400][ T9514] loop3: [POWERTEC] p1 [ 136.041539][ T9514] loop3: p1 size 8 extends beyond EOD, truncated [ 136.083309][ T6208] udevd[6208]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 136.097595][ T9516] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9516 comm=syz.6.942 [ 136.215140][ T9522] netlink: 'syz.3.945': attribute type 3 has an invalid length. [ 136.245667][ T9524] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.946'. [ 136.280693][ T9528] program syz.3.948 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.300767][ T9532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=9532 comm=syz.2.950 [ 136.306370][ T9534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=9534 comm=syz.2.950 [ 136.312339][ T9534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=9534 comm=syz.2.950 [ 136.314227][ T9532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=9532 comm=syz.2.950 [ 136.324887][ T40] kauditd_printk_skb: 105 callbacks suppressed [ 136.324898][ T40] audit: type=1400 audit(1775478763.087:22729): avc: denied { map } for pid=9530 comm="syz.2.950" path="socket:[31905]" dev="sockfs" ino=31905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 136.336030][ T9536] bond1: entered allmulticast mode [ 136.336570][ T9532] tmpfs: Cannot enable quota on remount [ 136.342416][ T9531] tmpfs: Cannot enable quota on remount [ 136.344994][ T9536] macvlan2: entered promiscuous mode [ 136.346779][ T9536] macvlan2: entered allmulticast mode [ 136.347885][ T9531] overlayfs: conflicting options: userxattr,redirect_dir=on [ 136.350721][ T9536] bond1: entered promiscuous mode [ 136.355604][ T9536] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 136.356024][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.950'. [ 136.362057][ T9532] netlink: 'syz.2.950': attribute type 30 has an invalid length. [ 136.364803][ T9532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.950'. [ 136.369485][ T9536] bond1: left promiscuous mode [ 136.396810][ T9531] sch_tbf: burst 545 is lower than device lo mtu (65550) ! [ 136.403767][ T9544] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9544 comm=syz.3.952 [ 136.414987][ T40] audit: type=1400 audit(1775478763.177:22730): avc: denied { connect } for pid=9530 comm="syz.2.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 136.463902][ T9547] overlayfs: failed to resolve './bus': -2 [ 136.542754][ T9552] loop2: detected capacity change from 0 to 7 [ 136.557764][ T9555] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 136.579962][ T9552] Dev loop2: unable to read RDB block 7 [ 136.583614][ T9552] loop2: unable to read partition table [ 136.586428][ T9552] loop2: partition table beyond EOD, truncated [ 136.590355][ T9552] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 136.599107][ T9552] 9pnet_fd: Insufficient options for proto=fd [ 136.656624][ C0] invalid error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 136.661294][ C0] buffer_io_error: 11 callbacks suppressed [ 136.661307][ C0] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 136.679308][ T40] audit: type=1800 audit(1775478763.437:22731): pid=9561 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.958" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 136.734047][ T9568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.959'. [ 136.750291][ T9568] nfs: Unknown parameter 'user.incfs.metadata' [ 136.786597][ T9571] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 136.792042][ T5338] Dev loop2: unable to read RDB block 7 [ 136.793447][ T9573] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9573 comm=syz.2.961 [ 136.794796][ T5338] loop2: unable to read partition table [ 136.802142][ T5338] loop2: partition table beyond EOD, truncated [ 136.817177][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.962'. [ 136.823451][ T9575] lo: Master is either lo or non-ether device [ 136.847055][ T40] audit: type=1326 audit(1775478763.607:22732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9577 comm="syz.0.963" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244919c819 code=0x7ff00000 [ 136.855673][ T40] audit: type=1326 audit(1775478763.607:22733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9577 