last executing test programs: 19m27.509599757s ago: executing program 32 (id=2116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x2, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd07001000000014002e0060ec97000fc82c00fe80000000000000000000f5ffffffaaff02000000000000000000000000000106"], 0xffe) 16m39.547375006s ago: executing program 33 (id=2780): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000840)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xff, "1b1b740e0b5be8"}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@abs, 0x6e) socket$key(0xf, 0x3, 0x2) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0xc4c85513, &(0x7f0000000000)={0x2, 0x4, 0x1, 0x0, 'syz1\x00', 0x109a7}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @empty}, {0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800083}, r10}}, 0x48) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000d097d0dcbccc77934500000000020020060400028063c6495c46b65ccafc9b47ccf67004475cdd2a540182fb85184e4540717e42"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000240)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_flash={0x33, 0x8, './file0\x00'}}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001840)={r2, 0x6}) 10m39.572655703s ago: executing program 34 (id=4145): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6", 0x47) mmap(&(0x7f0000332000/0x4000)=nil, 0x4000, 0x1000005, 0xfd8444b17b0cc3b1, 0xffffffffffffffff, 0x1c082000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = fcntl$getown(r0, 0x9) tkill(r2, 0x28) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$UFFDIO_REGISTER(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 8m48.519802211s ago: executing program 35 (id=4606): mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f00002d6000/0x1000)=nil) socket$inet(0x2, 0x3, 0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0xfff9, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0xffffff7e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r1, &(0x7f0000000300)={0x3c3, 0x7d, 0x0, {{0x500, 0x1fb, 0x0, 0x6a, {0x1}, 0x10000000, 0x2000000, 0x7, 0x0, 0x14, 'p%V\xff\xff\x81\x02\x00\x00\x00\x00\n\x007\xae_\xc1F\x00\x00', 0x81, 'pJ\x86\xce\xc6\x02\b!W\xe3\'.\x06\xeb\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xb7/K\x1a\x94\xe1\x8c\xb3\x04U\xd2\x9c7\x8e\b\xaf\x05\x1cn|\x02b\x93\xef\x8eG\xeeF\x9d\xdf\x02\xa9\xd2\x82 fw!\xd8\xef\x00\xe1\xb1\x18\"\r\r%\r\xd7\xd1\xda\x9a\x04\xca\xe3\xf2\x1e\x12\x9b\x9d\x9a9*\x8c\xc4Y\xaf(\xd1\x82\x00\xb5\xf3\xc17\xe9^n', 0x12, '\xfb\xe1a\xe9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\x95\x00', 0x121, '\xf8\xf6~^\x9b\x8f\xfbqm\xcf1^\xca\x12\xe7Xv\xd7h\xa0\x02g\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf1\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xe6Od\xb1\xd6?&ym\xcb\xecI\x86\xb8\xad4\x01\xb9\xbb\xab[\xfd#\xd6\xa88\xc6\x9ai\xdf\xcc\x9c\xddY\x06\xf1t\xa6f\xa8R\x9aEw4\a\xdb\xda\xb2\x88[\xaf\x05\x00\x00\x00\x00\x00\x00\x00\x00\xbbe@\xaeJ\x8c\x1b\xc6+\xa4\x8e\xf4\xbe\x86a\x88\'\xab\xe7o!\xd1F\xb9\xc0-\x82K\xe7\xb1\xaf\xc3~\xf34p!\x9f\x94\xd7g\xb4\xca\xa0!\x04?w:H\xcd\x88^\xafBH\x94\t\xe4\x95\xae1\x82\xc2\xdf\xcd\x1b\xc9\xe6\x1f\xa3TT\xca\xdeX\xca\xd5\x1b\x17\xc8\x1da\xfb\xee\xb9\xe2\xcf\v`\xf3\xb4\x97\xc6\xe6J\xaf\xdd\xd3\xf6\xd5\x120Y3_\xf6t\xde\x8b\x9c\x04\x12\xa8\xf4 \xed\xf04\xd17\x8ac[_q\x05\xeb\xef\x9aF\xb6\xaa+\x04\xfe\x97\xdf\x12\xc9\xcd\x83r\xa6RN\xfb\x93>\x039\x1f\x16#^*\xe3z%\xfdk\t Ay\xdf\xcf`\xf8\x86\xc5\xf1i/\xc9\xe6\x90\xcf\x84\xd9\xe3\x88@\x02\xa9\x1cTR\x8b\x80z\x89\xca\x18M\x16d_\x06\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np}\x9f)\x9f\x06\x1fu\xb7y|\xe1\xe4\x11\xea\x91\x8e\xbd\x88\x8c\x1e\x15k\x84V\x93\x1d.\xa7&\xba\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9G\x8f}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00\x00\x00\x00\x00\x00\x00ta\xb0\xcc\xaa\xa1\x93:\x0e\x8a\x82k\x14\xd4\xfc\xb2\x98\x9f\xfa\xaa\x1a\xcf\xfa\x80T\xe9U\x9d\xfa\xe4iz\xa0\v\x03\xb3\xd8\x0eU$\xf8I_\xee~\x8d\x88\xcbZ\x04\x03\x02\xac\xb0\xd1&\x0f%\x84\xdbH\xe8\xd9\x06N\x8c\xe1x\xce9n\x85\xb9~H\x86D@I\x81\x0f%\xf1\xce\xca\x97]\xebI\x1a\x12[\xf0\xd7/\x87\xcc\x10\xb0\x15N\b\x93m\xaa\xdd\x8b\x1e\x97'}}, 0x3c3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000500)="48000000140081fb7059ae08060c040002ff0f03900000000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40, 0x0) 7m3.293409246s ago: executing program 36 (id=4912): openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) write(r0, &(0x7f0000000040)="57abfb935bdcf8bb783a2e2419d1c97bb6c1f2", 0x13) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'vxcan1\x00', &(0x7f00000001c0)=@ethtool_wolinfo={0x6, 0xc91, 0x3, "3e1a0448e5be"}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYRES8=r1], 0x80}}], 0x1, 0x4000004) clock_nanosleep(0xe3a30f1b640fe9a9, 0x1, 0x0, 0x0) r3 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6m16.982330469s ago: executing program 37 (id=5076): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(0x0, 0x80) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) r3 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) sendmsg$nl_netfilter(r0, &(0x7f0000002400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002240)={&(0x7f00000022c0)={0x128, 0x6, 0xc, 0x3, 0x70bd2b, 0x25dfdbfb, {0x3, 0x0, 0x5}, [@typed={0xc, 0x4f, 0x0, 0x0, @u64=0xfff}, @typed={0x14, 0x145, 0x0, 0x0, @ipv6=@mcast2}, @generic="bd303ffb1d4a923063c377f6a2f7795c30c528e8974a71dbe70392744bcbe7e90dfa39ec3061976aebf0c39374220ecb526d93b9654a01266849f8", @typed={0xc, 0x122, 0x0, 0x0, @u64=0x3}, @generic="f8841670e773979b81e18586f7e84382b6d2d3c4608d39adcc5d2eb63f0ca220b00881c36a1f85b8a3da571e9cfc01e163374095ac475279d10824eb013f41ea69bb4bba5dc198c1588749ef7ae2747700af89bbd13c3eb07b0ae6ae6af13e4c66aef1c9fdaf07fff3e62a95ecf059ce3bd258455943726250b55c0fea7baf91df00caf0d24cea693537546c39a329e3b2e98ee0686c1580435675f556902286d8b807689e90895ea41b"]}, 0x128}, 0x1, 0x0, 0x0, 0x800}, 0x4004800) shmctl$IPC_RMID(r3, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r4 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x1000, 0x0, 0x28b}) io_uring_register$IORING_REGISTER_FILES(r4, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2020) r5 = syz_open_dev$loop(&(0x7f0000002280), 0xffff, 0x121ac3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002200)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001800dd8d000000000000000002000000000000050400000006001500050000002800168024000100010000dd"], 0x4c}}, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff6, 0xe, 0x0, 0x1, 0x4}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x42}, 0xffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmmsg(r7, &(0x7f0000004000)=[{{&(0x7f0000002440)=@pppoe={0x18, 0x0, {0x0, @empty, 'bridge_slave_0\x00'}}, 0x80, &(0x7f00000024c0), 0x0, &(0x7f0000002500)=[{0xd8, 0x1, 0x800, "cb9fbd801600c30eb0320c6865b0a1f6e75d197916a4322ffe1a536aa5c3dbbaf8b6c14a9784492e08733978f86c30adb951c76a5511f4fbf92cba7824b127725cf96551347bd3fcc28913f68d26d141afec455e9bf62df918ff51bdc873a8fdbc09ffff73abc6fb5f0527eecb9ad437a16b82cb882e51193a9f37bf06e9fc7336a888ad64a7061ad28009e99a759755b384116e5cd0e4a6829321b5e464462e6a3e58a02dab44c2c2901dfce7309cd28b13b6dce9dc4d12824e226227025b8eadff087af762e4"}, {0x70, 0x1, 0x5, "7453684b17c78d83c1374d2ffb6b0115d8eb906743a9e0c2e47ec91bb18bec3e649765e87f386ab1d62762c90d24bfa7589c05aa8bbc732a0d25af3fab304aaa1d783b088f4069bbc3df2ae5bd573a04c7e662a707d5a7b73178"}, {0xe0, 0x1, 0xe, "db5e6c36b16e9a63aa09ea17ef52ec5b65d7e02f4cec707c0f5c6af49e3d64dc6a67ae79d7890248e00c015ad81700412e1f804949cd65de72cdaa8d744c0ccf1878e5820b057593584d1153f56324af329fc097200289a0ce46fa0915e61274634988bf168bba259fd776ef30f41474befda02f1db7c6c87e6effea9ff3a67d4de7ad925c3ed19a581e46717874aa34d55b71c805d79f020b1768d145b8a7ddef9380131d01991fe34d2372026f4a0aaeb719ae28a6fd373d5a5a312f02c9935f3dd2cffa78ac908cb62f36e350"}, {0x60, 0x107, 0x401, "87c1081b2acf12e82063b6d2c684e95212bb09c566345b74634dfebc9a1c2980b1650c7512d0aabbfb633ca7c4bcac5507cb28c095e9aab70c2637f4ec8891d5da921863c9c2492828cc944ade37"}, {0xb0, 0x102, 0x4, "7316de882bf82f3e267b717d49303f4873eaee0da81fd6298ff425f8953ad88cb25d7b7736224ca9157ba8065720a85f5a38bbd12afbfdc7ac4b3d91ba0e36ed5d7f4c3c5dfcd48c1dd48a27210e8cbd4f5ef7915fc384876eff5e4ab9a2dc530f9c5df712093bc4a012faa6c5c46f759331cfefd31239b4a01535edbfc2af6f9d69ad9398efd2685f92ced354f08d41d9cf938ded2ca27cb3fb5fdb47"}], 0x338}}, {{&(0x7f0000002840)=@phonet={0x23, 0x6, 0x3, 0x9e}, 0x80, &(0x7f0000003b40)=[{&(0x7f00000028c0)="3b6d0d5601b86b00d7a1bb14e2b06e0722de5ea57a07208df4b81dacb07cfa279c32016b41cc4f1ef2938f3ac47fee33b0fb10ec6db3a8f8009b80de6eef4419ac30ea71df3da41f3dec564dd70b407b29e1652755f29bdf6a2e507c9dfb9ce065fdf62488227853f0e870c17f95b5219d158c10903adac7719944c364cc16dbe02b37c005ce9562bcf7898ea6252b4e395767bc4b89a16e2575e46635094e853e09d6e6f6ec8a68502e0d06992b5c70d2912e15e24c6b1ad21bc2d61aa1d28a6a564c1895751e56f8642f0cb433588fa15834bdb6fc4761220b382eb4f568b838c749578f86e347", 0xe8}, {&(0x7f00000029c0)="71f78659556c9ba16753ee055994730382b70c88c56e9d6311e580caf573c0a986e757d6d0f453d5de9cba6048ef6b21cf32e44a8deb7002d0a8ea512b3babd1ccd4577a3265f78c339b4496e27e2f655f343c2b7fbf662a47d0bd065d68c0b890aafb9c0426fab7ab7afb677432250dba04a9d2c4657bf421301a59cf3bdf929d7b5a96b909e5ae5c31fe3449fdace3d4fe265971cdf21d573950d0c47128a56bfa58b89f6cb605cad8689857abe51f5523f1036297e87151c7ea8a15fbc2e9fb45bd3447b47c2f51577335baa898a2f7f5a7d47c47fb20233adbe2a6f35fce1f5192d8f5d7136cc8c09bcc3eff57be68c7865d548c690480fa47b656981068b87af052648dc5e41ee1b7a8f2d4d03e8c6988e61dd9f30aa0c59ea8a836e7829fdfae1e9100333d750b8c458e64e854da55d62ae80aa8f3eb14897922f85e098a7cc57c396053cf959f7b3f42b87d85a05f6244a6d4e1ab8792778b22386e8a34155f52ab9c5fd43666915b6b9525a138c878e4d7713450b964e5fb3f15ee3af06b72b1f4a3c3216f2851a74d87588b421a758233eb0b51f028801d27dc8de6a853ec5a096cdedf8a0be148d15ff207145b3f7165cf5627e5077d88d5430233f761646d2c44fc0fc64362c9f5444b3f87f7e19d9a44aba0b873d0c626a3185a218daac87192d30cb05e15a2533f382232ec676db8210ed4719656fe893589e6658ef2d497abf425500a9cb5dccc7c769dc1c975906d63abda0a6b1ff820e1d7d7b8c6f9b8af0708edec31b97bc3f8bd9d41b23989e84c4bd3ea29e33ef294f4080ead65cc413f65aae85beb9c2e318cbd80e57db500a9ab5f1b82c35131e6ee7c27b9b7b0417548fe7698d020963bf042409d25c049ff70b9b63187cf2c3eab888f9f48d92a4712ed74c42eeaab36bd6cd4b5009d64a594c95a7a7ce3f959245f9994a7e72a783eed35bf639b5741ec1be47f6b1a709725b048113fb0911883b110f743985f8702a2e16ef1bafb51bc37a13429d2a8391d40e09c3104d4d6e9bae28d9ba680f307d1b6a819c4d386ed5848e61c9664af2b45012fda147ce4a41d8ba506da6e27d8add92fada96e55de0a5691556b7f1c45ed3a94b1b09eb678bb5af6112a0c9cb4034e3f26c891c2d9cd7f8c4240b3d02b43c8cfd7acdb92170f3019a8109d54150b6eb767e395b0fdbc8e6c01f23646bf60f19fb283ac96e907aed2490a7ae5c78c16c47597226f7357050ed691a44b160e9c1e40060818dbcff15f2f25f386747b46fbbfebb88019015eba8853811e322676ede72749b4c13a3151ef60f1343a334599bc35607efa84c1de3a7bc9d5ffd164c0e19b09e275027b372b087944cd8c41a47dd4d633504b29f4cfb4ccb0406687ddae06a9354128a95328cc96caa8469288eab95d5f18032f64c186b1d2e43052d4d0f552b92e4144a2ef8874443a37274a00390683f9005cfd0ad631960ddf2a6104f1aca14d406ec3be9a688fe2894f038af6fcde3e6f9df89056d5ad5528d41466c9e0ebe3667748fdd513c08189596b2216e5fec404779ed2c91e71c6ab626d409d6c7c158baf6303ade65b96c9fda77b7f002334aad12363b66e26bfd1f836bd9579f9472b1dfec68699ad39033f559a04fec6b61c822ae918723e5a5fa52a3ab180ad8928afc487ca92e7c81a82628a1558d572411faf06f0099c9356b608eaed1c4ffa213d798f7cf112d4766a34e177d7fa24b6a0a0f87407eafe83bdc873a91382bce0eb72cdf9fbdf9db42bb6c8593d67a215dda9f08d722a9302c00f6ce41282bfb298d74becfff0bf19efb66f27373fd513c1b0bc601f9af4824967fb9251893509f79f96695d3338ef4e1c1c004268d8ef74979667d386cfc32681085ecce69820fd399e114add7f0cd0edd93950ce432b4c93de62843f0582b833809efb891b50a97e7841f1f71e9fda0f16aef34b866c1d04cf82ca2c49d15eaf581a3578df8fa1e24e705322290d111ffe4e5752c6c6b7603e7a56c4f101d21702759616d5e6362a3a866c874ac9160c0dcf627d691894b1b7bd105148b9b935e536ac42dd201469ba80d5d029a91b2ba00d5d8fa7ff30140a34c808207095aa3be990b3c91616d0c6ebfb7c65457e7db42c2a2d831b9b73c64f172e0613a213dd110dffa2d367cd09e2c1ad5dd99b7c44cc620d068191d25314c1fec223dad0527909ad42504aecb836a4ec263626c63bd1c6a2d55efec754631a9e99c0ccfc23c535849182429d642c317bcc624c103b65bee5eac884bebf50e32f0dd2e0a1e32cf37f1088ce3c1c53a6bf762dccb96c8622f589784eb454a9d7fed64901df00c250408cf42fdc9f3711adb598d4e8a554f873e87c873139241ea94bfe2278e8df3a3bb83e0eb535513ad84d4a6df52ee7735b1b4d8408f459f73233ac3656aa794c7709187c975e9e19a71b456135b4e65ae0ecae44781f28a695a222e0d8c01906a4bac4fdf69aa4e1010b60c62faf3aaf47d04c40ffe8382a55db0a6fb92f34d9b45532e0223e5837e04988752c2836e77f41c2826dbe127e540414e1866a611c5d2f43fa204f452696752c58bb4829732d63e2f14360bf20a36fe4ff9a6f4f548383c0d1ccc05042b753c5769456612dd79a6e2c332ad656c57e8c71b8f44de77d9882a0d0aabe41a348fc884fc81a6bc892d1388b9c3bed9b41c094c74cbe1058fe8118e51eb1dc0fed25651ddf432b292f008cc54372bde170dc1add47723b9094e5b5264383019eb51cebfbb139ae7e6705d2ec17ba91405a057ded932a718facc4cbfd49e55016d20ebc4c059dc5d2e4261d4c1928ca627879f5b94fea5f39708d9192e9734ad0a2b441de26186bcd6a72253c71f168d303de78c9a54550852d06767b8654bf751ef1177c8891b243cce9e397df4eaa7f9903bd5b63d578c4a0562b3cee93e3a8fe1f408293c7f0c35d5f570555174d47070ad793a5d9dd3c447ab2b72e5b3c86e8ee61b4c69a7cd89e1e34971cd87e48cbf5d854a66360cfab013c3515ec84b49e1a09b685575beefe2955f3e56cbd04c623cddac8d1c8ad19ddbdf1c1412814d16886d0991261e5b6fd486c48384f76d0b92289e315c7bcac729ef0f174ee8a43bdec55420557255918a4757726b20f7095bdcf28a5b8be063541ee40be79076d27bfea74b61ffb07fa791fa620e32760d3edbd0f56dd51c71302bd842bd580fb4d629a0d475e47b6f7bfcab6071c95cec42c2abe6154240c79275b8dacc9b61d70d3a6b118a16bd2b20e6ad57e87f3225448c1f6d509bb5c49804235f8f6c5c5fa387241beb56573e4ce4b64952886cadff7019b9a6cab885b56f2aa371858a8ce3a86cd5520ad89847a9aef59b0179157a790e9a04ed20a7f4072f053b8c8d14122018b8de3a2912e6efa48944088c880a07317a1b48a31f94aa4390c0233311fdf16043bff2b900a201db1e2e598f8d103f61fed96e4a688c909bc8befa33c464e78ea10ed612bd8a5c8c748396d16b576e1a32a83efa8f9e94e34b8cafb0cf9e585ea936d4b8f3fc1de2a2d5abbc802ee0ba9840e1e7c1fe097d18330d14cc6f1cc003b7f0d5253d9452f420c465c152aaa0c49d8f22d6c1d034db7a5d2b1bac0de636cdfbb29de663f151fec24bc9a5e67d022a74d309db0585025945901dea14d5ebba7ede279959a6b005b6e3fbab4875ca0f726f30476b8beaf65cb3a0bbd1e190667d61dad97c7e4120a1b362097dfcc1eda4eb3ff0000efafcecf08a8d430229be31bbbee1620c19ad352cb8f9c86d6035284f8bc6b5c8e2c3c3fa80802343b086512e989ff9fbb86530a3d08b384f0e17843a643c14f79ed68cd875a85c9909cc63503db20e5e23bd4ba98149bf4dc4ae09862680dbbb54cfcd8871f6cfb39fe188219fdedcebbf2bd901edad3ad57b24187294c31822053422b244ed2881e0a69c51cc58c28d021fa018b6f4fd4e2c7f72b7ff044cbba1ecc5004496a6db0646e320bd1e2942a00c716676e89e8831c2ae6f16bcda6fe8f275a4b7b85d21df01eaf48aabd5678344df52dee9bb1a33c0c6e01e43619c5418056bba254c1cfbae8ae1db2ce2cbfdb45348f67357c806e2b745045082573aec9278c0ac748f86d8aad00c26ad67e77a2f024516acb052b573f643c314c19b760984d0401de458c68c568c707d0f1b7b2061ea00a9dcea7b3ed6d3f7ca9d6d4dffcd8788f81d9108f01c820ddb1a82a04f9252feb6e69df6ed0b4444e10399a04a5fbbb162682c0ed71c7d162564ff5d4c5582793849dee884a7b63a226dabe25eeb0fef0d8e956ded291496ae26405ec3afd2745f176b4ef104ee5ce48b4bfc43647dae739e5cf29230324b90b13f48be2067a2a0d973353162bf420174df4fbd30f4cf4747cf167ba25b24af8d4584bef5c3a872e562c0f9ace28418fdaa9059abb1ebb9bec23495ec2da2a665bd287dc6be64c610ba8ad151b3bb61ce465adf7ef504599e85f2a5452b7851e4460d285c2ea71986ba0bbbb4bb11abafc13d1a4cfc59ec986ad1939b9fad69c4c74269f52018c5e7f3db25ccade7fc67f5782ed11dcbe23a4367ed19a040760bce0f0161d6f575ca0b45e4301c921cd6177f90da2f95f0d0a4dfb29bfca640faa0ceccf349842ed2ad444e52e322df1838b357dce5b5ccf8c020071d47b035eac2ec863f66382e0b9629a84155399e3d0cdd3739582f1d58e3ce9f2ec6ecbb084887a5d4be3cec384c5688b8b11df6e5710cd12027276640bb0b56d1419c2dc090a851aade3fa4b26be78900656356a4c16846f3d2fc2a538c0f22b605b5111b0d5aa91090af39d63e44fc94f06a6e58528238c25d653fcc579dab8e7fdd0e01dab7b15667938c9b513461bc0205d83ad6bbb1d0047bc8f88894f0365080893ee4909fe926a764205931c1a1eef149cddcccbe241a7c35c1968ebd00f990b3fa2c58c125447583e92cfaacf16a3297b0e85087c20e4b850ca2a615f056c9fa04404681d5e0cc56539618c5f65f0177dc70ba43ad43677877a9299acad36021fa83591541dd8f92a7640ef6db15024da328c2ba0db86e55cf1486362a5f305420dd4c6f8a280f15ab5fc0d9d373a7e044b882d76196209508471372f5cee682f642cd5263a96f7135294fa31d0b63f9d9a2ff935189ebbe3a104900ada7139996f385181968221385a28d040112fa405d1750cf26bf044d86d8d0753ee0812b9d9100a290650e4eb30199006ac07141dd4187f8b615aedb5ba1dcd6cce0a1932dcf85a1758887512bb97241e2ca798e23df4e3c41d4e0663664ff2def54956706f65a937c88d09ce04c67d060bc5b5f0a450bc7b629ae1419ebc24fd869bc16ddbe10aca66917c24f085e6ac1020279bb415a837e2fdd64c13539b455a3c8d63f2edaaf73b6095f6c42def638b2cfd82772a23a330dcfc9e60f5118a72b8b1e0bb23a2481033e28510508c652cc7c066b907e269f2028efba7b026cd689b4a29113858620f5b4f3325c85766618adfebba99aaa481966583165306cfacd414eccc6293f0999b7e74453c89a55e7354096743abe6048758af75431bbdaedce0288d4cd258d63ab4c89ed5199365ce766acaa6230d9c7db5f09be586a51f6fe31e2859332c6e5ca6137432aed4c203746548606897471a2dadd3adc384797db948b8e885eccf10ec6a47b61841e59b2edb9892f1cf0d1b8acf48df7e6504dca5d29c206523f49b639755e4d7e41de31f6fd897ff0b11232005ae40894bb518b315e5bd143ba25940dcdf2f6eba35", 0x1000}, {&(0x7f00000039c0)="30bdcfec9ffebcae5eb0fdfefc966b9f47033d78eb891b8e6e0bc4272e9b33bf65c39fc22cc883adb071b091d2cb67056b21244176b768c85d34108bbe80191234b5722c9986e3cac6bf75049c64aa88214bedc77d7ac1dcc306c0b71fd1ae4778f7036f767ef770bda9", 0x6a}, {&(0x7f0000003a40)="63b662de2e3b4e67f5e20eab82e152f72de12bb1bbc2ebbae08b383ad6057681cdfdda96a0cc5ea3939107849617575c5f0d3e4e218e4bca293f4718043d8845fc9de49d99e2fe1a685387d6a4edd4b41d838bbdc4daf1dd13e95af84e090649f75507eca3bcf81ff107bae8d9e62b6d19fa79eb1babc77ee1511eb42250a6ee3615fb6833af57938636dc9dd35fb5f34dfbf00ac9813189a9", 0x99}, {&(0x7f0000003b00)="d20d64038bdf47cfdaf4987aa8cdc175dcb709c3b28710ef047f9f12cccab94a92084ac3ef090fa1708d06", 0x2b}], 0x5, &(0x7f0000003bc0)=[{0x30, 0x10d, 0x8, "1359073f4c037b1bf9796bc84be40b00dfadae8c2e7ca7f7b523"}, {0x38, 0x102, 0x89, "d1d5913370d0b1696a1a3f13a2590308c0490fcaf559ca6f69c1972d50f6f18abed1"}, {0xe8, 0x110, 0x9, "470a13b001913c670161b9b77440444ef40917a75a8a65c42b714bd9e1e11227e7499e8584a1aa9bfc9a0604274980e6867317c8cbf1619cb1944610d7901cb02b92dc882f11e16ed4c06120ae10b05975d4e1a3a06f7e069b513822d21e471a2324f5c55162f713a9639c5e5bd0cbf672c03409896058d932ac96b3d990b651427614035d4413f200316777dac1a902b4047715a1f341bbe5688523315527733b7663209e2277262de25fe2a6a07b9f2974ad9bb5bbe2d3da650f4cd82f4efc617f28e3aa8ab3aed9a1b615c9cfcb4cad49"}, {0x40, 0x84, 0x9, "25f0bcdaa7be08862d95fdbfcea490172c0add6bdc2606b37a71dbe1965d5e35918d020de4b9be4ebece5d0dca"}, {0xe8, 0x1, 0x7, "da6f7695d8cbabe9da036208c1c8b6e5dbae1b428596dab8c3d1e45188a5dfb95c2f22d043ffb2fde4326297e8dc6981c24bad4358ca93bff8cc9a7bd790b7cb165e3587633cd29bf8c07b6e54ec06dc6639b8c6db65a8cf8644606a1143636c0dc98eeb3d10474839f73dcfe55ec5480aad77340cf7b5375378b38193652cd00c52664b5dea5539531a96b9c9f3bbbe60ef871fafd5dfe1713fdd1ca5558c941843eec8665c43ddc81555f80f265f514a6f1470d521d55619165a60d8a51d2654b5b8eeb63ab9e986efbe6846f57a0a52b80ffe"}, {0x88, 0x1, 0xfffffffd, "78521935dfc0afd8b43187ba103114ca9b394999328ddafd787949eb954259e834da4738392558af13546b5685c3e5d5d1cb909277c672b1cc9c1ff281ac3be1d8b7b03f4eb255474323de10f8f3e2a9e77aa63eedc69dc92266a5ca90e8decdf33f949af7319a21862302ea6cc3e1a467cc"}, {0x18, 0x119, 0x5, "c9635d04"}, {0xc0, 0x10b, 0x5, "685688525be2e8f0af7429e7d7164b6f8378245659758e13fc0e14e6a03dc60fe49464ad2541b4001e34d5201d4b75e764cbef2e9ed55e5fcf6e8eba000d02b49086f740c94b51e57b3a0272c9f9a13999e04c6ad05b68daabc7eda382b7892fa9ccaba34eba218398c8aaeee7a230c34799c01c4a6d90ab46f9cae3df5842de7e5917ca450b921675915b0da20ebb5ad203593aa6c26650f52b6d0cf3e94a51a898e7f6c182cbde65fae613c60fc4dc"}, {0x58, 0x29, 0x2, "b20f62abdff18cdccd286b4368054cadfe1d57e65f702ebb7cd51ae95c62eb81208423fbffb3f4a8d775a19d1bb10ef1a8c238eead2ffa39a1c4edb67fd7433d736734ad"}], 0x430}}], 0x2, 0x0) renameat2(r0, 0x0, 0xffffffffffffff9c, &(0x7f00000021c0)='./cgroup\x00', 0x2) 4m19.072269052s ago: executing program 38 (id=5334): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0xffffffa1) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(&(0x7f0000000380)='./file0\x00', &(0x7f0000000780)='./file2\x00') syz_usb_connect(0x4, 0x6b, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x52240, 0x0) shutdown(r0, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$UHID_INPUT(r4, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0xcf8) ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) 3m58.20313944s ago: executing program 39 (id=5379): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_DISEQC_SEND_MASTER_CMD(r1, 0x40076f3f, &(0x7f0000000040)={'\x00', 0xfffffffffffffe09}) r2 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') fsetxattr$security_ima(r2, &(0x7f0000000140), &(0x7f0000000700)=@v2={0x5, 0x0, 0x6, 0x7, 0x1000, "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"}, 0x1009, 0x1) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f0000000140)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x35]}}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x36]}}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r2, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/66, 0x42}], 0x1, 0x2, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)={0x30, 0x40, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x14c}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\x1c'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x3}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)) (async) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) (async) ioctl$FE_DISEQC_SEND_MASTER_CMD(r1, 0x40076f3f, &(0x7f0000000040)={'\x00', 0xfffffffffffffe09}) (async) syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') (async) fsetxattr$security_ima(r2, &(0x7f0000000140), &(0x7f0000000700)=@v2={0x5, 0x0, 0x6, 0x7, 0x1000, "de49b7442a6330e75c394fcac6bfdd330788cd695863f472942a0976d9540719a4ebd988ed09c4f96d68ab915421fa32ba771aa1f8c94663ea14adfb4140a097ae6662a22d3d1ccfa2a058f05ff41fe1c36a962d0f3b81eefbdd05e47604df1d5e1c588e22fd42559ea5f9d98118df681aaada0b3f6bd1cd83f457404049ddd8f002563609a007ed8737e33a15de8bc5cc832be4beb1fdb1b3cddf72667531a3ac5b5cdb4a1f923f194e98262d375d56b54b5933d8b3ad9e133972aaa032689dd456e54cf5592e6f213ebe0a771127aab3efe433f5713948bc9fa0dacf1218fe53bf9a02064f95fda22b5ece6613f0632fb9c8ea035844ee2b1caa45a3441014fc3e5610f0aae806eefa53953f2060053f747562395027158232d4737ce9943b66ae99e70ef8f55027c53a9073db750900fc0d462af5878d31664ff4dc898376461356bdb4f489cbda71cb962f47dd9bbbde3292194cc9eb40d29284f49d5c47a42ef392aa2fc4134ad41e7c6c34ad91e21baaa503249ffa7188e5837ec6f47ed294bd68e013a8a39a34a0a5ea632425ba799e01ee954c0db215df2ca19585a138533d14e4c538518a1e602e4a0fc49d1c3d2916a29151003705b17c37d49ef1e5d989f26fa32e0f8b57abc59bd87aa19ce7d352f57dea1733811e00baf3c7ebdb8f49d97806a35bd6d30f61c05954f1131a5e82cf11c639ca71faf80af6913ba6f20459cbcbb59695315d0609dd12d8917398b66429ca7dfc49e8e950bb9accdad44f59c0362081044df514fc8c24bbbab71ecb1a35515a01e6a4c83d9492fffa4f4e1e62a1bfc074763a8592c4256d05dbbced761c4ab33bed9248a6f6eabbe573225cf6493325248f9c5943d1d164d072974bf59ea2593d534bf8d0744e527dbca497afc71e0d621d1a39a478f9aff6ec35b631267693b74730e2e68afbd28b1d1ccb3f0a65efad0a053e20c177490ccf804d4f65b3332f8f02d633292c23ba75cb4b13e4e7efa530df3395163cb89bbfe4c95e4171b204e398eb0e79b06ba3f31dddf3fc6b714f16bc34df46b8936f0673088a75b75728b64676d6f2fc014d6ff6a8a26151df876297282f674d47860025dc0d796ac8cf08dbfd39727be72f77bf8d0f9398ecbbba535ffa78664dbcbf0844cafa7fdc20a527c526148a777b54b9241baf33f3865fb50adc2ef8c1b8c3395177a690ebdd1ebbddcaa2d922ac5bebad975f2239ae8e82d16807fb292f5bd65cac1e5eb658f8031942d80c3813695aa643eaeec91f77e4bfd3467d4e4e8b02cf8d36545074b211f6c327ee3fc34caaeaaabbf2510583de5f29c326b7b1bdb0361808f5a5c1408ff9dc7d081c77ff612a7c1478fd084d0c6f0be0ba0f3f641bce70b3de58788bb45ef989950e4d5828c5dc07e50be6a589824f339e6be542f40b7240091e862e435ec964e8f1e7ad1a57cdc2c7417588e590859b90193e76869839f36288e538dfcefccd59322010f3947f3c89f61f7bce76d5b41318ce02cab50bfaabcc6edabb0e53c26342dc0598804a6d5556b03006e81e7b069e92d9d78936e2e8fd648157bf016e699fb3bd1d051c2c3c261d3a25c5bbdc7b6b9544114fd762dc1f829677d38d02d4d6fe7eb49792cd9f63034d0cffa56694c6ef313574db9445f0b0c34022546545779e9da965714df7c8c6ae38a3bbe995f31a7f3a2106f56e2d3f97cb8555137e0c2bd319a67f4b2e1a355e99d3cbaee2d88e0f4b57c91e6db5515445dde35a3238cbe4fcca968fc1417692c559d6f2388bfb820e5aeb539a9d5316876f0d4b062a88020d3416d72fb7288c6d641f40adf4c167fa6abc81f6f6d1785f18b9b2be4a8e0ac2997d21e308b9c56c74e43886f4f205d951d6f1ee8ed9b867dcf0851fb70becdfbdb1766bfae32a0e9a540c56d249500e23f602c57d0df6a6dddb1b7c530e888179eb87c16f60fba987274eb5f09fd8992a7f87f50c2ef8375e3736c4aae354d221e3704e98dad6f6724bf450909607c37e9112a9c0082b12331430de0f1ba85651240e88cb4f65ce1d504c26fe3bd8ee210b0138d4e7828b0246950b414f062dd180292e1cbcc169348d513dae67022fc6c5de0186133877dcacd8e6f542e8b58f41b8e88d2d3613182361a881c3ceb38901eadf35f387898881c532fbd8a56db915dda49f203176b0323403b7e73838263c0c7df1f7b8854ae2275c25f42392777e347ffe43dde76bf974c1feafaad8334d5c7a5b936d2366fe7947d34d1acab658bbfcd433633ab7108ef104f900f852febb94f2292688d7ff3dfd3d7f64a7dce5bd443a06f2872b786b34baca9421bb6d4d0fa7a83fcaa5548081d601926d1866097d1488fc6f0d124b4f93adad09dd1b8e3cbc7395e44934af362d962f870eece6695af00f1431ae1ace70e9f2328c330d0ced4da725cf8bbaebdabb58de0b4d4828550e0d4747dfc101a086605605335d48b1b33495f63761273b2d1c99c294644105d420381d43409fd627785d912387a899506e58687e69d9461e6d3324d7f8b3a5e32b2a457116b94d7b12c673af830be337ecb6cbc4b1402e8b01dfb7716a26b250918c50f9c400eb343f7a5c95ecead15389bbcbc52cac8de2ab746fc30e9df0ee58c7fa59360542565b74b609f3594feabbd2480217b8790707340e2a2d72bd7e968ba818ad31bfa47ace645ddbb316b2650a40dd37b6c3c48d2d9edd5055c96d15b4afdeda7574dcdbe44409559757cdefd95f9332035b7f8c6bbb5487881fe6812f39568a827f7da4527e11b163765197ecef4c2a6ddcf86b6c1d14f57c6ce9f62e4d1e40aa8bb255825d924255564e466b7f7ea36ce4f55882397682f62387aaa6e1eb88f1be42f19a2bd53d254a31e7534c4e2150ba7f7eca81a0ac53f7ff1e8ba8b4a568141e0d8e3f260fcc9b276f2e70da7d580854a9e4479ddda0c7a5a021431d015fa831bac8a49573f13aebc86d3828e0b943d3eacebc147e79180767a2de2c6ead6f5b96357559a243917778e148bf8c32dde8c3158994ae937a81616b057c05cea0b23f2d711aa71f6a7604e16dd074d225e237f14c99dddaf7f49ad004b59f36656d9dc07bfa57ace837917bb22925aec28fa6913d000629cbba07a7eaee8437fd5b77df6977e979b1466f592f7653c702e32581373b55ec6a68d8c2655b81e538711927d96a239d25acb39c82cea016ac1d206de9671057dd53be537ecbcd371a91fe369dc7b33e69b86cf4db9021b587edcaff87113e981559461801671d913aadb10afe8eac99a09e24ee16629f7f246cfc18db874e65daa86fb60e32db1ddf69aaaf18a5e68f53fc3b9758a5453c8dc5ca7d5c09d779c55a24e6b079c7b6e1bb307bf243bc17c9875fcf204705b4ccdc8eba0c6e0d4827bda2bd535e79daaef0ae37c40d9f92ca66382c2fb6bd3459a292f69fdc415a6ffb0254da31d06007645c93873883ae2d80af659630612d1810e20c848997489a41fe8bd4e92e68041e035d9b30595614868c50a901a7fe3e0490860997eaa7f848d11771dca8136c7cb289df13ef6b9ecf7319a09c1245aac59eb7042ac0ed0a3a60627a5d4314f2870264773ffe6724cd2d1ee6b0ce28b6a6fdba8a254fd325ebe8a54a6613a1332c3f48103875b4eaac4535652bd5fa8aa519ce1ff30b198296cd720c570d2a3279ef5aab1edca5b42113ef34b29fc01237ece3259a9b0916fea21d82e096037f7e60f5529a2e21aaacad7134d1ca82365f86b21b9e96b417e8120783c6b01ad3d96bcee11c3aa87096eb1398d0b7822e57d4f6d4a2ad67386b887c4931166665146a378c12cd7b4637683b7dbaeb1433f13318a805b29cb594238d9204ddd188af45586627cd29c01222464b611b0b50c7338df149c3d3d875f291ccafcf48b07d3201a0b1b6541dfc2a3fe7e6aecdf5a46dfe22bcede65f39a077ce40d277b247861ab25cd6a8249bb6138ba00b06a399193f657e69c9222c74170c6ae7cb842e866631749f01199544171c9e2e158559ae76846624df1dc26faa91e6100d6ba3ccf339439131c536324f40ac6eb94852e7d9c2bb76baf8727492ba02e9b951116e8aaad8d904c283f27eaea4961ef04a7ee7079133447bf0c5aed85163042fe7698441c83836533cd6296a2345d487d0f147552f811550e04df94674ed96ecd806ec9bbb3101637302e0218f6da42b3091c740648b93d56a1d19b54571cccf646d255c641d7b23146344d598b9aaae176952c6736ff4e663d076a5c43bcafbfffef89b91dc8e3a10a222488ae429ea4374d1dde20b265020510470b846b6325238f437a66a1a670e9f36a7306deb8895540aa349a471ea22278bfcb9091024a7f7b46fbed47d50ae7c1e18b36926d014b48ffe1b1b9749ebadb6f4c4b19b9137e28d8a73d1c3af90db1047a32bbad3095bd11df9309b6c2698adad83c161414bb75e18c0239b8725905b43882a9f604fccf9affaabffefaa293ce4c146ca4b2f928f207d461df1c0262adaad4bedaa49b688774ce2bacd20aee280774e784d762b9d6532d5353664cf81ace63400ced8bb2c8736c448ff069185c1b792ed228b26e4616f85364083dc52eb80c8a72b561689c4f2183563361ce70a86b28c8319e54b6e011ce08ad17668465d476921d0f5d39a48f814f9c28cec535ff0493d557a00e3aa5e515db95bcfbf5ccc7aa7656ae0fae94320af8b9c313b8402f69aceedbb31717265830d6972ec18c559d75835e8fd3391acf3424049cee8fc19a302155540b4703894742a949da392a640ff360549775a31fc4f07aa511a1ade0259240d2df4a25537223a244eb88965fb5a8a1cdc818a45c7fc3d9dc62b54afcee6b5fd6d4efbc59434c245db13d6cb23f9a617f5445d63df616bb811ebbab691763cefcb087ea8f1006fee8fef3197cb3450ed58dcedcda7abf68983959f86113c626604603b86cbf2853f2958d58337a0722d7594b300270531b4a34e84f78f95da5751fc296c713a5f860b4f5a3a5d75603b7bef176dc0d7cbbddc34f4334228bd918ecb4a5c88fca3ad7bc1031c79cf1cba656f3d34bc7bd2111530289cdf148bc6451865673413cf72caf42fb00e0420b42fa16559c853830e3727e2c159d650d079d9c1ccbc966489d4b212e65c17d3f2374cdac058e6789b4de359c4f878f46eacb492c2409b86afdabf05a3745764c757d2658c775eae36de57c9ae0df20efadbb1ffdaf4441a55512f5124c38276b31988e645b042eab60a8cae68030586308bc7080cf4bb71b35b3ca68ec0ed485ae9fca4eace89ae1d72515072e2829369ae7b7775f338063a12ae3500d5dd351160b0602b31f42e6a006f2221b3ca3093aabbb1a5c14d2f0c62ef3c2e41451e52a433b7f68c1f1de0fe59c7a8b08912c66e50254dd1905977a31134c20bfd5544c753134963198165640eae25a79fb37e2aeaa67db798cebd91ddd754f2f59d4fb95e4dc99d51fad9f87c81b2caf44f8eb64b82ef2b3fbcca6b7e9104924faaeb1972eeba8e4983b7e8c4fb503bd718b79d959e3879b4b537f7195e002a6359ee58f0d4424eddcdc234dcb5a07162129638ca38e89ae1d09a4fa4b1a00642db0c2d6d5ef31c358ee93e4d49f427d8d7b7688ac17ab9dbd687599c33ee673a0bd0a8e6f8055cfc66c3cd761ba8e8e4fb764e8b51db0c08aefcd6fbb74bcd6c9f70eb39c13f7130d5cc65665d03e78bdba3605c76f55ff43a097dd63b451a59e125d8081f91062d0540f71ca6cea57e35ea5a22dba8f6fc0dadcf2ff192dc"}, 0x1009, 0x1) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f0000000140)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x35]}}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x36]}}]}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r2, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) (async) preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/66, 0x42}], 0x1, 0x2, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)={0x30, 0x40, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x14c}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\x1c'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x3}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) 3m24.546944436s ago: executing program 40 (id=5451): syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x301880, 0x20d) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000050002000008000f40fe00000e", 0x24) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4600, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000880)={0x0, 0x2, 0x1, [0x1, 0xeb5b, 0x6, 0x3, 0x100000000], [0x1, 0x3, 0x4, 0x2ca, 0x4, 0x200, 0x5, 0x5631, 0x7, 0x5, 0xfffffffffffffff7, 0xaf, 0x100000001, 0x7, 0x6e0, 0x86e, 0x2, 0x4, 0x1, 0x2, 0xfffffffffffffff7, 0x7c, 0x8, 0x4, 0x8, 0x157b84ad, 0x0, 0xa, 0x80000001, 0x9, 0x10001, 0xfffffffffffffff9, 0x5, 0x3, 0x1, 0x1, 0x1001, 0x1, 0x4, 0x3, 0x8, 0x7, 0xb, 0x3, 0x0, 0x9, 0x10000, 0x1000, 0x2, 0x8, 0x64, 0x280000000000, 0x2, 0x4, 0x7, 0xa, 0x3, 0x8, 0x2, 0x0, 0xa0000000000, 0xfffffffffffffff5, 0x7, 0x3, 0x176, 0x15f, 0x0, 0x5, 0x5, 0xfc72, 0x9, 0x7, 0x7, 0x2, 0x6, 0x81, 0x2, 0x4, 0x10000000100, 0x0, 0x9, 0x2ce1, 0x7f, 0x8, 0xeab5, 0xffffffffffffffff, 0xeffffffffffffffe, 0x6, 0x10001, 0x2b6, 0x1, 0x2e06ffea, 0x10001, 0xf2d5, 0xffffffffffffffff, 0x2b6b, 0x1, 0x4, 0x5ac, 0x7f95, 0x20000d13, 0x2c, 0x1ff, 0x1000, 0xd05, 0x1, 0x9e, 0x8000000000000000, 0x3, 0x0, 0x3, 0x5, 0xc, 0x6, 0x6281, 0x10, 0x7f, 0x7, 0x3, 0x3, 0x7]}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r2, 0x4b49, 0xfffffffffffffffd) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fchmodat(r3, &(0x7f0000000180)='./file0\x00', 0x22) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000280)={r5, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x3, 0x6]}}) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, &(0x7f0000000100)) pipe2$9p(0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) 3m23.054979008s ago: executing program 41 (id=5455): mknod$loop(0x0, 0x6000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0xffffffffffffffff, 0x2, &(0x7f00000001c0)) openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x2000, 0x81, &(0x7f00000002c0)) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="7dfc3ea7786ae94553df9a000000", @ANYRES16=r5, @ANYBLOB="05072bbd7000ffdbdf2501000000100002800c0001800800010000000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x8040) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="535045414b4552202743020074757265272030303030303030303030303030303030303030300a"], 0x27) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000300)={'pcl816\x00', [0x101, 0x2, 0x1, 0x4, 0x1001, 0x4, 0x4, 0xffff, 0x3, 0x104, 0xffffffff, 0x6, 0x101, 0x800802, 0x0, 0x7fffffff, 0xded9, 0xc7d5, 0x7, 0x40000003, 0x89, 0xcaa7, 0x0, 0x5ca3, 0xb, 0x3, 0x3c, 0xb, 0x6, 