last executing test programs: 6m22.712531391s ago: executing program 32 (id=291): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x12b440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e07"], 0xa) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0xeeee0000, 0xd000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="260fc77d6b66baf80cb834aac380ef0f01cb66b8000066ef66b81a000f00d866baf80cb8c50c8487ef66bafc0cec9a0090ffff0f000fc7be00000000c744240000000000c74424020001c0fec7442406000000000f0114240f06b93f020000b889000000ba000000000f3066baf80cb89a8a538aef66bafc0cb000ee", 0x7c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r4}, &(0x7f0000044000)=0x0) timer_settime(r5, 0x0, &(0x7f0000040fe0)={{}, {0x77359400}}, 0x0) rt_sigaction(0x12, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff, {[0x400]}}, 0x0, 0x8, &(0x7f0000000180)) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x7, 0x8, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) ioctl$BLKSECDISCARD(r9, 0x127d, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000000200)=0x953e) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3006, 0x41d0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x40) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r10, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r11, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x15}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 3m8.246240903s ago: executing program 33 (id=2264): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1, {}, 0xff}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000002a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xbf2a0000}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r5, 0x1, {}, 0xff}, 0x18) bind$can_j1939(r3, &(0x7f00000001c0)={0x1d, r5, 0x1, {0x2, 0xf0, 0x3}}, 0x18) 3m5.874713607s ago: executing program 34 (id=2284): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xfff1}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x40, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r2 = socket$kcm(0x10, 0x2, 0x0) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r3, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x34}}, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) 2m47.530184325s ago: executing program 35 (id=2376): set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0xd) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1000002, 0x0) 2m46.515476044s ago: executing program 36 (id=2386): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'pcmmio\x00', [0x10d, 0x80008000, 0x1, 0xa, 0x0, 0x0, 0x1, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x4, 0xffff, 0x6, 0xffffffa7, 0x9, 0xfffffffd, 0x65c, 0x3ff, 0x10000, 0x800, 0xe2df, 0x9, 0x1, 0x4, 0x3, 0x7, 0x5, 0x5]}) r1 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x504080, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000140)={0xfff, "711cf65998d09ba01233c4601b021d06f376bcdc75d21971706498fad99a57b9"}) ppoll(&(0x7f0000000180)=[{r2, 0x8080}, {r1, 0x80e3}, {r2, 0x40}, {r1}, {r0, 0x180}, {r3, 0x11c}], 0x6, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={[0x9]}, 0x8) linkat(r2, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1000) 2m43.454893464s ago: executing program 37 (id=2404): r0 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) (async) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01", 0x1) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000040)=ANY=[], 0x78) (async) write$binfmt_elf64(r3, &(0x7f0000000040)=ANY=[], 0x78) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r4, 0x89e0, &(0x7f0000000080)) close(r3) execveat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x1c00) 2m32.439455256s ago: executing program 38 (id=2423): syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x3d) 2m24.161859621s ago: executing program 39 (id=2434): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m23.148046128s ago: executing program 40 (id=2438): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x3a) (async, rerun: 64) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x500}, 0x1c) (async) r1 = syz_clone(0x24100000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x4, 0x0, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f000000e0c0), 0x10010) (async) sendfile(r0, r3, &(0x7f0000000100)=0x6, 0x100000000010001) (async) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000a"], 0x10b8}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) (async, rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) (async) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) getgroups(0x4, &(0x7f0000000080)=[0x0, 0xee01, 0xee01, 0x0]) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2080000, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r8}}) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) (async, rerun: 32) pread64(r7, &(0x7f0000004200)=""/236, 0xec, 0x0) (rerun: 32) write$FUSE_INIT(r7, &(0x7f0000004300)={0x50, 0x0, r9}, 0x50) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000004380)='./file0/file0\x00', 0x0) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r7, &(0x7f00000043c0)={0x29, 0x3, 0x0, {0x1, 0x8, 0x0, 'group_id'}}, 0x29) 2m21.132505363s ago: executing program 41 (id=2443): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500eeffffff0c00168008000100", @ANYRES16=r1], 0x38}}, 0x10) r3 = getpid() r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080), &(0x7f00000002c0)=0x4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f0000000280)=0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r5, r6, 0x4, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r7, r5, 0x4, r5}, 0x10) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000340)=""/69, 0x623c41ea}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 