comm="syz.0.963" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244919c819 code=0x7ff00000 [ 136.864523][ T40] audit: type=1326 audit(1775478763.607:22734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9577 comm="syz.0.963" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244919c819 code=0x7ff00000 [ 136.878260][ T40] audit: type=1326 audit(1775478763.607:22735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9577 comm="syz.0.963" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244919c819 code=0x7ff00000 [ 136.889433][ T40] audit: type=1326 audit(1775478763.607:22736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9577 comm="syz.0.963" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244919c819 code=0x7ff00000 [ 136.901497][ T40] audit: type=1326 audit(1775478763.607:22737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9577 comm="syz.0.963" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244919c819 code=0x7ff00000 [ 136.914370][ T40] audit: type=1326 audit(1775478763.607:22738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9577 comm="syz.0.963" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244919c819 code=0x7ff00000 [ 136.955195][ T5338] Dev loop2: unable to read RDB block 7 [ 136.957720][ T5338] loop2: unable to read partition table [ 136.961194][ T5338] loop2: partition table beyond EOD, truncated [ 137.273509][ T9606] loop3: detected capacity change from 0 to 7 [ 137.278227][ T9606] loop3: [POWERTEC] p1 [ 137.280843][ T9606] loop3: p1 size 8 extends beyond EOD, truncated [ 137.335682][ T6208] udevd[6208]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 137.391228][ T5338] Dev loop2: unable to read RDB block 7 [ 137.393588][ T5338] loop2: unable to read partition table [ 137.395127][ T434] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 137.396098][ T5338] loop2: partition table beyond EOD, truncated [ 137.714825][ T9630] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9630 comm=syz.0.975 [ 137.818433][ T9634] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 137.821537][ T9634] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 137.829184][ T9634] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 137.831149][ T9634] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 137.837277][ T9634] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 137.839444][ T9634] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 137.947833][ T9634] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 137.955695][ T9634] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 138.238569][ T9653] overlay: filesystem on ./bus not supported as upperdir [ 138.349390][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.366770][ T9665] EXT4-fs (nbd2): unable to read superblock [ 138.666301][ T9684] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9684 comm=syz.3.985 [ 138.696610][ T9694] netlink: 28 bytes leftover after parsing attributes in process `syz.6.986'. [ 138.705899][ T9694] netlink: 28 bytes leftover after parsing attributes in process `syz.6.986'. [ 138.922200][ T9720] netlink: 32 bytes leftover after parsing attributes in process `syz.0.992'. [ 138.968529][ T9720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9720 comm=syz.0.992 [ 139.019573][ T9733] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 139.041501][ T9734] ptrace attach of "/syz-executor exec"[5929] was attempted by " b\x0a\x0c ! \x07    ?j}6ٱĞ Dl\x0a9:$VQ\x09d'ZbWzr‘Q``V\x5c4fL\x0a6\x0az^k`q0ȟ [ 139.205125][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.997'. [ 139.334043][ T9759] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9759 comm=syz.6.999 [ 139.580842][ T9772] netlink: 'syz.6.1002': attribute type 1 has an invalid length. [ 139.600000][ T6192] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 139.636591][ T9778] ip6t_srh: unknown srh match flags 4000 [ 139.650427][ T9772] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.672186][ T9775] sctp: [Deprecated]: syz.2.1003 (pid 9775) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.672186][ T9775] Use struct sctp_sack_info instead [ 139.750597][ T9781] ksmbd: Unknown