0xefcb, 0x8]}) io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x100032, 0x1, 0x0, 0x0, {}, {0x0, 0x0, 0x20000000}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x3}) socket$inet6_udp(0xa, 0x2, 0x0) 3m19.44071575s ago: executing program 42 (id=5459): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000500)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000680), 0x0) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x100, &(0x7f0000002040)={0x0, 0x989680}) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000500)={0x3c, @broadcast, 0x4e22, 0x0, 'dh\x00', 0x6, 0xb4, 0x67}, 0x2c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0)) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000040) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000700)=[{0x0, 0x3, {0x0, 0xf0, 0x4}, {0x2, 0x0, 0x3}, 0x2, 0x1}, {0x0, 0x0, {0x0, 0xf0}, {0x3}, 0x0, 0x2}, {0x3, 0x2, {0x0, 0xff, 0x1}, {0x2, 0xf0, 0x3}}, {0x3, 0x2, {0x2, 0x1, 0x3}, {0x2, 0x0, 0x2}, 0xfd, 0x2}, {0x2, 0x0, {0x1, 0xf0, 0x4}, {0x0, 0x0, 0x3}, 0xff, 0xff}], 0xa0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x10, 0x1c, 0xfd, &(0x7f00000000c0)="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"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r9, @ANYBLOB="90200000000000001c0012800b00010067656e65766500000c00028008000200ac1414aa0800040044000008"], 0x44}, 0x1, 0x2}, 0x4050) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xe8dbdfe1703f5c88, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x140c, 0x200, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x1, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x0, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x0, 0x3, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20}, 0x4dc082e7e54744df) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005242000000d240f0100000000000000000009058103200000000009058202080080000009050302"], 0x0) 3m6.626425147s ago: executing program 7 (id=5499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x400040c0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0) syz_open_procfs(0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x3f, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m5.027564567s ago: executing program 7 (id=5500): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x40011023, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x4) r4 = syz_open_dev$dvb_demux(&(0x7f00000000c0), 0x0, 0x111000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000140)={0x33a, 0x1, 0x3e31b53fc7e96dd5, 0x13}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r9, &(0x7f0000000440)=[{&(0x7f0000000700)="b00c7037e07686acd2c8dd812560e8ae88a8", 0x12}, {&(0x7f0000000580)="32de034f646b", 0x6}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r6, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xca, 0x3f}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xe405, 0x47}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0xc008091) socket$nl_generic(0x10, 0x3, 0x10) 2m55.421573455s ago: executing program 6 (id=5515): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000000480)) r4 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='auto_da_alloc', &(0x7f00000002c0)='0\x00', 0x0) 2m51.59520198s ago: executing program 6 (id=5521): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x8}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x7}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0xff}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4084) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x2, 0x0, 0x7, 0x1, 0x4, 0x8, 0x3, 0x202, 0x13d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xb}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r7, 0x4058587a, &(0x7f00000001c0)={{r7, 0x0, 0x10000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x9}, {[0x0, 0xfffffff9, 0x6, 0x4]}, 0xda, 0xad, &(0x7f0000000100)=""/173}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r9, 0x0, 0x0, 0x8004, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r9, &(0x7f00000002c0)="d70582685dc92928", 0x8, 0x800, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) 2m48.752016812s ago: executing program 43 (id=5500): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x40011023, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x4) r4 = syz_open_dev$dvb_demux(&(0x7f00000000c0), 0x0, 0x111000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000140)={0x33a, 0x1, 0x3e31b53fc7e96dd5, 0x13}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r9, &(0x7f0000000440)=[{&(0x7f0000000700)="b00c7037e07686acd2c8dd812560e8ae88a8", 0x12}, {&(0x7f0000000580)="32de034f646b", 0x6}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r6, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xca, 0x3f}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xe405, 0x47}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0xc008091) socket$nl_generic(0x10, 0x3, 0x10) 2m39.096561743s ago: executing program 44 (id=5514): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') (async) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef01090212"], 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0x3, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$panthor(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x42800) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) (async) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 2m35.475994744s ago: executing program 45 (id=5521): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x8}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x7}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0xff}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4084) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x2, 0x0, 0x7, 0x1, 0x4, 0x8, 0x3, 0x202, 0x13d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xb}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r7, 0x4058587a, &(0x7f00000001c0)={{r7, 0x0, 0x10000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x9}, {[0x0, 0xfffffff9, 0x6, 0x4]}, 0xda, 0xad, &(0x7f0000000100)=""/173}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r9, 0x0, 0x0, 0x8004, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r9, &(0x7f00000002c0)="d70582685dc92928", 0x8, 0x800, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) 2m32.456107273s ago: executing program 46 (id=5526): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x11fe, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x4) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x3, 0x400000, 0x14, "3eccd8200089930000000010000000040100"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xf9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x38, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) socket$netlink(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x844) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000005850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x5, 0xe, 0x0, &(0x7f0000000080)="0000000000040000000002015370", 0x0, 0xff, 0x0, 0xfffffd0a, 0x0, 0x0, 0x0, 0x3, 0x0, 0x401}, 0x1a) r7 = syz_open_dev$dri(0x0, 0x15, 0x1114c1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$F2FS_IOC_GARBAGE_COLLECT(r7, 0x4004f506, &(0x7f00000000c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) 2m25.924349368s ago: executing program 8 (id=5553): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x401000, @loopback}, 0x1c) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[], 0x0) 2m25.650262383s ago: executing program 8 (id=5555): r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x120, 0x1, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x2, 0x1, 0x1]}, @CTA_TUPLE_ORIG={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_MARK={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_ID={0x8}, @CTA_TUPLE_MASTER={0x3c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x80c1}, 0x4004000) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x222, 0x0) syz_clone(0x942a80, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcsa(0xffffff9c, 0x0, 0x80802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4}, 0x38) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000000000003e000d03000000000000000000001302"], 0x0, 0x56}, 0x20) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)) 2m24.357918064s ago: executing program 8 (id=5559): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44ef", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f", 0x61}], 0x1}}], 0x2, 0x2090) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=""/4111, 0x100f, 0x1, 0x0}, &(0x7f0000000180)=0x40) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x0}) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x39c, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2d4, 0x2d4, 0x2d4, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xfc, 0x120, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'team0\x00', {0x6d, 0x6, 0x81, 0x9, 0x8, 0xf, 0x5, 0x20, 0x80}, {0x7}}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@inet=@dscp={{0x24}, {0x4, 0x1}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x40c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000001f850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) 2m24.062128807s ago: executing program 8 (id=5560): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000480)) r2 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='auto_da_alloc', &(0x7f00000002c0)='0\x00', 0x0) 2m23.7000126s ago: executing program 8 (id=5561): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) (async) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) (async) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380080001"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000180)={0x5, 0xff}) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 2m20.114579882s ago: executing program 47 (id=5542): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, 0x0, 0x0) userfaultfd(0x801) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) socket$caif_stream(0x25, 0x1, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x6, 0xfffffffffffffffa, 0x80000002}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, 0x0) 2m15.422562927s ago: executing program 48 (id=5533): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000061175c0000000000c6770000fc05c5dc9510000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc8, &(0x7f0000000240)=""/200, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x20000}, 0x10}, 0x94) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201000000000000000008"], 0x1508}}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2006300, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) writev(r1, &(0x7f0000000040), 0x2) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) (async) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, &(0x7f00000000c0)={0x3, 0xffffffff, 0x7f, 0x9, 0x7, 0xf}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4"], 0x0, 0x8}, 0x94) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x2c, 0x14, 0x4, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xe}, {0x2, 0x2}, {0x4, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040851}, 0x0) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000000)={0x200401, 0x0, 0x30000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) (async) write$binfmt_aout(r6, &(0x7f0000000000)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000100)={0xa04c, 0x53b3, 0xfffffffd, 0x8, 0x1b, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) (async) r7 = socket$key(0xf, 0x3, 0x2) (async) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) sendmsg$key(r7, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="020afc000700000028bd7000fe9bdf2505001a0000000000000000000000000000000000640101000000000000000000000000000a0076bdcd16"], 0x38}}, 0x40408c0) (async) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r9, 0x5408, &(0x7f0000000080)={0x49db, 0x0, 0xfff9, 0xbfff, 0x1a, "ec28a144f13d7607"}) write$binfmt_aout(r9, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r9, 0x40045431, &(0x7f00000001c0)={0x0, 0xffffef7b, 0x0, 0xb2, 0x10, "1b09000040000000000000e678000000001000"}) (async) syz_open_pts(r9, 0x20800) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004000000f0ffffff04"], 0x50) 2m6.943110726s ago: executing program 49 (id=5561): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) (async) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) (async) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380080001"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000180)={0x5, 0xff}) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1m59.784329787s ago: executing program 7 (id=5577): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010001, 0xffffffffffffffff) eventfd2(0x0, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000280)=""/79, 0x4f) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061040000000000009500004c"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a1"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f00000002c0)=r4}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0) 1m57.994328999s ago: executing program 7 (id=5598): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x480, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x3000000, 0x1000, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x21600, 0x2c, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f000023a000/0x4000)=nil, 0x4000, 0x64) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8ffd, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x7ffffffe, 0x10100}, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) 1m54.975139544s ago: executing program 1 (id=5601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2000}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xa, r2}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x1d0, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_STAB={0x124, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x0, 0x80, 0x2, 0x1, 0xd6d, 0x8, 0x5}}, {0xe, 0x2, [0x4c20, 0x3ff, 0xaed, 0x4, 0x0]}}, {{0x1c, 0x1, {0x7, 0x1, 0x8, 0x0, 0x0, 0x7fff, 0xfffffb08, 0x1}}, {0x6, 0x2, [0xd]}}, {{0x1c, 0x1, {0x4, 0xff, 0xaa99, 0xa3bd, 0x3, 0x40, 0x0, 0x6}}, {0x10, 0x2, [0xa, 0x8, 0x7, 0x1, 0x3ff, 0x4b]}}, {{0x1c, 0x1, {0x8, 0x4, 0x4, 0x101, 0x0, 0x7, 0x8, 0x5}}, {0xe, 0x2, [0x8, 0x1, 0x5, 0x7, 0x56]}}, {{0x1c, 0x1, {0xbe, 0x7f, 0x0, 0x7, 0x2, 0x5, 0x7, 0x3}}, {0xa, 0x2, [0x8, 0x101, 0xb305]}}, {{0x1c, 0x1, {0x4, 0x9, 0x69d2, 0x1, 0x0, 0x1, 0x5, 0x5}}, {0xe, 0x2, [0x7ff, 0xb, 0x8, 0x5, 0x400]}}, {{0x1c, 0x1, {0x1, 0x0, 0xf14, 0x0, 0x2, 0x8, 0x6, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1000}, @qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x6, 0x3, 0x0, 0x1f7, 0x3, 0x8}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x8}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x1f2cb1c}, @TCA_NETEM_RATE64={0xc, 0x8, 0x535f763fcc867645}]}}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x0, 0x6, 0x1ff, 0x1, 0x62a0, 0x4, 0x3}}, {0xa, 0x2, [0x7, 0x401, 0xef19]}}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet6(0x10, 0x800, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000001, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000580), r7, 0x2}}, 0x18) 1m53.447904911s ago: executing program 50 (id=5584): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) close(0x3) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x3b, 0x1, 0x2, "4749570000000000000000000e1609d600", 0x20493859}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x808001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xfff}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) r6 = syz_genetlink_get_family_id$tipc(0x0, r1) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000200)={r9, @in={{0x2, 0x4e23, @empty}}, 0x7, 0x400, 0x2, 0x41, 0x6, 0xffff, 0x10}, &(0x7f0000000080)=0x9c) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x24048180) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r12 = dup(r11) bind$bt_l2cap(r12, &(0x7f0000000080), 0xe) listen(r12, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x8, 0x20, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @ldst={0x3, 0x1, 0x2, 0x1, 0x1, 0xffffffffffffffc0, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @alu={0x4, 0x1, 0xb, 0xa, 0x0, 0xc, 0xfffffffffffffffc}, @map_fd={0x18, 0x8, 0x1, 0x0, r10}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @generic={0x24, 0x6, 0xc, 0x4, 0xff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m53.385013895s ago: executing program 1 (id=5604): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x700}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffc}, {0x0, 0x7000000}, {}, {}, {}, {0xe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xb}], [{}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) 1m53.155000213s ago: executing program 1 (id=5605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000208000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m52.819040596s ago: executing program 1 (id=5607): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x2, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd07001000000014002e0060ec97000fc82c00fe8000000000000000000000000000aaff020000f5ffffffffffffff0000000106"], 0xffe) 1m52.523974741s ago: executing program 1 (id=5608): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0xf3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m52.310345789s ago: executing program 1 (id=5609): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40045304, &(0x7f0000000400)={0x0, 0x0, {0x3, 0x0, 0x0, 0x2}, 0x5}) sendmmsg$unix(r3, &(0x7f00000014c0)=[{{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000001c0)="098c27365fac80309bd2caaa1228d7b0f761dd5599475bac2c4bd47243e68d9e0cd00bff78a27ec8", 0x28}, {&(0x7f0000000480)="a37715b90dfaeee43702bf120e8761bad7fa837afcc0a84143908020ee93c0946213be99ad02903512334ecdbc4326c59e610284489e9f2f058743c33967152d76f69c3ebb9a6a6b20ee2bb3dcc0c206f6dd130d5c90dc2a43b4470b379b29a17db098799fbc26cb6d6a3f26f781ed3541fb04b21190e487923d4e9a82b5aa5a00ca0b86ca7ee60de403a2d3ba7a329f5981e1efe4dc2026e65ee68d5e0edaed66b5936e243f3cf9c5624f16c045186502b3474641de28590084", 0xba}, {&(0x7f0000000540)="7d39476a26b87ccbcdd4c1d5fdb87c187c19d22fbd7e3d71c7a25adec85f87b49d4d9b47f72422e49a44959365caf287a90d2259f2f2ec842c04062f60ce3805d0f5680a0bbc49c2b3553d61d73fbd680ae89926fded8ebb1cd2fba0cf2094b71ef3afeedbbeb4dae768ece0f25945b1d9ca8b99082f0bbca99bb19e90a17cfb11b9bdbb9c3b14e9ec939e873bdfcf6bd9591bc20b0476df335a3400f8e24a46d89336791425fd09e1bcc567ca89d68ac165c0f336f7dc670b31fecf8037019a96164821277cc7f15249809f31a675f590168895", 0xd4}, {&(0x7f0000000640)="77ea2fc32d228830ebb2e3b05e2e5d677dc35960f5faddefac00f6fc05f2786260f0d9e8f7d06d410d2e250cb7654c2ccf49fed3ef54a16eba8242e7b5d86974411b68f6d7b5fd3cae0436b0f1be9a7230a77eef8ab4cb9689b876a3298c6bba9b7ec39c909900f5a199199f9f93375f5deb91a13dc435e09f5c2b3317e18652677a865ac45e376a3713d39d0387be28806f7d35506af43af451c52e699dbee7bd670f9f4b8c728ae183a4749ec2e0df031d87f04be6eb4da847e62b01a129da21b9f7921629b9a8", 0xc8}], 0x4, &(0x7f0000000d80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r2, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}], 0xd8, 0x4}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000f00)="7a84aca75d", 0x5}], 0x1, &(0x7f0000001080)=[@rights={{0x34, 0x1, 0x1, [r0, r2, 0xffffffffffffffff, r4, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, r4, r0, r1]}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, r4, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}], 0xd0, 0x90}}, {{&(0x7f0000001180)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000001200)="44e4b72d2308b943b4182379740e91e6ec113cc3e6ea9f11fe317910549f79dac5ea442e8106fd81e3791a0804bd324ecd4abbaeed85e881f8c99eb31b39b14ade071f2db2410a", 0x47}], 0x1, &(0x7f0000001400)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0, 0x40008}}], 0x3, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket(0x1, 0x800, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x3ffdcf, 0x7ff, 0x0, 0x1}, 0x48) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) syz_open_dev$ptys(0xc, 0x3, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000280)=""/185, 0xf5}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1m49.893401671s ago: executing program 51 (id=5589): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fremovexattr(r2, &(0x7f0000000000)=@known='system.posix_acl_access\x00') sendmmsg$inet(r1, &(0x7f00000020c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)="e3a0022387d186fb0cc49db307b3c2e65613ce", 0x13}], 0x1, &(0x7f0000000480)}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000580)="c9337bb0e3a3b09b0bd18898eb570fa7a6d460804d48499f820119bf", 0x1c}], 0x1}}, {{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001a00)="df398117", 0x4}, {0x0}], 0x2}}], 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m45.787785485s ago: executing program 4 (id=5620): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x14, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m45.593881196s ago: executing program 4 (id=5621): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', '\xe9\x1fq\x89Y\x1e\x923aK', [{0x20, '.\\'}, {0x20, '%^\\\x93\xca\xe9[\x04\fu\xd3\x10.\xee\\Q$e\xa9=B\x19I\xd2Le\x14P\x86\xd3\xe5b\x93y\xdf\xfb\x17B7\a\x9c\xb5?\x0f\xc8\x9b\x9aol)\x87Z\xcc\xa5\xc2\xffb\xb8\x00\xbb\n\xcb\xb1\xdaa\x18\xacG\t\x8e\x00*\xf8R\xa9\x8e\xaaUw\xc0!\x1fa\xf5\xecf\x14B\xd4\xd4\r\x143Y=\xa6!\x94P\xdb\x81vr\x8c\xfd/6\x16\xd8\x16\x82\xb6Z\xaep\xc3\xaan\xfd\x13\xf2\xc5\x97n\xdd \x96\x0en\xe9\xaa&LN\xf0\xed<\xa7(a\xa8H\xb3\xee\x13\xe8\xb3\x8c\xd6!\xb0iJ9(|Pp\xd5\xf5\x1b\xa5\xa4\x86\xfd\x1a\xc1C\xa3u\x9d\x9d\t\x8d&V\xfe\v\x9a\xc6\x9e \xf6\x88\xaa!p\xd3nF\b\x1e9\xd3=%\xd3)\xd0%\x18\xbd\x87\xdb\x96\xbe\xc1\xfb\x00\xe1\xd3\xee\xb2P\x93\x15\xf9\xd5^\x9b\xa9\xd9\xf0\xf3\xf1\xdf&A\xdb\x97r\x99\x12|\x0e\xc0\xed\x92\xc2;\xee\x19l\x16Ww\\\xeb3\xa7\xb4XO\x1a\xf0\"\x9d\x86\xebV\xb4\xd8=h,\x84C)F\x16\xa1O\xb2\xc0\xf3\xbdT\xd1\xe5/\xa7p\x9d: \xfcwL'}]}, 0x132) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000fe00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 1m45.362677211s ago: executing program 4 (id=5622): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000000480)) r4 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='auto_da_alloc', &(0x7f00000002c0)='0\x00', 0x0) 1m44.750396792s ago: executing program 6 (id=5602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0xa, 0x3, 0xff) clock_adjtime(0x17, &(0x7f00000001c0)={0xffffffff, 0x400000000000040, 0xb, 0x0, 0x1, 0x1, 0x0, 0xfffffffffffffffd, 0xc4e9, 0x7, 0x1, 0x0, 0x8, 0x1, 0x0, 0xe5a, 0x6, 0x5, 0x3, 0xffffffffffffffff, 0x6, 0x10000, 0x0, 0x0, 0x745, 0x400000}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x5}) msgsnd(0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x5, 0x20}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x10000, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x5}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48054}, 0x1050) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x9) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000100)={0x3ff, "8c3ea3"}, 0x6) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000080)={0x1d0003, 0x0, {[0xffffffffffffffff, 0x0, 0x8, 0xfffffffdefffff16, 0x3, 0x10, 0x4, 0x4]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) accept4(r1, 0x0, 0x0, 0x80800) 1m44.312561137s ago: executing program 4 (id=5623): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000002c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026", 0x39}], 0x2}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) listen(r1, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) socket$kcm(0x21, 0x0, 0xa) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x3, 0x189083) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x1000, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x16, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000000000000000100", [0x0, 0xffffffff9673e35d]}}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_procfs(0xffffffffffffffff, 0x0) 1m42.725839326s ago: executing program 4 (id=5624): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000408000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m42.658801781s ago: executing program 6 (id=5625): gettid() syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x19, 0xfffffffffffffffc, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) socket$inet6(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="380100001a000100feffffff00010000e0000002000000000000000000000000000000000000000000000000000000010001071c4e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff070000000000ffffffffffffff8001000004d46c000000fc020000000000000000000000000001fe000000000100010000000000000000a39b000000000008ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffeffffffff030000000000008000000005350000020001070000000000000000480003006465666c61746500"/240], 0x138}}, 0x844) syz_open_dev$sndctrl(0x0, 0x8, 0x8a43) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r5, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 1m41.346051465s ago: executing program 52 (id=5598): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x480, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x3000000, 0x1000, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x21600, 0x2c, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f000023a000/0x4000)=nil, 0x4000, 0x64) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8ffd, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x7ffffffe, 0x10100}, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) 1m41.325691989s ago: executing program 6 (id=5627): ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10005a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) 1m41.325316956s ago: executing program 4 (id=5628): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rt_sigpending(&(0x7f0000000000), 0x8) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000040000000300000200"/50], 0x0, 0x32}, 0x28) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007", @ANYRES8=r0, @ANYRESOCT=r0, @ANYRES32=r1, @ANYRES16=r1, @ANYRESOCT=r0, @ANYRES8=r1, @ANYRES16=r0, @ANYRES16=r0, @ANYRES16, @ANYRESDEC], 0x68}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r2, &(0x7f0000000400)="05", 0x1, 0x4000888, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f000001be40)={0x0, @local, @remote}, &(0x7f000001be80)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f00000001c0)=0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x248, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff000000, 0x0, 0xff], [0xff000000, 0x0, 0xffffffff, 0xff], 'lo\x00', 'dvmrp0\x00', {0xff}, {}, 0x84, 0x9, 0x4, 0x58}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xe2, 0x28, "6c8c61c7cb55d04abaae4658fdaad4b05e818e14980e5fb6af19c6c71daf"}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast1, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'team_slave_1\x00', 'bond0\x00', {}, {}, 0x4, 0x40, 0x9, 0x28}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x2, 0x7f, {0xc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x1e, &(0x7f00000002c0)=ANY=[@ANYBLOB="8500000040f2010000e79207a5b88fe9bcde8448a6de801db571c604179e00"/45], 0x0) socket$inet(0x2, 0x3, 0x4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x3) execveat(r5, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={[&(0x7f0000000240)='\x00']}, &(0x7f00000005c0)={[0x0, &(0x7f0000000300)='}/\x00', 0x0, 0x0, &(0x7f0000000440)='\'@.\\\\&#/-\'\x00', &(0x7f0000000480)='\xe2}(-$^,:-@,\'$\x00', &(0x7f00000004c0)='&\\+\x00', 0x0, 0x0]}, 0x1000) bind$ax25(r4, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r6, r6, 0x0, 0x200000) 1m40.650209799s ago: executing program 6 (id=5629): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b3", 0x2}], 0x2}}], 0x1, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, 0x0}}], 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) (async) openat$random(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x105381, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x8, 0x8c}, 0x0) (async) userfaultfd(0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0xbdc, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4}) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, 0x0, 0x0) (async) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000280)=[@sack_perm, @window={0x3, 0x0, 0x18}, @window={0x3, 0xa0b, 0xd}, @mss={0x2, 0x8}], 0x4) 1m36.185601968s ago: executing program 53 (id=5609): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40045304, &(0x7f0000000400)={0x0, 0x0, {0x3, 0x0, 0x0, 0x2}, 0x5}) sendmmsg$unix(r3, &(0x7f00000014c0)=[{{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000001c0)="098c27365fac80309bd2caaa1228d7b0f761dd5599475bac2c4bd47243e68d9e0cd00bff78a27ec8", 0x28}, {&(0x7f0000000480)="a37715b90dfaeee43702bf120e8761bad7fa837afcc0a84143908020ee93c0946213be99ad02903512334ecdbc4326c59e610284489e9f2f058743c33967152d76f69c3ebb9a6a6b20ee2bb3dcc0c206f6dd130d5c90dc2a43b4470b379b29a17db098799fbc26cb6d6a3f26f781ed3541fb04b21190e487923d4e9a82b5aa5a00ca0b86ca7ee60de403a2d3ba7a329f5981e1efe4dc2026e65ee68d5e0edaed66b5936e243f3cf9c5624f16c045186502b3474641de28590084", 0xba}, {&(0x7f0000000540)="7d39476a26b87ccbcdd4c1d5fdb87c187c19d22fbd7e3d71c7a25adec85f87b49d4d9b47f72422e49a44959365caf287a90d2259f2f2ec842c04062f60ce3805d0f5680a0bbc49c2b3553d61d73fbd680ae89926fded8ebb1cd2fba0cf2094b71ef3afeedbbeb4dae768ece0f25945b1d9ca8b99082f0bbca99bb19e90a17cfb11b9bdbb9c3b14e9ec939e873bdfcf6bd9591bc20b0476df335a3400f8e24a46d89336791425fd09e1bcc567ca89d68ac165c0f336f7dc670b31fecf8037019a96164821277cc7f15249809f31a675f590168895", 0xd4}, {&(0x7f0000000640)="77ea2fc32d228830ebb2e3b05e2e5d677dc35960f5faddefac00f6fc05f2786260f0d9e8f7d06d410d2e250cb7654c2ccf49fed3ef54a16eba8242e7b5d86974411b68f6d7b5fd3cae0436b0f1be9a7230a77eef8ab4cb9689b876a3298c6bba9b7ec39c909900f5a199199f9f93375f5deb91a13dc435e09f5c2b3317e18652677a865ac45e376a3713d39d0387be28806f7d35506af43af451c52e699dbee7bd670f9f4b8c728ae183a4749ec2e0df031d87f04be6eb4da847e62b01a129da21b9f7921629b9a8", 0xc8}], 0x4, &(0x7f0000000d80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r2, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}], 0xd8, 0x4}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000f00)="7a84aca75d", 0x5}], 0x1, &(0x7f0000001080)=[@rights={{0x34, 0x1, 0x1, [r0, r2, 0xffffffffffffffff, r4, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, r4, r0, r1]}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, r4, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}], 0xd0, 0x90}}, {{&(0x7f0000001180)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000001200)="44e4b72d2308b943b4182379740e91e6ec113cc3e6ea9f11fe317910549f79dac5ea442e8106fd81e3791a0804bd324ecd4abbaeed85e881f8c99eb31b39b14ade071f2db2410a", 0x47}], 0x1, &(0x7f0000001400)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0, 0x40008}}], 0x3, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket(0x1, 0x800, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x3ffdcf, 0x7ff, 0x0, 0x1}, 0x48) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) syz_open_dev$ptys(0xc, 0x3, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000280)=""/185, 0xf5}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1m23.990427594s ago: executing program 54 (id=5628): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rt_sigpending(&(0x7f0000000000), 0x8) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000040000000300000200"/50], 0x0, 0x32}, 0x28) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007", @ANYRES8=r0, @ANYRESOCT=r0, @ANYRES32=r1, @ANYRES16=r1, @ANYRESOCT=r0, @ANYRES8=r1, @ANYRES16=r0, @ANYRES16=r0, @ANYRES16, @ANYRESDEC], 0x68}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r2, &(0x7f0000000400)="05", 0x1, 0x4000888, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f000001be40)={0x0, @local, @remote}, &(0x7f000001be80)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f00000001c0)=0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x248, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff000000, 0x0, 0xff], [0xff000000, 0x0, 0xffffffff, 0xff], 'lo\x00', 'dvmrp0\x00', {0xff}, {}, 0x84, 0x9, 0x4, 0x58}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xe2, 0x28, "6c8c61c7cb55d04abaae4658fdaad4b05e818e14980e5fb6af19c6c71daf"}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast1, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'team_slave_1\x00', 'bond0\x00', {}, {}, 0x4, 0x40, 0x9, 0x28}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x2, 0x7f, {0xc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x1e, &(0x7f00000002c0)=ANY=[@ANYBLOB="8500000040f2010000e79207a5b88fe9bcde8448a6de801db571c604179e00"/45], 0x0) socket$inet(0x2, 0x3, 0x4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x3) execveat(r5, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={[&(0x7f0000000240)='\x00']}, &(0x7f00000005c0)={[0x0, &(0x7f0000000300)='}/\x00', 0x0, 0x0, &(0x7f0000000440)='\'@.