2m10.374363747s ago: executing program 42 (id=2447): r0 = socket(0x1, 0x803, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) syz_io_uring_complete(0x0) (async) r2 = syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xd0, r3, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x69}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x34, 0x2d, 0x0, 0x1, [{0xa, 0x0, @random="ae8ec308ff67"}, {0xa, 0x0, @default_ap_ssid}, {0x18, 0x0, @random="b1935c9592487d7c97bed567e5c4cf6626de6351"}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x50}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7fff}, {0x8, 0x0, 0x7ff}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x25, 0x2a, [@peer_mgmt={0x75, 0x16, {0x0, 0x7, @void, @val=0xb, @val="2fc8020c9d06d240d5604f8e5f8b9758"}}, @challenge={0x10, 0x1, 0x26}, @chsw_timing={0x68, 0x4, {0x1, 0xabbe}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x44004}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) (async) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) socket$kcm(0x29, 0x7, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000340)=0x1) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000340)=0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x200000000000000) 2m3.954638875s ago: executing program 43 (id=2452): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0xffffff80) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0x404c8c0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x4}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x4}]}) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) lseek(r2, 0x4, 0x0) (async) lseek(r2, 0x4, 0x0) readv(r2, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) (async) readv(r2, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) shutdown(r0, 0x1) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000000)={@remote, @loopback, 0x0, "0ec8f247df2abd50769c72b18d0cbe2d34d8bc5677aee0ea3a691035e12ecc6e", 0x7f, 0x3, 0x62, 0x4000800}, 0x3c) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000200)=0x8) (async) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000200)=0x8) 2m1.941146666s ago: executing program 44 (id=2454): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x40001043, r1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000500050002000000050004000100000005000100060000000c00078008000640000000000900020073797a300000000010000300686173683a69702c6d6163"], 0x54}}, 0x0) ppoll(&(0x7f0000000800)=[{r2}, {r4, 0x821f5a43a771b3f5}, {r2, 0x4002}, {r2, 0x80}], 0x4, &(0x7f0000000840)={0x77359400}, &(0x7f0000000880)={[0x9]}, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r8}}) splice(r7, 0x0, r6, 0x0, 0xffffffffffff8000, 0x0) syz_usb_connect$uac1(0x3, 0xcc, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x3, 0x1, 0x7, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xd}, [@processing_unit={0x7, 0x24, 0x7, 0x4, 0x6, 0xb}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x100, 0x3, 0x6, 0x61}, @mixer_unit={0x9, 0x24, 0x4, 0x4, 0x2, "6ac903ab"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x100, 0x3, 0x2, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x3, 0x1, 0x8, 0x6, "d200217298f13bb8"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x0, 0x8, {0x7, 0x25, 0x1, 0x80, 0x4, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xfffa, 0xfff, 0xb, "f40918d2d863bfcf"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x4, 0xe, 0x9, "dac72df5"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x1, 0x2, 0x3, "d4eca9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x0, 0x9, {0x7, 0x25, 0x1, 0x1, 0x7, 0x1}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xe, 0x99, 0x5, 0x8, 0x7}, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="fee4080c3ff142fe67430000000000000000000000ba9da378c7c6cbfa2046f580b2ced4ff5bdad222c30ce850a38f832b2b9ffe43cfd9ad4f79a1f22d0b6615ce1553afe08d8c81abc043f0139cdb0c8ac93fcb824ceb671647e52390fb7f19ab8af5e5069316d84acdcef41d331246a5c73c30ac91d27a83b7b0dae3a6cb347f6c94ad5b30b4e9e584eda9cadb08e6bc37f997812874333ea922f52e336773113419f826e671cdcf53a391b49d249f07ac7d5ef59bb3"], 0xa, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x80c}}, {0x76, &(0x7f00000002c0)=@string={0x76, 0x3, "fd3a2ab18e0f11f9154fd879221106ff30db2f49d357d9ff80c1c5a0998396755153f75e0e29b05ac845073cdef2ea40f5f5fbc83516e09b4dfc4c265043ee05e8522679405d34ab8d8eeaa18b59d3627a12fb5d57784abb31be7383f7c2110b7da4d2bf35a8c8578eff5167612bfaaa22f96b75"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x100a}}, {0x84, &(0x7f0000000480)=@string={0x84, 0x3, "e2e6398689f0cf199fc8cada265b0dd647935e43a84e8937e210a6cf0c9de32dd31ec3b312c6d3e26fd7eed2d01339005bb7227ef819072ffc2c43c3b7d21b3d34e4e1680212be2cedae697608a8038eea8f023b7a7e4188e5cc02311e22bf213ecfb6ed81e887c54ecc45403f74960283da9f048f53ac3e1349ed237cc24d2cea65"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x438}}, {0xdb, &(0x7f0000000580)=@string={0xdb, 0x3, "49945860602064c8a5b1a0b92aa91d806a3cd8c15d140651e3ba36fa916f0645d8b29ade290a32ff1a8cee76828002f82fd03b64400642b5cb3eb30789af3cf0e3c1acc3b77165cb018b26c77dc44ead3ea888ba9c60448b3e4e0f9b6bdbe3b4283e177d6fb15b945e9585533374c1d5fb53a4ba3e0f6002cea1c948592a1a4750c80d8865beaedc4f6901b046e611eab18f95b3db8b51a197e71f666d27a8e792a3b82aae3893657368615a57881f0f26752d09738afbe1b8e907cbbac02f32a203463fafd6eb552882aea52c85433e359ea2102de1540e14"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r11, 0x4048aecb, &(0x7f0000000080)=ANY=[]) ioctl$KVM_GET_VCPU_EVENTS(r1, 0xc048aeca, &(0x7f00000008c0)) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r12 = socket$inet(0x2, 0x80002, 0x0) setsockopt$inet_mreq(r12, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @local}, 0x1a) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x40000041, 