IPC event: 1, ignore. [ 139.771729][ T6192] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 139.780532][ T6192] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 139.799460][ T6192] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 139.804012][ T6192] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.808261][ T6192] usb 5-1: Product: syz [ 139.814181][ T6192] usb 5-1: Manufacturer: syz [ 139.816175][ T6192] usb 5-1: SerialNumber: syz [ 139.839120][ T6192] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 139.874353][ T5998] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 139.977541][ T9789] usb usb7: usbfs: process 9789 (syz.6.1007) did not claim interface 0 before use [ 140.051912][ T9785] infiniband sy1: set active [ 140.053660][ T9785] infiniband sy1: added bond0 [ 140.102781][ T9785] RDS/IB: sy1: added [ 140.104843][ T9785] smc: adding ib device sy1 with port count 1 [ 140.107369][ T9785] smc: ib device sy1 port 1 has no pnetid [ 140.143001][ T6192] usb 5-1: USB disconnect, device number 18 [ 140.424387][ T5942] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 140.428600][ T5942] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 140.432312][ T5942] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 140.436621][ T5942] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 140.441445][ T5942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 140.461150][ T5940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 140.469083][ T5940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 140.472571][ T5940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 140.476025][ T5940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 140.482385][ T5940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 140.972284][ T5998] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 140.975839][ T5998] ath9k_htc: Failed to initialize the device [ 140.999928][ T6192] usb 5-1: ath9k_htc: USB layer deinitialized [ 141.001592][ T9826] __nla_validate_parse: 3 callbacks suppressed [ 141.001609][ T9826] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1018'. [ 141.010523][ T9826] netlink: 'syz.2.1018': attribute type 1 has an invalid length. [ 141.013487][ T9826] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1018'. [ 141.139074][ T9832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1020'. [ 141.250702][ T9799] chnl_net:caif_netlink_parms(): no params data found [ 141.262450][ T6516] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 141.309968][ T6192] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 141.350167][ T9799] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.352748][ T9799] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.355389][ T9799] bridge_slave_0: entered allmulticast mode [ 141.358482][ T9799] bridge_slave_0: entered promiscuous mode [ 141.363154][ T9799] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.365909][ T9799] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.368881][ T9799] bridge_slave_1: entered allmulticast mode [ 141.372834][ T9799] bridge_slave_1: entered promiscuous mode [ 141.400252][ T40] kauditd_printk_skb: 1337 callbacks suppressed [ 141.400264][ T40] audit: type=1400 audit(1775478768.167:24076): avc: denied { create } for pid=9848 comm="syz.6.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 141.405517][ T9799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.418647][ T9799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.424936][ T9850] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9850 comm=syz.6.1024 [ 141.431823][ T9850] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1024'. [ 141.456883][ T9799] team0: Port device team_slave_0 added [ 141.459877][ T6192] usb 5-1: Using ep0 maxpacket: 32 [ 141.460937][ T9799] team0: Port device team_slave_1 added [ 141.465497][ T6192] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 141.472813][ T6192] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 141.480396][ T6192] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.08 [ 141.482669][ T9799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.484280][ T6192] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.486809][ T9799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.490703][ T6192] usb 5-1: Product: syz [ 141.499615][ T9799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.500606][ T6192] usb 5-1: Manufacturer: syz [ 141.505466][ T9799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.505871][ T6192] usb 5-1: SerialNumber: syz [ 141.508222][ T9799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.517674][ T6192] ldusb 5-1:1.0: LD USB Device #0 now attached to major 180 minor 0 [ 141.519910][ T9799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.566291][ T9799] hsr_slave_0: entered promiscuous mode [ 141.569458][ T9799] hsr_slave_1: entered promiscuous mode [ 141.572933][ T9799] debugfs: 'hsr0' already exists in 'hsr' [ 141.575493][ T9799] Cannot create hsr debugfs directory [ 141.733076][ T9799] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 141.746252][ T9799] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 141.748981][ T5998] usb 5-1: USB disconnect, device number 19 [ 141.752070][ C2] ldusb 5-1:1.0: usb_submit_urb failed (-19) [ 141.757494][ T9799] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 141.762442][ T5998] ldusb 5-1:1.0: LD USB Device #0 now disconnected [ 141.763493][ T9799] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 141.796196][ T9799] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.799625][ T9799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.803476][ T9799] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.806560][ T9799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.851053][ T9799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.859322][ T434] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.862228][ T434] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.869728][ T9799] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.877322][ T7027] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.880517][ T7027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.888545][ T434] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.891342][ T434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.950633][ T40] audit: type=1400 audit(1775478768.717:24077): avc: denied { write } for pid=9755 comm="syz.0.998" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 141.963068][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.998'. [ 141.966034][ T40] audit: type=1400 audit(1775478768.717:24078): avc: denied { map } for pid=9755 comm="syz.0.998" path="socket:[34237]" dev="sockfs" ino=34237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 141.976012][ T40] audit: type=1326 audit(1775478768.727:24079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.0.998" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244919c819 code=0x7ffc0000 [ 141.984730][ T40] audit: type=1326 audit(1775478768.727:24080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.0.998" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244919c819 code=0x7ffc0000 [ 141.992203][ T40] audit: type=1326 audit(1775478768.727:24081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.0.998" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f244919c819 code=0x7ffc0000 [ 142.000306][ T40] audit: type=1326 audit(1775478768.727:24082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.0.998" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244919c819 code=0x7ffc0000 [ 142.008662][ T40] audit: type=1326 audit(1775478768.727:24083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.0.998" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244919c819 code=0x7ffc0000 [ 142.019364][ T40] audit: type=1326 audit(1775478768.727:24084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.0.998" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f244919c819 code=0x7ffc0000 [ 142.029354][ T40] audit: type=1326 audit(1775478768.727:24085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.0.998" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244919c819 code=0x7ffc0000 [ 142.038845][ T9799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.239389][ T9799] veth0_vlan: entered promiscuous mode [ 142.258232][ T9799] veth1_vlan: entered promiscuous mode [ 