\\\\&#/-\'\x00', &(0x7f0000000480)='\xe2}(-$^,:-@,\'$\x00', &(0x7f00000004c0)='&\\+\x00', 0x0, 0x0]}, 0x1000) bind$ax25(r4, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r6, r6, 0x0, 0x200000) 1m22.195844592s ago: executing program 55 (id=5629): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b3", 0x2}], 0x2}}], 0x1, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, 0x0}}], 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) (async) openat$random(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x105381, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x8, 0x8c}, 0x0) (async) userfaultfd(0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0xbdc, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4}) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, 0x0, 0x0) (async) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000280)=[@sack_perm, @window={0x3, 0x0, 0x18}, @window={0x3, 0xa0b, 0xd}, @mss={0x2, 0x8}], 0x4) 56.833597512s ago: executing program 5 (id=5668): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x81f}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x7, &(0x7f0000000300)=[{0x2, 0x7, 0x95, 0x4584}, {0x3ff, 0x10, 0x6, 0xd}, {0x0, 0xb, 0x5, 0xe66}, {0x0, 0xf, 0x36, 0x7fff}, {0x0, 0x4a, 0x4, 0xd649}, {0x6, 0x78, 0x2, 0x401}, {0xf13c, 0x7, 0x2, 0x8001}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000000020605000000000000000000050000040c00078008000800000000b10d0003006c6973743a73657400000000050004000000000005000500010000000500010007000000090002"], 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0x8880) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"/521, @ANYRES32=0x0, @ANYBLOB="010000000300000000000000000000000800030011000000"], 0x54}, 0x1, 0x0, 0x0, 0x44044}, 0x20004010) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b01"], 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) unshare(0x40020000) 53.713736108s ago: executing program 8 (id=5644): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x11fe, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x4) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x3, 0x400000, 0x14, "3eccd8200089930000000010000000040100"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xf9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x38, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) socket$netlink(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x844) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000030000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x5, 0xe, 0x0, &(0x7f0000000080)="0000000000040000000002015370", 0x0, 0xff, 0x0, 0xfffffd0a, 0x0, 0x0, 0x0, 0x3, 0x0, 0x401}, 0x1a) r7 = syz_open_dev$dri(0x0, 0x15, 0x1114c1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$F2FS_IOC_GARBAGE_COLLECT(r7, 0x4004f506, &(0x7f00000000c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) 52.999416355s ago: executing program 5 (id=5674): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{0xffffffffffffffff, 0x0, 0x240100, 0x0, 0x3, 0x0, 0x0}, {[0x2, 0x6, 0x6, 0x8]}, 0x33e, 0x0, 0x0}) time(&(0x7f00000009c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000400)={0x30, r1, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}]}, {0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) syz_open_dev$media(&(0x7f0000000040), 0xc7, 0x800) r5 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x100035ab, 0x4) r9 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r9, 0xb) write$cgroup_devices(r7, &(0x7f0000000000)={'c', ' *:* ', 'm\x00'}, 0x8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001340)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r10, {0xb, 0xfff2}, {0xfff3, 0xffff}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24004810) 51.302067068s ago: executing program 5 (id=5681): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_open_dev$dri(0x0, 0x8000000000000000, 0x80002) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x40, 0x305100) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01864c2, &(0x7f0000000140)={0x0}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0x800) mmap$panthor(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000001, 0x4010, r2, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01864c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000280)={&(0x7f0000000200)=[r5, r4, r4, r4, r4, r4, r4, r4], &(0x7f0000000240)=[0x5, 0x8, 0x5], 0x8, 0x1}) r6 = dup3(r3, r2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$BLKDISCARDZEROES(r6, 0x127c, &(0x7f0000000340)) setsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f0000000380)={0x7, "5377aa"}, 0x6) ioctl$DRM_IOCTL_MODESET_CTL(r6, 0x40086408, &(0x7f00000003c0)={0x5, 0x5}) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f0000000440)={0x0, 0x0, 0x401}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r7, 0xc0186445, &(0x7f0000000480)={0x0, 0x2, r8}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000540)={'ipvlan1\x00', @random="e5cc7143ee98"}) write$6lowpan_enable(r7, &(0x7f0000000580)='1', 0x1) ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f0000000640)={r1, 0x1, 0x1, 0x9, &(0x7f00000005c0)=[{0x800, 0x3ff, 0x7fff, 0xb9dd}, {0x7, 0x4, 0x8, 0x8}, {0x1000, 0x3d, 0x2, 0x8e82}, {0x4, 0x3, 0x5, 0x1bb2}, {0x4, 0x1, 0x40, 0x5}, {0x6, 0xcc, 0x53, 0xb}, {0xfff9, 0x400, 0xffff}, {0x7, 0x7, 0x2, 0x8}, {0x4, 0x2, 0x9, 0x7fff}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r7}, &(0x7f0000000780), &(0x7f00000007c0)=r6}, 0x20) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000900)={0x2, &(0x7f00000008c0)=[{0x0, 0x0, 0x6, 0x3}, {0x0, 0x9, 0x2, 0xa1}]}) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r6, 0x40786e88, &(0x7f0000000ac0)={{&(0x7f0000000940)=[{0xc, 0x9, 0x1, {0x200, 0x2f}, 0x8, 0x8}], 0x1, 0x40, 0x8, 0x100000000}, {&(0x7f0000000980)=[{0x8000, 0x5}], 0x1, 0x10, 0xf, 0x7fffffff}, {&(0x7f00000009c0)=[0x1, 0xfffffffffffffffa, 0x4], 0x3, 0x8, 0x5, 0x3}, {&(0x7f0000000a00)=[{0x1, 0x6b3a4379, 0x46c1bad5, 0x6e, 0x7}, {0x80000001, 0x7, 0x8e2, 0x6, 0x5}], 0x2, 0x28, 0x0, 0x196e}, {&(0x7f0000000a80)=[0x3552, 0x3, 0x8, 0x100, 0x3, 0xa], 0x6, 0x8, 0xff, 0x100000001}}) 51.08963842s ago: executing program 5 (id=5682): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0xb0ff}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 50.26169811s ago: executing program 5 (id=5685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a31f5ffffff08000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 48.407088365s ago: executing program 5 (id=5687): syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000000)="a345b4f0c1ca676af8654ac608b0369c1fdd0e56357f6687ca83d6e8360d70c9041273aa20a58b7a9ec8df9d680088fd4cc7158c6d9cee1f9a0104db7977588bc1d55a764a61e99d17a3087fe5391a5d93d8054cdf7f5b913e1d6af480449cb42d0e3b876d934811c3edc297ba18f38de43f3a66feb964dc21d37d6429af4d23504d246ba304d0024beafc8f12e08cd7c72af097be2dece8b9d965d7f29e409a426c7eac66") (async) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (async, rerun: 32) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000003c0)={0x0, &(0x7f00000000c0)=[@nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_load_syzos={0x136, 0xe8, {0x2, 0xfffffffffffffffe, [@wrmsr={0x65, 0x20, {0x2a, 0x77cb8878}}, @wr_crn={0x67, 0x20, {0x8}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host32=0x4c00, 0xfffffffffffffffb, 0x0, 0x6d1}}, @nested_amd_stgi={0x17e, 0x10}, @nested_load_syzos={0x136, 0x20, {0x0, 0x5}}, @nested_load_syzos={0x136, 0x20, {0x0, 0xffffffffffff8001}}]}}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x440, 0x6, 0x6, 0x7bc7}}, @rdmsr={0x66, 0x18, {0xb98}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_vmsave={0x183, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0xab, 0x9, 0x1, 0xff}}, @in_dx={0x69, 0x20, {0xf1c6, 0x1}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @wr_crn={0x67, 0x20, {0x2, 0x4c02}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x6, 0xe}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x50, 0x7, 0x100000000, 0x3}}], 0x2e0}) (rerun: 32) mmap$KVM_VCPU(&(0x7f0000ffa000/0x5000)=nil, r1, 0x4, 0x80010, r2, 0x0) 39.433052181s ago: executing program 0 (id=5710): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x80ff}, 0x90) 39.167917357s ago: executing program 0 (id=5712): ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000100)={0x1, 0x6d, 0x2, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00000071"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r1, &(0x7f0000000480)=ANY=[@ANYRES64=r0], 0x40) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) syz_clone3(&(0x7f0000000400)={0x10001000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x23}, &(0x7f00000001c0)=""/114, 0x72, &(0x7f0000000340)=""/136, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) syz_open_procfs(r2, &(0x7f00000002c0)='statm\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="e70026bdafb5fcf0002500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4c8c4}, 0x48c0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32], 0x1c}}, 0x840) write$nci(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="65000201004824665a4be5f0254c93698fc42bcb1f091d9d9cae25885ae2f9211140ea6009e71c37afad554e508c4082729217b45a394963b69d19c73b1d0de8a19c4132b4e07a30caee1547681c538ac7ea3bc6bd82a6d1ea3c01f7eb931d27a6448f40aed9df95ccd847b1d379563dabb8b1a552471789c3314c7e777605032d2a2c93e7611b778b7194cd3f2e8b7d59"], 0x6) 38.627991285s ago: executing program 0 (id=5715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400fd00010901e7d91599030000000000000000"], 0x14}}, 0x40000010) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0) write$ppp(r6, &(0x7f00000000c0)="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", 0xfe) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000019c0)={0x88, 0x1e, 0x21, 0x70bd2b, 0x0, {0x2a}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x69, 0x1, 0x0, 0x0, @str='\x85\x95\x1aq\vT\xd4\xc5:\xd8\x7f:_\xa9\xe2mb:\x8e_\xaa\x9b\xc7\x80\xc3\x91\xe7\xfe\xf3S\xa6\xffg\xbe\x1d\xc1!q\x8a\xbb\xa1\xc6\xb3r#W\x98\xe7:\xf2\x92!\xc8\xfdi\xd2}\xf2\x88\x87\x11M\x1e\b\xf2\xa6\x14\xcf\x9d\xbeX\x9a&?\x98\xe4o\xec\xb2\x1fA.CX\x8f-\x88\xcf\x05\x14\xa1n\x9e\xc3F\xf1\x9ft\f\xe4]'}]}, 0x88}}, 0x0) close(0x4) 37.367218655s ago: executing program 0 (id=5718): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x5}, 0x50) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = getpid() r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r7, 0x0, 0xd1, 0x0, 0x0) ioctl$SIOCGETVIFCNT(r7, 0x89e0, &(0x7f0000000040)) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r6, 0x0, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x9000000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000060000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, 0x0, 0x25, 0x10, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r9, 0x4) 37.243118571s ago: executing program 56 (id=5644): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x11fe, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x4) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x3, 0x400000, 0x14, "3eccd8200089930000000010000000040100"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xf9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x38, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) socket$netlink(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x844) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000030000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x5, 0xe, 0x0, &(0x7f0000000080)="0000000000040000000002015370", 0x0, 0xff, 0x0, 0xfffffd0a, 0x0, 0x0, 0x0, 0x3, 0x0, 0x401}, 0x1a) r7 = syz_open_dev$dri(0x0, 0x15, 0x1114c1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$F2FS_IOC_GARBAGE_COLLECT(r7, 0x4004f506, &(0x7f00000000c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) 36.136617763s ago: executing program 0 (id=5724): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100000000000000000000000006", @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) 32.567001925s ago: executing program 0 (id=5732): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000000)={0x400000000000030d}) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0xaaa800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x121040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f0000000b80)=[{{&(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000400)=""/30, 0x1e}, {&(0x7f0000000540)=""/184, 0xb8}, {&(0x7f0000000440)=""/20, 0x14}, {&(0x7f0000000640)=""/225, 0xe1}, {&(0x7f0000000c00)=""/250, 0xfa}], 0x5, &(0x7f00000008c0)=""/241, 0xf1}}, {{&(0x7f00000009c0)=@nfc_llcp, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000a80)=""/230, 0xe6}, 0x8b3}], 0x2, 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000200)) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xa) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x200000000000000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[], 0x10) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000180)={{0x4, 0x7, 0x97, 0x4}, 'syz1\x00', 0x2b}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES16, @ANYBLOB="0000000000000000000000a60000000000000900cb82ba559d37470b9b13ba76fe70a00e4a055ee66fa99fcc8d87029b77e136113f151d7de114d9512bce91", @ANYRES32=0x0, @ANYRESOCT=r7, @ANYBLOB='\x00'/28], 0x50) 31.565059497s ago: executing program 57 (id=5687): syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000000)="a345b4f0c1ca676af8654ac608b0369c1fdd0e56357f6687ca83d6e8360d70c9041273aa20a58b7a9ec8df9d680088fd4cc7158c6d9cee1f9a0104db7977588bc1d55a764a61e99d17a3087fe5391a5d93d8054cdf7f5b913e1d6af480449cb42d0e3b876d934811c3edc297ba18f38de43f3a66feb964dc21d37d6429af4d23504d246ba304d0024beafc8f12e08cd7c72af097be2dece8b9d965d7f29e409a426c7eac66") (async) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (async, rerun: 32) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000003c0)={0x0, &(0x7f00000000c0)=[@nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_load_syzos={0x136, 0xe8, {0x2, 0xfffffffffffffffe, [@wrmsr={0x65, 0x20, {0x2a, 0x77cb8878}}, @wr_crn={0x67, 0x20, {0x8}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host32=0x4c00, 0xfffffffffffffffb, 0x0, 0x6d1}}, @nested_amd_stgi={0x17e, 0x10}, @nested_load_syzos={0x136, 0x20, {0x0, 0x5}}, @nested_load_syzos={0x136, 0x20, {0x0, 0xffffffffffff8001}}]}}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x440, 0x6, 0x6, 0x7bc7}}, @rdmsr={0x66, 0x18, {0xb98}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_vmsave={0x183, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0xab, 0x9, 0x1, 0xff}}, @in_dx={0x69, 0x20, {0xf1c6, 0x1}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @wr_crn={0x67, 0x20, {0x2, 0x4c02}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x6, 0xe}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x50, 0x7, 0x100000000, 0x3}}], 0x2e0}) (rerun: 32) mmap$KVM_VCPU(&(0x7f0000ffa000/0x5000)=nil, r1, 0x4, 0x80010, r2, 0x0) 16.170861958s ago: executing program 58 (id=5732): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000000)={0x400000000000030d}) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0xaaa800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x121040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f0000000b80)=[{{&(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000400)=""/30, 0x1e}, {&(0x7f0000000540)=""/184, 0xb8}, {&(0x7f0000000440)=""/20, 0x14}, {&(0x7f0000000640)=""/225, 0xe1}, {&(0x7f0000000c00)=""/250, 0xfa}], 0x5, &(0x7f00000008c0)=""/241, 0xf1}}, {{&(0x7f00000009c0)=@nfc_llcp, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000a80)=""/230, 0xe6}, 0x8b3}], 0x2, 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000200)) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xa) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x200000000000000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[], 0x10) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000180)={{0x4, 0x7, 0x97, 0x4}, 'syz1\x00', 0x2b}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES16, @ANYBLOB="0000000000000000000000a60000000000000900cb82ba559d37470b9b13ba76fe70a00e4a055ee66fa99fcc8d87029b77e136113f151d7de114d9512bce91", @ANYRES32=0x0, @ANYRESOCT=r7, @ANYBLOB='\x00'/28], 0x50) 15.192356923s ago: executing program 7 (id=5734): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0xbe, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="851666ce20db96ab0c7d83e114e7c41762249711e34f4ce12c6afeb7e6d77bd3b97644edd8e3a3b71fcd006b6237766e151f344afb2306455034ea7a31b1a48724e372a5a8a9ca040f5831f2eb11842a4b8ec9064fa439440f374355d9af754314ce445ac9bea7fac19c3ac58a131895c378ec497ffdf9a82032d9fa225397b92d2e2193de6fe2f6b6c0bd0f80de3dc72890b6900c5b86752639bf37ab325c16dc2f1c4d01b4c3b71ebbfd6fc9b316f76a07144538506a68ae00df22f2fa", 0x0, 0x10, 0x0, 0x0, 0x0}) ptrace$setregs(0xd, r0, 0xfffffffffffffff8, &(0x7f0000000300)="5f021a124d9224c09331361eb59c6de7f969435f5d8143af593c53e6d135943eda202b8231bc05a375f2a58ac36b0c6d5c47ebf15969418993f672c7c0ab608348b427b54e784c77d77656f273a819d0295d479fcaf9e99c38c1b3da4c306c7273b25f04ac60a31a84f5499c6d74f52b754e4e58ec1299fbf2a0e50796db8dac0a91878c340b7a0b95e446d8f9f3d075e0ffecde2448d401a7438b14b05271e60cc9a0b8f7055e5a0d4aa9d0f3d6c9d0a4e5033aa9762c505579e77da0f84a63c34aeecbcb") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xbbaa5000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffff9, 0x2004, &(0x7f0000006680)) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) setsockopt$ax25_int(r2, 0x101, 0xa, &(0x7f0000000000), 0x4) 13.894608903s ago: executing program 7 (id=5772): move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9f43030000000000000000000000000000000000020000000000"], 0x0, 0x1a, 0x0, 0x8, 0x2}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x433) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20000023896) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) tee(r4, r4, 0x6, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socket$nl_route(0x10, 0x3, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', r3, &(0x7f0000000300)='./file0\x00', 0x203) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800"], 0x64}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r5, 0xda90) r6 = accept4(r5, 0x0, 0x0, 0x0) shutdown(r5, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRESOCT=r7, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES64=r6], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800) 12.998056642s ago: executing program 9 (id=5777): syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x19, 0xfffffffffffffffc, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="380100001a000100feffffff00010000e0000002000000000000000000000000000000000000000000000000000000010001071c4e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff07000000000000000000000000000100003cd46c000000fc020000000000000000000000000001fe000000000100010000000000000000a39b000000000008ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffeffffffff030000000000008000000005350000020001070000000000000000480003006465666c61746500"], 0x138}}, 0x844) syz_open_dev$sndctrl(0x0, 0x8, 0x8a43) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r5, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 10.424273243s ago: executing program 9 (id=5778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000002000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 9.846116312s ago: executing program 9 (id=5779): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0xc4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={&(0x7f0000004d00)=ANY=[@ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x20000}, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/1, 0x1}], 0x1}, 0xe75}], 0x3aa0, 0x60002000, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0xfffffffffffffd5e) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) symlinkat(0x0, 0xffffffffffffff9c, 0x0) move_mount(0xffffffffffffffff, 0x0, r0, 0x0, 0x2) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x40013f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)="5df8e305c3d1c0ce8e", 0x9}, {&(0x7f0000000280)="90f68261dc926346494b29dc6f3173dcd59454e7025cbe45ab7c87b315fefe36411345525907a8a6779b653741dbdaffd663a9542a4438c33dae4e1d3ff10298af4ea19201d36245499648ea1090b4e9511aea440d8c8ce97a05aa3d4a8812ca414d1775ac8167a98bec4f5e1d216fe3000cdde8aa275d9e21128abd90", 0x7d}, {&(0x7f0000000180)="2df130fb2075a4a0b02290c6b07273c9345b80c0648bfa308275e735b823a28cd0", 0x21}, {&(0x7f0000000380)="776609d095dafaff8549bf8c2dcf55dfab5e719841bf8f5250bf8fdae535e20ccc74937a00c5c124f63ed220239027a486d4d8fa4a9db88572a6b54e65b20412d93466e21878feb52fb4da865bd2f67171cd65ef536b6015ad8a615138171b63aa8abb686e", 0x65}, {&(0x7f0000000540)="7ae3f9e077061818cc0b2660b3e0be2d33fc6905ac050db24ad0db354f9b04c2be456ec5e743169474d228be3db3d3b9fa2824ae1766e00967fbe1835400366919cfc021ece38cb95600950d57839939bb35184e", 0x54}, {&(0x7f0000000200)="78e0a7820b2224fd4ffc3fda43b47550a985f1c07f0759ac60268a", 0x1b}], 0x6, 0x0, 0x0, 0x40040}, 0x0) pipe(&(0x7f0000000500)) fallocate(r1, 0x6, 0x9, 0x1) fsopen(&(0x7f0000000080)='hfs\x00', 0x1) 5.477498664s ago: executing program 2 (id=5784): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5fa70bd7000ffffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01030000e000000200000000000000000000000086"], 0x38}}, 0x40084c0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r1, 0x5, 0x4) (async) lseek(r1, 0x5, 0x4) read$FUSE(r1, 0x0, 0x0) (async) read$FUSE(r1, 0x0, 0x0) io_setup(0x151, &(0x7f0000000000)=0x0) io_submit(r2, 0x2, &(0x7f0000000240)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0xae18, r1, &(0x7f0000000040)="d97acccd711e00", 0x7, 0x3, 0x0, 0x1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x44c, r1, &(0x7f0000000180)="e6233a6a5511c8cc6169a986f1eb651951993d50ebd59788ea9762385724db4528213c7e03b1d9c3c2a3264191ad8615d5af1c858ad40444db1c4cdf4514431b1c5d355f1a0f3478628f3d1ff4d8c40bdcaf3638006c2d4d3b", 0x59, 0x2, 0x0, 0x2, r1}]) syz_clone3(&(0x7f0000000100)={0x843400, &(0x7f00000000c0), 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5.393253467s ago: executing program 9 (id=5785): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xcb}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xffd0}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x80000001}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 5.114218079s ago: executing program 2 (id=5786): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x226c, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x2240, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_ACT={0x2238, 0x4, [@m_xt={0x170, 0x18, 0x0, 0x0, {{0x7}, {0xbc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x3d, 0x6, {0xd, 'security\x00', 0xff, 0x1b, "3901bae1b2c90dec01349be3ac5bab1aa98106"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0xb}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0x8d, 0x6, "c62e9a687eed868051eb651c24304d274e8629de1b50d16051064435fc24ec70771d17f6fcdc9e9ee75e25d0f91438203e64eefedecde132008eeb0431ab391ca0bf5a7765d9d88867fb095fac2a9c7739fdc611b922111ed0c5abbfcc78d191c3703f0604da38e930080de9aa271e5f8e9da2c50a80ed7034f68c77939dbe86fb46c18e845a89f584"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0xf0, 0x13, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x7f, 0x5, 0x10001, 0x6}}]}, {0xa9, 0x6, "7c0a1851060342436687049aaca83c87334c4d9cf996bff1b72efe3eb55f6b006dbd0e1c0bd78373b86981d3f1c87ebe53beca47c54b14ae9193d84be9fe799163951c5c233b691617e5508ea3f9b14b8a84941b72dac877ea437941f785a1c09929108fa47ec3420933e77185f8c50d8140dd015231cd6cece69214efe0b7030a9679081f8f3c0f55b91dcbb582cdf68d0c84d7b970c7842211384835fe59a974c410e0f3"}, {0xc, 0x7, {0xb07c3f3708729d04}}, {0xc, 0x8, {0x3}}}}, @m_pedit={0x1fd4, 0x4, 0x0, 0x0, {{0xa}, {0x1fa8, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x1bc, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x337b561b573d7d9c}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x4c, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x60e, 0x3, 0x10000000, 0x4, 0xdf7e}, 0x4, 0xa, [{0x40, 0x5, 0x1, 0x1, 0x7, 0xbf6105a}, {0xd, 0xffffffff, 0x2, 0x93, 0x9, 0x9}, {0xfffffffc, 0x1, 0x1, 0x63, 0x3, 0xc}, {0x4, 0x10000, 0x5, 0x1, 0x7, 0x80}, {0xffffff81, 0xb08, 0xf, 0x0, 0xe, 0x3}, {0xbb79, 0x8, 0x6, 0xb568bb60, 0x6, 0x7f}]}, [{0x7, 0x4, 0x392, 0x6, 0x1000, 0x5}, {0x7, 0xfffeffff, 0xf, 0x6a5b, 0xfffffffd, 0x1000}, {0x37a0, 0x5, 0xcd0, 0xfffffff7, 0x40, 0x6}, {0x6, 0xd2a3, 0x0, 0xfffffffc, 0xcf, 0x3}, {0xffff0001, 0x2, 0x8000000, 0x4, 0x2, 0x320}, {0x7, 0x695967f0, 0xffff, 0x0, 0x8, 0x33}, {0x7b9c60c0, 0x7, 0x5, 0x0, 0x7, 0x1}, {0x7fff, 0xd, 0xb, 0x0, 0x4, 0x9}, {0x800, 0x6, 0xaa, 0x1, 0xfa609cae, 0x8}, {0x7d, 0x3, 0x3, 0x6, 0x0, 0x20000}, {0xfffffff7, 0x200, 0x6, 0x1ff, 0x87, 0x4}, {0x9, 0x8, 0x5, 0x8, 0x80000000, 0x7ff}, {0x5, 0x6, 0x8, 0x2, 0x80, 0x10001}, {0x0, 0x8, 0x0, 0x7, 0xfffff4d2, 0x1000}, {0x3, 0x6, 0x2, 0x0, 0xc, 0xbb1f}, {0x8, 0x218, 0x10000, 0x3, 0x6, 0x10001}, {0x5, 0x9, 0xa, 0x13, 0x6ab32164, 0x400}, {0x7, 0x8, 0x4c94, 0x2, 0xc5, 0xcd}, {0xd12f, 0xf244, 0xfffffff6, 0x9, 0x5}, {0xe9e, 0x0, 0xffffc170, 0x64d, 0xffffffff, 0x4}, {0x1800000, 0x1, 0x80000001, 0x3, 0x280, 0x3}, {0x9, 0xcc7, 0x6, 0xfffffff7, 0xb, 0xb}, {0x800, 0x9, 0x9, 0xfffffffe, 0x0, 0xc}, {0xfd, 0x6, 0x6, 0x3, 0x8, 0x3}, {0x32d2, 0x7, 0x5, 0x6, 0x10000, 0x4696}, {0x7f, 0xb9cf, 0x4, 0x2, 0x64f8, 0xfffffffa}, {0x4, 0x7, 0x0, 0x7, 0x0, 0x4e49}, {0x6, 0x1ff, 0x5, 0xfffffeff, 0x9b63}, {0x1, 0x4, 0x6, 0xffffffff, 0x7fff, 0xf}, {0x2, 0x7, 0x4, 0x8000, 0x0, 0x80000001}, {0x8000, 0xd613, 0x6, 0x7ff, 0x200, 0x6}, {0x6, 0x7f0b, 0x9, 0x1, 0x4, 0x4}, {0x80, 0x2, 0x7fffffff, 0x5fb, 0xffff, 0x2}, {0x10000, 0x8000, 0x101, 0x5, 0x6, 0x2}, {0x7, 0xdbff, 0x2, 0x1, 0x6, 0x4}, {0x1, 0x7dc1, 0xfffffeff, 0xf8, 0xfffffffb, 0x4}, {0x6, 0xa8, 0x9, 0xb, 0x2, 0x81}, {0x3, 0xc2, 0x3, 0x9, 0xf4, 0x10000}, {0x4, 0x6, 0xff, 0x6, 0x6f, 0x100}, {0x7, 0x7, 0x6, 0x66e, 0xffff8001, 0x8000}, {0x72, 0x9845, 0x4, 0x900, 0xffffffff, 0x1}, {0x101, 0x9, 0x3, 0x10001, 0x5}, {0x0, 0x2, 0xafc, 0x3, 0x4, 0x6}, {0x7, 0x8, 0x1, 0x0, 0x1, 0xdb}, {0xfffffffe, 0x40, 0x23a, 0x2}, {0x1, 0x7, 0x7, 0x0, 0xb, 0x7}, {0xfffffff7, 0xa, 0x4d, 0x2, 0x6, 0x9}, {0xee, 0x2, 0x3, 0xefe, 0x2, 0xd12}, {0x200, 0xe, 0x6, 0x9, 0x80000001, 0x4}, {0x400, 0x0, 0x4, 0x4, 0x200}, {0x9, 0x7, 0x5, 0x1, 0x3, 0x32a}, {0xc50d, 0x8, 0x5, 0x4f, 0x0, 0x8}, {0xfffffff0, 0x9, 0x7, 0x1, 0x8, 0x5}, {0x0, 0x7fffffff, 0x4, 0x3, 0x6, 0x6}, {0x18ed, 0x8, 0x7, 0x9, 0x5181441a}, {0x1, 0x6, 0x4, 0x5, 0x5, 0xc}, {0xffffffff, 0x1ff, 0xb, 0x3, 0x7, 0x3}, {0x9, 0x5, 0xfffffffd, 0x2, 0x3fe, 0x8}, {0xd4, 0x7, 0x7, 0x6, 0x7}, {0xd4fc572, 0x8, 0x1, 0xe, 0xc3, 0x10000}, {0x6b7, 0x8, 0x8000, 0x5fc, 0x4, 0xffff}, {0x4, 0x7, 0x2, 0x5, 0x400}, {0x7, 0x8, 0x8ce5, 0x6, 0x32}, {0x8, 0x13, 0x8, 0x3ff, 0x3, 0x3}, {0x6, 0x80000000, 0x5, 0x9, 0x80000001, 0x2}, {0x6, 0xff34, 0x3, 0x5, 0x6, 0x4}, {0x7, 0x6, 0xa4e, 0x10, 0x2, 0x8ac}, {0x6, 0xffffff00, 0x5, 0x80000000, 0x8, 0x3}, {0xfffffffa, 0x94, 0x5452, 0x400, 0x401, 0x9}, {0x80000001, 0x20004fbd, 0x80000000, 0x7, 0x0, 0x401}, {0x7, 0x1000, 0x1, 0x8, 0x4, 0xfffff0d4}, {0x7, 0x9, 0xe3, 0x2, 0x3, 0x8}, {0x5f7, 0x4, 0x7f, 0xc8cc, 0x6, 0x10000}, {0x1e, 0xffffffff, 0xb84, 0x7066, 0x9, 0xfff}, {0xb, 0x1, 0x0, 0xffff, 0x4, 0x5}, {0x6, 0x241, 0x7, 0xa8, 0xa445, 0x7f}, {0x2, 0x5, 0x8, 0x2, 0x3, 0xffff8000}, {0x10001, 0x2f, 0x5f87, 0x8b, 0x80000000, 0x2}, {0x6, 0xffffff00, 0x4af17099, 0x7, 0xd, 0xfa31}, {0x2, 0x7ff, 0x2, 0x3, 0x0, 0x40}, {0x9, 0x2, 0x4, 0x2, 0x9, 0x4}, {0x3, 0xd4, 0xf0, 0x0, 0x100, 0xff}, {0x100, 0x10001, 0x100, 0xa, 0x831d, 0x7fffffff}, {0x8, 0x238, 0x8, 0x9, 0x8, 0xfb}, {0x16, 0xd8, 0x400, 0x7, 0x100, 0x5}, {0x9, 0x1aa0, 0x2, 0xa8f, 0x3, 0x10000}, {0x44f, 0x7fff, 0xfeb, 0x7, 0x7, 0x80000001}, {0x8, 0x2d065fec, 0x8, 0x3ba, 0x6, 0x5fa3}, {0xfffffffb, 0xb34c, 0x8, 0xa, 0xffff, 0x1}, {0x4, 0x3, 0x0, 0x8, 0x4, 0x6}, {0x1, 0x80, 0x5, 0xfffffff8, 0x9, 0x9}, {0x9, 0x2, 0x80000000, 0xff, 0x81, 0xb}, {0x10000008, 0x7, 0x2, 0x0, 0x9, 0x4}, {0x1, 0x800, 0x0, 0x3, 0x5, 0x10000}, {0x2e1, 0x9, 0x7, 0x0, 0x9, 0x5b875ee4}, {0xff, 0x0, 0x7ea, 0x7b, 0x8, 0xfffffffc}, {0x2a, 0xffffffff, 0x80, 0x7fff, 0x2, 0x7}, {0x10, 0x6, 0x5, 0x4, 0x4, 0x33}, {0x3, 0xc, 0x6, 0x6, 0x9, 0x6}, {0x4, 0x5, 0x101, 0x4, 0x353e, 0x4}, {0x8, 0xc, 0x7fffffff, 0x2, 0x5, 0x7}, {0xfffffffa, 0x9, 0x7, 0x42baad39, 0x6, 0x6}, {0x7, 0xfffffff1, 0x1, 0xd, 0xb26e, 0x1}, {0x1, 0x94, 0x5, 0x5, 0x7, 0xfffffff9}, {0x9, 0xbfa3, 0x5, 0x7, 0x6, 0x3}, {0x10001, 0x0, 0x1, 0x7, 0x2, 0xb1}, {0x7fffffff, 0xfffff5be, 0x8, 0x3, 0x2c, 0x9}, {0xffd, 0x7f, 0x40, 0x0, 0x6, 0x3}, {0x2a9, 0x0, 0x6, 0x4, 0xb04, 0xd}, {0x957b, 0x0, 0x24a3, 0x7, 0x3, 0x1}, {0x4, 0x3, 0x7, 0x0, 0x91, 0x6}, {0x1, 0x3800000, 0x6, 0x8, 0x2, 0xffffffff}, {0x5, 0x8, 0x2, 0x10001, 0x5}, {0xb34, 0x6, 0x8, 0x7, 0x5, 0x4}, {0x1, 0x1, 0x42, 0x7fff, 0x8, 0x9}, {0x401, 0x9, 0x8, 0x1}, {0x2, 0x8, 0x6a, 0x0, 0x1, 0xffffffff}, {0x7fffffff, 0x7, 0x2, 0x10, 0x4, 0xf}, {0xfffffff2, 0x1, 0x9, 0xd, 0x3, 0x1}, {0x0, 0x1, 0xffffffff, 0xff, 0x2c4, 0x4}, {0x4, 0x86f6, 0x4, 0x3, 0x9, 0x6}, {0x7, 0x9, 0x3, 0x3, 0x7, 0x67cf108b}, {0x0, 0x2, 0x4, 0x7, 0x5, 0xffffffff}, {0x8, 0xd8, 0x3, 0x4, 0x3ff, 0x8}, {0x6, 0x7fff, 0x100, 0x4, 0x2, 0x8}, {0x8, 0xe041, 0x4, 0x8, 0x5, 0x5e1}, {0x6, 0x3, 0x8, 0x1000, 0x5, 0xcb31}, {0x1, 0xd223, 0x8, 0x0, 0x4, 0x5}], [{0x2, 0x1}, {0x5, 0x1}, {0x2}, {0xaa699aae85504618, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x3}, {0x2}, {0x2, 0x1}, {0x0, 0x43e94edb6b16b030}, {}, {0x5, 0x1}, {0x4}, {}, {0x3}, {0x1}, {0xc770d970940cffe5, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x1, 0x1489d857e77e70bb}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x5}, {0x6, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x5, 0xa11, 0x5, 0x0, 0x800}, 0x8, 0x77, [{0x101, 0x8001, 0x7fffffff, 0x9, 0x8, 0x2}, {0x40, 0x4, 0x2, 0x1, 0x638d, 0x2}, {0x3, 0x2, 0x3, 0x0, 0x6, 0xb}, {0x6, 0x3, 0x10df400, 0x7, 0x2}]}, [{0x8, 0x8a, 0x1, 0x0, 0x80c6000, 0x1}, {0x8000, 0x2, 0x10000, 0x1, 0x2, 0x8}, {0x2a6, 0x6, 0x850d, 0x888, 0x7f, 0x8}, {0x8, 0x2, 0x2, 0x8, 0x6, 0x1}, {0x100, 0xbb2d, 0x8, 0x2, 0x0, 0x9}, {0xd, 0x1, 0xc, 0xfffffffc, 0x1, 0x401}, {0x2, 0x6, 0x8f, 0x6, 0x47}, {0x8, 0x2, 0xffff, 0x6, 0x2, 0xf}, {0x7, 0x8, 0xb9f, 0xf, 0x3, 0xe}, {0xffff8001, 0x5, 0xf, 0x1ff, 0x5, 0x10000}, {0x86, 0x7, 0xd, 0x1, 0x0, 0x3}, {0x5, 0x1ff, 0x40, 0x5, 0xffffffa0}, {0x5, 0x4, 0xe3, 0xffff7224, 0x3, 0x800}, {0x101, 0xfffffff9, 0xe1f8, 0x4, 0x867, 0xd}, {0x6, 0x7, 0x35f, 0x9, 0x3, 0x39a}, {0x7, 0xb, 0x9, 0x7, 0x9, 0x6}, {0x8e, 0x401, 0x7fffffff, 0xffffffff, 0x2, 0x5}, {0xfffffff8, 0x5, 0x4e4e, 0xfffffff7}, {0x0, 0xd, 0xff, 0x1, 0x8, 0x7}, {0x3, 0xc2, 0xd, 0x7f, 0x8a08, 0x2}, {0x2, 0x6, 0x4, 0x0, 0x1, 0x80000001}, {0x2, 0xb, 0x5, 0x3, 0x8, 0x2}, {0x6, 0x2, 0x120, 0x9, 0x16cc7403, 0x3}, {0x1, 0x7, 0x6, 0x6a78, 0x8, 0xfffffbff}, {0x1, 0x0, 0x8, 0x1ff, 0x0, 0x46}, {0x0, 0x3, 0x27d98bac, 0xfff, 0x8, 0xd}, {0xe, 0xeb69, 0x2, 0xffff0375, 0x1000, 0x10000}, {0x101, 0x7f000, 0xa, 0x6, 0xa, 0xbeb}, {0x24000000, 0x0, 0x4, 0x400, 0x5, 0x2}, {0x8000, 0x100, 0x9, 0x0, 0x2, 0xffffffff}, {0x3f, 0x3, 0x4af, 0x7, 0xff, 0x5}, {0xffffff7f, 0xffff7fff, 0xb3f4, 0xb5, 0xe, 0xcbb7}, {0x7, 0xb, 0xfffffff7, 0x2, 0xf27, 0x4}, {0x1, 0x97, 0x480, 0x9a, 0x8000, 0x6}, {0x3, 0x7, 0x2, 0xffff, 0x115, 0x1}, {0x86e5, 0x8, 0x7, 0x4, 0x7e73, 0x8}, {0x9, 0x5bcf, 0x8, 0x80000000, 0xee, 0x2c1}, {0x3, 0x1800000, 0x2, 0x2, 0x2, 0x4}, {0x6, 0x81, 0xf, 0x4, 0x81, 0xffffffff}, {0x0, 0x9, 0x9, 0x1, 0xd9b, 0x1}, {0x8, 0xce, 0x5, 0x1, 0x7}, {0x4edf, 0xfd9f, 0x101, 0xf84, 0x81}, {0x10000, 0x80000000, 0x80, 0x1, 0x1000, 0x9}, {0x7, 0x8, 0xd24, 0x3f5, 0x2, 0x4427}, {0x1, 0x0, 0x20, 0xfffffff9, 0x6, 0x1}, {0xb5f, 0xf2c, 0xe6b, 0x9, 0x4, 0x80}, {0x3, 0x14, 0x6c, 0x80000001, 0x5, 0x4}, {0x1, 0x3, 0x101, 0xfffffffc, 0x8, 0xfffffff8}, {0x3, 0x4, 0x35, 0x8, 0x6, 0xfffffffb}, {0x1, 0x1, 0xfffffffa, 0x180, 0x7fffffff, 0x7}, {0x9, 0x2, 0xffffb29d, 0x0, 0xf, 0x100}, {0x8, 0x647, 0x1115b69e, 0x8, 0x7fffffff, 0xbb}, {0x488d, 0x9, 0x5, 0xff, 0x2, 0x2}, {0x2, 0xfffffff9, 0x8, 0xc5f, 0xb, 0x3}, {0x0, 0xd1, 0x0, 0x1, 0x1, 0x1}, {0x7fffffff, 0xc8b, 0x0, 0x6, 0x9, 0x3}, {0x9, 0xae4, 0x8, 0x7, 0x3, 0x7fff}, {0x5, 0x0, 0x7ff, 0x400, 0x9, 0x5}, {0x2, 0x5, 0x1, 0x0, 0x7fff, 0x9}, {0x2, 0x9, 0x2, 0x1a, 0x3, 0xfffffffe}, {0xfffffffd, 0x4, 0x4, 0x10000, 0x3, 0xe1}, {0x1, 0xb, 0x1, 0x8001, 0x2, 0x81}, {0x5, 0x10001, 0xd, 0x5, 0x8, 0x3}, {0x6, 0xffffff75, 0xc, 0xd, 0x5, 0x1}, {0xd24, 0x2, 0x9, 0x1, 0x3, 0x9}, {0x2, 0x4, 0x10000, 0x40, 0xfff, 0xc}, {0x9, 0x3, 0xbeb, 0x5, 0x2, 0x3}, {0xfffffffc, 0x15, 0xfffffffd, 0x80000001, 0x1, 0x20}, {0x800, 0xff, 0x400, 0xfffffff7, 0x6, 0x6}, {0x9, 0x8, 0x2069, 0x3, 0x6, 0x7}, {0x8, 0x1, 0x10000, 0x5, 0x5, 0x5}, {0x7, 0x8, 0x4, 0x8001, 0x2, 0xf}, {0x81, 0xfcd, 0x3, 0x3, 0x203b, 0x2}, {0x10000, 0x1, 0x6, 0x7, 0x101, 0x8}, {0x0, 0x5, 0xfffffffd, 0x2, 0x9, 0xfbf}, {0x4, 0x2, 0x9, 0x2, 0x80, 0x2000040}, {0x9, 0x7, 0x8000, 0x5, 0x8, 0x6}, {0x1, 0x80000000, 0xffff, 0x7fff, 0x0, 0x4}, {0xe, 0x7f, 0x6, 0xbed3, 0x63a, 0x1}, {0x4, 0x9, 0x90, 0x100, 0x4, 0xe82}, {0x80000001, 0x5, 0x1, 0x8, 0x78, 0x2}, {0x10, 0xe9, 0x6, 0x10000, 0x9, 0x7}, {0x2, 0x9, 0x1, 0x2f1, 0x6, 0x8}, {0xd63, 0x2, 0x8, 0xcaf, 0x85b5, 0x80000001}, {0x3, 0x401, 0x8, 0x10000, 0xcf}, {0x6, 0x7, 0xb, 0xfff, 0x4, 0x5}, {0xa6f, 0x3ff, 0x5, 0x911, 0x1, 0x1}, {0x1, 0x9, 0x9, 0xf1, 0x0, 0x10000}, {0x4, 0x4, 0x8, 0xff, 0x4}, {0x1, 0x4, 0x7, 0x80000000, 0x7, 0xb}, {0x1, 0x5, 0x4, 0x1ff, 0xa, 0x538a}, {0x7f, 0x7, 0x8, 0xaa, 0x2, 0x7}, {0xfff, 0xdc1, 0x5, 0xc, 0x7, 0x7}, {0x100, 0x3e, 0xd, 0x0, 0x6910c30c, 0x7}, {0x2, 0x2, 0xfffffffb, 0xfeb7, 0x579, 0x8}, {0x9, 0x9, 0x5, 0x6, 0x0, 0x7}, {0x10000, 0x10001, 0xffffffff, 0xd7b, 