0x0, 0x0) 1m59.427333032s ago: executing program 45 (id=2458): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3, 0x800}) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}]}}) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040)=0xfffffffc, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001380), r1) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f00000003c0)=0x5, 0x4) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)={0x2c, r2, 0x201, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c004}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001700)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001740)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000002dc0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d00)={0x5c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x5}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xa}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x3}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x617}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x9e}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x2fe}]}, 0x5c}}, 0x4008041) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/243, 0xf3}, {&(0x7f0000000a00)=""/224, 0xe0}], 0x2, &(0x7f0000001480)=[@rdma_dest={0x18, 0x114, 0x2, {0x3, 0x16}}, @cswp={0x58, 0x114, 0x7, {{0x97, 0x6}, &(0x7f0000000140)=0x677, &(0x7f00000002c0)=0x6, 0xff, 0x3, 0x4, 0x8ae, 0x20, 0xb37}}, @rdma_args={0x48, 0x114, 0x1, {{0x101, 0x1000}, {&(0x7f0000000c00)=""/250, 0xfa}, &(0x7f0000001000)=[{&(0x7f0000000300)=""/20, 0x14}, {&(0x7f00000003c0)=""/18, 0x12}, {&(0x7f0000000d00)=""/236, 0xec}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000000e00)=""/182, 0xb6}, {&(0x7f0000000ec0)=""/165, 0xa5}, {&(0x7f0000000400)=""/123, 0x7b}, {&(0x7f0000000b00)=""/110, 0x6e}, {&(0x7f0000000f80)=""/98, 0x62}], 0x9, 0x2, 0x7}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000010c0)=""/169, 0xa9}, &(0x7f0000000980), 0x3}}, @rdma_args={0x48, 0x114, 0x1, {{0x800, 0xd7}, {&(0x7f0000001180)=""/9, 0x9}, &(0x7f0000001340)=[{&(0x7f00000011c0)=""/44, 0x2c}, {&(0x7f0000001200)=""/8, 0x8}, {&(0x7f0000001240)=""/210, 0xd2}], 0x3, 0x2, 0x8}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x7a0}, @cswp={0x58, 0x114, 0x7, {{0x9}, &(0x7f0000001380)=0xfffffffffffffff8, &(0x7f00000013c0)=0x3, 0x7, 0x40, 0x2, 0x9, 0x8, 0x4}}, @mask_fadd={0x58, 0x114, 0x8, {{0x80, 0x9}, &(0x7f0000001400)=0x7, &(0x7f0000001440)=0x60ea, 0x7, 0xe3, 0x2, 0xa3, 0x979388e027ed2bb2, 0x6}}], 0x1f8, 0x4080}, 0x4000000) close(r0) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001780)="3912c1d03d9f66103940872256d8995b00c720af0cfa51b2b3b1448411fe107e0600000000000000afdbee2c35b8ad1677fe7bb27ca22acbe83c449484972354b3baa1809633e690474a9154f95bd6874f20a0b290c590d44a9f5cd01414544ad719b82a550f2a7215e33e2dfdc1ce61a75637323b8828ef1f77b3d93114d46ceddb9d976eea7e20bb95e24e1e8b9974397bb8d73856a38618eac0ab333267fc833503b4df7838f5e522192252f4fd72ae45d21b55414a82ec84ff620a1ee2fe4691573a8afc79adaac5f0618cb457b14013f9e048cdec329a9e3343140213a41330b43e3290ef836c8839b303f0639a7561361247db2646977014051dcf3dc1246225f9aae3ca02943571bb39ecfdfa5b9ebc30a0478940ddde3c7da6313848373c719a1f43ba5a765b8aa97caf7717fa063166951aa4e72d5616e6b42d6866fb308970430b2ff44c25b7dde2494389d1717c83f83ac7a632da0472bd6b0295b9f1fd1fc43099b1062bef744785158264f636cbf13926e7fcde7ebc1560a20961df3286df51b246ee7fe9474a8d51498bd90230bc89ea8dccb85035edd01aa93ed2f82297c3c3703fdeca403bc70b0604ea7abf9a36a488369142a9bfa42664d84860974fddbabed7eb509350917a3bbd427fe226bd1dd3420a7d71160b33a41a3578861d75e7e93c22ee94e9e7a6c45b9e6765192342b4ed448a76cd594258dc1883c2d749cad6e03b767555610c200efb5f104f91be7fb2513c000ca002ffe9bffff4f24797f3f279da2baedf7f91ed97ae33edef2ab348dded9df075b1ca5855866843aff902b6678075cb4a3d988ffd8ed61885400d1bcf6dc38c6be9b6428d4eba30711556510eb41b5c04590f11e393317a4fc938c0bdd7c344d58388b39ecdbe322344c5ec4ed178e1dd35182a00f3ac345bfeea9936b6a015151332962bd28c5e1dbcdd825d51c78ef6db73170d9cfd47f2ca210ce8c103d37be1c61427bd3cf1bb5bcf9888f6e1631f404e5148f5e0cf4008079759b3c3c2a51f9cd8e0725459f9a531af19e2b533532f0b66fb5e9614d0f20400000000000082a824fe67165bdaedcda5ddd86924c4fe5f22a043f92aed7a105fb54ec323273e660c6227fa74b76c2a020d42f167891cbaf960fc0288547f2d31dceff3787135659a65878e5df65ce0004104a665098be576ebaf3733b6ba57e40f40ac74aad7d8b41db0f55513389faa84b1ce0fafed70187e32293c118bfab115b7c4163fb22af534402206065acf06066a5fb65f0b928cd25838c0c1a7b06bc42e622f502e515b87426b2a184b593bf35a4d454dc56881bbda1b9350f956e086196447a5052288aa0556e638d292bfd1abad58ef5db98f92694b30c3eda5b25a44688b24eadf579616c034ef688fad705c3dc99aafda0f7bbb591fd20e0ff96e8941188b9676b833aa91ba5ab1cf7acbdf16f14c843dd3cfeedf8e7628051f361ba328496c8a05aa68997257cb505dba270e132c437bc6df39134b0807fea53ecb84714ab0d9d8cda271e15bddac37ae4e0534322d649b74c90499919b771679c7211b4df2c80864809991750f966f52d217f63e80b7142b9205576133469a0a950060cd2fa0c25554b89900ebb6a991954990adeee517e55ff3abe4f3f7c07cb735b80be674d53ccc5bef27421c7bb602c7f22dde056ae0c85086f9850fe6a7ec108fd29c7f99f3d1316da10415b2e4e029762a39369cd8738e0a840690c5e2167099a6c1d59a6c4f6df0432ca24fc5bad416b54504232562827e51ac8223e6cbc4075101833f8ca29961cfa7c9f6fae11ae7a5ddac36ed578fc25f83a65cbe4a0edc3b85e62d3900304eb49b99826d984505b7a6fcce11c858d43bd4239b4b4576e39f60248ff9b11c13a36361bc12cbf101e309", 0x54f}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000004c0)="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", 0x4b8}, {&(0x7f0000000340)="aa3d375025bc5e5b22402c6bc2b74d05557866776adbe43d0b87154fb9ccb967587c784994ee8b2b6822efc7f5d8b6498f0c7bd3df443b29475108699ab2dc772583b8de74fd4eff96bdeac758d85aac80", 0x51}, {&(0x7f0000000180)="568f7d1bdce61bcb81dcb4241641f0058ff08646a9cc66b66a55b13694c0805f3267a2e1739b2392af33abf3b39fb8e7a6d1b48e1d22a695", 