142.275099][ T9799] veth0_macvtap: entered promiscuous mode [ 142.285123][ T9799] veth1_macvtap: entered promiscuous mode [ 142.295811][ T9799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.309653][ T9799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.326229][ T434] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.332273][ T434] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.336051][ T434] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.343182][ T434] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.428293][ T7034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.431963][ T7034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.455555][ T768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.458126][ T768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.520096][ T34] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 142.552732][ T9882] netlink: 'syz.2.1029': attribute type 1 has an invalid length. [ 142.570682][ T5940] Bluetooth: hci3: command tx timeout [ 142.605783][ T9882] 8021q: adding VLAN 0 to HW filter on device bond5 [ 142.614120][ T9882] bond4: (slave bond5): making interface the new active one [ 142.617920][ T9882] bond4: (slave bond5): Enslaving as an active interface with an up link [ 142.627070][ T9882] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1029'. [ 142.633242][ T9882] 8021q: adding VLAN 0 to HW filter on device bond4 [ 142.693478][ T34] usb 11-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 142.696708][ T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.699564][ T34] usb 11-1: Product: syz [ 142.703069][ T34] usb 11-1: Manufacturer: syz [ 142.704688][ T34] usb 11-1: SerialNumber: syz [ 142.714541][ T34] usb 11-1: config 0 descriptor?? [ 143.065546][ T34] usb 11-1: USB disconnect, device number 6 [ 143.251053][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1036'. [ 143.289536][ T9912] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 143.362831][ T9909] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9909 comm=syz.0.1036 [ 143.388823][ T9918] ------------[ cut here ]------------ [ 143.391533][ T9918] 1 [ 143.391546][ T9918] WARNING: mm/page_alloc.c:5226 at __alloc_frozen_pages_noprof+0x23ea/0x2ba0, CPU#2: syz.7.1038/9918 [ 143.398095][ T9918] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 143.400315][ T9918] CPU: 2 UID: 0 PID: 9918 Comm: syz.7.1038 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.405733][ T9918] Tainted: [L]=SOFTLOCKUP [ 143.407999][ T9918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.413037][ T9918] RIP: 0010:__alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 143.416469][ T9918] Code: 00 45 31 c9 49 83 bc 24 70 05 00 00 00 4c 89 4c 24 50 0f 85 5f f8 ff ff c6 44 24 10 00 e9 f3 ea ff ff c6 05 ae 8d 5a 0e 01 90 <0f> 0b 90 e9 69 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 143.424686][ T9918] RSP: 0018:ffffc9000eeff790 EFLAGS: 00010246 [ 143.427424][ T9918] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 143.431616][ T9918] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 143.435357][ T9918] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009 [ 143.438595][ T9918] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0 [ 143.441461][ T9919] netlink: 'syz.7.1038': attribute type 1 has an invalid length. [ 143.441998][ T9918] R13: 1ffff92001ddff41 R14: 0000000000000016 R15: 1ffff92001ddff0b [ 143.444725][ T9919] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1038'. [ 143.448234][ T9918] FS: 00007f2bdae536c0(0000) GS:ffff8880d6539000(0000) knlGS:0000000000000000 [ 143.448288][ T9918] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.453075][ T9919] netlink: 1 bytes leftover after parsing attributes in process `syz.7.1038'. [ 143.456930][ T9918] CR2: 00007f2bd9f85e40 CR3: 00000000386e3000 CR4: 0000000000352ef0 [ 143.456954][ T9918] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 143.456969][ T9918] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 143.456982][ T9918] Call Trace: [ 143.456990][ T9918] [ 143.460102][ T9919] netlink: 'syz.7.1038': attribute type 1 has an invalid length. [ 143.463683][ T9918] ? is_bpf_text_address+0x8a/0x1a0 [ 