0x3, 0x5f3}, {0xff, 0x8886, 0x3, 0x5, 0x5, 0x3}, {0x6, 0x7f, 0x80000001, 0x7f0, 0xfff, 0x4bf}, {0x2, 0x5, 0x5, 0x4, 0x5, 0x3403}, {0xe3, 0xf7, 0x4, 0x7, 0x63b, 0xc}, {0x7, 0x6ec7e5d9, 0x3, 0x2, 0x3, 0x6}, {0x7, 0x7, 0x8, 0x4, 0xffffffff, 0x3b6}, {0x1, 0x9, 0xfffffffb, 0x7, 0x7f, 0x79}, {0x0, 0x4, 0x1, 0x9, 0x70, 0x7}, {0xaa, 0x6, 0x6091, 0x7f, 0x3, 0x3}, {0x8, 0x0, 0x3ff, 0x4, 0x0, 0x7e}, {0xc, 0x3, 0x9, 0x10, 0x3ff, 0x5}, {0x2, 0xffff, 0xd, 0x101, 0x9, 0x80000000}, {0x5c, 0x9, 0x40, 0xf, 0x6, 0x81}, {0x3309, 0xc6e9, 0x9, 0xfffffffa, 0x7, 0xbc}, {0xe, 0x81, 0x7, 0x7, 0x3, 0x9}, {0x4, 0x8, 0x80000000, 0x6, 0x7, 0x7ff}, {0x5, 0x7, 0x4, 0xafb1, 0xc20d, 0x40}, {0x5, 0x94, 0x3, 0x400, 0x0, 0x5}, {0x56390, 0x1, 0x5, 0x38, 0x7, 0x7}, {0x8000, 0x6, 0x9, 0x4, 0x7, 0x80000001}, {0x7f, 0x8, 0xf8, 0x4dd6, 0x8, 0x5}, {0x2, 0x0, 0x3, 0x448ea322, 0x37c, 0xee}, {0x4b, 0x9, 0x5, 0x8001, 0x7, 0x80000001}, {0xffffff4e, 0x32, 0x7, 0x4, 0x3, 0x6}, {0x0, 0x75, 0x4, 0x4, 0x1ff, 0x10000000}, {0x3ca91c8a, 0xffffffff, 0x10000, 0x7fffffff, 0x4}, {0x7, 0x57, 0x5, 0x6, 0x7, 0xb33d}, {0x4, 0x101, 0xfff, 0x2, 0x4, 0x13}, {0x0, 0x8000, 0x0, 0x1ff, 0x4, 0x99}, {0x3, 0x9, 0xf61b, 0x7ff, 0x40, 0x4a89}, {0x1, 0x5, 0x9, 0xfff, 0xdb3, 0x93a6}], [{0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1}, {0x4}, {0x3}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x6}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x3}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {}, {}, {0x2}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x6f8f8a2ccadbcaf1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x9fa91f92013e47c9}, {0x3, 0x57dcad52c17df449}, {0x4}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x5}, {0x2}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x44aef0e82e38681e}, {0x4}, {0x3}, {0x4}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x226c}}, 0x0) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 4.80511756s ago: executing program 2 (id=5787): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x6000}) socket$inet(0xa, 0x801, 0x83) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x5, 0xca) socket$inet6(0xa, 0x1, 0x8010000000000084) listen(0xffffffffffffffff, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r2, 0x100) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet(0xa, 0x5, 0x0) listen(r4, 0x1) listen(0xffffffffffffffff, 0x8) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000200)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) 4.579002648s ago: executing program 3 (id=5788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000002000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 4.166334622s ago: executing program 3 (id=5789): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000300527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 3.946518316s ago: executing program 3 (id=5790): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x4, 0x4, 0x4, 0x10002, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000cb00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.864610852s ago: executing program 2 (id=5791): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x6000}) socket$inet(0xa, 0x801, 0x83) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x5, 0xca) socket$inet6(0xa, 0x1, 0x8010000000000084) listen(0xffffffffffffffff, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r2, 0x100) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet(0xa, 0x5, 0x0) listen(r4, 0x1) listen(0xffffffffffffffff, 0x8) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000200)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) 3.68592418s ago: executing program 3 (id=5792): gettid() syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x19, 0xfffffffffffffffc, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) socket$inet6(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="380100001a000100feffffff00010000e0000002000000000000000000000000000000000000000000000000000000010001071c4e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0700000000000000fffffffe000001000004d46c000000fc020000000000000000000000000001fe000000000100010000000000000000a39b000000000008ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffeffffffff030000000000008000000005350000020001070000000000000000480003006465666c61746500"/240], 0x138}}, 0x844) syz_open_dev$sndctrl(0x0, 0x8, 0x8a43) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r5, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 1.938471118s ago: executing program 3 (id=5793): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000080)=0x8) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bind$xdp(r1, &(0x7f0000000100), 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x40000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3000000}, 0x48) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000440)="395beea207e947853a1dfac579c441f41046cd7a63ff11ec115fa21199ac943f5f4c3dd0a7320a53b0ce0c66a7fd61ce8b3426a863d0e675acde6bce0ab41fc2cc287f3bc85b53425d68201b93d99670c394614d30f8d526d5268b3947b08648f416d6088a02ea771ab81c36003a13edb4a1a7ef1c53b788a94cb7a751fe46f0b70db149e0e7a4c67152d89a67b9ec357d50203583e2b669d74726eeb37b1017cbc10aabf38e34e245865cc0826c43b7a95c49adc64b48c77a8c2e6af41f50186872b2e18dbb6e83309648374f7afb0e292dba7fc0a777d50e558263a154152abedea52272067b85be307c9a259464454cd48643de10cb416bf71bb53671882751e5f06a299bb139d91595649f947eab8a1b5c35a8899ea02c9aaba8b05c9ae145580999c31ab1d43b698541c88c1fcac1d0b13bfcb3a4dac9576adbab39b5b9121e4803b04c85aeec487b40d0e7686f3e27eacab85c21b8ad73a94dd5675e8fce93fb67669f2434f2e8386af5b22d2aa11482347f824b2bf83cbc35676808da6a2b992c9a4c8b9e07408bd3d8323cc3b060eb4a089af65dd213cc261503647d2f5a943ee269acfc171b3d226ca3a2176fc583d1584001f54bccb9958b26a640136e712e9634977c9ad88ead5844286c57014aa76c9a4deb0bbb54af488637b006182e64a5687256cf288cae89946a6df14d28cdeffc09f6960adc5ab1ce84f000e567698bb02cba632427319edcafecc2d2b8734c95fdd302be73c571132172284ba79447907e8d5ce3ae872423b8e28481cd566ca3912b6bcaea597f882b79f5bee88bf74b9541af87c4c67c9ddb2c7b64246b1b8d1d1de87e5999ca73ffa2ca2dcaf2b300e25bd6a7392212165b6ed59b0d5e67788c359494fad11789f28c76dfe529668ad6fcfa04a36432c937940f91d3fdfd81c1377c730e9587f7f409eb309cb4a55bdd54c5f32f5f00ac74281191a7c536b8908123a25585d2f3ec962e45ce0ed443b71cae6802bad09f135ae2ba5d8d814dbc41c85180e0ab9f34e079094b2a8f1161be3de456bb6834bcb500274db2475cd24a9df51640299aac352efbf81b5b24df4f7df3cb5fc6f4852e4d4a922eb5d477a646928e1c51eef5175e75b4452fbb192e694bf6c33f6c214aa0e2cb683bbf658de2df474fdc3a4d77c02aa3405de7284f5be7640fede4cd784d7b01c79bc28d0038ca3cfb3704c42d126bcf4d07ccc6f6337de3f82e481e8abe2762727b52a00ff5814fe97eacf8a1c6df34d179184dc79f1ad6c35d3654b35d281ae1dd0a649f5364e04e9ee88249b2589484498330ad80f7b3df7df0663230d5fa5411c6148ac86e4004c75e3b42bb0df80e655bed836a5b0c4b38001e8eabb07a4e901f6eb0586b9d6a23d87a7e867be7f8d90cecc48254255812e762e540655353c5866e33d20a0a6cbfccb2eb0f9565301cf459e966da1882e4cbb11bfab1cc515b5d1a2b1b378956856c34989cbe7829634d50127ed53fe7617a5b4c19a81c20e07ca624e9bdfa3e4a771d2862cf4770d1ae1535b56f8dd0e446a73ec4e9f8923d67debf59384215dd71d4ce5eb5e58d78c87df12460fbdbd8e7f187ffcadf1be3049fc8b5a743540c4fbb47d566bbaa03fadffdf2a309740c378e7c239436a1750a44b8918973554b89af4a7145b3112c724c1326182a5ceb7915feaed7c3b01266a0192cd9917d527d93315ffac7ae54f421ea320191521b23cd11dec96c5f87f1908118642d23d52a8c946d90dae0d8671c69b4fbcfd0335a6d890f5a79e4799b43683791e9ac5007f04d15dc1af9aea2da3326026a0b1833f5c47cb75b9ce8ad767c8bbb60eb76d162df61c9c0a0941379c8931df159f698c71752fa4cfa771f8f1964feb5eb86965ad45564d3ac32413be4083f796373062c1e4faf818fcda3f8b22bcbb0b66a907bd63abd0453b61cb65bb32597080962a02119f1e39b62f06ec483b37d4dcacdff50fcb3100ed7fc320914ab6b83c12e995c29a1cff6696887c2dc39f3e5ae5aae4fa7c6d493899d5aa09ff59960391902fdc6730c4fd4ba7285de63146261b0a727697e25ca7cd85dd4970fd2bfc671075158c26d4301f403176c82ea10fe13c594f0129be578d4b8309cee278b592addeabd8771b7eb3d076fcd954a6eb9b5a420e1a4dfc368aa49c460eb70679db63921230f312bc0c22da2a26707316a5376b0d175c6c0f7d630e0d8970698eb945f0d90db1751c003c3d2333188153270174e933af2250663e4116e8957c8d3e97b9b3aa9b79832a0750eee13ab383026f23cb3b5df9e83268c5e8d434e95821cac7688060e60b1d047d2923c7b1c753efa3ce0921b46e8b202ed99c39adec7251a18f919d4f08b7d211cc70eeab5fade56fc2b7111a0a57e9e3d31690ad72b569873389f5911fa675db4d9e10a76d20ee861b2ab01851852ab97e6da3fec4a5337a7f2489a09cf1ca1137cda64de0e82b8ddb7136d703ee1f1f5ba75f7f7478d90e82927b410f0bd8c4aba0f44731509744f2f70999e2a38502e88f8f235e8ceb352f7a554f12a09c3759df169c3e430e8991bebbd851fe2ad60a434b922553864547a3dd44db28858494506badcc37829cc9d6bbcf0b8dc6c78cd0302bb6f9ffa27a80c1f6cc14acc1ca35835a7cfc336907854a2663b0cd49c10581ec46c25ea6ff40f51c84bf9a3181aee2fc466e4fc0d3f48a7a3732b98dbf0849572b53d554d362c8c926677cc66eb4fae217422fa707dccc50632c7612a5c40715ebc27fda6acac00df449d31c908e11f7468a72cd2303df2102eb1c310d970ea14d9723001529546637586162e4b632709ba49a3345b035771060226b5bfe75d250ca8dee27e860ad6d9c6a3cd2fad5aa651f6dc37affdbb3dae4a5d2b3f53707e8d17063ac33cc06e589dbe2e929c5b53e68ff61dd11d70d1c988dd5a8570b02f34ec82405c882fbe7a22f919e28f44b8361acc556616234d216bb8f4376d911406a162e6540f23a82dc04c3a0d1771bb7113bfdccb87cf87160a0e2c0813bfd35e09e55a9fa980622968af7703178a8917e2d6bce4bacf499e7bd97caf21861b59c5f28de9579968a636fdcc0d7899c8e2cd8be887295293f64b893bef4218810af0bd34193565f8a7a7d54f3d0879a184ae64b05b8c4b8305d1fcbf0d5676a291141db4d93e9da4e07583554d558d6053d4ae11936ddc2f167773b0f2e642ef2ed4629c4d2ff4e2ee271fedc4a99d580463a509539027af557703d437398586fcea6915d6080fb6a50cfe360d4ac9428c7578b9e6c4c1d8c10335a409d189a5a71e36e9666b263fee6b9b5934e94ebfb2edc93954c9f86d9f6c18b38fd9868c45c603f57c1b26130aadb572037ce0a61e7af19257edae4de17deed533ff4d598a2466b7812079f990d980ac1d71d7a40346a300455d2f9f44d7c854abbd3adfc17b3651fab90782d1f6c41e826afd4a93839190f8a547524512afcbcf0f330967ddf434f5a69513dec2672c9325eae74541803689bb9ca0047b43e6a85ccce5c76f1d58c0ad55967ca9e916ad3c1bdc868d215dfd81e211cf795174dae3c7439da922e53d200042a6e3de5f00a007b6112845e069133626a950527b2e3608597f010a51b6536f6b4d86400bb557aeed2d29bd9953c9183d67681cd8a7f85fa3b4bd77cb4e2c27365fd732800730db44ef4a5391edbddd2c4214215a41920f5b6890cf48c05ea0d13342394761ea7fd88222feb2f33759d55d68d9f4c574fa6dbe24b5b4ce185c06eb9fac81718e5334e9814238d4f1f143816e33051ccea00b908687ff88741ca9c23df1abe3ef7570f98ed09d671d0629ed89ebfc8b137e03ebf66ae69f1b4e7412914dbce340cba41d26b9c0bcc52eab1eecef6f4052f948f12a9b20df091ec609b4f246fe32e6e3c79d2c021390f6f31256259937345775a2781a0ab496e98847cd455eec74abaa102892a90e90b3f68d301ecea2182112a6cf5d5e15ce0bddcd7fa08f83a7d88d08e3b265de01d7753d49454e622cf93f014bde96d8f06ef9b3ebbe692d3558b27763ce0b382b5b3daed38824664920091952e7a0c1e19fcc546101e504deea13bf0d9a22d8e80ef54836177180e6707cc2eb38d5ba02edfee15c9ee73f8fb687e336de9b7890f11d0a2043b552fb34fa53206ba8a3fb31dfae1dc768ef6b8d52f85abfdbc981e2bb15daf18085697bbb37fc834db88e3111d7a2fcef796cba9d7edc88c1d34e692ff2016680bc319a55c984de3be035bebe849e990ce017f7fc8f942ae17d0fa9639dd1089e043811a75ffdee27bb1a12c7ead775a703347eebf8330812b0fce82e9bf798146d207d1287055d8750a3a491b9f55cb1f48cff66542706e71ab26f1059116548ec508c9ffc263c72133397541e2660f38b7e087fcc23a8db17ba013e73045f984cf479f55b99490c2b386d02208d3288c56d0031325e3250b3f807491ca6dd301b0c386a14c95f507648545b7c8942cdc82fd49ea57f858b9fd3405567fe3446df9e336a445b012dc8a0c750f53da04be62d3f2345a6b15865812774f4d07709fafec7f5e3c8a2803a695215fe4f22526a0541fedd35ae778411638f79b097c26374da78c2339157da305555ce9f82d80e106583d70cbcb22dd178402cb8a3b6db812387831694b35699b86ba18e7deb8e79a90b35309a5545c244ff51d5d401bb823869e2621aa82eff71fbbfe8b37b5538c59b3941c5194c7e4ec27ea8659d04edd5f091f047e6f0387878c44c58647bd234533c29284f020927a9aa44bf9727e3f3aaf8e72e5d720043490bb8624b0df89e8a1eee43579cde2ffa323f5bd4a1e680a70190bc481fbfd6d5c8bd3661d7f499404ec72e3d514dbd91a5c2d8a4f9c16ed6e983165d7c0dccf4402668627c3750aace13663a5824de75237d620694063758752c47733a054d7cd5f6b57be7e51186037dea7b69485f9b4c16c0a339db8104e9160b697a711045ec1897d65219fbbeafa0cf09e7cb4d60751155d5d4420bb9a343b460ad5fb1265df420922268d41ce143f25d343855ce46920f02550a34e007b97d53e476d31ba14ec44d6e751fb7466a24edf6982e63fc266870acef8e8e1f177ca54e0b3dd36017b546b5fbea6485bbd1c5f59a9c154acdea5c9c8c7a94512b50e36a14d1118120ecc3cca5ceecde01fadf595a2fde40a4cdd06c8a0a268f7b7694fb4070e8f08ff04f61a04dd4cf0877d6fa8fcf2fe72e0523b1639396668a394270e9a1dcb805b5632202413bf9925f2d187e4b3ff99fbfb556f62dac44171f9272c526ff035606287495386ab7a77dfb6c424e6a22b326d187204f264f62cd60c3bda4dc258ee389d20d7a27836ea1aa3cbbc67844215f777485844019b1cd97aaaf1c429d165d3c031366505f559b1ae1d5d3a5f6d5fd1b91e95eb8e484c32cc7864e541d68e57a0797081215b630026547054ccb381028c148eee1ead7c2fe1d4beefd037fff77801272669bdbcaa977c64c698b04ce90c8d9836d7a196e285fae053da4c8b978d54598afc4ec8196a5ae1423e75522a745050fb04ff8aa29deca56efc7f4202209312543675495c2134a02ee90552df53c3691dec516ee680f7208947b3f9281f6e5b7d0bf8ed93b4c97934c21779ddc4616ac3a2228efd12e5bc757f85cebccadf5804c9b886fbb71a1c0593e5e2aa80ef53d3afa73f09dba421717275914fdc620609ded7e9f1fae814e499efd33dd4a41e364aa9acc1db709af079eac83dbaec530525480eb25", 0x1000) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, '\x00', "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "83e16c6121c9e45e", "8cf47dc18c3711e7f5eebcb714dc7c725c48a23b754dd3df767a968e80d33dc0", "fd18d9bb", "d4bd6d5ba0f1a276"}, 0x38) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 1.366919918s ago: executing program 3 (id=5794): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x37) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000080008000a40fffffffc0900010073797a3100000000080005400000000b14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c0000000a0a0101"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_io_uring_setup(0x108d, &(0x7f0000000100)={0x0, 0x15f8, 0x1, 0x2, 0xbc}, &(0x7f0000000000), &(0x7f0000000080)) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x6}, 0x48) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={r5, 0xfffffffffffffea3, &(0x7f0000000080)}, 0x10) (async, rerun: 64) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000040)={0x26000, 0x7000, 0x5, 0x3, 0x3}) (async, rerun: 64) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000000001032151b01000000000001090224000100000000090400000103000d0009"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) mount$binder(0x0, 0x0, 0x0, 0x80000, &(0x7f00000003c0)=ANY=[]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) (async) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000300)) (async) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100), &(0x7f0000000380)=@v2={0x3, 0x2, 0xfe, 0xe79f, 0x1, 'J'}, 0xa, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async, rerun: 32) syz_usb_control_io(r6, 0x0, 0x0) (rerun: 32) 1.346782243s ago: executing program 2 (id=5795): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000340)={r1, 0x1}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000100)=0x4) sendmsg(r0, &(0x7f0000000940)={&(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x2, 0x0, {0xa, 0x4e23, 0xffffdba3, @remote, 0x8}}}, 0x80, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x140}, 0x20000014) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040), 0x10) listen(r6, 0x5efe) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000240)={0x28, 0x0, 0x0, @local}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x43, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 1.25346902s ago: executing program 9 (id=5796): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x226c, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x2240, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_ACT={0x2238, 0x4, [@m_xt={0x170, 0x18, 0x0, 0x0, {{0x7}, {0xbc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x3d, 0x6, {0xd, 'security\x00', 0xff, 0x1b, "3901bae1b2c90dec01349be3ac5bab1aa98106"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0xb}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0x8d, 0x6, "c62e9a687eed868051eb651c24304d274e8629de1b50d16051064435fc24ec70771d17f6fcdc9e9ee75e25d0f91438203e64eefedecde132008eeb0431ab391ca0bf5a7765d9d88867fb095fac2a9c7739fdc611b922111ed0c5abbfcc78d191c3703f0604da38e930080de9aa271e5f8e9da2c50a80ed7034f68c77939dbe86fb46c18e845a89f584"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0xf0, 0x13, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x7f, 0x5, 0x10001, 0x6}}]}, {0xa9, 0x6, "7c0a1851060342436687049aaca83c87334c4d9cf996bff1b72efe3eb55f6b006dbd0e1c0bd78373b86981d3f1c87ebe53beca47c54b14ae9193d84be9fe799163951c5c233b691617e5508ea3f9b14b8a84941b72dac877ea437941f785a1c09929108fa47ec3420933e77185f8c50d8140dd015231cd6cece69214efe0b7030a9679081f8f3c0f55b91dcbb582cdf68d0c84d7b970c7842211384835fe59a974c410e0f3"}, {0xc, 0x7, {0xb07c3f3708729d04}}, {0xc, 0x8, {0x3}}}}, @m_pedit={0x1fd4, 0x4, 0x0, 0x0, {{0xa}, {0x1fa8, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x1bc, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x337b561b573d7d9c}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x4c, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x60e, 0x3, 0x10000000, 0x4, 0xdf7e}, 0x4, 0xa, [{0x40, 0x5, 0x1, 0x1, 0x7, 0xbf6105a}, {0xd, 0xffffffff, 0x2, 0x93, 0x9, 0x9}, {0xfffffffc, 0x1, 0x1, 0x63, 0x3, 0xc}, {0x4, 0x10000, 0x5, 0x1, 0x7, 0x80}, {0xffffff81, 0xb08, 0xf, 0x0, 0xe, 0x3}, {0xbb79, 0x8, 0x6, 0xb568bb60, 0x6, 0x7f}]}, [{0x7, 0x4, 0x392, 0x6, 0x1000, 0x5}, {0x7, 0xfffeffff, 0xf, 0x6a5b, 0xfffffffd, 0x1000}, {0x37a0, 0x5, 0xcd0, 0xfffffff7, 0x40, 0x6}, {0x6, 0xd2a3, 0x0, 0xfffffffc, 0xcf, 0x3}, {0xffff0001, 0x2, 0x8000000, 0x4, 0x2, 0x320}, {0x7, 0x695967f0, 0xffff, 0x0, 0x8, 0x33}, {0x7b9c60c0, 0x7, 0x5, 0x0, 0x7, 0x1}, {0x7fff, 0xd, 0xb, 0x0, 0x4, 0x9}, {0x800, 0x6, 0xaa, 0x1, 0xfa609cae, 0x8}, {0x7d, 0x3, 0x3, 0x6, 0x0, 0x20000}, {0xfffffff7, 0x200, 0x6, 0x1ff, 0x87, 0x4}, {0x9, 0x8, 0x5, 0x8, 0x80000000, 0x7ff}, {0x5, 0x6, 0x8, 0x2, 0x80, 0x10001}, {0x0, 0x8, 0x0, 0x7, 0xfffff4d2, 0x1000}, {0x3, 0x6, 0x2, 0x0, 0xc, 0xbb1f}, {0x8, 0x218, 0x10000, 0x3, 0x6, 0x10001}, {0x5, 0x9, 0xa, 0x13, 0x6ab32164, 0x400}, {0x7, 0x8, 0x4c94, 0x2, 0xc5, 0xcd}, {0xd12f, 0xf244, 0xfffffff6, 0x9, 0x5}, {0xe9e, 0x0, 0xffffc170, 0x64d, 0xffffffff, 0x4}, {0x1800000, 0x1, 0x80000001, 0x3, 0x280, 0x3}, {0x9, 0xcc7, 0x6, 0xfffffff7, 0xb, 0xb}, {0x800, 0x9, 0x9, 0xfffffffe, 0x0, 0xc}, {0xfd, 0x6, 0x6, 0x3, 0x8, 0x3}, {0x32d2, 0x7, 0x5, 0x6, 0x10000, 0x4696}, {0x7f, 0xb9cf, 0x4, 0x2, 0x64f8, 0xfffffffa}, {0x4, 0x7, 0x0, 0x7, 0x0, 0x4e49}, {0x6, 0x1ff, 0x5, 0xfffffeff, 0x9b63}, {0x1, 0x4, 0x6, 0xffffffff, 0x7fff, 0xf}, {0x2, 0x7, 0x4, 0x8000, 0x0, 0x80000001}, {0x8000, 0xd613, 0x6, 0x7ff, 0x200, 0x6}, {0x6, 0x7f0b, 0x9, 0x1, 0x4, 0x4}, {0x80, 0x2, 0x7fffffff, 0x5fb, 0xffff, 0x2}, {0x10000, 0x8000, 0x101, 0x5, 0x6, 0x2}, {0x7, 0xdbff, 0x2, 0x1, 0x6, 0x4}, {0x1, 0x7dc1, 0xfffffeff, 0xf8, 0xfffffffb, 0x4}, {0x6, 0xa8, 0x9, 0xb, 0x2, 0x81}, {0x3, 0xc2, 0x3, 0x9, 0xf4, 0x10000}, {0x4, 0x6, 0xff, 0x6, 0x6f, 0x100}, {0x7, 0x7, 0x6, 0x66e, 0xffff8001, 0x8000}, {0x72, 0x9845, 0x4, 0x900, 0xffffffff, 0x1}, {0x101, 0x9, 0x3, 0x10001, 0x5}, {0x0, 0x2, 0xafc, 0x3, 0x4, 0x6}, {0x7, 0x8, 0x1, 0x0, 0x1, 0xdb}, {0xfffffffe, 0x40, 0x23a, 0x2}, {0x1, 0x7, 0x7, 0x0, 0xb, 0x7}, {0xfffffff7, 0xa, 0x4d, 0x2, 0x6, 0x9}, {0xee, 0x2, 0x3, 0xefe, 0x2, 0xd12}, {0x200, 0xe, 0x6, 0x9, 0x80000001, 0x4}, {0x400, 0x0, 0x4, 0x4, 0x200}, {0x9, 0x7, 0x5, 0x1, 0x3, 0x32a}, {0xc50d, 0x8, 0x5, 0x4f, 0x0, 0x8}, {0xfffffff0, 0x9, 0x7, 0x1, 0x8, 0x5}, {0x0, 0x7fffffff, 0x4, 0x3, 0x6, 0x6}, {0x18ed, 0x8, 0x7, 0x9, 0x5181441a}, {0x1, 0x6, 0x4, 0x5, 0x5, 0xc}, {0xffffffff, 0x1ff, 0xb, 0x3, 0x7, 0x3}, {0x9, 0x5, 0xfffffffd, 0x2, 0x3fe, 0x8}, {0xd4, 0x7, 0x7, 0x6, 0x7}, {0xd4fc572, 0x8, 0x1, 0xe, 0xc3, 0x10000}, {0x6b7, 0x8, 0x8000, 0x5fc, 0x4, 0xffff}, {0x4, 0x7, 0x2, 0x5, 0x400}, {0x7, 0x8, 0x8ce5, 0x6, 0x32}, {0x8, 0x13, 0x8, 0x3ff, 0x3, 0x3}, {0x6, 0x80000000, 0x5, 0x9, 0x80000001, 0x2}, {0x6, 0xff34, 0x3, 0x5, 0x6, 0x4}, {0x7, 0x6, 0xa4e, 0x10, 0x2, 0x8ac}, {0x6, 0xffffff00, 0x5, 0x80000000, 0x8, 0x3}, {0xfffffffa, 0x94, 0x5452, 0x400, 0x401, 0x9}, {0x80000001, 0x20004fbd, 0x80000000, 0x7, 0x0, 0x401}, {0x7, 0x1000, 0x1, 0x8, 0x4, 0xfffff0d4}, {0x7, 0x9, 0xe3, 0x2, 0x3, 0x8}, {0x5f7, 0x4, 0x7f, 0xc8cc, 0x6, 0x10000}, {0x1e, 0xffffffff, 0xb84, 0x7066, 0x9, 0xfff}, {0xb, 0x1, 0x0, 0xffff, 0x4, 0x5}, {0x6, 0x241, 0x7, 0xa8, 0xa445, 0x7f}, {0x2, 0x5, 0x8, 0x2, 0x3, 0xffff8000}, {0x10001, 0x2f, 0x5f87, 0x8b, 0x80000000, 0x2}, {0x6, 0xffffff00, 0x4af17099, 0x7, 0xd, 0xfa31}, {0x2, 0x7ff, 0x2, 0x3, 0x0, 0x40}, {0x9, 0x2, 0x4, 0x2, 0x9, 0x4}, {0x3, 0xd4, 0xf0, 0x0, 0x100, 0xff}, {0x100, 0x10001, 0x100, 0xa, 0x831d, 0x7fffffff}, {0x8, 0x238, 0x8, 0x9, 0x8, 0xfb}, {0x16, 0xd8, 0x400, 0x7, 0x100, 0x5}, {0x9, 0x1aa0, 0x2, 0xa8f, 0x3, 0x10000}, {0x44f, 0x7fff, 0xfeb, 0x7, 0x7, 0x80000001}, {0x8, 0x2d065fec, 0x8, 0x3ba, 0x6, 0x5fa3}, {0xfffffffb, 0xb34c, 0x8, 0xa, 0xffff, 0x1}, {0x4, 0x3, 0x0, 0x8, 0x4, 0x6}, {0x1, 0x80, 0x5, 0xfffffff8, 0x9, 0x9}, {0x9, 0x2, 0x80000000, 0xff, 0x81, 0xb}, {0x10000008, 0x7, 0x2, 0x0, 0x9, 0x4}, {0x1, 0x800, 0x0, 0x3, 0x5, 0x10000}, {0x2e1, 0x9, 0x7, 0x0, 0x9, 0x5b875ee4}, {0xff, 0x0, 0x7ea, 0x7b, 0x8, 0xfffffffc}, {0x2a, 0xffffffff, 0x80, 0x7fff, 0x2, 0x7}, {0x10, 0x6, 0x5, 0x4, 0x4, 0x33}, {0x3, 0xc, 0x6, 0x6, 0x9, 0x6}, {0x4, 0x5, 0x101, 0x4, 0x353e, 0x4}, {0x8, 0xc, 0x7fffffff, 0x2, 0x5, 0x7}, {0xfffffffa, 0x9, 0x7, 0x42baad39, 0x6, 0x6}, {0x7, 0xfffffff1, 0x1, 0xd, 0xb26e, 0x1}, {0x1, 0x94, 0x5, 0x5, 0x7, 0xfffffff9}, {0x9, 0xbfa3, 0x5, 0x7, 0x6, 0x3}, {0x10001, 0x0, 0x1, 0x7, 0x2, 0xb1}, {0x7fffffff, 0xfffff5be, 0x8, 0x3, 0x2c, 0x9}, {0xffd, 0x7f, 0x40, 0x0, 0x6, 0x3}, {0x2a9, 0x0, 0x6, 0x4, 0xb04, 0xd}, {0x957b, 0x0, 0x24a3, 0x7, 0x3, 0x1}, {0x4, 0x3, 0x7, 0x0, 0x91, 0x6}, {0x1, 0x3800000, 0x6, 0x8, 0x2, 0xffffffff}, {0x5, 0x8, 0x2, 0x10001, 0x5}, {0xb34, 0x6, 0x8, 0x7, 0x5, 0x4}, {0x1, 0x1, 0x42, 0x7fff, 0x8, 0x9}, {0x401, 0x9, 0x8, 0x1}, {0x2, 0x8, 0x6a, 0x0, 0x1, 0xffffffff}, {0x7fffffff, 0x7, 0x2, 0x10, 0x4, 0xf}, {0xfffffff2, 0x1, 0x9, 0xd, 0x3, 0x1}, {0x0, 0x1, 0xffffffff, 0xff, 0x2c4, 0x4}, {0x4, 0x86f6, 0x4, 0x3, 0x9, 0x6}, {0x7, 0x9, 0x3, 0x3, 0x7, 0x67cf108b}, {0x0, 0x2, 0x4, 0x7, 0x5, 0xffffffff}, {0x8, 0xd8, 0x3, 0x4, 0x3ff, 0x8}, {0x6, 0x7fff, 0x100, 0x4, 0x2, 0x8}, {0x8, 0xe041, 0x4, 0x8, 0x5, 0x5e1}, {0x6, 0x3, 0x8, 0x1000, 0x5, 0xcb31}, {0x1, 0xd223, 0x8, 0x0, 0x4, 0x5}], [{0x2, 0x1}, {0x5, 0x1}, {0x2}, {0xaa699aae85504618, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x3}, {0x2}, {0x2, 0x1}, {0x0, 0x43e94edb6b16b030}, {}, {0x5, 0x1}, {0x4}, {}, {0x3}, {0x1}, {0xc770d970940cffe5, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x1, 0x1489d857e77e70bb}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x5}, {0x6, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x5, 0xa11, 0x5, 0x0, 0x800}, 0x8, 0x77, [{0x101, 0x8001, 0x7fffffff, 0x9, 0x8, 0x2}, {0x40, 0x4, 0x2, 0x1, 0x638d, 0x2}, {0x3, 0x2, 0x3, 0x0, 0x6, 0xb}, {0x6, 0x3, 0x10df400, 0x7, 0x2}]}, [{0x8, 0x8a, 0x1, 0x0, 0x80c6000, 0x1}, {0x8000, 0x2, 0x10000, 0x1, 0x2, 0x8}, {0x2a6, 0x6, 0x850d, 0x888, 0x7f, 0x8}, {0x8, 0x2, 0x2, 0x8, 0x6, 0x1}, {0x100, 0xbb2d, 0x8, 0x2, 0x0, 0x9}, {0xd, 0x1, 0xc, 0xfffffffc, 0x1, 0x401}, {0x2, 0x6, 0x8f, 0x6, 0x47}, {0x8, 0x2, 0xffff, 0x6, 0x2, 0xf}, {0x7, 0x8, 0xb9f, 0xf, 0x3, 0xe}, {0xffff8001, 0x5, 0xf, 0x1ff, 0x5, 0x10000}, {0x86, 0x7, 0xd, 0x1, 0x0, 0x3}, {0x5, 0x1ff, 0x40, 0x5, 0xffffffa0}, {0x5, 0x4, 0xe3, 0xffff7224, 0x3, 0x800}, {0x101, 0xfffffff9, 0xe1f8, 0x4, 0x867, 0xd}, {0x6, 0x7, 0x35f, 0x9, 0x3, 0x39a}, {0x7, 0xb, 0x9, 0x7, 0x9, 0x6}, {0x8e, 0x401, 0x7fffffff, 0xffffffff, 0x2, 0x5}, {0xfffffff8, 0x5, 0x4e4e, 0xfffffff7}, {0x0, 0xd, 0xff, 0x1, 0x8, 0x7}, {0x3, 0xc2, 0xd, 0x7f, 0x8a08, 0x2}, {0x2, 0x6, 0x4, 0x0, 0x1, 0x80000001}, {0x2, 0xb, 0x5, 0x3, 0x8, 0x2}, {0x6, 0x2, 0x120, 0x9, 0x16cc7403, 0x3}, {0x1, 0x7, 0x6, 0x6a78, 0x8, 0xfffffbff}, {0x1, 0x0, 0x8, 0x1ff, 0x0, 0x46}, {0x0, 0x3, 0x27d98bac, 0xfff, 0x8, 0xd}, {0xe, 0xeb69, 0x2, 0xffff0375, 0x1000, 0x10000}, {0x101, 0x7f000, 0xa, 0x6, 0xa, 0xbeb}, {0x24000000, 0x0, 0x4, 0x400, 0x5, 0x2}, {0x8000, 0x100, 0x9, 0x0, 0x2, 0xffffffff}, {0x3f, 0x3, 0x4af, 0x7, 0xff, 0x5}, {0xffffff7f, 0xffff7fff, 0xb3f4, 0xb5, 0xe, 0xcbb7}, {0x7, 0xb, 0xfffffff7, 0x2, 0xf27, 0x4}, {0x1, 0x97, 0x480, 0x9a, 0x8000, 0x6}, {0x3, 0x7, 0x2, 0xffff, 0x115, 0x1}, {0x86e5, 0x8, 0x7, 0x4, 0x7e73, 0x8}, {0x9, 0x5bcf, 0x8, 0x80000000, 0xee, 0x2c1}, {0x3, 0x1800000, 0x2, 0x2, 0x2, 0x4}, {0x6, 0x81, 0xf, 0x4, 0x81, 0xffffffff}, {0x0, 0x9, 0x9, 0x1, 0xd9b, 0x1}, {0x8, 0xce, 0x5, 0x1, 0x7}, {0x4edf, 0xfd9f, 0x101, 0xf84, 0x81}, {0x10000, 0x80000000, 0x80, 0x1, 0x1000, 0x9}, {0x7, 0x8, 0xd24, 0x3f5, 0x2, 0x4427}, {0x1, 0x0, 0x20, 0xfffffff9, 0x6, 0x1}, {0xb5f, 0xf2c, 0xe6b, 0x9, 0x4, 0x80}, {0x3, 0x14, 0x6c, 0x80000001, 0x5, 0x4}, {0x1, 0x3, 0x101, 0xfffffffc, 0x8, 0xfffffff8}, {0x3, 0x4, 0x35, 0x8, 0x6, 0xfffffffb}, {0x1, 0x1, 0xfffffffa, 0x180, 0x7fffffff, 0x7}, {0x9, 0x2, 0xffffb29d, 0x0, 0xf, 0x100}, {0x8, 0x647, 0x1115b69e, 0x8, 0x7fffffff, 0xbb}, {0x488d, 0x9, 0x5, 0xff, 0x2, 0x2}, {0x2, 0xfffffff9, 0x8, 0xc5f, 0xb, 0x3}, {0x0, 0xd1, 0x0, 0x1, 0x1, 0x1}, {0x7fffffff, 0xc8b, 0x0, 0x6, 0x9, 0x3}, {0x9, 0xae4, 0x8, 0x7, 0x3, 0x7fff}, {0x5, 0x0, 0x7ff, 0x400, 0x9, 0x5}, {0x2, 0x5, 0x1, 0x0, 0x7fff, 0x9}, {0x2, 0x9, 0x2, 0x1a, 0x3, 0xfffffffe}, {0xfffffffd, 0x4, 0x4, 0x10000, 0x3, 0xe1}, {0x1, 0xb, 0x1, 0x8001, 0x2, 0x81}, {0x5, 0x10001, 0xd, 0x5, 0x8, 0x3}, {0x6, 0xffffff75, 0xc, 0xd, 0x5, 0x1}, {0xd24, 0x2, 0x9, 0x1, 0x3, 0x9}, {0x2, 0x4, 0x10000, 0x40, 0xfff, 0xc}, {0x9, 0x3, 0xbeb, 0x5, 0x2, 0x3}, {0xfffffffc, 0x15, 0xfffffffd, 0x80000001, 0x1, 0x20}, {0x800, 0xff, 0x400, 0xfffffff7, 0x6, 0x6}, {0x9, 0x8, 0x2069, 0x3, 0x6, 0x7}, {0x8, 0x1, 0x10000, 0x5, 0x5, 0x5}, {0x7, 0x8, 0x4, 0x8001, 0x2, 0xf}, {0x81, 0xfcd, 0x3, 0x3, 0x203b, 0x2}, {0x10000, 0x1, 0x6, 0x7, 0x101, 0x8}, {0x0, 0x5, 0xfffffffd, 0x2, 0x9, 0xfbf}, {0x4, 0x2, 0x9, 0x2, 0x80, 0x2000040}, {0x9, 0x7, 0x8000, 0x5, 0x8, 0x6}, {0x1, 0x80000000, 0xffff, 0x7fff, 0x0, 0x4}, {0xe, 0x7f, 0x6, 0xbed3, 0x63a, 0x1}, {0x4, 0x9, 0x90, 0x100, 0x4, 0xe82}, {0x80000001, 0x5, 0x1, 0x8, 0x78, 0x2}, {0x10, 0xe9, 0x6, 0x10000, 0x9, 0x7}, {0x2, 0x9, 0x1, 0x2f1, 0x6, 0x8}, {0xd63, 0x2, 0x8, 0xcaf, 0x85b5, 0x80000001}, {0x3, 0x401, 0x8, 0x10000, 0xcf}, {0x6, 0x7, 0xb, 0xfff, 0x4, 0x5}, {0xa6f, 0x3ff, 0x5, 0x911, 0x1, 0x1}, {0x1, 0x9, 0x9, 0xf1, 0x0, 0x10000}, {0x4, 0x4, 0x8, 0xff, 0x4}, {0x1, 0x4, 0x7, 0x80000000, 0x7, 0xb}, {0x1, 0x5, 0x4, 0x1ff, 0xa, 0x538a}, {0x7f, 0x7, 0x8, 0xaa, 0x2, 0x7}, {0xfff, 0xdc1, 0x5, 0xc, 0x7, 0x7}, {0x100, 0x3e, 0xd, 0x0, 0x6910c30c, 0x7}, {0x2, 0x2, 0xfffffffb, 0xfeb7, 0x579, 0x8}, {0x9, 0x9, 0x5, 0x6, 0x0, 0x7}, {0x10000, 0x10001, 0xffffffff, 0xd7b, 0x3, 0x5f3}, {0xff, 0x8886, 0x3, 0x5, 0x5, 0x3}, {0x6, 0x7f, 0x80000001, 0x7f0, 0xfff, 0x4bf}, {0x2, 0x5, 0x5, 0x4, 0x5, 0x3403}, {0xe3, 0xf7, 0x4, 0x7, 0x63b, 0xc}, {0x7, 0x6ec7e5d9, 0x3, 0x2, 0x3, 0x6}, {0x7, 0x7, 0x8, 0x4, 0xffffffff, 0x3b6}, {0x1, 0x9, 0xfffffffb, 0x7, 0x7f, 0x79}, {0x0, 0x4, 0x1, 0x9, 0x70, 0x7}, {0xaa, 0x6, 0x6091, 0x7f, 0x3, 0x3}, {0x8, 0x0, 0x3ff, 0x4, 0x0, 0x7e}, {0xc, 0x3, 0x9, 0x10, 0x3ff, 0x5}, {0x2, 0xffff, 0xd, 0x101, 0x9, 0x80000000}, {0x5c, 0x9, 0x40, 0xf, 0x6, 0x81}, {0x3309, 0xc6e9, 0x9, 0xfffffffa, 0x7, 0xbc}, {0xe, 0x81, 0x7, 0x7, 0x3, 0x9}, {0x4, 0x8, 0x80000000, 0x6, 0x7, 0x7ff}, {0x5, 0x7, 0x4, 0xafb1, 0xc20d, 0x40}, {0x5, 0x94, 0x3, 0x400, 0x0, 0x5}, {0x56390, 0x1, 0x5, 0x38, 0x7, 0x7}, {0x8000, 0x6, 0x9, 0x4, 0x7, 0x80000001}, {0x7f, 0x8, 0xf8, 0x4dd6, 0x8, 0x5}, {0x2, 0x0, 0x3, 0x448ea322, 0x37c, 0xee}, {0x4b, 0x9, 0x5, 0x8001, 0x7, 0x80000001}, {0xffffff4e, 0x32, 0x7, 0x4, 0x3, 0x6}, {0x0, 0x75, 0x4, 0x4, 0x1ff, 0x10000000}, {0x3ca91c8a, 0xffffffff, 0x10000, 0x7fffffff, 0x4}, {0x7, 0x57, 0x5, 0x6, 0x7, 0xb33d}, {0x4, 0x101, 0xfff, 0x2, 0x4, 0x13}, {0x0, 0x8000, 0x0, 0x1ff, 0x4, 0x99}, {0x3, 0x9, 0xf61b, 0x7ff, 0x40, 0x4a89}, {0x1, 0x5, 0x9, 0xfff, 0xdb3, 0x93a6}], [{0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1}, {0x4}, {0x3}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x6}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x3}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {}, {}, {0x2}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x6f8f8a2ccadbcaf1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x9fa91f92013e47c9}, {0x3, 0x57dcad52c17df449}, {0x4}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x5}, {0x2}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x44aef0e82e38681e}, {0x4}, {0x3}, {0x4}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x226c}}, 0x0) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 804.395026ms ago: executing program 9 (id=5797): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0xfffffffffffffffd, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0xffffffffffffffff, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0x41000, 0x240046}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r4}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r4}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, 0x0) r5 = syz_io_uring_complete(0x0) close(r5) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r4, 0x0, 0x0, 0x1}) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x1401, 0x8, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) 0s ago: executing program 2 (id=5798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000002000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): am_slave_0 added [ 1668.569729][T27402] team0: Port device team_slave_1 added [ 1668.595522][T27402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1668.595541][T27402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1668.595569][T27402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1668.597421][T27402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1668.597436][T27402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1668.597464][T27402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1668.647838][T27402] hsr_slave_0: entered promiscuous mode [ 1668.648769][T27402] hsr_slave_1: entered promiscuous mode [ 1668.649499][T27402] debugfs: 'hsr0' already exists in 'hsr' [ 1668.649529][T27402] Cannot create hsr debugfs directory [ 1668.787727][T27436] netdevsim netdevsim8: Direct firmware load for ./file0 failed with error -2 [ 1668.787803][T27436] netdevsim netdevsim8: Falling back to sysfs fallback for: ./file0 [ 1668.951376][ T5133] Bluetooth: hci10: command tx timeout [ 1669.682619][ T29] audit: type=1400 audit(2000001645.932:2428): avc: denied { create } for pid=27453 comm="syz.0.5542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1669.745562][T27402] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1669.770964][T27402] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1669.784859][T27402] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1669.810926][T27402] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1670.134862][T27402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1670.196582][T27402] 8021q: adding VLAN 0 to HW filter on device team0 [ 1670.246125][T23749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1670.246240][T23749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1670.258593][T23749] bridge0: port 2(bridge_slave_1) entered blocking state [ 1670.258690][T23749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1670.290320][T27470] tipc: Enabling of bearer rejected, failed to enable media [ 1670.291662][T27470] qnx4: unable to read the superblock [ 1670.536076][T26901] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1670.543075][T26901] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1670.548451][T26901] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1670.549252][T26901] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1670.557498][T26901] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1670.701237][T27476] lo speed is unknown, defaulting to 1000 [ 1670.721850][T27476] lo speed is unknown, defaulting to 1000 [ 1671.274944][T26901] Bluetooth: hci10: command tx timeout [ 1671.564089][T27476] chnl_net:caif_netlink_parms(): no params data found [ 1671.631868][T26774] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1671.742998][T27402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1671.771923][T26774] usb 9-1: device descriptor read/64, error -71 [ 1671.779503][T27476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1671.781973][T27476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1671.782203][T27476] bridge_slave_0: entered allmulticast mode [ 1671.784528][T27476] bridge_slave_0: entered promiscuous mode [ 1671.788371][T27476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1671.788504][T27476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1671.788657][T27476] bridge_slave_1: entered allmulticast mode [ 1671.795365][T27476] bridge_slave_1: entered promiscuous mode [ 1671.875822][T27476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1671.878997][T27476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1671.949709][T27476] team0: Port device team_slave_0 added [ 1671.963690][T27476] team0: Port device team_slave_1 added [ 