0x38}], 0x3}}], 0x2, 0x4) shutdown(r0, 0x1) 1m48.579602982s ago: executing program 46 (id=2467): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffd}]}]}, 0x2c}}, 0x0) capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x84, 0xffffffff, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c0000040012801400018008000300", @ANYRES32=0xee00, @ANYBLOB="080002"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller1\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r4, 0x1, 0x4c, 0x0, &(0x7f0000000300)) r5 = socket$igmp(0x2, 0x3, 0x2) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x0, 0x0}, 0xf6}], 0x1, 0x40, 0x0) 1m42.739000323s ago: executing program 47 (id=2484): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x4, 0x1, 0x3, 0x2, 0x0, [{0xf, 0x0, 0x0, '\x00', 0xe}, {0x5, 0x0, 0x0, '\x00', 0xfc}, {0x1, 0x1, 0x6, '\x00', 0x3}, {0xfa, 0x8, 0x1, '\x00', 0xa0}, {0xfe, 0x3}, {0xa, 0x3, 0x5}, {0xb8, 0xda, 0xd, '\x00', 0x59}, {0xb, 0x1, 0xc, '\x00', 0x3}, {0x9, 0x7, 0x81, '\x00', 0x9}, {0x4, 0x6, 0x5, '\x00', 0x9}, {0x7, 0x5, 0xd, '\x00', 0xa}, {0x0, 0x4b, 0x45, '\x00', 0xc2}, {0x8, 0xab, 0x8, '\x00', 0x3}, {0xe, 0x3, 0xfe, '\x00', 0x81}, {0x5, 0xfb, 0x2, '\x00', 0x2}, {0x0, 0x4, 0x6, '\x00', 0x9}, {0xc2, 0x9, 0x7, '\x00', 0x4}, {0x4, 0x7, 0x4, '\x00', 0x9}, {0xab, 0xef, 0x40, '\x00', 0x6}, {0x8, 0x10, 0x80, '\x00', 0x10}, {0x3, 0x3, 0x6, '\x00', 0x86}, {0x9, 0xb, 0xa, '\x00', 0x8}, {0x86, 0x8e, 0x5, '\x00', 0x9}, {0x56, 0x3, 0x4, '\x00', 0x7f}]}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x5, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340"], 0x0) ioctl$EVIOCRMFF(r3, 0x4004550f, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000009c0), 0x80002, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000200)=r6}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r7, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x0, 0x2018, 0x0, 0x8, 0x8, 0x2, 0x657ef077e46ea00d}}) 1m40.091518245s ago: executing program 48 (id=2493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000200100000004000180100002800c00018008000100c3"], 0x28}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @remote, @multicast2}, &(0x7f0000000180)=0xc) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) 1m36.303819978s ago: executing program 49 (id=2511): socket$unix(0x1, 0x1, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x3c}}, 0x4000050) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x7ff}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) 1m26.430146726s ago: executing program 50 (id=2521): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x418a4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x5}]}}}]}, 0x3c}}, 0x0) 1m19.091473446s ago: executing program 4 (id=2597): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x7fff}, 0x0, 0x0, 0x4, 0xb1e, 0x8, 0x7, 0x75, 0x5}}], 0x58, 0x8004}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000100)={'ip_vti0\x00', 0x6928}) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="898e86444aca5344b702000002000004850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r4, 0x25, 0x2, @void}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f00000007c0)={{}, {0x1, 0x1}, [{0x2, 0x8}], {0x4, 0x6}}, 0x2c, 0x2) (async) r8 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route_sched(r8, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001600)=@deltfilter={0x840, 0x2d, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0xd, 0xffe0}, {0xffe0, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x810, 0x2, [@TCA_ROUTE4_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x32006d63, 0xfffff00a, 0xff, 0x101, 0x8, 0x200, 0xbb, 0x2, 0x3, 0xfffffffb, 0x3f, 0x3, 0x5, 0xfffffff9, 0x0, 0x7, 0x5, 0x7, 0xfffffffa, 0x800, 0x7fff, 0x4, 0x1, 0x1, 0x519f, 0x0, 0x6, 0x0, 0x8, 0x3, 0x1, 0x4, 0x4, 0x5, 0xfffffff7, 0x7fff, 0x1, 0x8, 0x7, 0x3b1f, 0x5, 0x9, 0xb, 0x5, 0x400, 0x4, 0x3, 0xffffffff, 0x8, 0xffffffff, 0x3, 0x68, 0x4, 0x1, 0x7, 0x5, 0x853d642, 0x3, 0x7, 0x8, 0x64b1, 0xf59, 0xa, 0x2, 0x1, 0x4, 0x36, 0x6, 0xa, 0x5, 0x4, 0x7fff, 0x7, 0x10000, 0xa, 0x200, 0x8, 0x9, 0x10, 0x3ff, 0x9, 0x9, 0x70, 0x4, 0xd, 0x1, 0xffffb0d4, 0x2, 0x1ff, 0x7, 0x3, 0x7, 0x1, 0x1, 0x1, 0x3, 0x4, 0xc, 0x8, 0xfffffffa, 0x8aa0, 0xe0f, 0x9, 0x3, 0x1000, 0xffff, 0x10000, 0x8000, 0xd, 0x5, 0xff, 0xf, 0xd0a3, 0x80, 0x7, 0x5b72, 0x0, 0x5, 0xfffffff7, 0x6, 0x7, 0x1ff, 0x5, 0x4, 0x2, 0xb52b, 0x2, 0x3, 0x3ff, 0x1, 0x2dd9, 0x8001, 0x8, 0x5, 0x0, 0x7, 0x81, 0x80000000, 0x3, 0xe8d6, 0xffff, 0xc0eb, 0x6, 0x1, 0x7, 0x4b0, 0x8, 0x3cf1a96c, 0x6, 0x6, 0x80000000, 0x9, 0xfffffcea, 0x9, 0x10000, 0x6ce9, 0x9, 0x4e5, 0x7, 0x369c, 0x3f99, 0xffffffff, 0x4, 0x8, 0x3, 0xff, 0x1, 0x0, 0x5, 0x2, 0x5000000, 0x62, 0x10001, 0xcf8c, 0x3f18476d, 0x1f300220, 0x3, 0x4224, 0x1, 0x1, 0x2, 0x4, 0xfffffff7, 0x80000000, 0x5, 0xe, 0x5, 0x1, 0xdf60da4, 0x3, 0x82d0, 0x6, 0x4, 0x800, 0x100, 0x80000001, 0x6, 0x3, 0x7, 0x80000001, 0x7fffffff, 0x3, 0xffffffff, 0x7, 0x2, 0xfffffffd, 0x4, 0x9, 0x6, 0x0, 0xfffffe00, 0x39, 0x2, 0x8000, 0x80, 0x3, 0x4, 0x9, 0x8, 0x4, 0x3, 0x9, 0x100, 0x7, 0x2, 0x7, 0x2, 0x9, 0x19000000, 0x5, 0x4, 0x9, 0x3, 0x80000000, 0x2, 0x2, 0x7, 0x0, 0x7, 0xfff, 0xc83b, 0x401, 0xe4f0, 0xd09, 0x80000001, 0xfffffff7, 0x7812, 0x80, 0xfffffffc, 0x7, 0x0, 0xfffffffc, 0x81, 0xffff, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x0, 0x0, 0xc4e6, 0xfffffc01, 0x459, 0x6, 0x4, 0xc, 0x3, 0x1, 0xde8, 0x4, 0x6, 0x7, 0x2, 0x7, 0x3, 0x2, 0x5, 0x339c04a7, 0x1, 0x9, 0x0, 0x5, 0x4, 0x1, 0x6, 0x5, 0x5, 0x9, 0x9, 0x2, 0x0, 0x80000001, 0x9, 0x84b250eb, 0x2, 0x5, 0x3, 0x4, 0x2f5, 0x10, 0x5, 0x7a4e, 0x5, 0xb9, 0xffffffff, 0x8, 0x8000, 0x8, 0x8, 0xff, 0xff, 0x4, 0x40, 0x7, 0x17, 0x80, 0x3, 0x4, 0x5, 0x7b34, 0x2ce, 0xb8, 0x3ff, 0xb46, 0x4, 0x8, 0x1, 0x2fce, 0x0, 0x5, 0x3, 0x4, 