143.467289][ T9919] netlink: 634 bytes leftover after parsing attributes in process `syz.7.1038'. [ 143.470718][ T9918] ? bpf_ksym_find+0x128/0x1c0 [ 143.470758][ T9918] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 143.493811][ T9918] ? is_bpf_text_address+0x94/0x1a0 [ 143.496164][ T9918] ? kernel_text_address+0x8d/0x100 [ 143.498544][ T9918] ? __kernel_text_address+0xd/0x30 [ 143.500909][ T9918] ? unwind_get_return_address+0x59/0xa0 [ 143.503247][ T9918] ? arch_stack_walk+0xa6/0xf0 [ 143.505451][ T9918] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 143.508869][ T9918] ? tomoyo_path_number_perm+0x46d/0x580 [ 143.511834][ T9918] ? stack_trace_save+0x8e/0xc0 [ 143.513847][ T9918] ? stack_depot_save_flags+0x27/0x9d0 [ 143.516263][ T9918] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 143.518841][ T9918] ? policy_nodemask+0xed/0x4f0 [ 143.521220][ T9918] alloc_pages_mpol+0x1fb/0x550 [ 143.523785][ T9918] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 143.526446][ T9918] ? find_held_lock+0x2b/0x80 [ 143.528514][ T9918] ? avc_has_extended_perms+0x33a/0x1080 [ 143.531082][ T9918] ? drm_syncobj_array_find+0x34/0x3b0 [ 143.533635][ T9918] ___kmalloc_large_node+0x104/0x150 [ 143.535960][ T9918] __kmalloc_large_node_noprof+0x1c/0x70 [ 143.538967][ T9918] __kmalloc_noprof+0x5be/0x850 [ 143.542249][ T9918] ? __lock_acquire+0x4a5/0x2630 [ 143.544929][ T9918] drm_syncobj_array_find+0x34/0x3b0 [ 143.547246][ T9918] drm_syncobj_timeline_wait_ioctl+0x236/0x390 [ 143.549970][ T9918] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 143.552842][ T9918] ? find_held_lock+0x2b/0x80 [ 143.555026][ T9918] ? drm_dev_exit+0x41/0x60 [ 143.556953][ T9918] ? drm_dev_exit+0x41/0x60 [ 143.558958][ T9918] drm_ioctl_kernel+0x1f3/0x3e0 [ 143.561280][ T9918] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 143.564432][ T9918] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 143.567067][ T9918] drm_ioctl+0x5e6/0xc60 [ 143.569060][ T9918] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 143.572115][ T9918] ? __pfx_drm_ioctl+0x10/0x10 [ 143.574231][ T9918] ? selinux_file_ioctl+0x139/0x290 [ 143.576600][ T9918] ? selinux_file_ioctl+0xb4/0x290 [ 143.579043][ T9918] ? __pfx_drm_ioctl+0x10/0x10 [ 143.581597][ T9918] __x64_sys_ioctl+0x18e/0x210 [ 143.583949][ T9918] do_syscall_64+0x106/0xf80 [ 143.586332][ T9918] ? clear_bhb_loop+0x40/0x90 [ 143.588490][ T9918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.591104][ T9918] RIP: 0033:0x7f2bd9f9c819 [ 143.593113][ T9918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.602097][ T9918] RSP: 002b:00007f2bdae53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.605588][ T9918] RAX: ffffffffffffffda RBX: 00007f2bda215fa0 RCX: 00007f2bd9f9c819 [ 143.609011][ T9918] RDX: 0000200000000100 RSI: 00000000c03064ca RDI: 0000000000000005 [ 143.613034][ T9918] RBP: 00007f2bda032c91 R08: 0000000000000000 R09: 0000000000000000 [ 143.616822][ T9918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.620290][ T9918] R13: 00007f2bda216038 R14: 00007f2bda215fa0 R15: 00007ffd8c732718 [ 143.623720][ T9918] [ 143.625080][ T9918] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 143.628449][ T9918] CPU: 2 UID: 0 PID: 9918 Comm: syz.7.1038 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.633504][ T9918] Tainted: [L]=SOFTLOCKUP [ 143.635288][ T9918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.639577][ T9918] Call Trace: [ 143.641035][ T9918] [ 143.642328][ T9918] dump_stack_lvl+0x100/0x190 [ 143.644427][ T9918] vpanic+0x552/0x970 [ 143.646154][ T9918] ? __pfx_vpanic+0x10/0x10 [ 143.648255][ T9918] panic+0xd1/0xe0 [ 143.650389][ T9918] ? __pfx_panic+0x10/0x10 [ 143.652909][ T9918] check_panic_on_warn.cold+0x19/0x34 [ 143.655439][ T9918] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 143.658019][ T9918] __warn.cold+0x191/0x348 [ 143.659993][ T9918] __report_bug+0x296/0x3d0 [ 143.662005][ T9918] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 143.664645][ T9918] ? __pfx___report_bug+0x10/0x10 [ 143.666832][ T9918] ? __lock_acquire+0x4a5/0x2630 [ 143.668952][ T9918] ? __lock_acquire+0x4a5/0x2630 [ 143.671098][ T9918] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 