1672.011553][T27476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1672.011576][T27476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1672.011604][T27476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1672.013637][T27476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1672.013654][T27476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1672.013681][T27476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1672.037708][T26774] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1672.073594][T27476] hsr_slave_0: entered promiscuous mode [ 1672.082857][T27476] hsr_slave_1: entered promiscuous mode [ 1672.083781][T27476] debugfs: 'hsr0' already exists in 'hsr' [ 1672.083805][T27476] Cannot create hsr debugfs directory [ 1672.189939][T26774] usb 9-1: device descriptor read/64, error -71 [ 1672.312148][T26774] usb usb9-port1: attempt power cycle [ 1672.440954][T27476] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.531967][T27476] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.559505][T27402] veth0_vlan: entered promiscuous mode [ 1672.600840][T27476] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.612967][T27402] veth1_vlan: entered promiscuous mode [ 1672.645816][T27402] veth0_macvtap: entered promiscuous mode [ 1672.668851][T26774] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1672.676802][T27476] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.696397][T26774] usb 9-1: device descriptor read/8, error -71 [ 1672.700299][T27402] veth1_macvtap: entered promiscuous mode [ 1672.726840][T27402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1672.731083][T27402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1672.769065][ T35] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1672.770664][ T35] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1672.770796][ T35] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1672.770907][ T35] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1672.804512][T26901] Bluetooth: hci11: command tx timeout [ 1672.945880][T26774] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 1672.977600][T26774] usb 9-1: device descriptor read/8, error -71 [ 1673.001386][T27476] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1673.022121][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1673.022144][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1673.025156][T27476] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1673.044718][T27476] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1673.086753][T26774] usb usb9-port1: unable to enumerate USB device [ 1673.113719][T27476] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1673.193891][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1673.193915][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1673.483600][T27476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1673.493497][T26901] Bluetooth: hci10: command tx timeout [ 1673.517162][T27476] 8021q: adding VLAN 0 to HW filter on device team0 [ 1673.527493][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1673.527594][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1673.540489][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1673.540587][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1673.639137][ T5133] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1673.648015][ T5133] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1673.650575][ T5133] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1673.657174][ T5133] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1673.659593][ T5133] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1673.674519][T21959] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1673.756164][T27531] lo speed is unknown, defaulting to 1000 [ 1673.759615][T27531] lo speed is unknown, defaulting to 1000 [ 1673.873734][T21959] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1673.873773][T21959] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1673.873804][T21959] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1673.873830][T21959] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1673.873876][T21959] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1673.873903][T21959] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1673.877692][T21959] usb 10-1: config 0 descriptor?? [ 1674.340105][T27527] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.5533'. [ 1674.399326][T27544] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.5533'. [ 1674.405957][T21959] plantronics 0003:047F:FFFF.0013: ignoring exceeding usage max [ 1674.430643][T27476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1674.463832][T21959] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1674.569690][T27531] chnl_net:caif_netlink_parms(): no params data found [ 1674.993192][T27476] veth0_vlan: entered promiscuous mode [ 1675.019185][ T5133] Bluetooth: hci11: command tx timeout [ 1675.041053][T27476] veth1_vlan: entered promiscuous mode [ 1675.133466][T27531] bridge0: port 1(bridge_slave_0) entered blocking state [ 1675.133532][T27531] bridge0: port 1(bridge_slave_0) entered disabled state [ 1675.133701][T27531] bridge_slave_0: entered allmulticast mode [ 1675.135347][T27531] bridge_slave_0: entered promiscuous mode [ 1675.155178][T27531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.155230][T27531] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.155314][T27531] bridge_slave_1: entered allmulticast mode [ 1675.160428][T27531] bridge_slave_1: entered promiscuous mode [ 1675.185064][T27476] veth0_macvtap: entered promiscuous mode [ 1675.193058][T27476] veth1_macvtap: entered promiscuous mode [ 1675.218920][T27531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1675.238642][T27476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1675.245280][T27531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1675.307496][T27476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1675.316615][T27531] team0: Port device team_slave_0 added [ 1675.330646][T27531] team0: Port device team_slave_1 added [ 1675.330681][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1675.330725][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1675.330787][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1675.330849][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1675.402420][T27531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1675.402440][T27531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1675.402469][T27531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1675.405036][T27531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1675.405047][T27531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1675.405063][T27531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1675.605458][T27531] hsr_slave_0: entered promiscuous mode [ 1675.606445][T27531] hsr_slave_1: entered promiscuous mode [ 1675.619148][T27531] debugfs: 'hsr0' already exists in 'hsr' [ 1675.619179][T27531] Cannot create hsr debugfs directory [ 1675.705733][ T5133] Bluetooth: hci10: command tx timeout [ 1675.775649][T20511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1675.775665][T20511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1675.875310][ T5133] Bluetooth: hci12: command tx timeout [ 1675.942457][T20511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1675.942488][T20511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1676.417447][T27531] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.590722][T27531] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.679373][T27531] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.799690][T27531] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1677.228867][T27531] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1677.232855][T27531] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1677.241638][ T5133] Bluetooth: hci11: command tx timeout [ 1677.253988][T27531] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1677.269122][T27531] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1677.532330][T27531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1677.584740][T27531] 8021q: adding VLAN 0 to HW filter on device team0 [ 1677.673644][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.673744][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1677.688080][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1677.688180][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1678.096913][ T5133] Bluetooth: hci12: command tx timeout [ 1678.678905][ T29] audit: type=1400 audit(2000001654.345:2429): avc: denied { read write } for pid=27605 comm="syz.8.5552" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1678.691786][ T29] audit: type=1400 audit(2000001654.345:2430): avc: denied { open } for pid=27605 comm="syz.8.5552" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1679.466029][ T5133] Bluetooth: hci11: command tx timeout [ 1679.532722][T27531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1679.847692][ T29] audit: type=1400 audit(2000001655.440:2431): avc: denied { create } for pid=27615 comm="syz.8.5553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1679.850770][ T29] audit: type=1400 audit(2000001655.449:2432): avc: denied { bind } for pid=27615 comm="syz.8.5553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1679.850821][ T29] audit: type=1400 audit(2000001655.449:2433): avc: denied { name_bind } for pid=27615 comm="syz.8.5553" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1679.850860][ T29] audit: type=1400 audit(2000001655.449:2434): avc: denied { node_bind } for pid=27615 comm="syz.8.5553" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1679.853108][ T29] audit: type=1400 audit(2000001655.449:2435): avc: denied { ioctl } for pid=27615 comm="syz.8.5553" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1680.322062][ T5133] Bluetooth: hci12: command tx timeout [ 1681.567753][T27531] veth0_vlan: entered promiscuous mode [ 1681.592616][T27531] veth1_vlan: entered promiscuous mode [ 1681.916827][T27531] veth0_macvtap: entered promiscuous mode [ 1681.919700][T27531] veth1_macvtap: entered promiscuous mode [ 1682.000079][T27531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1682.017688][T27531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1682.042002][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.042052][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.042089][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.042126][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.195411][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1682.195436][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1682.263917][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1682.263952][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1682.462174][T27665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5547'. [ 1682.541668][ T29] audit: type=1400 audit(2000001657.957:2436): avc: denied { create } for pid=27664 comm="syz.4.5547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1682.541912][ T5133] Bluetooth: hci12: command tx timeout [ 1682.565380][ T29] audit: type=1400 audit(2000001657.966:2437): avc: denied { setopt } for pid=27664 comm="syz.4.5547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1683.761161][ T29] audit: type=1400 audit(2000001659.108:2438): avc: denied { name_connect } for pid=27679 comm="syz.4.5563" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1683.879118][T27685] tmpfs: Unknown parameter 'noinode32' [ 1684.405218][T21959] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1684.587233][T21959] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1684.588183][T21959] usb 3-1: config 4 has an invalid interface number: 176 but max is 0 [ 1684.588216][T21959] usb 3-1: config 4 has no interface number 0 [ 1684.588247][T21959] usb 3-1: config 4 interface 176 has no altsetting 0 [ 1684.591278][T21959] usb 3-1: string descriptor 0 read error: -22 [ 1684.591392][T21959] usb 3-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=59.64 [ 1684.591419][T21959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.665185][T21959] mvusb_mdio 3-1:4.176: probe with driver mvusb_mdio failed with error -5 [ 1684.855244][T21959] usb 3-1: USB disconnect, device number 64 [ 1685.571890][ T29] audit: type=1400 audit(2000001660.802:2439): avc: denied { bind } for pid=27720 comm="syz.2.5568" laddr=172.20.20.170 lport=59178 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1685.571947][ T29] audit: type=1400 audit(2000001660.802:2440): avc: denied { name_bind } for pid=27720 comm="syz.2.5568" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1685.571990][ T29] audit: type=1400 audit(2000001660.802:2441): avc: denied { node_bind } for pid=27720 comm="syz.2.5568" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1686.142149][T23041] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1686.154008][T26901] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1686.164765][T26901] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1686.169606][T26901] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1686.170392][T26901] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1686.170986][T26901] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1686.351339][T23041] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1686.351963][T23041] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1686.351995][T23041] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1686.352044][T23041] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1686.352070][T23041] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.403776][T23041] usb 3-1: config 0 descriptor?? [ 1686.459114][T27735] lo speed is unknown, defaulting to 1000 [ 1686.461043][T27735] lo speed is unknown, defaulting to 1000 [ 1686.647840][T27730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1686.654949][T27730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1687.045546][T23041] plantronics 0003:047F:FFFF.0014: item fetching failed at offset 14/15 [ 1687.050575][T23041] plantronics 0003:047F:FFFF.0014: parse failed [ 1687.050676][T23041] plantronics 0003:047F:FFFF.0014: probe with driver plantronics failed with error -22 [ 1687.240898][T23041] usb 3-1: USB disconnect, device number 65 [ 1687.522724][T27735] chnl_net:caif_netlink_parms(): no params data found [ 1687.739175][T27735] bridge0: port 1(bridge_slave_0) entered blocking state [ 1687.747593][T27735] bridge0: port 1(bridge_slave_0) entered disabled state [ 1687.747757][T27735] bridge_slave_0: entered allmulticast mode [ 1687.750182][T27735] bridge_slave_0: entered promiscuous mode [ 1687.752583][T27735] bridge0: port 2(bridge_slave_1) entered blocking state [ 1687.752702][T27735] bridge0: port 2(bridge_slave_1) entered disabled state [ 1687.752837][T27735] bridge_slave_1: entered allmulticast mode [ 1687.754408][T27735] bridge_slave_1: entered promiscuous mode [ 1687.828056][T27735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1687.837398][T27735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1687.917169][T27735] team0: Port device team_slave_0 added [ 1687.919857][T27735] team0: Port device team_slave_1 added [ 1687.996930][T27735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1687.996950][T27735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1687.996978][T27735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1688.021196][T27735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1688.021215][T27735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1688.021244][T27735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1688.139473][T27735] hsr_slave_0: entered promiscuous mode [ 1688.149199][T27735] hsr_slave_1: entered promiscuous mode [ 1688.149937][T27735] debugfs: 'hsr0' already exists in 'hsr' [ 1688.149960][T27735] Cannot create hsr debugfs directory [ 1688.553699][T26901] Bluetooth: hci13: command tx timeout [ 1689.382081][ T29] audit: type=1400 audit(2000001664.339:2442): avc: denied { create } for pid=27772 comm="syz.4.5576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1689.397634][T27735] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.403672][ T29] audit: type=1400 audit(2000001664.386:2443): avc: denied { bind } for pid=27772 comm="syz.4.5576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1689.433670][ T29] audit: type=1400 audit(2000001664.386:2444): avc: denied { accept } for pid=27772 comm="syz.4.5576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1689.570729][T27735] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.696979][T27735] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.835184][T27735] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.251164][T27735] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1690.266726][T27735] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1690.273420][T27735] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1690.299298][T27735] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1690.639223][T27735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1690.655685][ T5133] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1690.667545][ T5133] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1690.670378][ T5133] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1690.676879][ T5133] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1690.677396][ T5133] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1690.701406][T27735] 8021q: adding VLAN 0 to HW filter on device team0 [ 1690.717507][ T29] audit: type=1400 audit(2000001665.612:2445): avc: denied { block_suspend } for pid=27801 comm="syz.4.5578" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1690.723304][T20505] bridge0: port 1(bridge_slave_0) entered blocking state [ 1690.723389][T20505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1690.743831][T20505] bridge0: port 2(bridge_slave_1) entered blocking state [ 1690.743907][T20505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1690.752603][T26901] Bluetooth: hci13: command tx timeout [ 1690.875142][ T29] audit: type=1400 audit(2000001665.761:2446): avc: denied { setopt } for pid=27801 comm="syz.4.5578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1690.890702][T27799] lo speed is unknown, defaulting to 1000 [ 1690.892205][T27799] lo speed is unknown, defaulting to 1000 [ 1690.922657][T27804] tipc: Started in network mode [ 1690.922698][T27804] tipc: Node identity c2f66dd9cafd, cluster identity 4711 [ 1690.922837][T27804] tipc: Enabled bearer , priority 0 [ 1691.146307][T27802] "syz.4.5578" (27802) uses obsolete ecb(arc4) skcipher [ 1691.175275][T27801] tipc: Disabling bearer [ 1691.355274][T27799] chnl_net:caif_netlink_parms(): no params data found [ 1691.749994][ T29] audit: type=1400 audit(2000001666.576:2447): avc: denied { create } for pid=27819 comm="syz.4.5579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1691.966780][T27735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1692.121525][T27799] bridge0: port 1(bridge_slave_0) entered blocking state [ 1692.121618][T27799] bridge0: port 1(bridge_slave_0) entered disabled state [ 1692.121878][T27799] bridge_slave_0: entered allmulticast mode [ 1692.164521][T27799] bridge_slave_0: entered promiscuous mode [ 1692.879726][T27799] bridge0: port 2(bridge_slave_1) entered blocking state [ 1692.879876][T27799] bridge0: port 2(bridge_slave_1) entered disabled state [ 1692.880030][T27799] bridge_slave_1: entered allmulticast mode [ 1692.882174][T27799] bridge_slave_1: entered promiscuous mode [ 1693.040239][T26901] Bluetooth: hci14: command tx timeout [ 1693.042933][T26901] Bluetooth: hci13: command tx timeout [ 1693.296825][T27799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1693.371065][T27799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1693.392965][T27843] netlink: 'syz.4.5583': attribute type 4 has an invalid length. [ 1693.392988][T27843] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5583'. [ 1693.452416][T27846] overlayfs: empty lowerdir [ 1693.680318][T27843] .`: renamed from bond0 (while UP) [ 1693.758679][T27799] team0: Port device team_slave_0 added [ 1693.794886][T27799] team0: Port device team_slave_1 added [ 1693.989404][T27735] veth0_vlan: entered promiscuous mode [ 1694.012419][T27735] veth1_vlan: entered promiscuous mode [ 1694.090467][T27799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1694.090487][T27799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1694.090514][T27799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1694.108979][T27799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1694.108993][T27799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1694.109009][T27799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1694.224680][T27735] veth0_macvtap: entered promiscuous mode [ 1694.279191][T27735] veth1_macvtap: entered promiscuous mode [ 1694.312897][T27799] hsr_slave_0: entered promiscuous mode [ 1694.314274][T27799] hsr_slave_1: entered promiscuous mode [ 1694.314723][T27799] debugfs: 'hsr0' already exists in 'hsr' [ 1694.314736][T27799] Cannot create hsr debugfs directory [ 1694.317440][T27735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1694.343524][T27735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1694.368639][T20505] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1694.368698][T20505] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1694.368736][T20505] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1694.368773][T20505] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1694.750875][T20511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1694.750900][T20511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1694.859345][T27799] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1694.965430][T20515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1694.965454][T20515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1695.043042][T27799] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1695.059363][ T29] audit: type=1400 audit(2000001669.682:2448): avc: denied { getopt } for pid=27854 comm="syz.2.5584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1695.059397][ T29] audit: type=1400 audit(2000001669.682:2449): avc: denied { name_connect } for pid=27854 comm="syz.2.5584" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1695.168709][T27799] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1695.194881][ T5133] Bluetooth: hci13: command tx timeout [ 1695.194914][ T5133] Bluetooth: hci14: command tx timeout [ 1695.269448][ T29] audit: type=1400 audit(2000001669.879:2450): avc: denied { read write } for pid=27854 comm="syz.2.5584" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1695.271058][ T29] audit: type=1400 audit(2000001669.879:2451): avc: denied { open } for pid=27854 comm="syz.2.5584" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1695.348555][ T29] audit: type=1400 audit(2000001669.944:2452): avc: denied { bind } for pid=27854 comm="syz.2.5584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1695.349172][ T29] audit: type=1400 audit(2000001669.944:2453): avc: denied { listen } for pid=27854 comm="syz.2.5584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1695.668541][T27799] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1695.938795][ T29] audit: type=1400 audit(2000001670.478:2454): avc: denied { name_bind } for pid=27868 comm="syz.3.5585" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1696.225383][ T29] audit: type=1400 audit(2000001670.768:2455): avc: denied { read } for pid=27871 comm="syz.3.5586" name="sg0" dev="devtmpfs" ino=797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1696.686564][ T29] audit: type=1400 audit(2000001671.114:2456): avc: denied { create } for pid=27871 comm="syz.3.5586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1697.373439][T27799] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1697.534484][T26901] Bluetooth: hci14: command tx timeout [ 1698.618231][T27799] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1699.725279][T26901] Bluetooth: hci14: command tx timeout [ 1699.727917][T27799] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1699.944224][T27799] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1700.241561][T13374] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1700.245186][T13374] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1700.246188][T13374] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1700.247508][T13374] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1700.257766][T13374] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1700.382831][T27905] lo speed is unknown, defaulting to 1000 [ 1700.384282][T27905] lo speed is unknown, defaulting to 1000 [ 1700.475686][T27799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1700.508936][T27799] 8021q: adding VLAN 0 to HW filter on device team0 [ 1700.518121][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1700.518233][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1700.540031][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1700.540154][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1700.617980][T27799] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1700.618007][T27799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1700.820340][T27905] chnl_net:caif_netlink_parms(): no params data found [ 1701.009497][T26901] Bluetooth: hci5: command 0x0406 tx timeout [ 1702.331210][T27905] bridge0: port 1(bridge_slave_0) entered blocking state [ 1702.331363][T27905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.336812][T27905] bridge_slave_0: entered allmulticast mode [ 1702.350309][T27905] bridge_slave_0: entered promiscuous mode [ 1702.360505][T27799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1702.362152][T27905] bridge0: port 2(bridge_slave_1) entered blocking state [ 1702.362235][T27905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1702.362394][T27905] bridge_slave_1: entered allmulticast mode [ 1702.371223][T27905] bridge_slave_1: entered promiscuous mode [ 1702.461758][ T5133] Bluetooth: hci15: command tx timeout [ 1702.616639][T27905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1702.648506][T27905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1702.809339][T27905] team0: Port device team_slave_0 added [ 1702.824410][T27905] team0: Port device team_slave_1 added [ 1702.958128][T27905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1702.958149][T27905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1702.958178][T27905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1702.960121][T27905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1702.960139][T27905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1702.960166][T27905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1702.978999][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1702.979017][ T29] audit: type=1400 audit(2000001677.085:2461): avc: denied { name_bind } for pid=27938 comm="syz.4.5592" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1703.222364][T27905] hsr_slave_0: entered promiscuous mode [ 1703.223486][T27905] hsr_slave_1: entered promiscuous mode [ 1703.230939][T27905] debugfs: 'hsr0' already exists in 'hsr' [ 1703.230963][T27905] Cannot create hsr debugfs directory [ 1703.450004][T27949] overlayfs: failed to resolve './bus': -2 [ 1703.524842][T27799] veth0_vlan: entered promiscuous mode [ 1703.527330][T27949] netlink: 'syz.4.5593': attribute type 4 has an invalid length. [ 1703.746146][T27799] veth1_vlan: entered promiscuous mode [ 1704.369192][T27905] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.453598][T27799] veth0_macvtap: entered promiscuous mode [ 1704.517218][T27905] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.539399][T27799] veth1_macvtap: entered promiscuous mode [ 1704.625568][T27905] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.684304][ T5133] Bluetooth: hci15: command tx timeout [ 1704.698433][T27799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1704.803017][T27905] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.825766][T27799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1704.855645][ T1102] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.857447][T20505] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.858969][T20505] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.860978][T20505] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1705.248572][T20515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1705.248592][T20515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1705.558664][T27976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5596'. [ 1705.558699][T27976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5596'. [ 1705.589463][T20511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1705.589487][T20511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1705.686663][T27905] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1705.785142][T27905] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1705.816089][T27905] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1705.845287][T27905] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1707.579623][T26901] Bluetooth: hci15: command tx timeout [ 1707.793395][ T5921] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 1707.901497][T27905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1707.946665][T27905] 8021q: adding VLAN 0 to HW filter on device team0 [ 1707.952736][T20515] bridge0: port 1(bridge_slave_0) entered blocking state [ 1707.952834][T20515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1707.967502][T20511] bridge0: port 2(bridge_slave_1) entered blocking state [ 1707.967652][T20511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1708.015372][ T5921] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1708.015857][ T5921] usb 5-1: not running at top speed; connect to a high speed hub [ 1708.030058][ T5921] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 1708.048518][T27905] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1708.048557][ T5921] usb 5-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 1708.048588][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.048621][ T5921] usb 5-1: Product: syz [ 1708.048639][ T5921] usb 5-1: Manufacturer: syz [ 1708.048658][ T5921] usb 5-1: SerialNumber: syz [ 1708.320319][T27980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1708.320742][T27980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1708.323841][ T29] audit: type=1400 audit(2000001682.091:2462): avc: denied { create } for pid=27978 comm="syz.4.5597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1708.324292][ T29] audit: type=1400 audit(2000001682.091:2463): avc: denied { bind } for pid=27978 comm="syz.4.5597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1708.326702][ T29] audit: type=1400 audit(2000001682.091:2464): avc: denied { listen } for pid=27978 comm="syz.4.5597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1708.379699][ T29] audit: type=1400 audit(2000001682.138:2465): avc: denied { connect } for pid=27978 comm="syz.4.5597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1708.603130][T27905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1708.756783][T27905] veth0_vlan: entered promiscuous mode [ 1708.764324][T27905] veth1_vlan: entered promiscuous mode [ 1708.892526][T27905] veth0_macvtap: entered promiscuous mode [ 1708.920767][T27905] veth1_macvtap: entered promiscuous mode [ 1708.987473][T27905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1708.995501][T27905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1709.040918][T20515] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1709.040981][T20515] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1709.041020][T20515] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1709.041054][T20515] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1709.172545][ T29] audit: type=1400 audit(2000001682.877:2466): avc: denied { append } for pid=28006 comm="syz.7.5598" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1709.188860][ T29] audit: type=1400 audit(2000001682.896:2467): avc: denied { ioctl } for pid=28006 comm="syz.7.5598" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1709.305689][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1709.305713][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1709.307738][ T5921] usb 5-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1709.307770][ T5921] usb 5-1: found format II with max.bitrate = 512, frame size=4095 [ 1709.315029][ T5921] usb 5-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1709.315057][ T5921] usb 5-1: found format II with max.bitrate = 512, frame size=4095 [ 1709.348416][ T5921] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1709.360030][T20515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1709.360052][T20515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1709.748953][ T5133] Bluetooth: hci15: command tx timeout [ 1709.767124][ T5921] usb 5-1: USB disconnect, device number 64 [ 1710.207213][T28019] udevd[28019]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1710.711687][ T29] audit: type=1400 audit(2000001684.318:2468): avc: denied { create } for pid=28030 comm="syz.1.5601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1712.396977][ T29] audit: type=1400 audit(2000001685.900:2469): avc: denied { ioctl } for pid=28045 comm="syz.4.5603" path="socket:[103303]" dev="sockfs" ino=103303 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1712.421567][ T29] audit: type=1400 audit(2000001685.928:2470): avc: denied { read write } for pid=28045 comm="syz.4.5603" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1712.421979][ T29] audit: type=1400 audit(2000001685.928:2471): avc: denied { open } for pid=28045 comm="syz.4.5603" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1712.475730][ T29] audit: type=1400 audit(2000001685.975:2472): avc: denied { setattr } for pid=28045 comm="syz.4.5603" name="PPTP" dev="sockfs" ino=103303 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1712.573905][ T5133] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1712.585112][ T5133] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1712.601823][ T5133] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1712.639992][ T5133] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1712.641915][T28053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5605'. [ 1712.641940][T28053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5605'. [ 1712.644189][ T5133] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1712.812332][T28051] lo speed is unknown, defaulting to 1000 [ 1712.813759][T28051] lo speed is unknown, defaulting to 1000 [ 1712.824763][ T29] audit: type=1400 audit(2000001686.302:2473): avc: denied { ioctl } for pid=28055 comm="syz.4.5606" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=103359 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1713.115121][ T9737] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1713.129743][T28051] chnl_net:caif_netlink_parms(): no params data found [ 1713.277243][ T9737] usb 5-1: Using ep0 maxpacket: 32 [ 1713.281807][ T9737] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 1713.281839][ T9737] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1713.281863][ T9737] usb 5-1: config 0 has no interface number 0 [ 1713.281899][ T9737] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1713.292336][ T9737] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1713.292370][ T9737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.292395][ T9737] usb 5-1: Product: syz [ 1713.292413][ T9737] usb 5-1: Manufacturer: syz [ 1713.292432][ T9737] usb 5-1: SerialNumber: syz [ 1713.300016][ T9737] usb 5-1: config 0 descriptor?? [ 1713.316999][ T29] audit: type=1400 audit(2000001686.761:2474): avc: denied { open } for pid=28071 comm="syz.1.5609" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1713.361095][T28051] bridge0: port 1(bridge_slave_0) entered blocking state [ 1713.361240][T28051] bridge0: port 1(bridge_slave_0) entered disabled state [ 1713.361717][T28051] bridge_slave_0: entered allmulticast mode [ 1713.363423][T28051] bridge_slave_0: entered promiscuous mode [ 1713.365984][T28051] bridge0: port 2(bridge_slave_1) entered blocking state [ 1713.366137][T28051] bridge0: port 2(bridge_slave_1) entered disabled state [ 1713.366505][T28051] bridge_slave_1: entered allmulticast mode [ 1713.368227][T28051] bridge_slave_1: entered promiscuous mode [ 1713.423330][T28051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1713.428633][T28051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1713.480692][T28051] team0: Port device team_slave_0 added [ 1713.483800][T28051] team0: Port device team_slave_1 added [ 1713.537528][T28051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1713.537548][T28051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1713.537576][T28051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1713.539813][T28051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1713.539830][T28051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1713.539858][T28051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1713.594541][T28051] hsr_slave_0: entered promiscuous mode [ 1713.595759][T28051] hsr_slave_1: entered promiscuous mode [ 1713.596493][T28051] debugfs: 'hsr0' already exists in 'hsr' [ 1713.596515][T28051] Cannot create hsr debugfs directory [ 1713.780734][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1713.780753][ T29] audit: type=1800 audit(2000001687.201:2476): pid=28056 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.4.5606" name="/newroot/23/pids.events" dev="tmpfs" ino=143 res=0 errno=0 [ 1713.784792][T10341] usb 5-1: USB disconnect, device number 65 [ 1713.969243][T28051] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.077230][T28051] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.178922][T28051] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.318322][T28051] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.657795][T28099] loop8: detected capacity change from 0 to 8 [ 1714.662538][T28099] Dev loop8: unable to read RDB block 8 [ 1714.662579][T28099] loop8: unable to read partition table [ 1714.662761][T28099] loop8: partition table beyond EOD, truncated [ 1714.671011][T28099] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1714.856939][ T5133] Bluetooth: hci16: command tx timeout [ 1715.441207][T28051] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1715.448284][T28051] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1715.461118][T28051] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1715.480729][T28051] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1715.652743][T28051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1715.686680][T28051] 8021q: adding VLAN 0 to HW filter on device team0 [ 1715.737668][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 1715.737773][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1715.755600][T20505] bridge0: port 2(bridge_slave_1) entered blocking state [ 1715.755701][T20505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1716.066734][ T29] audit: type=1400 audit(2000001689.334:2477): avc: denied { listen } for pid=28120 comm="syz.4.5614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1716.925083][T26901] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1716.928692][T26901] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1716.929806][T26901] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1716.951264][T26901] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1716.976076][T26901] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1717.083761][ T5133] Bluetooth: hci16: command tx timeout [ 1717.236908][T28127] lo speed is unknown, defaulting to 1000 [ 1717.238384][T28127] lo speed is unknown, defaulting to 1000 [ 1717.331915][T28136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1717.332316][T28136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1717.483442][T28051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1717.571274][T26774] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1717.587318][T28127] chnl_net:caif_netlink_parms(): no params data found [ 1717.717703][T28127] bridge0: port 1(bridge_slave_0) entered blocking state [ 1717.717871][T28127] bridge0: port 1(bridge_slave_0) entered disabled state [ 1717.718104][T28127] bridge_slave_0: entered allmulticast mode [ 1717.719722][T28127] bridge_slave_0: entered promiscuous mode [ 1717.726338][T28127] bridge0: port 2(bridge_slave_1) entered blocking state [ 1717.726473][T28127] bridge0: port 2(bridge_slave_1) entered disabled state [ 1717.726642][T28127] bridge_slave_1: entered allmulticast mode [ 1717.728280][T28127] bridge_slave_1: entered promiscuous mode [ 1717.760040][T28127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1717.773778][T26774] usb 5-1: Using ep0 maxpacket: 8 [ 1717.777888][T28127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1717.810064][T26774] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1717.810099][T26774] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1717.810122][T26774] usb 5-1: config 0 has no interface number 0 [ 1717.812051][T26774] usb 5-1: config 0 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1717.812093][T26774] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1717.812129][T26774] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1717.812156][T26774] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1717.812450][T28127] team0: Port device team_slave_0 added [ 1717.815417][T28127] team0: Port device team_slave_1 added [ 1717.824427][T26774] usb 5-1: config 0 descriptor?? [ 1717.876450][T26774] hso 5-1:0.1: Failed to find BULK IN ep [ 1717.892057][T28127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1717.892077][T28127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1717.892103][T28127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1717.894060][T28127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1717.894077][T28127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1717.894106][T28127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1717.978979][T28127] hsr_slave_0: entered promiscuous mode [ 1717.988226][T28127] hsr_slave_1: entered promiscuous mode [ 1717.988924][T28127] debugfs: 'hsr0' already exists in 'hsr' [ 1717.988946][T28127] Cannot create hsr debugfs directory [ 1718.041263][T28136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1718.041959][T28136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1718.045674][ T5891] usb 5-1: USB disconnect, device number 66 [ 1718.377080][T28127] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1718.508318][T28127] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1718.726670][T28127] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1718.804638][T28051] veth0_vlan: entered promiscuous mode [ 1718.841571][T28051] veth1_vlan: entered promiscuous mode [ 1718.883586][ T29] audit: type=1400 audit(2000001691.964:2478): avc: denied { write } for pid=28163 comm="syz.4.5617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1718.884248][ T29] audit: type=1400 audit(2000001691.964:2479): avc: denied { read } for pid=28163 comm="syz.4.5617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1718.898727][T28127] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.022641][T28051] veth0_macvtap: entered promiscuous mode [ 1719.049523][T28169] IPv6: addrconf: prefix option has invalid lifetime [ 1719.063160][T28051] veth1_macvtap: entered promiscuous mode [ 1719.160718][T28051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1719.219439][ T5133] Bluetooth: hci17: command tx timeout [ 1719.220091][T28051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1719.302683][ T5133] Bluetooth: hci16: command tx timeout [ 1719.449738][ T1091] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1719.449796][ T1091] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1719.449836][ T1091] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1719.449875][ T1091] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.116813][T28182] loop8: detected capacity change from 0 to 8 [ 1720.131072][T28182] Dev loop8: unable to read RDB block 8 [ 1720.131115][T28182] loop8: unable to read partition table [ 1720.131295][T28182] loop8: partition table beyond EOD, truncated [ 1720.131329][T28182] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1720.478205][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1720.478230][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1720.522039][T28127] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1720.566002][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1720.566032][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1720.584322][T28127] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1720.598757][T28127] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1720.601853][T28127] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1720.685301][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1720.685360][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1720.752250][T28127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1720.765119][T28127] 8021q: adding VLAN 0 to HW filter on device team0 [ 1720.785539][T20505] bridge0: port 1(bridge_slave_0) entered blocking state [ 1720.785595][T20505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1720.788332][T20505] bridge0: port 2(bridge_slave_1) entered blocking state [ 1720.788384][T20505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1721.360373][ T29] audit: type=1400 audit(2000001694.285:2480): avc: denied { map } for pid=28203 comm="syz.6.5602" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1721.360429][ T29] audit: type=1400 audit(2000001694.285:2481): avc: denied { execute } for pid=28203 comm="syz.6.5602" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1721.935283][ T29] audit: type=1400 audit(2000001694.490:2482): avc: denied { accept } for pid=28203 comm="syz.6.5602" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1721.954967][ T5133] Bluetooth: hci17: command tx timeout [ 1721.954977][T13374] Bluetooth: hci16: command tx timeout [ 1722.900403][ T5133] Bluetooth: hci6: command 0x0406 tx timeout [ 1723.079535][T28224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5624'. [ 1723.079564][T28224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5624'. [ 1724.192328][T26901] Bluetooth: hci17: command tx timeout [ 1724.419045][T28238] IPv6: addrconf: prefix option has invalid lifetime [ 1724.992560][T28127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1725.057856][ T29] audit: type=1400 audit(2000001697.747:2483): avc: denied { bind } for pid=28236 comm="syz.4.5628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1725.154782][ T5133] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1725.168847][ T5133] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1725.180297][ T5133] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1725.188463][ T5133] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1725.189056][ T5133] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1725.295227][T28245] lo speed is unknown, defaulting to 1000 [ 1725.304318][T28245] lo speed is unknown, defaulting to 1000 [ 1725.902156][T28245] chnl_net:caif_netlink_parms(): no params data found [ 1726.399118][T26901] Bluetooth: hci17: command tx timeout [ 1726.577378][T28245] bridge0: port 1(bridge_slave_0) entered blocking state [ 1726.577484][T28245] bridge0: port 1(bridge_slave_0) entered disabled state [ 1726.577591][T28245] bridge_slave_0: entered allmulticast mode [ 1726.589032][T28245] bridge_slave_0: entered promiscuous mode [ 1726.594922][T28127] veth0_vlan: entered promiscuous mode [ 1726.595495][T28245] bridge0: port 2(bridge_slave_1) entered blocking state [ 1726.595595][T28245] bridge0: port 2(bridge_slave_1) entered disabled state [ 1726.597264][T28245] bridge_slave_1: entered allmulticast mode [ 1726.600260][T28245] bridge_slave_1: entered promiscuous mode [ 1726.690401][T28127] veth1_vlan: entered promiscuous mode [ 1726.694156][T28245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1726.703159][T28245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1726.774223][T28127] veth0_macvtap: entered promiscuous mode [ 1726.778856][T28245] team0: Port device team_slave_0 added [ 1726.780665][T28127] veth1_macvtap: entered promiscuous mode [ 1726.791628][T28245] team0: Port device team_slave_1 added [ 1726.863036][T28127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1726.864065][T28245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1726.864076][T28245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1726.864092][T28245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1726.865978][T28245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1726.865994][T28245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1726.866024][T28245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1726.894011][T28127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1726.968610][ T1091] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.968669][ T1091] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.968708][ T1091] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.968746][ T1091] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.977145][T28245] hsr_slave_0: entered promiscuous mode [ 1726.978311][T28245] hsr_slave_1: entered promiscuous mode [ 1726.979054][T28245] debugfs: 'hsr0' already exists in 'hsr' [ 1726.979074][T28245] Cannot create hsr debugfs directory [ 1727.356416][T28245] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.367288][T23749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1727.367312][T23749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1727.419614][T20515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1727.419639][T20515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1727.438258][T26901] Bluetooth: hci13: command tx timeout [ 1727.517859][T28245] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.694861][T28245] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.823346][T28245] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1728.310427][T28245] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1728.339540][T28245] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1728.354738][T28245] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1728.365875][T28245] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1728.748460][ T29] audit: type=1400 audit(2000001701.144:2484): avc: denied { bind } for pid=28301 comm="syz.5.5631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1728.748672][ T29] audit: type=1400 audit(2000001701.181:2485): avc: denied { setopt } for pid=28301 comm="syz.5.5631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1728.876400][T28245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1728.999165][T28245] 8021q: adding VLAN 0 to HW filter on device team0 [ 1729.045621][T20511] bridge0: port 1(bridge_slave_0) entered blocking state [ 1729.045753][T20511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1729.084523][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1729.084663][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1729.655270][T26901] Bluetooth: hci13: command tx timeout [ 1730.039329][ T5133] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1730.052185][ T5133] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1730.072231][ T5133] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1730.086890][ T5133] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1730.104997][ T5133] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1730.107787][ T29] audit: type=1400 audit(2000001702.482:2486): avc: denied { ioctl } for pid=28325 comm="syz.5.5633" path="socket:[105373]" dev="sockfs" ino=105373 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1730.108000][ T29] audit: type=1400 audit(2000001702.482:2487): avc: denied { bind } for pid=28325 comm="syz.5.5633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1730.109472][ T29] audit: type=1400 audit(2000001702.482:2488): avc: denied { connect } for pid=28325 comm="syz.5.5633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1730.184893][T28332] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5633'. [ 1730.388264][T28245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1730.406142][T28327] lo speed is unknown, defaulting to 1000 [ 1730.407322][T28327] lo speed is unknown, defaulting to 1000 [ 1730.708625][T28338] syzkaller0: entered promiscuous mode [ 1730.708649][T28338] syzkaller0: entered allmulticast mode [ 1730.720312][T28245] veth0_vlan: entered promiscuous mode [ 1730.735418][T28245] veth1_vlan: entered promiscuous mode [ 1730.914192][T28245] veth0_macvtap: entered promiscuous mode [ 1730.922168][T28245] veth1_macvtap: entered promiscuous mode [ 1731.104100][T28245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1731.247821][T28245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1731.293950][T28327] chnl_net:caif_netlink_parms(): no params data found [ 1731.299970][ T1091] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.300043][ T1091] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.300081][ T1091] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.300118][ T1091] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.872683][T26901] Bluetooth: hci13: command tx timeout [ 1731.944438][ T29] audit: type=1400 audit(2000001704.195:2489): avc: denied { listen } for pid=28355 comm="syz.5.5635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1731.958611][T28360] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28360 comm=syz.5.5635 [ 1732.251754][T28327] bridge0: port 1(bridge_slave_0) entered blocking state [ 1732.252575][T28327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1732.252735][T28327] bridge_slave_0: entered allmulticast mode [ 1732.262731][T28327] bridge_slave_0: entered promiscuous mode [ 1732.304202][T26901] Bluetooth: hci15: command tx timeout [ 1732.339043][T28327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1732.339135][T28327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1732.339377][T28327] bridge_slave_1: entered allmulticast mode [ 1732.341144][T28327] bridge_slave_1: entered promiscuous mode [ 1732.377877][T20511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1732.377899][T20511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1732.479251][ T29] audit: type=1400 audit(2000001704.700:2490): avc: denied { read } for pid=28375 comm="syz.5.5637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1732.488240][T28327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1732.518897][T28327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1732.543016][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1732.543039][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1732.564272][T28327] team0: Port device team_slave_0 added [ 1732.571406][T28327] team0: Port device team_slave_1 added [ 1732.635788][T28327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1732.635808][T28327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1732.635837][T28327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1732.654228][T28327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1732.654248][T28327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1732.654277][T28327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1732.797870][T28327] hsr_slave_0: entered promiscuous mode [ 1732.803533][T28327] hsr_slave_1: entered promiscuous mode [ 1732.804320][T28327] debugfs: 'hsr0' already exists in 'hsr' [ 1732.804340][T28327] Cannot create hsr debugfs directory [ 1733.382728][ T29] audit: type=1400 audit(2000001705.542:2491): avc: denied { write } for pid=28375 comm="syz.5.5637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1733.711433][T28327] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.893848][T28327] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1734.029057][T28327] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1734.092898][ T5133] Bluetooth: hci13: command tx timeout [ 1734.186830][T28327] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1734.525055][ T5133] Bluetooth: hci15: command tx timeout [ 1734.972348][T28327] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1734.991177][T28327] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1735.030561][T28327] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1735.041886][T28327] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1736.281575][ T29] audit: type=1400 audit(2000001708.247:2492): avc: denied { unlink } for pid=28423 comm="syz.0.5642" name="#5f" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1737.161661][ T5133] Bluetooth: hci15: command tx timeout [ 1737.426351][T28428] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 1738.010738][T28424] 9p: Bad value for 'wfdno' [ 1738.034583][ T29] audit: type=1400 audit(2000001708.846:2493): avc: denied { mount } for pid=28423 comm="syz.0.5642" name="/" dev="overlay" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1739.583318][T28327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1739.838645][ T5133] Bluetooth: hci15: command tx timeout [ 1744.847337][T26901] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1745.734310][T28327] 8021q: adding VLAN 0 to HW filter on device team0 [ 1745.757796][T26901] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1745.910873][T28327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1746.006527][T26901] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1746.238875][T28327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1746.766911][T28457] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1746.806329][T28457] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1747.141131][T26901] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1747.182043][T20515] bridge0: port 1(bridge_slave_0) entered blocking state [ 1747.187827][T26901] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1747.206721][T20515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1747.289690][T28457] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1747.367472][T26901] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1747.564763][T28457] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1747.738677][T20515] bridge0: port 2(bridge_slave_1) entered blocking state [ 1749.628132][T28471] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1749.637512][T20515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1750.003587][T28457] Bluetooth: hci19: command tx timeout [ 1751.437354][T13374] Bluetooth: hci18: command tx timeout [ 1752.141335][T20511] bridge_slave_1: left allmulticast mode [ 1752.141361][T20511] bridge_slave_1: left promiscuous mode [ 1752.141546][T20511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.196587][T20511] bridge_slave_0: left allmulticast mode [ 1752.196607][T20511] bridge_slave_0: left promiscuous mode [ 1752.196712][T20511] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.943152][ T29] audit: type=1400 audit(2000001723.837:2494): avc: denied { read write } for pid=28480 comm="syz.5.5648" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1752.943389][ T29] audit: type=1400 audit(2000001723.837:2495): avc: denied { open } for pid=28480 comm="syz.5.5648" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1753.019521][ T29] audit: type=1400 audit(2000001723.912:2496): avc: denied { connect } for pid=28480 comm="syz.5.5648" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1753.141635][T28486] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5648'. [ 1753.141687][T28486] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5648'. [ 1753.588210][T26901] Bluetooth: hci18: command tx timeout [ 1753.777372][T20511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1753.802631][T20511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1753.823161][T20511] bond0 (unregistering): Released all slaves [ 1753.858143][T28450] lo speed is unknown, defaulting to 1000 [ 1753.859627][T28450] lo speed is unknown, defaulting to 1000 [ 1754.010350][T26901] Bluetooth: hci19: command tx timeout [ 1754.085687][T28447] lo speed is unknown, defaulting to 1000 [ 1754.087214][T28447] lo speed is unknown, defaulting to 1000 [ 1755.278765][T28327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1755.557305][T20511] hsr_slave_0: left promiscuous mode [ 1755.558041][T20511] hsr_slave_1: left promiscuous mode [ 1755.560566][T20511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1755.560589][T20511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1755.565528][T20511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1755.565551][T20511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1755.656732][T20511] veth1_macvtap: left promiscuous mode [ 1755.656788][T20511] veth0_macvtap: left promiscuous mode [ 1755.656877][T20511] veth1_vlan: left promiscuous mode [ 1755.656938][T20511] veth0_vlan: left promiscuous mode [ 1755.726619][T26901] Bluetooth: hci4: command 0x0406 tx timeout [ 1755.726660][T26901] Bluetooth: hci7: command 0x0406 tx timeout [ 1755.806081][T28457] Bluetooth: hci18: command tx timeout [ 1756.236437][T28457] Bluetooth: hci19: command tx timeout [ 1756.412677][T20511] team0 (unregistering): Port device team_slave_1 removed [ 1756.446098][T20511] team0 (unregistering): Port device team_slave_0 removed [ 1756.904268][ T29] audit: type=1326 audit(2000001727.552:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28543 comm="syz.5.5653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9c79c799 code=0x7ffc0000 [ 1756.904697][ T29] audit: type=1326 audit(2000001727.552:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28543 comm="syz.5.5653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9c79c799 code=0x7ffc0000 [ 1756.905423][ T29] audit: type=1326 audit(2000001727.552:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28543 comm="syz.5.5653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdf9c79c799 code=0x7ffc0000 [ 1756.907010][ T29] audit: type=1326 audit(2000001727.562:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28543 comm="syz.5.5653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9c79c799 code=0x7ffc0000 [ 1756.907253][ T29] audit: type=1326 audit(2000001727.562:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28543 comm="syz.5.5653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9c79c799 code=0x7ffc0000 [ 1756.909576][ T29] audit: type=1326 audit(2000001727.562:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28543 comm="syz.5.5653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fdf9c79c799 code=0x7ffc0000 [ 1756.911605][ T29] audit: type=1326 audit(2000001727.562:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28543 comm="syz.5.5653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9c79c799 code=0x7ffc0000 [ 1757.019533][T28450] chnl_net:caif_netlink_parms(): no params data found [ 1757.040801][T28548] netlink: 'syz.5.5653': attribute type 4 has an invalid length. [ 1757.137420][T28549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=28549 comm=syz.5.5653 [ 1757.229628][T28447] chnl_net:caif_netlink_parms(): no params data found [ 1757.884031][T28450] bridge0: port 1(bridge_slave_0) entered blocking state [ 1757.884132][T28450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1757.884256][T28450] bridge_slave_0: entered allmulticast mode [ 1757.885960][T28450] bridge_slave_0: entered promiscuous mode [ 1757.992395][T28447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1757.992489][T28447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1758.005635][T28447] bridge_slave_0: entered allmulticast mode [ 1758.018295][T28447] bridge_slave_0: entered promiscuous mode [ 1758.022331][T28450] bridge0: port 2(bridge_slave_1) entered blocking state [ 1758.022421][T28450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1758.022584][T28450] bridge_slave_1: entered allmulticast mode [ 1758.024153][T28450] bridge_slave_1: entered promiscuous mode [ 1758.029757][T28457] Bluetooth: hci18: command tx timeout [ 1758.082061][T28447] bridge0: port 2(bridge_slave_1) entered blocking state [ 1758.082184][T28447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1758.082344][T28447] bridge_slave_1: entered allmulticast mode [ 1758.084224][T28447] bridge_slave_1: entered promiscuous mode [ 1758.227771][T28450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1758.315505][T28447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1758.345246][T28450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1758.403466][T28447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1758.455638][T28457] Bluetooth: hci19: command tx timeout [ 1758.490247][T28450] team0: Port device team_slave_0 added [ 1758.493133][T28450] team0: Port device team_slave_1 added [ 1758.529314][T28327] veth0_vlan: entered promiscuous mode [ 1758.534726][T28447] team0: Port device team_slave_0 added [ 1758.569341][T28447] team0: Port device team_slave_1 added [ 1758.610465][T28450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1758.610485][T28450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1758.610514][T28450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1758.646103][T28450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1758.646123][T28450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1758.646151][T28450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1758.656617][T28447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1758.656635][T28447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1758.656664][T28447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1758.660355][T28447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1758.660371][T28447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1758.660409][T28447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1758.674671][T28327] veth1_vlan: entered promiscuous mode [ 1758.885951][T28450] hsr_slave_0: entered promiscuous mode [ 1758.891591][T28450] hsr_slave_1: entered promiscuous mode [ 1758.933088][T28447] hsr_slave_0: entered promiscuous mode [ 1758.941787][T28447] hsr_slave_1: entered promiscuous mode [ 1758.942478][T28447] debugfs: 'hsr0' already exists in 'hsr' [ 1758.942500][T28447] Cannot create hsr debugfs directory [ 1759.093703][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1759.093721][ T29] audit: type=1400 audit(2000001729.602:2506): avc: denied { connect } for pid=28584 comm="syz.5.5656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1759.274661][T28327] veth0_macvtap: entered promiscuous mode [ 1759.488074][T28327] veth1_macvtap: entered promiscuous mode [ 