0x8, 0x5, 0x1, 0x0, 0xf, 0x2c8, 0x2, 0xffffffc0, 0x5ed96db, 0x400, 0x7, 0x6, 0x400, 0x1, 0x6, 0x0, 0x5, 0x2, 0x200, 0x1ff, 0x8163, 0x4306ded, 0x1de7, 0x831, 0x5, 0xffffffff, 0x7, 0x5, 0x10000, 0xfffffffc, 0x6cf, 0xf, 0x1, 0x1, 0x401, 0x8000, 0x80, 0xe, 0x6, 0x6, 0x4, 0x7, 0x7fffffff, 0xd5f3, 0x0, 0x14, 0xc23, 0xd, 0x1, 0x3, 0x1, 0x9, 0x8, 0xf, 0x800, 0x1, 0xffff, 0x9, 0xfffffff7, 0x4, 0x6, 0xc3, 0x5, 0x3, 0x2, 0x10000, 0xfff, 0x8, 0x32f4, 0x9, 0x2, 0x4, 0x0, 0xa, 0x5, 0x0, 0x3, 0x8, 0x79a9, 0x8, 0x7, 0x6, 0x3, 0x1, 0x3e91, 0x6, 0x5, 0x6, 0xfffffff9, 0x0, 0x7, 0x5, 0x360c4ca1, 0x5, 0x40f, 0x8, 0x7ff, 0x7, 0x2, 0x1, 0xff, 0x96, 0x1, 0x2, 0xc95af3b, 0x6813, 0x4, 0x9, 0x3f, 0x5, 0x8, 0x7, 0x8, 0x1a74, 0x10000, 0x101, 0x8, 0x2, 0x13, 0x6, 0xff, 0x1, 0x0, 0x4, 0x9, 0xa, 0x7, 0x9, 0xffffff00, 0x9, 0x7, 0x1, 0x0, 0x1, 0x0, 0xfffffff8, 0x1000, 0x100000, 0x80000000, 0xffffffff, 0x80000001, 0x3ed, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0xb, 0x5, 0x9, 0xd, 0x8, 0x4, 0x0, 0x1000, 0x4, 0x8, 0x5, 0x2, 0x4, 0x1, 0x0, 0xdcc, 0x7, 0x5, 0x5, 0x2, 0x10, 0x2, 0x217, 0x3ff, 0x200000, 0xd, 0xa990, 0x1, 0x9, 0x4, 0x2932, 0x5dd, 0x1ff, 0xe3]}]}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0x20000814}, 0x8000) (async) syz_emit_ethernet(0x19, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x5e25ed804c4cd5b4}}}}, 0x0) (async) accept4(r3, &(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000080)=0x80, 0x80000) r9 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000007c0), 0x880, 0x0) ioctl$CDROM_SET_OPTIONS(r9, 0x5320, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x6, 0x0, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xc2}]}}]}, 0xac}}, 0x0) 1m19.034272086s ago: executing program 4 (id=2598): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8041) 1m19.033652597s ago: executing program 4 (id=2599): syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0486dd6012000800103afffe8000000800000000000000000000bbff02000000000000000000000000000186009078010002000000000000000000ee0b0be240f747b2e2ee5a2a4b3054f66ee7ff717995c339f2be9081637b5aaac7ec758f183f0fea696d43f5eb29f5d62588b606935adfb4b30e24d8577aa0bd03e54996c1479052f104a36b2fe06fb35feda8cafd989c6e6fd35f1a43f262394dee971f0477a454c7013a02a55a41817df9aabd6125ed9466a779962cfa4d3a7528a1cb96fb1151fb55fabadd"], 0x0) syz_emit_ethernet(0x101, &(0x7f0000000340)={@random="33ee875d8537", @dev, @void, {@ipv6={0x86dd, @tipc_packet={0x8, 0x6, "9b2557", 0xcb, 0x6, 0xff, @local, @remote, {[@fragment={0x3a, 0x0, 0x5, 0x0, 0x0, 0x8, 0x67}, @dstopts={0x32, 0x0, '\x00', [@pad1, @ra]}, @fragment={0x21, 0x0, 0x6, 0x0, 0x0, 0xd, 0x65}, @hopopts={0x32, 0x7, '\x00', [@ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x20, {0x2, 0x6, 0x5d, 0x5, [0x1, 0x5, 0x3]}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, @dstopts={0x33, 0x6, '\x00', [@ra={0x5, 0x2, 0x5}, @ra, @generic={0xb1, 0x26, "84a8a29e4369e3a6a848477d6d1af25c390d7713f335cf406931493ea22fcb42291427bd5cec"}, @enc_lim={0x4, 0x1, 0x7d}]}], @payload_direct={{{{0x23, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, 0x2, 0x4, 0x0, 0x2, 0x9, 0x1, 0x3, 0x5, 0x8, 0x2, 0x4e22, 0x4e22}, 0x2}}, [0x0, 0x0, 0x0]}}}}}}, 0x0) (async) syz_emit_ethernet(0x101, &(0x7f0000000340)={@random="33ee875d8537", @dev, @void, {@ipv6={0x86dd, @tipc_packet={0x8, 0x6, "9b2557", 0xcb, 0x6, 0xff, @local, @remote, {[@fragment={0x3a, 0x0, 0x5, 0x0, 0x0, 0x8, 0x67}, @dstopts={0x32, 0x0, '\x00', [@pad1, @ra]}, @fragment={0x21, 0x0, 0x6, 0x0, 0x0, 0xd, 0x65}, @hopopts={0x32, 0x7, '\x00', [@ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x20, {0x2, 0x6, 0x5d, 0x5, [0x1, 0x5, 0x3]}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, @dstopts={0x33, 0x6, '\x00', [@ra={0x5, 0x2, 0x5}, @ra, @generic={0xb1, 0x26, "84a8a29e4369e3a6a848477d6d1af25c390d7713f335cf406931493ea22fcb42291427bd5cec"}, @enc_lim={0x4, 0x1, 0x7d}]}], @payload_direct={{{{0x23, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, 0x2, 0x4, 0x0, 0x2, 0x9, 0x1, 0x3, 0x5, 0x8, 0x2, 0x4e22, 0x4e22}, 0x2}}, [0x0, 0x0, 0x0]}}}}}}, 0x0) syz_emit_ethernet(0x27a, &(0x7f0000000780)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x244, 0x3a, 0xff, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x4, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "010000000000"}, {}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d000000000000"}, {0x0, 0x9, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc27"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1, @local, 0x0, "6dbe4b58a4135b88e5e780d33f48be54675e135b5db4fd631bf695dcfbfd6736", 0x1, 0x4acc, 0x9, 0x5}, 0x3c) move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000a0d000/0x3000)=nil], &(0x7f0000000240), &(0x7f0000000340), 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000040)=0xf27, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000040)=0xf27, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000001640)=[@free_buffer], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000001640)=[@free_buffer], 0x0, 0x0, 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='oom_score_adj\x00') r5 = syz_clone(0x1000000, &(0x7f0000001f80), 0x0, 0x0, 0x0, 0x0) process_vm_readv(r5, &(0x7f0000002280)=[{&(0x7f0000002180)=""/62, 0x3e}], 0x1, &(0x7f0000002780)=[{&(0x7f00000022c0)=""/223, 0xdf}], 0x1, 0x0) getpriority(0x1, r5) write$6lowpan_enable(r4, &(0x7f0000000340)='1', 0x1) write$6lowpan_enable(r4, &(0x7f00000002c0)='1', 0x1) (async) write$6lowpan_enable(r4, &(0x7f00000002c0)='1', 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1m18.953422225s ago: executing program 4 (id=2600): r0 = syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) futex_waitv(&(0x7f0000002dc0)=[{0xe, 0x0, 0x2}, {0x2, 0x0, 0x2}, {0x6, 0x0, 0x82}, {0x4, 0x0, 0x2}, {0x200, 