143.673832][ T9918] report_bug+0xb2/0x220 [ 143.675964][ T9918] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 143.679091][ T9918] handle_bug+0x16a/0x2a0 [ 143.681269][ T9918] exc_invalid_op+0x17/0x50 [ 143.683336][ T9918] asm_exc_invalid_op+0x1a/0x20 [ 143.685392][ T9918] RIP: 0010:__alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 143.688218][ T9918] Code: 00 45 31 c9 49 83 bc 24 70 05 00 00 00 4c 89 4c 24 50 0f 85 5f f8 ff ff c6 44 24 10 00 e9 f3 ea ff ff c6 05 ae 8d 5a 0e 01 90 <0f> 0b 90 e9 69 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 143.697387][ T9918] RSP: 0018:ffffc9000eeff790 EFLAGS: 00010246 [ 143.700342][ T9918] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 143.703696][ T9918] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 143.707044][ T9918] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009 [ 143.710406][ T9918] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0 [ 143.713790][ T9918] R13: 1ffff92001ddff41 R14: 0000000000000016 R15: 1ffff92001ddff0b [ 143.717599][ T9918] ? is_bpf_text_address+0x8a/0x1a0 [ 143.720231][ T9918] ? bpf_ksym_find+0x128/0x1c0 [ 143.722352][ T9918] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 143.724929][ T9918] ? is_bpf_text_address+0x94/0x1a0 [ 143.727200][ T9918] ? kernel_text_address+0x8d/0x100 [ 143.729398][ T9918] ? __kernel_text_address+0xd/0x30 [ 143.731618][ T9918] ? unwind_get_return_address+0x59/0xa0 [ 143.734100][ T9918] ? arch_stack_walk+0xa6/0xf0 [ 143.736600][ T9918] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 143.739468][ T9918] ? tomoyo_path_number_perm+0x46d/0x580 [ 143.741675][ T9918] ? stack_trace_save+0x8e/0xc0 [ 143.743784][ T9918] ? stack_depot_save_flags+0x27/0x9d0 [ 143.746104][ T9918] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 143.748689][ T9918] ? policy_nodemask+0xed/0x4f0 [ 143.750940][ T9918] alloc_pages_mpol+0x1fb/0x550 [ 143.753425][ T9918] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 143.756029][ T9918] ? find_held_lock+0x2b/0x80 [ 143.758042][ T9918] ? avc_has_extended_perms+0x33a/0x1080 [ 143.760467][ T9918] ? drm_syncobj_array_find+0x34/0x3b0 [ 143.762786][ T9918] ___kmalloc_large_node+0x104/0x150 [ 143.765033][ T9918] __kmalloc_large_node_noprof+0x1c/0x70 [ 143.767397][ T9918] __kmalloc_noprof+0x5be/0x850 [ 143.769396][ T9918] ? __lock_acquire+0x4a5/0x2630 [ 143.771458][ T9918] drm_syncobj_array_find+0x34/0x3b0 [ 143.773707][ T9918] drm_syncobj_timeline_wait_ioctl+0x236/0x390 [ 143.776700][ T9918] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 143.780137][ T9918] ? find_held_lock+0x2b/0x80 [ 143.782157][ T9918] ? drm_dev_exit+0x41/0x60 [ 143.784149][ T9918] ? drm_dev_exit+0x41/0x60 [ 143.786124][ T9918] drm_ioctl_kernel+0x1f3/0x3e0 [ 143.788204][ T9918] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 143.791043][ T9918] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 143.793506][ T9918] drm_ioctl+0x5e6/0xc60 [ 143.795500][ T9918] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 143.798557][ T9918] ? __pfx_drm_ioctl+0x10/0x10 [ 143.800615][ T9918] ? selinux_file_ioctl+0x139/0x290 [ 143.802869][ T9918] ? selinux_file_ioctl+0xb4/0x290 [ 143.804913][ T9918] ? __pfx_drm_ioctl+0x10/0x10 [ 143.806881][ T9918] __x64_sys_ioctl+0x18e/0x210 [ 143.808898][ T9918] do_syscall_64+0x106/0xf80 [ 143.810838][ T9918] ? clear_bhb_loop+0x40/0x90 [ 143.812955][ T9918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.815698][ T9918] RIP: 0033:0x7f2bd9f9c819 [ 143.817723][ T9918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.825855][ T9918] RSP: 002b:00007f2bdae53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.829598][ T9918] RAX: ffffffffffffffda RBX: 00007f2bda215fa0 RCX: 00007f2bd9f9c819 [ 143.832844][ T9918] RDX: 0000200000000100 RSI: 00000000c03064ca RDI: 0000000000000005 [ 143.836487][ T9918] RBP: 00007f2bda032c91 R08: 0000000000000000 R09: 0000000000000000 [ 143.840340][ T9918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.843764][ T9918] R13: 00007f2bda216038 R14: 00007f2bda215fa0 R15: 00007ffd8c732718 [ 143.847139][ T9918] [ 143.849301][ T9918] Kernel Offset: disabled [ 143.851162][ T9918] Rebooting in 86400 seconds..