1759.820532][T28327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1759.833606][T28327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1760.067624][T28447] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.137655][ T1102] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.137848][ T1102] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.137945][ T1102] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.137977][ T1102] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.307339][T28447] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.455383][T28447] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.740653][T28447] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.777591][T28327] ieee80211 phy74: Selected rate control algorithm 'minstrel_ht' [ 1760.840413][T20505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1760.840429][T20505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1760.848106][T28327] ieee80211 phy75: Selected rate control algorithm 'minstrel_ht' [ 1760.996240][T20511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1760.996265][T20511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1761.197342][T28457] Bluetooth: hci8: command 0x0406 tx timeout [ 1761.702867][ T29] audit: type=1400 audit(2000001732.035:2507): avc: denied { ioctl } for pid=28574 comm="syz.0.5655" path="socket:[108365]" dev="sockfs" ino=108365 ioctlcmd=0x54a5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1761.724929][ T29] audit: type=1400 audit(2000001732.063:2508): avc: denied { create } for pid=28574 comm="syz.0.5655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1761.788625][T28450] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1761.804591][ T29] audit: type=1400 audit(2000001732.138:2509): avc: denied { connect } for pid=28574 comm="syz.0.5655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1761.823712][T28447] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1761.831308][T28447] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1761.836232][T28447] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1761.841066][T28447] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1761.923661][T28615] tmpfs: Unknown parameter ']uota' [ 1762.008906][T28450] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1762.555133][T28450] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1762.947236][ T29] audit: type=1400 audit(2000001733.102:2510): avc: denied { ioctl } for pid=28627 comm="syz.9.5660" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1762.976927][T28450] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1763.067043][T28629] netlink: 27 bytes leftover after parsing attributes in process `syz.9.5660'. [ 1763.067260][T13374] Bluetooth: Wrong link type (-57) [ 1764.346244][T28447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1765.322022][T28447] 8021q: adding VLAN 0 to HW filter on device team0 [ 1765.485263][ T9724] bridge0: port 1(bridge_slave_0) entered blocking state [ 1765.485364][ T9724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1765.496635][ T9724] bridge0: port 2(bridge_slave_1) entered blocking state [ 1765.496740][ T9724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1765.500851][T28450] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1766.066093][T28450] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1766.106785][T21959] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1766.183135][T28450] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1766.189634][T28450] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1766.269904][T21959] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1766.269944][T21959] usb 6-1: no configurations [ 1766.269953][T21959] usb 6-1: can't read configurations, error -22 [ 1766.369894][T28655] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5665'. [ 1766.382286][T28450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1766.398496][T28450] 8021q: adding VLAN 0 to HW filter on device team0 [ 1766.402036][T20511] bridge0: port 1(bridge_slave_0) entered blocking state [ 1766.402092][T20511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1766.410463][T21959] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1766.420800][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1766.420855][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1766.550190][T28659] dlm: plock device version mismatch: kernel (1.2.0), user (4294967295.4294967295.0) [ 1766.602688][T21959] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1766.602729][T21959] usb 6-1: no configurations [ 1766.602739][T21959] usb 6-1: can't read configurations, error -22 [ 1766.602976][T21959] usb usb6-port1: attempt power cycle [ 1766.672139][T20511] nci: nci_ntf_packet: unknown ntf opcode 0x500 [ 1766.976816][T21959] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1767.018079][T21959] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1767.018132][T21959] usb 6-1: no configurations [ 1767.018148][T21959] usb 6-1: can't read configurations, error -22 [ 1767.180304][T28447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1767.229099][T21959] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1767.252624][T21959] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1767.252685][T21959] usb 6-1: no configurations [ 1767.252701][T21959] usb 6-1: can't read configurations, error -22 [ 1767.253011][T21959] usb usb6-port1: unable to enumerate USB device [ 1767.430435][T28450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1767.584845][T28450] veth0_vlan: entered promiscuous mode [ 1767.622646][T28450] veth1_vlan: entered promiscuous mode [ 1767.710039][T28450] veth0_macvtap: entered promiscuous mode [ 1767.718275][T28450] veth1_macvtap: entered promiscuous mode [ 1767.841765][T28450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1768.046827][T28450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1768.090858][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.090914][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.090952][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.090990][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.197190][T28447] veth0_vlan: entered promiscuous mode [ 1768.215573][T28447] veth1_vlan: entered promiscuous mode [ 1768.242389][T28447] veth0_macvtap: entered promiscuous mode [ 1768.250851][T28447] veth1_macvtap: entered promiscuous mode [ 1768.270661][T28447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1768.279344][T28447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1768.296720][ T35] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.296765][ T35] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.297079][ T35] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.306471][ T35] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1769.348859][T28684] /dev/nullb0: Can't open blockdev [ 1769.821314][ T976] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1769.821840][T28659] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1769.892378][T28450] ieee80211 phy76: Selected rate control algorithm 'minstrel_ht' [ 1770.028287][T28690] netlink: 27 bytes leftover after parsing attributes in process `syz.9.5670'. [ 1770.072854][T13374] Bluetooth: Wrong link type (-57) [ 1770.300932][ T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1770.300968][ T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1770.304975][ T976] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1770.305009][ T976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.305034][ T976] usb 6-1: Product: syz [ 1770.305054][ T976] usb 6-1: Manufacturer: syz [ 1770.305072][ T976] usb 6-1: SerialNumber: syz [ 1770.308032][ T976] usb 6-1: config 0 descriptor?? [ 1770.324681][T28447] ieee80211 phy77: Selected rate control algorithm 'minstrel_ht' [ 1770.420005][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1770.420050][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1770.483034][T28450] ieee80211 phy78: Selected rate control algorithm 'minstrel_ht' [ 1770.518214][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1770.518236][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1770.561068][ T29] audit: type=1400 audit(2000001740.317:2511): avc: denied { remount } for pid=28680 comm="syz.5.5668" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1770.624469][T28447] ieee80211 phy79: Selected rate control algorithm 'minstrel_ht' [ 1770.672989][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1770.673013][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1770.826531][T28682] lo speed is unknown, defaulting to 1000 [ 1770.828548][T28682] lo speed is unknown, defaulting to 1000 [ 1771.008771][T20515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1771.008815][T20515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1771.308404][ T29] audit: type=1400 audit(2000001741.028:2512): avc: denied { mounton } for pid=28696 comm="syz.9.5672" path="/8/file0" dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1771.917478][T28707] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28707 comm=syz.0.5673 [ 1772.630282][ T29] audit: type=1400 audit(2000001742.272:2513): avc: denied { mount } for pid=28696 comm="syz.9.5672" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1772.842756][ T976] usb 6-1: USB disconnect, device number 82 [ 1773.546541][ T29] audit: type=1400 audit(2000001743.124:2514): avc: denied { ioctl } for pid=28719 comm="syz.5.5674" path="mnt:[4026537719]" dev="nsfs" ino=4026537719 ioctlcmd=0x500a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1773.597411][ T29] audit: type=1400 audit(2000001743.171:2515): avc: denied { append } for pid=28727 comm="syz.0.5676" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1773.597477][ T29] audit: type=1400 audit(2000001743.171:2516): avc: denied { map } for pid=28727 comm="syz.0.5676" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1773.882663][T28448] udevd[28448]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1773.998912][T28734] dlm: plock device version mismatch: kernel (1.2.0), user (4294967295.4294967295.0) [ 1774.277625][T28739] lo speed is unknown, defaulting to 1000 [ 1774.279079][T28739] lo speed is unknown, defaulting to 1000 [ 1775.490045][T28760] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5685'. [ 1778.467346][T28779] dlm: plock device version mismatch: kernel (1.2.0), user (4294967295.4294967295.0) [ 1778.903165][T28788] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28788 comm=syz.0.5691 [ 1780.425032][T28805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5694'. [ 1780.447954][T28805] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 1780.448021][T28805] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 1780.569092][ T29] audit: type=1400 audit(2000001749.703:2517): avc: denied { map } for pid=28802 comm="syz.9.5696" path="socket:[109647]" dev="sockfs" ino=109647 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1781.055643][ T29] audit: type=1400 audit(2000001750.152:2518): avc: denied { ioctl } for pid=28813 comm="syz.0.5697" path="/dev/sg0" dev="devtmpfs" ino=797 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1782.198409][T28822] random: crng reseeded on system resumption [ 1782.279321][T28822] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 1782.279373][T28822] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 1782.279404][T28822] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 1782.279425][T28822] PM: hibernation: Basic memory bitmaps created [ 1782.281744][ T29] audit: type=1400 audit(2000001751.219:2519): avc: denied { write } for pid=28821 comm="syz.9.5700" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1782.281776][ T29] audit: type=1400 audit(2000001751.219:2520): avc: denied { open } for pid=28821 comm="syz.9.5700" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1782.924292][T28829] dlm: plock device version mismatch: kernel (1.2.0), user (4294967295.4294967295.0) [ 1784.837497][T28821] PM: hibernation: Basic memory bitmaps freed [ 1784.975580][T28837] lo speed is unknown, defaulting to 1000 [ 1784.976835][T28837] lo speed is unknown, defaulting to 1000 [ 1786.259998][ T9724] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.337868][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1786.337925][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1786.478414][T28863] dlm: plock device version mismatch: kernel (1.2.0), user (4294967295.4294967295.0) [ 1787.226311][T28870] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28870 comm=syz.9.5713 [ 1787.927039][T28884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1787.927526][T28884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1787.934362][T28884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1787.934744][T28884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1789.613433][T28457] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1789.619140][T28457] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1789.622983][T28457] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1789.624565][T28457] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1789.626127][T28457] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1789.674063][T28900] lo speed is unknown, defaulting to 1000 [ 1789.675508][T28900] lo speed is unknown, defaulting to 1000 [ 1789.759249][T28895] lo speed is unknown, defaulting to 1000 [ 1789.780937][T28895] lo speed is unknown, defaulting to 1000 [ 1789.949875][T28905] dlm: plock device version mismatch: kernel (1.2.0), user (4294967295.4294967295.0) [ 1790.871305][T28895] chnl_net:caif_netlink_parms(): no params data found [ 1791.172546][T28895] bridge0: port 1(bridge_slave_0) entered blocking state [ 1791.172646][T28895] bridge0: port 1(bridge_slave_0) entered disabled state [ 1791.172794][T28895] bridge_slave_0: entered allmulticast mode [ 1791.174483][T28895] bridge_slave_0: entered promiscuous mode [ 1791.490072][T28895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1791.490178][T28895] bridge0: port 2(bridge_slave_1) entered disabled state [ 1791.490354][T28895] bridge_slave_1: entered allmulticast mode [ 1791.492182][T28895] bridge_slave_1: entered promiscuous mode [ 1791.527623][T28895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1791.531182][T28895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1791.560973][T28895] team0: Port device team_slave_0 added [ 1791.572997][T28895] team0: Port device team_slave_1 added [ 1791.613126][T28895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1791.613144][T28895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1791.613182][T28895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1791.616987][T28895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1791.617002][T28895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1791.617030][T28895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1791.883735][T28457] Bluetooth: hci0: command tx timeout [ 1791.920062][T28895] hsr_slave_0: entered promiscuous mode [ 1791.921961][T28895] hsr_slave_1: entered promiscuous mode [ 1791.922964][T28895] debugfs: 'hsr0' already exists in 'hsr' [ 1791.923016][T28895] Cannot create hsr debugfs directory [ 1792.350140][T28895] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.778526][T28895] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1793.075215][T28895] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1793.677384][T28938] kvm: kvm [28935]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000006f) [ 1793.789886][T28895] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1794.024269][T28457] Bluetooth: hci9: command 0x0406 tx timeout [ 1794.109240][T28457] Bluetooth: hci0: command tx timeout [ 1794.417234][T28457] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 1794.547695][T28457] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 1794.548755][T28457] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 1794.551841][T28457] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 1794.553867][T28457] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 1794.783601][T28953] netlink: 27 bytes leftover after parsing attributes in process `syz.9.5735'. [ 1794.786099][T13374] Bluetooth: Wrong link type (-57) [ 1794.789929][T13374] Bluetooth: hci15: link tx timeout [ 1794.793325][T13374] Bluetooth: hci15: killing stalled connection 10:aa:aa:aa:aa:aa [ 1795.558754][T28948] lo speed is unknown, defaulting to 1000 [ 1795.560266][T28948] lo speed is unknown, defaulting to 1000 [ 1795.577533][T28895] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1795.601134][T28895] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1795.627975][T28895] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1795.722833][T28895] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1796.327472][T28457] Bluetooth: hci0: command tx timeout [ 1796.851156][T28457] Bluetooth: hci20: command tx timeout [ 1796.918467][T28948] chnl_net:caif_netlink_parms(): no params data found [ 1796.927357][ T5891] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1797.002083][T28895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1797.061480][T28895] 8021q: adding VLAN 0 to HW filter on device team0 [ 1797.097832][T13374] Bluetooth: hci15: command 0x0406 tx timeout [ 1797.112734][ T5891] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1797.112768][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.112792][ T5891] usb 3-1: Product: syz [ 1797.112810][ T5891] usb 3-1: Manufacturer: syz [ 1797.112828][ T5891] usb 3-1: SerialNumber: syz [ 1797.124944][ T5891] usb 3-1: config 0 descriptor?? [ 1797.132653][ T5891] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1797.136865][ T5891] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1797.137948][T28635] bridge0: port 1(bridge_slave_0) entered blocking state [ 1797.138008][T28635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1797.138712][ T5891] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1797.138749][ T5891] usb 3-1: media controller created [ 1797.157296][T28635] bridge0: port 2(bridge_slave_1) entered blocking state [ 1797.157348][T28635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1797.160165][T28948] bridge0: port 1(bridge_slave_0) entered blocking state [ 1797.160247][T28948] bridge0: port 1(bridge_slave_0) entered disabled state [ 1797.160611][T28948] bridge_slave_0: entered allmulticast mode [ 1797.162768][T28948] bridge_slave_0: entered promiscuous mode [ 1797.165186][T28948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1797.165272][T28948] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.165422][T28948] bridge_slave_1: entered allmulticast mode [ 1797.167095][T28948] bridge_slave_1: entered promiscuous mode [ 1797.177251][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1797.305450][T28948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1797.329669][T28948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1797.347816][T28975] xt_l2tp: wrong L2TP version: 0 [ 1797.768342][T28948] team0: Port device team_slave_0 added [ 1797.785173][T28948] team0: Port device team_slave_1 added [ 1797.942674][ T5891] DVB: Unable to find symbol mt352_attach() [ 1798.010457][T28948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1798.010476][T28948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1798.010506][T28948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1798.012266][T28948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1798.012281][T28948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1798.012307][T28948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1798.096168][ T5891] DVB: Unable to find symbol nxt6000_attach() [ 1798.096187][ T5891] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1798.121183][ T5891] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input34 [ 1798.171793][ T29] audit: type=1400 audit(2000001766.173:2521): avc: denied { read } for pid=5168 comm="acpid" name="event4" dev="devtmpfs" ino=4154 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1798.171846][ T29] audit: type=1400 audit(2000001766.173:2522): avc: denied { open } for pid=5168 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4154 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1798.171889][ T29] audit: type=1400 audit(2000001766.173:2523): avc: denied { ioctl } for pid=5168 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4154 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1798.174554][ T5891] dvb-usb: schedule remote query interval to 1000 msecs. [ 1798.174575][ T5891] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1798.174594][ T5891] dvb-usb: bulk message failed: -22 (7/0) [ 1798.174628][ T5891] dvb-usb: bulk message failed: -22 (7/0) [ 1798.200213][ T5891] usb 3-1: USB disconnect, device number 66 [ 1798.395948][T28948] hsr_slave_0: entered promiscuous mode [ 1798.429602][T28948] hsr_slave_1: entered promiscuous mode [ 1798.430714][T28948] debugfs: 'hsr0' already exists in 'hsr' [ 1798.430737][T28948] Cannot create hsr debugfs directory [ 1798.548672][ T5891] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1798.549762][T28457] Bluetooth: hci0: command tx timeout [ 1799.015819][T28457] Bluetooth: Wrong link type (-57) [ 1799.062741][T28457] Bluetooth: hci20: command tx timeout [ 1799.247746][T29001] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5746'. [ 1799.517275][T28457] Bluetooth: hci10: command 0x0406 tx timeout [ 1799.686848][T28895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1799.787765][T29012] netlink: 'syz.9.5747': attribute type 1 has an invalid length. [ 1799.989123][T29013] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5747'. [ 1800.087589][T29012] bond1: entered promiscuous mode [ 1800.087866][T29012] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1800.090115][T29013] bond1: entered allmulticast mode [ 1800.403380][T28948] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1801.317373][T13374] Bluetooth: hci20: command tx timeout [ 1801.822730][T28948] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1801.976461][T29011] bond1: (slave bridge1): making interface the new active one [ 1801.976482][T29011] bridge1: entered promiscuous mode [ 1801.976560][T29011] bridge1: entered allmulticast mode [ 1801.978770][T29011] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1802.500612][T28895] veth0_vlan: entered promiscuous mode [ 1802.552207][T29028] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5750'. [ 1802.552236][T29028] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5750'. [ 1802.556606][T28948] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1802.625005][T28895] veth1_vlan: entered promiscuous mode [ 1802.941312][T28948] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.512716][ T5133] Bluetooth: hci20: command tx timeout [ 1803.519935][T28895] veth0_macvtap: entered promiscuous mode [ 1803.524331][T28895] veth1_macvtap: entered promiscuous mode [ 1803.538165][T28895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1803.542877][T28895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1803.672342][T29021] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1803.672400][T29021] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1803.672436][T29021] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1803.672473][T29021] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1803.867917][T28895] ieee80211 phy80: Selected rate control algorithm 'minstrel_ht' [ 1804.004402][T28948] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1804.022205][T28948] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1804.045729][T28948] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1804.056970][T28948] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1804.068972][ T5922] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1804.117521][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1804.117543][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1804.163650][T28895] ieee80211 phy81: Selected rate control algorithm 'minstrel_ht' [ 1804.266837][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 1804.272772][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1804.272811][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1804.272838][ T5922] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1804.272880][ T5922] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 1804.272905][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.277911][ T5922] usb 3-1: config 0 descriptor?? [ 1804.343643][T28636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1804.343665][T28636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1804.608387][T28948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1804.643999][T28948] 8021q: adding VLAN 0 to HW filter on device team0 [ 1804.689350][T29021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1804.689449][T29021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1804.696894][T28636] bridge0: port 2(bridge_slave_1) entered blocking state [ 1804.696999][T28636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1804.742935][T29057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1804.743428][T29057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1804.778017][ T5922] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 1804.778059][ T5922] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 1804.778085][ T5922] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 1804.778112][ T5922] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 1804.778139][ T5922] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 1804.778165][ T5922] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 1804.778192][ T5922] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 1804.778218][ T5922] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 1804.778244][ T5922] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 1804.778269][ T5922] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 1804.858278][ T5922] megaworld 0003:07B5:0312.0015: hidraw1: USB HID v1.00 Device [HID 07b5:0312] on usb-dummy_hcd.2-1/input0 [ 1804.858319][ T5922] megaworld 0003:07B5:0312.0015: no inputs found [ 1804.875332][T29052] lo speed is unknown, defaulting to 1000 [ 1804.922827][T29052] lo speed is unknown, defaulting to 1000 [ 1804.972173][ T5133] Bluetooth: hci12: command 0x0406 tx timeout [ 1804.972212][ T5133] Bluetooth: hci11: command 0x0406 tx timeout [ 1804.993624][ T29] audit: type=1400 audit(2000001772.546:2524): avc: denied { append } for pid=29039 comm="syz.2.5753" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1804.993679][ T29] audit: type=1400 audit(2000001772.546:2525): avc: denied { ioctl } for pid=29039 comm="syz.2.5753" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1804.998832][T26774] usb 3-1: USB disconnect, device number 67 [ 1805.133571][T29064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5757'. [ 1805.152217][T29064] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 1805.152288][T29064] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 1805.233564][T29062] fido_id[29062]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1805.475320][T28948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1807.588936][T28948] veth0_vlan: entered promiscuous mode [ 1807.672707][T28948] veth1_vlan: entered promiscuous mode [ 1807.834016][T28948] veth0_macvtap: entered promiscuous mode [ 1807.849072][T28948] veth1_macvtap: entered promiscuous mode [ 1807.883931][T28948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1807.893012][T28948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1808.015559][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.015645][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.015684][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.015722][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.363805][T28948] ieee80211 phy82: Selected rate control algorithm 'minstrel_ht' [ 1809.513899][T28636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1809.513923][T28636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1809.530345][T28948] ieee80211 phy83: Selected rate control algorithm 'minstrel_ht' [ 1809.684453][ T29] audit: type=1400 audit(2000001776.916:2526): avc: denied { read } for pid=29099 comm="syz.3.5766" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1809.684515][ T29] audit: type=1400 audit(2000001776.916:2527): avc: denied { open } for pid=29099 comm="syz.3.5766" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1810.080360][T28636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1810.080385][T28636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1810.259515][T29106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1810.259952][T29106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1811.818180][T28457] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 1811.825396][T28457] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 1811.837359][T28457] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 1811.884776][T28457] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 1811.914278][T28457] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 1812.175325][ T29] audit: type=1400 audit(2000001779.274:2528): avc: denied { accept } for pid=29119 comm="syz.7.5772" lport=51573 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1812.191014][T29117] lo speed is unknown, defaulting to 1000 [ 1812.192109][T29117] lo speed is unknown, defaulting to 1000 [ 1815.063111][T26901] Bluetooth: hci21: command tx timeout [ 1815.684998][T29117] chnl_net:caif_netlink_parms(): no params data found [ 1816.006168][ T29] audit: type=1400 audit(2000001782.858:2529): avc: denied { create } for pid=29147 comm="syz.9.5779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1817.124757][ T29] audit: type=1400 audit(2000001783.728:2530): avc: denied { read } for pid=29147 comm="syz.9.5779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1817.263507][T29117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1817.263691][T29117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1817.263865][T29117] bridge_slave_0: entered allmulticast mode [ 1817.265544][T29117] bridge_slave_0: entered promiscuous mode [ 1817.268076][T29117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1817.268194][T29117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1817.268352][T29117] bridge_slave_1: entered allmulticast mode [ 1817.269527][T29117] bridge_slave_1: entered promiscuous mode [ 1817.635290][T23041] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1817.635726][T28457] Bluetooth: hci21: command tx timeout [ 1817.831706][T29117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1817.838307][T23041] usb 3-1: Using ep0 maxpacket: 8 [ 1817.841424][T23041] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1817.841461][T23041] usb 3-1: config 1 interface 0 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1817.841493][T23041] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1817.843361][T23041] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1817.843394][T23041] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.843417][T23041] usb 3-1: Product: ࠖ [ 1817.843435][T23041] usb 3-1: Manufacturer: Щ [ 1817.843454][T23041] usb 3-1: SerialNumber: 몎秸田㿞铐핬琽Ƚ믊㋯꺊잻광揙╵꟩⡑襃뚼銸ᩚ渍튻觰濈ǩݲ༒㸞댇䄪ඬ깬޵⮤⦦꿹ᗄ⽮㪝뇳Ⲅ戛键᳆툏◺ [ 1817.846722][T29151] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1817.846801][T29151] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1817.867436][T29117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1818.032872][T29117] team0: Port device team_slave_0 added [ 1818.036151][T29117] team0: Port device team_slave_1 added [ 1818.169870][T29117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1818.169891][T29117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1818.169920][T29117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1818.175844][T29117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1818.175876][T29117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1818.175892][T29117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1818.730933][T29117] hsr_slave_0: entered promiscuous mode [ 1818.755377][T29117] hsr_slave_1: entered promiscuous mode [ 1818.755900][T29117] debugfs: 'hsr0' already exists in 'hsr' [ 1818.755914][T29117] Cannot create hsr debugfs directory [ 1819.230118][T29168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1819.230452][T29168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1819.483661][T29167] lo speed is unknown, defaulting to 1000 [ 1819.536308][T29167] lo speed is unknown, defaulting to 1000 [ 1819.735193][T29117] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1819.838509][T26901] Bluetooth: hci21: command tx timeout [ 1820.062313][T29117] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1820.109451][T23041] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1820.141810][T23041] usb 3-1: USB disconnect, device number 68 [ 1820.566550][T29117] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1820.682894][T29117] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1821.174155][T29189] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29189 comm=syz.2.5787 [ 1821.377510][T26901] Bluetooth: hci14: command 0x0406 tx timeout [ 