0x0}, {0x10, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x4, 0x0, 0x2}, {0x7fff, 0x0, 0x2}, {0x100000001, 0x0, 0x2}, {0x57e6, 0x0, 0x82}, {0x8000, 0x0, 0x2}, {0x5, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x7, 0x0, 0x82}, {0xfff, 0x0, 0x2}, {0x6, 0x0, 0x2}, {0x1, 0x0, 0x2}, {0x7, &(0x7f0000002140)=0x8, 0x2}, {0x80, &(0x7f0000002180), 0x2}, {0x9, &(0x7f00000021c0)=0xe, 0x2}, {0x3, &(0x7f0000002200)=0x7cd1de08, 0x82}, {0xb8, &(0x7f0000002240)=0x7, 0x2}, {0x9, &(0x7f0000002280)=0x9ff, 0x82}, {0x7fffffffffffffff, 0x0, 0x82}, {0xfffffffffffffffd, 0x0, 0x86}, {0x769, &(0x7f0000002380)=0xffffffffffffffff, 0x2}, {0x1, 0x0, 0x2}, {0xfffffffffffffff8, 0x0, 0x2}, {0x5, 0x0, 0x2}, {0xfffffffffffffff9, 0x0, 0x82}, {0x2, &(0x7f00000025c0)=0x4, 0x2}, {0x5, &(0x7f0000002600)=0x4, 0x2}, {0x6c558f26, &(0x7f0000002680)=0x10001, 0x2}, {0x7, &(0x7f0000002700)=0x4, 0x82}, {0xffffffffffffffff, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0x8, &(0x7f0000002840)=0xffff, 0x2}, {0x768d, 0x0, 0x2}, {0x265, 0x0, 0x2}, {0x7fffffff, &(0x7f0000002900)=0xa, 0x82}, {0x84, &(0x7f0000002940)=0xa60, 0x82}, {0x9, 0x0, 0xec5aba831a7e1e25}, {0x9, 0x0, 0x82}, {0x4, 0x0, 0x2}, {0xdef, &(0x7f0000002b00)=0x3, 0x80}, {0x6f, &(0x7f0000002b40)=0x5}, {0x100000001, &(0x7f0000002b80)=0x5, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x1, &(0x7f0000002c40)=0x200, 0x2}, {0x6, 0x0, 0x82}], 0x36, 0x0, &(0x7f0000003680), 0x0) (async, rerun: 64) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async, rerun: 64) sendto$inet6(r1, &(0x7f0000000040)="b784346428290ae05a0582f314335f4e63d5076ccc80f7d7e1702886a41dec11a9d0707f933a5a8a96d0f4b4bd348b1e10cb212ea7417af7ca68433fd5c426e1e21db47582bca1cb4a598274de74de6f1aeec363732ad39f7653972419465c92a9a24986a0de5f4def7c1974727fdaedc849be792b8a762ad546e54f8bcdd7c7aeadcf91b33d03401a2e5ca127514dd5fb80de5baeb5036e472725ba98ba4fc7a5a209d2634667", 0xa7, 0x4000, &(0x7f0000000100)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async, rerun: 32) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4004550d, 0x0) 1m18.952937919s ago: executing program 4 (id=2601): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fspick(r0, &(0x7f00000000c0)='./file1/file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x800, 0x0, 0x0, {0x0, 0x0, 0xc, 0x0, 0x6213}}, 0x20}}, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mknod(&(0x7f00000002c0)='./file1/file0/file0\x00', 0x200, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/250, 0xfa, 0x1, &(0x7f00000005c0)=""/235, 0xeb}, &(0x7f0000000280)=0x40) 1m18.874090997s ago: executing program 4 (id=2602): membarrier(0x40, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x9}, 0x94) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r3, 0x3, 0x0, @val=@perf_event={0x1}}, 0x18) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/2:0:0:0\x00', 0x60201, 0x0) ioctl$BSG_IO(r5, 0x2285, &(0x7f0000000280)={0x51, 0x0, 0x0, 0x0, 0x0, 0xffffffffa6bcb026, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x104}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000500)='vlan1\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000440)=ANY=[@ANYRESOCT=r6], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x3, 0xff, 0xdf, 0x0, '\x00', 0x0, 0x58}) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f00000000c0)={'trans=virtio,', {[{@msize={'msize', 0x3d, 0x3525}}]}}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r8, &(0x7f0000003480)={0x2020}, 0x2020) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000340)={@broadcast, @empty, @val={@void, {0x8100, 0x4, 0x0, 0x3}}, {@generic={0x8035, "ae888bdfe14540810a7e51f9eab998026f7e3353f9bba3327c823dc07ba4e503d80dc12c4851f35669486eeb70de2d90c9a70e2d0be3fd36920066dc9aedf68196b2c4b0a6cfb77b2ded20f398fd14e025f2a49e99dc70f191ca9021fc18b072a5b39c84"}}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000006600), 0x0, 0x0) 1m16.859303013s ago: executing program 51 (id=2556): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000000c0)={@qipcrtr={0x2a, 0xfffffffffffffffd, 0x4001}, {&(0x7f0000000000)=""/74, 0x4a}, &(0x7f0000000080)}, 0xa0) r1 = dup2(r0, r0) ppoll(&(0x7f0000000180)=[{r1, 0x4029}, {r0, 0x1082}, {r0, 0x4080}], 0x3, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000200)={[0x7bf]}, 0x8) io_setup(0x14, &(0x7f0000000240)=0x0) io_pgetevents(r2, 0x800, 0xa, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000003c0), 0x0) mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000004, 0x10, r1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000400)=0x9a13, 0x8) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000440)=0x4917, 0x4) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) sendmsg(r0, &(0x7f0000000c00)={&(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x1, 0x3, 0x3, {0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x2}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000500)="7e5475dccabf3a0c9c25637203a84f92e7e033a6721e5fc1e94d2af524d3cb2d2a683974fc9843867ec324c3bf7046f7a2db8b347961f4c96e65186fdbdaa4c1a956d1580289d4a56208d12b2d1c0c07abb71fedd9f93d05ce5e181cb81ee04bc9e15f6cf8c3580c30f2454476cbe9039fe4fec5da91a1bc93fba5d593f1022d81bcf52e42b84de18507798cf92b06328f3d667d2bb77fb53bf05d37b7759947726a11a709fd559845165d8ddc9e450953e55a07e668dec4e4757ad226b23a8485b88007f1435f181adb7d6d23f6ff5c1c", 0xd1}, {&(0x7f0000000600)="d2c3c83c700a0cf70499a4ce0ebe66a466d1b427ae319a87017c0367b3b36a4bbc7de2f7d5eab014eb972e3630730e711fcd20c4a1df41f78903a889f7c1bf0e6c9f5cf90a325a9449d0811ea39a1b2f233470aa88765b42b551155f54455153f3accadea33ce12ae34020a226161a6f0ea9b4687c2f6971c9202345e03b7a87a327493285a4df058741558d39737c181a7585f130f32991b49badea9c6f324bbb9b101eb90745076376f7464b261fe01ac3613d32e824", 0xb7}], 0x2, &(0x7f0000000700)=[{0x68, 0x84, 0xa5a, "0ddc415ab02cca3905c93028116a09c6816eb6e2e0e5f059a4c4e1881417215dcd9b780ccf6c20bf993d3d587d561c12229e68e0f3d268ce0f6bab4eb423532baec6c01e58fcdc552926af0300a7ccde6a0c56196c97"}, {0x30, 0xff, 0x8001, "96d92ee7dd46013eed018804e313f6aa94954133f86c77cd6f624e1dfb57123d"}, {0xd8, 0x118, 0x8, "77c23fcb26373ffd5678a40daf2e56e2e5d7d61fa98c0e63fdf60ca73287df7575be544bb236c501a8ce2e90d0bab9f2a19956184447de33e658e916e3aed7d43c6d6d19ee377a376f3e5ae94d657fc9d853d6e42ee4fe218fe1ddca0577a96d9a21d65b98410e8dcfa34a58ff37fe88e0caa21b493ac2996f88511f8429e84805684cb713fe0735f67082267f9f4e01acc2455d51681ceeb9075c66d398857bacb36be59a2bdefaec78fbf1a513a19562b0c79711c7b98cd4bc9ce024d9cdf2ad96635980e0a6"}, {0xa0, 0x113, 0x9, "d6a8e53362840d86cbb2e2607865a02d1342e52c691cb1e6fe7fb63aa8e4191bf9b4ff5eba2c887c2a9b697a093c07933e5218d4de2425d0cd393f8ab65503d53529e432f8eb66ab88122b0e2c31bd95994122db266e0639e8a72193c9b515a6e9cdc56a80578aa2880f251ad36342ea63596584e4a3d73e19b27e60b330f578d6889c3d23a724bfe69a9d9f"}, {0xd8, 0x111, 0x8001, "ccc208ae45984c94b03b456941f67709ff0cbc21205a43691b442abe7084f41f146757a7c67e758279e464d18984f866ea9914da1b4d399e1bf59018ed793aa7c04c64c94a8fccc6d3d24b005d8c1b2cd59c584b6d4a156624f7788405d5380cc812a9bc66337e1f78cf6822b008b7ce48b886724bc286837c304daa15ea9824a7287f7ed884340d4dd3dc226ac29a070210a154a289d8eb83c8c36a0909e1abd05549303b2795046f937b3f84e125cd9caba34ce0d0c19a145f8d12a639a0bb010cec4ba5"}, {0x30, 0x10f, 0xffff, "fc9dcc275ff7499e554592dae2a5a79edf2263c54a04c84b6574c16d"}, {0xc8, 0x119, 0x80000001, "a2afd37c20fe9d63f34acbf5825fb6f43c4eb6e63eacd4d274f58f8dbb0e0be8fcee7b2f429e45388fdc77db12fcdcc03389729da46a4d082a4b067e9abae3ef92d39b4cc0f437c1d3e7795ae4258c75ff2374170f081c858b52dc73b829ee9c2e6b8d0feb5cbe762e9c8f49f62adf083f40b3479e45c15ee797d2a5af39e66b2fe3672ae6ff28516e3726c04d6f49c8d982b6c603a4a0810dfc17045330e879336d070164af1202f4b6b5f638eb89b21ada8b2395de9d47"}, {0x28, 0x10f, 0x7, "5ce5e82017d2a04182f17e5c9843fa92f097b3bf"}, {0xf8, 0x29, 0x8, "590cac7d7a0ff58ad23646b1417af0fd9db300bf625fd043075a2ba0ccde421a643a53e59314333dc62a87849851dde19cd5a7bfe2cc86b08f0276fcb318f8f816187425ec77957bf407bf45a361f8d9ad666ed3b9e426555daab0da1dfd603625b86d1574e283ff878bff367412916b8ccff643717fdbd15e7387f33a0142319fd7fe23f4d5d5de8d399875c04cda2ae298ac8387f55bcb3350bdea8d5f452433feb1373cbe5929b58e5d511b31b2cbd0016cec224de9c165495274f9eb8a3e59f26f2f01ab64ede6d747a7d11a04bbc434cb941d9185af5a4023ff0b9e10802b9fdf605ca2a6b0"}], 0x500}, 0x5b1eaf6dcb0c4777) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000c40), 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000cc0), r1) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r3, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xf}]}, 0x1c}}, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ppoll(&(0x7f0000000e00)=[{r1}, {r0, 0x2344}, {r0, 0x1002}, {r1, 0x8000}, {r4, 0x4010}, {r1, 0x500}, {r0, 0x5c0}, {r0, 0x100}, {0xffffffffffffffff, 0x20}], 0x9, &(0x7f0000000e80), &(0x7f0000000ec0)={[0x1]}, 0x8) setxattr$incfs_id(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40), &(0x7f0000000f80)={'0000000000000000000000000000000', 0x31}, 0x20, 0x3) ioctl$SNDRV_PCM_IOCTL_XRUN(r4, 0x4148, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = open_tree(r4, &(0x7f0000000fc0)='./file0/file0\x00', 0x89800) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000001000)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000001040)={0x28, 0x2, r6, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x45}) socket$unix(0x1, 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000001080)='\x00', 0x2, 0x106) ioctl$int_in(r7, 0x5421, &(0x7f00000010c0)=0x22b0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000001100)=0x4, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001180)={0x1, &(0x7f0000001140)=[{0x9, 0x6, 0x8, 0xfffffffe}]}) fspick(0xffffffffffffff9c, &(0x7f00000011c0)='./file0/file0\x00', 0x1) clock_gettime(0x0, &(0x7f0000001200)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000012c0)=@multiplanar_overlay={0x2, 0x9, 0x4, 0x100040, 0x5bd7e66a, {r8, r9/1000+10000}, {0x3, 0xc, 0x2, 0x3, 0x2, 0x4, "4b2438f8"}, 0x8, 0x3, {&(0x7f0000001240)=[{0x7, 0x1d6, {0x401}}, {0x7c, 0x9, {0x3ff}, 0x9}]}, 0x4c, 0x0, r5}) 1m15.838829537s ago: executing program 52 (id=2565): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=@polexpire={0xcc, 0x1b, 0x111, 0x70bd2d, 0x25dfdbfc, {{{@in6=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e21, 0x0, 0x4e23, 0x3ff, 0x2, 0x60, 0x120, 0x73, 0x0, 0xffffffffffffffff}, {0x80000001, 0xfff, 0x6, 0x4, 0x10000000000, 0x7fffffff, 0x8, 0x7}, {0x1, 0x4c67, 0x9, 0x449f}, 0x9, 0x0, 0x2, 0x0, 0x1, 0x1}, 0x10}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x6}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4090}, 0x4004) sendfile(r0, r1, &(0x7f0000000100)=0x6, 0x100000000010001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) shutdown(r3, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x810000, &(0x7f0000000580)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x38, 0x65]}}]}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 1m12.464132973s ago: executing program 2 (id=2606): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={'\x00', 0xfffb, 0xc78b, 0x4, 0x9, 0x3}) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) chdir(0x0) open(&(0x7f00000002c0)='./file0\x00', 0x86343, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x80, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x50, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x1}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0xffffffff}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @broadcast}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0xf}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x2}, 0x94) 1m12.389466238s