1821.533415][T29117] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1821.573361][T29117] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1821.584610][T29117] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1821.603217][T29117] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1822.099035][T28457] Bluetooth: hci21: command tx timeout [ 1822.599947][T29207] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29207 comm=syz.2.5791 [ 1823.702633][T29117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1823.774372][T29117] 8021q: adding VLAN 0 to HW filter on device team0 [ 1824.295287][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1824.295414][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1824.298393][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1824.298488][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1824.499429][T29221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5794'. [ 1824.531982][ T29] audit: type=1400 audit(2000001790.840:2531): avc: denied { write } for pid=29225 comm="syz.2.5795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1825.560472][ T30] INFO: task syz.1.5514:27214 blocked for more than 143 seconds. [ 1825.560501][ T30] Tainted: G L syzkaller #0 [ 1825.560515][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1825.560525][ T30] task:syz.1.5514 state:D stack:28792 pid:27214 tgid:27210 ppid:26511 task_flags:0x400040 flags:0x00080002 [ 1825.560589][ T30] Call Trace: [ 1825.560597][ T30] [ 1825.560609][ T30] __schedule+0xfee/0x6120 [ 1825.560641][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1825.560677][ T30] ? __pfx___schedule+0x10/0x10 [ 1825.560700][ T30] ? find_held_lock+0x2b/0x80 [ 1825.560728][ T30] ? schedule+0x2bf/0x390 [ 1825.560757][ T30] schedule+0xdd/0x390 [ 1825.560782][ T30] schedule_preempt_disabled+0x13/0x30 [ 1825.560808][ T30] __mutex_lock+0xc9a/0x1b90 [ 1825.560836][ T30] ? mark_held_locks+0x40/0x70 [ 1825.560870][ T30] ? ptmx_open+0x150/0x3c0 [ 1825.560893][ T30] ? ptmx_open+0x102/0x3c0 [ 1825.560918][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1825.560947][ T30] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1825.560977][ T30] ? __pfx_ida_alloc_range+0x10/0x10 [ 1825.561008][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1825.561040][ T30] ? __pfx_devpts_acquire+0x10/0x10 [ 1825.561077][ T30] ? ptmx_open+0x150/0x3c0 [ 1825.561098][ T30] ptmx_open+0x150/0x3c0 [ 1825.561122][ T30] ? __pfx_ptmx_open+0x10/0x10 [ 1825.561144][ T30] chrdev_open+0x234/0x6a0 [ 1825.561169][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1825.561194][ T30] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1825.561227][ T30] do_dentry_open+0x6d8/0x1660 [ 1825.561261][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1825.561291][ T30] vfs_open+0x82/0x3f0 [ 1825.561320][ T30] path_openat+0x208c/0x31a0 [ 1825.561353][ T30] ? __pfx_path_openat+0x10/0x10 [ 1825.561388][ T30] do_file_open+0x20e/0x430 [ 1825.561415][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1825.561465][ T30] ? alloc_fd+0x476/0x790 [ 1825.561494][ T30] ? do_getname+0x191/0x390 [ 1825.561524][ T30] do_sys_openat2+0x10d/0x1e0 [ 1825.561552][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1825.561593][ T30] __x64_sys_openat+0x12d/0x210 [ 1825.561624][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1825.561665][ T30] do_syscall_64+0x106/0xf80 [ 1825.561695][ T30] ? clear_bhb_loop+0x40/0x90 [ 1825.561725][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1825.561750][ T30] RIP: 0033:0x7fcf9699c799 [ 1825.561770][ T30] RSP: 002b:00007fcf97857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1825.561793][ T30] RAX: ffffffffffffffda RBX: 00007fcf96c16090 RCX: 00007fcf9699c799 [ 1825.561810][ T30] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1825.561827][ T30] RBP: 00007fcf96a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1825.561842][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1825.561857][ T30] R13: 00007fcf96c16128 R14: 00007fcf96c16090 R15: 00007ffc5c7641f8 [ 1825.561890][ T30] [ 1825.561900][ T30] INFO: task syz.6.5521:27250 blocked for more than 143 seconds. [ 1825.561919][ T30] Tainted: G L syzkaller #0 [ 1825.561932][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1825.561942][ T30] task:syz.6.5521 state:D stack:25576 pid:27250 tgid:27249 ppid:26881 task_flags:0x400140 flags:0x00080002 [ 1825.562004][ T30] Call Trace: [ 1825.562012][ T30] [ 1825.562026][ T30] __schedule+0xfee/0x6120 [ 1825.562055][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1825.562082][ T30] ? stack_trace_save+0x8e/0xc0 [ 1825.562123][ T30] ? __pfx___schedule+0x10/0x10 [ 1825.562148][ T30] ? find_held_lock+0x2b/0x80 [ 1825.562178][ T30] ? schedule+0x2bf/0x390 [ 1825.562210][ T30] schedule+0xdd/0x390 [ 1825.562238][ T30] schedule_timeout+0x1b2/0x280 [ 1825.562263][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1825.562295][ T30] ? __down_common+0x38e/0x790 [ 1825.562329][ T30] ? rcu_is_watching+0x12/0xc0 [ 1825.562362][ T30] __down_common+0x396/0x790 [ 1825.562401][ T30] ? __pfx___down_common+0x10/0x10 [ 1825.562432][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1825.562471][ T30] ? _raw_spin_lock_irqsave+0x52/0x60 [ 1825.562505][ T30] down+0x74/0xa0 [ 1825.562536][ T30] console_lock+0x5b/0xa0 [ 1825.562559][ T30] do_fb_ioctl+0x1d9/0x7e0 [ 1825.562589][ T30] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1825.562631][ T30] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1825.562694][ T30] ? selinux_file_ioctl+0x139/0x290 [ 1825.562732][ T30] fb_ioctl+0xe5/0x150 [ 1825.562758][ T30] ? __pfx_fb_ioctl+0x10/0x10 [ 1825.562785][ T30] __x64_sys_ioctl+0x18e/0x210 [ 1825.562823][ T30] do_syscall_64+0x106/0xf80 [ 1825.562852][ T30] ? clear_bhb_loop+0x40/0x90 [ 1825.562881][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1825.562906][ T30] RIP: 0033:0x7fbc4019c799 [ 1825.562925][ T30] RSP: 002b:00007fbc410c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1825.562948][ T30] RAX: ffffffffffffffda RBX: 00007fbc40415fa0 RCX: 00007fbc4019c799 [ 1825.562965][ T30] RDX: 0000200000000380 RSI: 0000000000004601 RDI: 000000000000000a [ 1825.562981][ T30] RBP: 00007fbc40232c99 R08: 0000000000000000 R09: 0000000000000000 [ 1825.562997][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1825.563011][ T30] R13: 00007fbc40416038 R14: 00007fbc40415fa0 R15: 00007ffef20f38f8 [ 1825.563044][ T30] [ 1825.563055][ T30] INFO: task syz.5.5526:27283 blocked for more than 143 seconds. [ 1825.563073][ T30] Tainted: G L syzkaller #0 [ 1825.563087][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1825.563097][ T30] task:syz.5.5526 state:D stack:28360 pid:27283 tgid:27280 ppid:26937 task_flags:0x400040 flags:0x00080002 [ 1825.563173][ T30] Call Trace: [ 1825.563181][ T30] [ 1825.563194][ T30] __schedule+0xfee/0x6120 [ 1825.563223][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1825.563261][ T30] ? __pfx___schedule+0x10/0x10 [ 1825.563286][ T30] ? find_held_lock+0x2b/0x80 [ 1825.563313][ T30] ? schedule+0x2bf/0x390 [ 1825.563346][ T30] schedule+0xdd/0x390 [ 1825.563373][ T30] schedule_preempt_disabled+0x13/0x30 [ 1825.563401][ T30] __mutex_lock+0xc9a/0x1b90 [ 1825.563431][ T30] ? mark_held_locks+0x40/0x70 [ 1825.563474][ T30] ? ptmx_open+0x150/0x3c0 [ 1825.563493][ T30] ? ptmx_open+0x102/0x3c0 [ 1825.563513][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1825.563535][ T30] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1825.563558][ T30] ? __pfx_ida_alloc_range+0x10/0x10 [ 1825.563582][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1825.563608][ T30] ? __pfx_devpts_acquire+0x10/0x10 [ 1825.563638][ T30] ? ptmx_open+0x150/0x3c0 [ 1825.563655][ T30] ptmx_open+0x150/0x3c0 [ 1825.563673][ T30] ? __pfx_ptmx_open+0x10/0x10 [ 1825.563691][ T30] chrdev_open+0x234/0x6a0 [ 1825.563710][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1825.563730][ T30] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1825.563755][ T30] do_dentry_open+0x6d8/0x1660 [ 1825.563791][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1825.576926][ T30] vfs_open+0x82/0x3f0 [ 1825.576972][ T30] path_openat+0x208c/0x31a0 [ 1825.577010][ T30] ? __pfx_path_openat+0x10/0x10 [ 1825.577048][ T30] do_file_open+0x20e/0x430 [ 1825.577077][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1825.577125][ T30] ? alloc_fd+0x476/0x790 [ 1825.577155][ T30] ? do_getname+0x191/0x390 [ 1825.577189][ T30] do_sys_openat2+0x10d/0x1e0 [ 1825.577218][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1825.577250][ T30] ? find_held_lock+0x2b/0x80 [ 1825.577288][ T30] __x64_sys_openat+0x12d/0x210 [ 1825.577320][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1825.577362][ T30] do_syscall_64+0x106/0xf80 [ 1825.577392][ T30] ? clear_bhb_loop+0x40/0x90 [ 1825.577421][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1825.577452][ T30] RIP: 0033:0x7f8ecb39c799 [ 1825.577472][ T30] RSP: 002b:00007f8ecc233028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1825.577496][ T30] RAX: ffffffffffffffda RBX: 00007f8ecb615fa0 RCX: 00007f8ecb39c799 [ 1825.577513][ T30] RDX: 0000000000060081 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1825.577530][ T30] RBP: 00007f8ecb432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1825.577546][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1825.577561][ T30] R13: 00007f8ecb616038 R14: 00007f8ecb615fa0 R15: 00007ffd1cdbabc8 [ 1825.577595][ T30] [ 1825.577614][ T30] INFO: task syz.0.5542:27454 blocked for more than 143 seconds. [ 1825.577634][ T30] Tainted: G L syzkaller #0 [ 1825.577648][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1825.577659][ T30] task:syz.0.5542 state:D stack:28792 pid:27454 tgid:27453 ppid:27289 task_flags:0x400040 flags:0x00080002 [ 1825.577725][ T30] Call Trace: [ 1825.577733][ T30] [ 1825.577746][ T30] __schedule+0xfee/0x6120 [ 1825.577775][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1825.577814][ T30] ? __pfx___schedule+0x10/0x10 [ 1825.577839][ T30] ? find_held_lock+0x2b/0x80 [ 1825.577870][ T30] ? schedule+0x2bf/0x390 [ 1825.577902][ T30] schedule+0xdd/0x390 [ 1825.577929][ T30] schedule_preempt_disabled+0x13/0x30 [ 1825.577957][ T30] __mutex_lock+0xc9a/0x1b90 [ 1825.577987][ T30] ? mark_held_locks+0x40/0x70 [ 1825.578025][ T30] ? ptmx_open+0x150/0x3c0 [ 1825.578048][ T30] ? ptmx_open+0x102/0x3c0 [ 1825.578076][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1825.578107][ T30] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1825.578140][ T30] ? __pfx_ida_alloc_range+0x10/0x10 [ 1825.578171][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1825.578208][ T30] ? __pfx_devpts_acquire+0x10/0x10 [ 1825.578251][ T30] ? ptmx_open+0x150/0x3c0 [ 1825.578273][ T30] ptmx_open+0x150/0x3c0 [ 1825.578298][ T30] ? __pfx_ptmx_open+0x10/0x10 [ 1825.578323][ T30] chrdev_open+0x234/0x6a0 [ 1825.578349][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1825.578376][ T30] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1825.578411][ T30] do_dentry_open+0x6d8/0x1660 [ 1825.578453][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1825.578486][ T30] vfs_open+0x82/0x3f0 [ 1825.578518][ T30] path_openat+0x208c/0x31a0 [ 1825.578555][ T30] ? __pfx_path_openat+0x10/0x10 [ 1825.578593][ T30] do_file_open+0x20e/0x430 [ 1825.578622][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1825.578671][ T30] ? alloc_fd+0x476/0x790 [ 1825.578700][ T30] ? do_getname+0x191/0x390 [ 1825.578734][ T30] do_sys_openat2+0x10d/0x1e0 [ 1825.578763][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1825.578795][ T30] ? do_raw_spin_lock+0x128/0x260 [ 1825.578824][ T30] ? kcov_ioctl+0x16a/0x720 [ 1825.578858][ T30] __x64_sys_openat+0x12d/0x210 [ 1825.578890][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1825.578921][ T30] ? kcov_ioctl+0x16a/0x720 [ 1825.578959][ T30] do_syscall_64+0x106/0xf80 [ 1825.578988][ T30] ? clear_bhb_loop+0x40/0x90 [ 1825.579017][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1825.579042][ T30] RIP: 0033:0x7fb07db9c799 [ 1825.579061][ T30] RSP: 002b:00007fb07bdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1825.579085][ T30] RAX: ffffffffffffffda RBX: 00007fb07de15fa0 RCX: 00007fb07db9c799 [ 1825.579101][ T30] RDX: 0000000000000a00 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1825.579117][ T30] RBP: 00007fb07dc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1825.579133][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1825.579146][ T30] R13: 00007fb07de16038 R14: 00007fb07de15fa0 R15: 00007ffccc1de488 [ 1825.579179][ T30] [ 1825.579189][ T30] INFO: task syz.0.5542:27455 blocked for more than 143 seconds. [ 1825.579208][ T30] Tainted: G L syzkaller #0 [ 1825.579222][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1825.579232][ T30] task:syz.0.5542 state:D stack:27784 pid:27455 tgid:27453 ppid:27289 task_flags:0x400140 flags:0x00080002 [ 1825.579295][ T30] Call Trace: [ 1825.579303][ T30] [ 1825.579316][ T30] __schedule+0xfee/0x6120 [ 1825.579344][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1825.579383][ T30] ? __pfx___schedule+0x10/0x10 [ 1825.579409][ T30] ? find_held_lock+0x2b/0x80 [ 1825.579445][ T30] ? schedule+0x2bf/0x390 [ 1825.579477][ T30] schedule+0xdd/0x390 [ 1825.579505][ T30] schedule_preempt_disabled+0x13/0x30 [ 1825.579533][ T30] __mutex_lock+0xc9a/0x1b90 [ 1825.579564][ T30] ? mark_held_locks+0x40/0x70 [ 1825.579602][ T30] ? ptmx_open+0x150/0x3c0 [ 1825.579624][ T30] ? ptmx_open+0x102/0x3c0 [ 1825.579653][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1825.579685][ T30] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1825.579717][ T30] ? __pfx_ida_alloc_range+0x10/0x10 [ 1825.579749][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1825.579786][ T30] ? __pfx_devpts_acquire+0x10/0x10 [ 1825.579827][ T30] ? ptmx_open+0x150/0x3c0 [ 1825.579850][ T30] ptmx_open+0x150/0x3c0 [ 1825.579875][ T30] ? __pfx_ptmx_open+0x10/0x10 [ 1825.579900][ T30] chrdev_open+0x234/0x6a0 [ 1825.579926][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1825.579952][ T30] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1825.579987][ T30] do_dentry_open+0x6d8/0x1660 [ 1825.580021][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1825.580055][ T30] vfs_open+0x82/0x3f0 [ 1825.580087][ T30] path_openat+0x208c/0x31a0 [ 1825.580123][ T30] ? __pfx_path_openat+0x10/0x10 [ 1825.580161][ T30] do_file_open+0x20e/0x430 [ 1825.580191][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1825.580239][ T30] ? alloc_fd+0x476/0x790 [ 1825.580269][ T30] ? do_getname+0x191/0x390 [ 1825.580302][ T30] do_sys_openat2+0x10d/0x1e0 [ 1825.580332][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1825.580373][ T30] __x64_sys_openat+0x12d/0x210 [ 1825.580403][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1825.580451][ T30] do_syscall_64+0x106/0xf80 [ 1825.580480][ T30] ? clear_bhb_loop+0x40/0x90 [ 1825.580510][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1825.580534][ T30] RIP: 0033:0x7fb07db9c799 [ 1825.580553][ T30] RSP: 002b:00007fb07bdd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1825.580576][ T30] RAX: ffffffffffffffda RBX: 00007fb07de16090 RCX: 00007fb07db9c799 [ 1825.580593][ T30] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1825.580609][ T30] RBP: 00007fb07dc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1825.580624][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1825.580639][ T30] R13: 00007fb07de16128 R14: 00007fb07de16090 R15: 00007ffccc1de488 [ 1825.580673][ T30] [ 1825.580782][ T30] [ 1825.580782][ T30] Showing all locks held in the system: [ 1825.580797][ T30] 3 locks held by kworker/u8:1/13: [ 1825.580815][ T30] 1 lock held by khungtaskd/30: [ 1825.580829][ T30] #0: ffffffff8e7e76a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1825.580899][ T30] 3 locks held by kworker/u8:2/35: [ 1825.580922][ T30] 3 locks held by kworker/u8:8/1091: [ 1825.580935][ T30] #0: ffff88813fe9c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 1825.580996][ T30] #1: ffffc900045efd08 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 1825.581055][ T30] #2: ffffffff8e7f3180 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 1825.581139][ T30] 2 locks held by getty/5570: [ 1825.581153][ T30] #0: ffff8880394e10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1825.581212][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1825.581281][ T30] 3 locks held by kworker/1:6/5922: [ 1825.581302][ T30] 4 locks held by syz.0.5334/26056: [ 1825.581316][ T30] #0: ffff888020b3e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1825.581374][ T30] #1: ffff888020b3e130 (&tty->atomic_write_lock){+.+.}-{4:4}, at: file_tty_write.isra.0+0x289/0x890 [ 1825.581442][ T30] #2: ffff888020b3e2e8 (&tty->termios_rwsem){++++}-{4:4}, at: n_tty_write+0x1c4/0x12d0 [ 1825.581509][ T30] #3: ffffc900031b5380 (&ldata->output_lock){+.+.}-{4:4}, at: n_tty_write+0x5c5/0x12d0 [ 1825.581580][ T30] 1 lock held by syz.2.5451/26699: [ 1825.581594][ T30] #0: ffffffff8f4eca68 (tty_mutex){+.+.}-{4:4}, at: tty_release_struct+0xad/0xe0 [ 1825.581656][ T30] 2 locks held by syz.3.5459/26760: [ 1825.581670][ T30] #0: ffffffff8f4eca68 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 1825.581731][ T30] #1: ffff8880223b51c0 (&tty->legacy_mutex){+.+.}-{4:4}, at: tty_init_dev.part.0+0x39/0x470 [ 1825.581800][ T30] 2 locks held by syz.7.5500/27115: [ 1825.581815][ T30] 1 lock held by syz.1.5514/27214: [ 1825.581829][ T30] #0: ffffffff8f4eca68 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x150/0x3c0 [ 1825.581886][ T30] 1 lock held by syz.5.5526/27283: [ 1825.581899][ T30] #0: ffffffff8f4eca68 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x150/0x3c0 [ 1825.581955][ T30] 1 lock held by syz.0.5542/27454: [ 1825.581969][ T30] #0: ffffffff8f4eca68 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x150/0x3c0 [ 1825.582024][ T30] 1 lock held by syz.0.5542/27455: [ 1825.582037][ T30] #0: ffffffff8f4eca68 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x150/0x3c0 [ 1825.582095][ T30] 1 lock held by syz.9.5533/27544: [ 1825.582108][ T30] #0: ffffffff8f4eca68 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x150/0x3c0 [ 1825.582165][ T30] 1 lock held by syz.8.5561/27659: [ 1825.582178][ T30] #0: ffffffff8f4eca68 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x150/0x3c0 [ 1825.582236][ T30] 1 lock held by syz.2.5584/27855: [ 1825.582250][ T30] #0: ffffffff8f4eca68 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 1825.582314][ T30] 1 lock held by syz.7.5598/28007: [ 1825.582328][ T30] #0: ffffffff8f4eca68 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 1825.582391][ T30] 1 lock held by syz.1.5609/28072: [ 1825.582405][ T30] #0: ffffffff8f4eca68 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 1825.582473][ T30] 1 lock held by syz.1.5609/28079: [ 1825.582486][ T30] #0: ffffffff8f4eca68 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 1825.582551][ T30] 1 lock held by syz.6.5629/28246: [ 1825.582565][ T30] #0: ffffffff8f4eca68 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x150/0x3c0 [ 1825.582621][ T30] 4 locks held by syz-executor/28327: [ 1825.582639][ T30] 2 locks held by kworker/u8:5/28635: [ 1825.582653][ T30] #0: ffff88813fe9c948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 1825.582719][ T30] #1: ffffc90006067d08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 1825.582778][ T30] 1 lock held by syz.8.5644/28715: [ 1825.582792][ T30] #0: ffffffff8f4eca68 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x150/0x3c0 [ 1825.582848][ T30] 1 lock held by syz.5.5687/28769: [ 1825.582862][ T30] #0: ffffffff8f4eca68 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 1825.582925][ T30] 7 locks held by kworker/u8:10/28832: [ 1825.582939][ T30] 1 lock held by syz.0.5732/28941: [ 1825.582952][ T30] #0: ffffffff8f4eca68 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 1825.583018][ T30] 2 locks held by kworker/u8:11/29021: [ 1825.583033][ T30] 1 lock held by syz.7.5772/29127: [ 1825.583046][ T30] #0: ffffffff8f4eca68 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 1825.583110][ T30] 4 locks held by syz.3.5794/29221: [ 1825.583124][ T30] #0: ffff8880474f35c8 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 1825.583194][ T30] #1: ffffffff906bb370 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x53/0xa0 [ 1825.583254][ T30] #2: ffff888068379cd8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x189/0x6c0 [ 1825.583315][ T30] #3: ffffffff8e7f32b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1825.583381][ T30] 1 lock held by modprobe/29229: [ 1825.583396][ T30] [ 1825.583402][ T30] ============================================= [ 1825.583402][ T30] [ 1825.583412][ T30] NMI backtrace for cpu 1 [ 1825.583429][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1825.583466][ T30] Tainted: [L]=SOFTLOCKUP [ 1825.583474][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1825.583486][ T30] Call Trace: [ 1825.583494][ T30] [ 1825.583502][ T30] dump_stack_lvl+0x100/0x190 [ 1825.583538][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1825.583562][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1825.583599][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1825.583639][ T30] sys_info+0x141/0x190 [ 1825.583670][ T30] watchdog+0xd25/0x1050 [ 1825.583709][ T30] ? __pfx_watchdog+0x10/0x10 [ 1825.583740][ T30] ? __kthread_parkme+0x18c/0x230 [ 1825.583774][ T30] ? kthread+0x13a/0x450 [ 1825.583793][ T30] ? __pfx_watchdog+0x10/0x10 [ 1825.583821][ T30] kthread+0x370/0x450 [ 1825.583842][ T30] ? __pfx_kthread+0x10/0x10 [ 1825.583865][ T30] ret_from_fork+0x754/0xd80 [ 1825.583889][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1825.583914][ T30] ? __switch_to+0x7b4/0x1120 [ 1825.583942][ T30] ? __pfx_kthread+0x10/0x10 [ 1825.583965][ T30] ret_from_fork_asm+0x1a/0x30 [ 1825.584006][ T30] [ 1825.584014][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1825.584045][ C0] NMI backtrace for cpu 0 [ 1825.584059][ C0] CPU: 0 UID: 0 PID: 28832 Comm: kworker/u8:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 1825.584086][ C0] Tainted: [L]=SOFTLOCKUP [ 1825.584093][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1825.584107][ C0] Workqueue: iou_exit io_ring_exit_work [ 1825.584137][ C0] RIP: 0010:stack_access_ok+0x7c/0x1d0 [ 1825.584163][ C0] Code: 00 0f 85 24 01 00 00 48 8d 7b 10 4c 8b 6b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 0b 01 00 00 <48> 8b 43 10 49 39 ed 77 1a 48 39 e8 76 15 4a 8d 54 25 00 48 39 d0 [ 1825.584181][ C0] RSP: 0018:ffffc90000006ba8 EFLAGS: 00000246 [ 1825.584195][ C0] RAX: dffffc0000000000 RBX: ffffc90000006c48 RCX: ffffffff920952de [ 1825.584208][ C0] RDX: 1ffff92000000d8b RSI: ffffc90000007c48 RDI: ffffc90000006c58 [ 1825.584221][ C0] RBP: ffffc90000007c48 R08: 0000000000000001 R09: 0000000000000007 [ 1825.584233][ C0] R10: 0000000000000200 R11: 000000000008632a R12: 0000000000000008 [ 1825.584245][ C0] R13: ffffc90000000000 R14: ffffc90000007c78 R15: ffffc90000006c7c [ 1825.584258][ C0] FS: 0000000000000000(0000) GS:ffff888124342000(0000) knlGS:0000000000000000 [ 1825.584278][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1825.584290][ C0] CR2: 0000200000036000 CR3: 000000000e598000 CR4: 00000000003526f0 [ 1825.584303][ C0] Call Trace: [ 1825.584309][ C0] [ 1825.584317][ C0] unwind_next_frame+0x14f0/0x1ea0 [ 1825.584340][ C0] ? __netif_receive_skb_one_core+0x197/0x1e0 [ 1825.584364][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1825.584391][ C0] arch_stack_walk+0x94/0xf0 [ 1825.584416][ C0] ? __netif_receive_skb+0x1f/0x120 [ 1825.584437][ C0] stack_trace_save+0x8e/0xc0 [ 1825.584462][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1825.584487][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1825.584514][ C0] ? arch_stack_walk+0x94/0xf0 [ 1825.584537][ C0] kasan_save_stack+0x30/0x50 [ 1825.584565][ C0] ? kasan_save_stack+0x30/0x50 [ 1825.584591][ C0] ? kasan_save_track+0x14/0x30 [ 1825.584618][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 1825.584644][ C0] ? ref_tracker_alloc+0x190/0x590 [ 1825.584677][ C0] ? dst_init+0xda/0x5b0 [ 1825.584695][ C0] ? dst_alloc+0xbb/0x1a0 [ 1825.584712][ C0] ? rt_dst_alloc+0x35/0x3a0 [ 1825.584738][ C0] ? ip_route_output_key_hash_rcu+0x87a/0x2870 [ 1825.584758][ C0] ? ip_route_output_key_hash+0x118/0x2b0 [ 1825.584777][ C0] ? ip_route_output_flow+0x27/0x150 [ 1825.584796][ C0] ? ip_route_me_harder+0x562/0x1260 [ 1825.584820][ C0] ? synproxy_send_tcp.isra.0+0x341/0x680 [ 1825.584849][ C0] ? synproxy_send_client_synack+0x6ea/0x970 [ 1825.584876][ C0] ? nft_synproxy_do_eval+0xa73/0xd50 [ 1825.584907][ C0] ? nft_do_chain+0x2e8/0x1930 [ 1825.584935][ C0] ? nft_do_chain_inet+0xee/0x340 [ 1825.584966][ C0] ? nf_hook_slow+0xbf/0x220 [ 1825.584989][ C0] ? nf_hook.constprop.0+0x2a6/0x750 [ 1825.585009][ C0] ? ip_local_deliver+0x163/0x1f0 [ 1825.585030][ C0] ? ip_rcv+0x33a/0x3c0 [ 1825.585050][ C0] ? __netif_receive_skb_one_core+0x197/0x1e0 [ 1825.585085][ C0] kasan_save_track+0x14/0x30 [ 1825.585112][ C0] __kasan_kmalloc+0xaa/0xb0 [ 1825.585140][ C0] ref_tracker_alloc+0x190/0x590 [ 1825.585161][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1825.585183][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1825.585210][ C0] ? rcu_is_watching+0x12/0xc0 [ 1825.585232][ C0] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1825.585251][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 1825.585283][ C0] dst_init+0xda/0x5b0 [ 1825.585303][ C0] dst_alloc+0xbb/0x1a0 [ 1825.585323][ C0] rt_dst_alloc+0x35/0x3a0 [ 1825.585350][ C0] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 1825.585375][ C0] ip_route_output_key_hash+0x118/0x2b0 [ 1825.585396][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1825.585419][ C0] ? lock_acquire+0x1cf/0x380 [ 1825.585437][ C0] ? find_held_lock+0x2b/0x80 [ 1825.585463][ C0] ip_route_output_flow+0x27/0x150 [ 1825.585484][ C0] ip_route_me_harder+0x562/0x1260 [ 1825.585512][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 1825.585536][ C0] ? rcu_is_watching+0x12/0xc0 [ 1825.585560][ C0] ? kmem_cache_alloc_node_noprof+0x2a9/0x6f0 [ 1825.585588][ C0] ? kmalloc_reserve+0x148/0x350 [ 1825.585618][ C0] ? __kasan_kfree_large+0x80/0xa0 [ 1825.585651][ C0] ? __pfx_cookie_hash+0x10/0x10 [ 1825.585684][ C0] synproxy_send_tcp.isra.0+0x341/0x680 [ 1825.585713][ C0] synproxy_send_client_synack+0x6ea/0x970 [ 1825.585744][ C0] ? find_held_lock+0x2b/0x80 [ 1825.585768][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1825.585795][ C0] ? net_generic+0xea/0x2a0 [ 1825.585827][ C0] nft_synproxy_do_eval+0xa73/0xd50 [ 1825.585859][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1825.585891][ C0] ? arch_stack_walk+0x94/0xf0 [ 1825.585916][ C0] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 1825.585951][ C0] nft_do_chain+0x2e8/0x1930 [ 1825.585984][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1825.586013][ C0] ? mark_held_locks+0x40/0x70 [ 1825.586043][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 1825.586071][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 1825.586095][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1825.586130][ C0] nft_do_chain_inet+0xee/0x340 [ 1825.586157][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1825.586186][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 1825.586216][ C0] ? nf_nat_ipv4_local_in+0x181/0x730 [ 1825.586240][ C0] nf_hook_slow+0xbf/0x220 [ 1825.586265][ C0] nf_hook.constprop.0+0x2a6/0x750 [ 1825.586286][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1825.586310][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 1825.586330][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1825.586354][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1825.586378][ C0] ? ip_rcv_finish_core+0x80a/0x2220 [ 1825.586402][ C0] ip_local_deliver+0x163/0x1f0 [ 1825.586423][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 1825.586445][ C0] ip_rcv+0x33a/0x3c0 [ 1825.586465][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1825.586486][ C0] __netif_receive_skb_one_core+0x197/0x1e0 [ 1825.586507][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1825.586529][ C0] ? lock_acquire+0x1cf/0x380 [ 1825.586546][ C0] ? process_backlog+0x32a/0x1580 [ 1825.586566][ C0] ? process_backlog+0x32a/0x1580 [ 1825.586584][ C0] __netif_receive_skb+0x1f/0x120 [ 1825.586604][ C0] process_backlog+0x37a/0x1580 [ 1825.586627][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 1825.586649][ C0] net_rx_action+0xa40/0xf20 [ 1825.586672][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1825.586696][ C0] ? __pfx_xfrm_dev_backlog+0x10/0x10 [ 1825.586724][ C0] ? mark_held_locks+0x40/0x70 [ 1825.586756][ C0] handle_softirqs+0x1eb/0x9e0 [ 1825.586781][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1825.586808][ C0] __irq_exit_rcu+0xef/0x150 [ 1825.586831][ C0] irq_exit_rcu+0x9/0x30 [ 1825.586853][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1825.586877][ C0] [ 1825.586883][ C0] [ 1825.586889][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1825.586911][ C0] RIP: 0010:get_stack_info+0x55/0x90 [ 1825.586945][ C0] Code: 09 84 c0 74 49 48 85 ed 74 20 45 8b 2c 24 41 83 fd 3f 0f 87 b7 30 75 ff 48 8b 45 00 4c 0f a3 e8 72 15 4c 0f ab e8 48 89 45 00 <31> c0 5b 5d 41 5c 41 5d c3 cc cc cc cc 65 48 3b 1d 4e 78 62 12 75 [ 1825.586963][ C0] RSP: 0018:ffffc900049375f0 EFLAGS: 00000292 [ 1825.586976][ C0] RAX: 0000000000000002 RBX: ffff88801e7a24c0 RCX: ffffc90004938000 [ 1825.586989][ C0] RDX: ffffc90004937668 RSI: ffff88801e7a24c0 RDI: ffffc90004937618 [ 1825.587002][ C0] RBP: ffffc90004937688 R08: 0000000000000001 R09: 0000000000000000 [ 1825.587014][ C0] R10: ffffc90004937668 R11: 0000000000000000 R12: ffffc90004937668 [ 1825.587027][ C0] R13: 0000000000000001 R14: ffffc90004937668 R15: ffffc90004937690 [ 1825.587048][ C0] __unwind_start+0x368/0x7f0 [ 1825.587072][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1825.587100][ C0] arch_stack_walk+0x73/0xf0 [ 1825.587123][ C0] ? __unwind_start+0x2fb/0x7f0 [ 1825.587147][ C0] ? __io_req_caches_free+0x1a6/0x220 [ 1825.587176][ C0] stack_trace_save+0x8e/0xc0 [ 1825.587200][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1825.587226][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1825.587243][ C0] ? kasan_save_stack+0x3f/0x50 [ 1825.587270][ C0] ? kasan_save_stack+0x30/0x50 [ 1825.587297][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 1825.587320][ C0] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 1825.587339][ C0] kasan_save_stack+0x30/0x50 [ 1825.587388][ C0] kasan_save_track+0x14/0x30 [ 1825.587416][ C0] __kasan_kmalloc+0xaa/0xb0 [ 1825.587444][ C0] kmem_cache_free+0x41f/0x6a0 [ 1825.587470][ C0] __io_req_caches_free+0x1a6/0x220 [ 1825.587500][ C0] io_req_caches_free+0x24/0x60 [ 1825.587527][ C0] io_ring_exit_work+0x3eb/0xd15 [ 1825.587558][ C0] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1825.587587][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1825.587609][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1825.587632][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1825.587666][ C0] ? rcu_is_watching+0x12/0xc0 [ 1825.587691][ C0] process_one_work+0xa23/0x19a0 [ 1825.587717][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1825.587741][ C0] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1825.587772][ C0] worker_thread+0x5ef/0xe50 [ 1825.587795][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1825.587815][ C0] ? kthread+0x13a/0x450 [ 1825.587832][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1825.587851][ C0] kthread+0x370/0x450 [ 1825.587868][ C0] ? __pfx_kthread+0x10/0x10 [ 1825.587886][ C0] ret_from_fork+0x754/0xd80 [ 1825.587906][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1825.587926][ C0] ? __switch_to+0x7b4/0x1120 [ 1825.587965][ C0] ? __pfx_kthread+0x10/0x10 [ 1825.587984][ C0] ret_from_fork_asm+0x1a/0x30 [ 1825.588013][ C0] [ 1825.681776][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1825.681801][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1825.681834][ T30] Tainted: [L]=SOFTLOCKUP [ 1825.681843][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1825.681857][ T30] Call Trace: [ 1825.681865][ T30] [ 1825.681875][ T30] dump_stack_lvl+0x100/0x190 [ 1825.681917][ T30] vpanic+0x552/0x970 [ 1825.681939][ T30] ? __pfx_vpanic+0x10/0x10 [ 1825.681963][ T30] ? rcu_is_watching+0x12/0xc0 [ 1825.681996][ T30] panic+0xd1/0xe0 [ 1825.682017][ T30] ? __pfx_panic+0x10/0x10 [ 1825.682043][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1825.682081][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1825.682118][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1825.682153][ T30] ? watchdog.cold+0x198/0x1ca [ 1825.682178][ T30] ? watchdog+0xd35/0x1050 [ 1825.682210][ T30] watchdog.cold+0x1a9/0x1ca [ 1825.682243][ T30] ? __pfx_watchdog+0x10/0x10 [ 1825.682275][ T30] ? __kthread_parkme+0x18c/0x230 [ 1825.682310][ T30] ? kthread+0x13a/0x450 [ 1825.682330][ T30] ? __pfx_watchdog+0x10/0x10 [ 1825.682360][ T30] kthread+0x370/0x450 [ 1825.682380][ T30] ? __pfx_kthread+0x10/0x10 [ 1825.682404][ T30] ret_from_fork+0x754/0xd80 [ 1825.682435][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1825.682461][ T30] ? __switch_to+0x7b4/0x1120 [ 1825.682490][ T30] ? __pfx_kthread+0x10/0x10 [ 1825.682513][ T30] ret_from_fork_asm+0x1a/0x30 [ 1825.682556][ T30] [ 1825.682797][ T30] Kernel Offset: disabled