ago: executing program 2 (id=2607): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) futex(&(0x7f000000cffc)=0x1, 0x4, 0x1, 0x0, &(0x7f0000000200), 0x1) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe0000010000000014000f00"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m12.324422092s ago: executing program 2 (id=2608): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}], 0x1, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000872ab0a700000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000002c0)={r3, 0x1}, 0x8) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400b00, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'batadv0\x00', 0x10}) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x30880, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="1800000072006bcdb13fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) ioctl$PPPIOCCONNECT(r5, 0x4004743a, &(0x7f00000000c0)=0x4) 1m12.263980732s ago: executing program 2 (id=2609): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x402882, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) pread64(r0, &(0x7f0000000040)=""/100, 0x64, 0x8) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi5\x00', 0xa040, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000100)={'dt2817\x00', [0x2, 0xefe, 0x6, 0x9, 0xa7, 0x5, 0xdfc5, 0x7, 0x1, 0x4, 0x80000001, 0xffffff03, 0xb, 0x5, 0x7, 0x9, 0x2, 0x1, 0x7, 0x9, 0x7, 0x3, 0xfffffffd, 0x0, 0x3ff, 0x40, 0x3d1d, 0x0, 0x8, 0xcb, 0xfffffffa, 0x3]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket(0x1f, 0x1, 0x3) r4 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.log\x00', 0x2000, 0x120) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r4, 0xc0bc5310, &(0x7f0000000200)) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0xc0, 0x2, 0xa, 0x101, 0x0, 0x0, {0x19, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x2f, 0x6, "402c12622cc0785121cc73a0fedecc6f9be8dfe0438385fa6cb468d14d9b23e9d52d73a7c4839211df9f8f"}, @NFTA_TABLE_USERDATA={0x79, 0x6, "a31ba1b0207d4d433207435fc048f499e24595e36f521a0874e1b0ae591ee7b85a5d03765e56cca3e680c88ce93fc258f7419302d2faaf8c8c8b49852e00d7d3a8bdc56a009f53894689305da1fad42091029b4521688ac38b9cf831040f3344851d3b4938ee329693f39af27836ffff9edd062d8f"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x120}, 0x1, 0x0, 0x0, 0xc0080d0}, 0x20000000) getpid() r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000500)={r6, 0x1, 0x6, @local}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000c00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x164, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_USERDATA={0xf9, 0xc, "96dc41bb118b469a32275cd68441f3e2da2cb6a4fefb4998709647a22b7d38dbd9e77e5f02a54dca3e3f9746bde4ed4b9d23d891263ad86b6f5b819c1177e0e1d4765610802a9a498a603192e67fc90f59b9cc258be201ba6276adc131363ccc79c05feaf0a5cf5cc668f921bbc16adb9f0200c9810997e6632d1eaf386da6b64e4ed63997821cf08720465c7ba68dab40ddc273e4fe36715f820a92eaaa305ac455b8de07334bcdeafe977224b55b4ee4fa02ab2dbdbe7611b9eb9b9b07bad08f6d459488e99127d65fdfbdd9fb08e539d5e5e104817480c0f7602c77e36b79f19b7272c525ac882d54ae36ec2bb599c5ac7b3c50"}, @NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'geneve1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5708c33}, @NFTA_HOOK_DEV={0x14, 0x3, 'erspan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1d3ca039}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}}, @NFT_MSG_DELSET={0x30, 0xb, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_DELRULE={0x1dc, 0x8, 0xa, 0x304, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_USERDATA={0xf7, 0x7, 0x1, 0x0, "ffd27f714afe31009e257af191369d60f32ee564bd952bbae65b453864c2a593af7d24dd2508bbe05d8c81c51c7c7ed9c58693bfa765256704707fbe196d0b70298a758d6f2aaccb2b49d06a6ae477846567e9cb65c02f94bce3f7b3a2b5c1a74750422b8e38834d2c55c75489f09530290fd37064df82598aa4d2506a769dec5cbd279dd5ebb841973905beb51cd9c0d5178bd2c1ec97a54c72096ae38bb4e022406a7aea0ce65882858bb66251dcc168c3e0fa47df7f1c7758a609d00a2a4674e7eafc41bb7dfeaf770f8f75616b7be22bf789d34bc0f17e2b7281b6aa83fda8613426d348a1bb1b1470f74fb7d310f22e74"}, @NFTA_RULE_EXPRESSIONS={0x80, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x44, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x238, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_FLOWTABLE_HOOK={0x168, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2800000}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x60, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffc}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}]}]}], {0x14}}, 0x628}, 0x1, 0x0, 0x0, 0x10}, 0x8000) memfd_create(&(0x7f0000000c40)='/dev/kvm\x00', 0x3) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r7, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffff7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040801}, 0x4000) r8 = fsmount(r4, 0x1, 0x81) fcntl$addseals(r8, 0x409, 0x5d66e7fc3d7844e3) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0xb8, 0x14, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x29, 0x1, "bcd54ef70b060230a9c064dd7f7ecd19626e29be296f6397997dd32179d452e5bfb69d1d6d"}, @INET_DIAG_REQ_BYTECODE={0x77, 0x1, "e62f61eedb1fbc3d7b9d7e015e1d9b54ae3135e4436b71b500a2f7390b60baabb9021a53b3d3a442897f09d5f2c3550e32090d1420fde44694c72484689f912d1462b69654357646c36930eb62acf8e789d9457276ab9423cf505231e5f4126ef7727d43666e0a1c84611a68345eb118ee9376"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20048810}, 0x4080) readv(r5, &(0x7f0000001000)=[{&(0x7f0000000f40)=""/148, 0x94}], 0x1) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000001040), 0x121a00, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r9, 0x4068aea3, &(0x7f0000001080)={0xd5, 0x0, 0x40}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r8, 0x84, 0x74, &(0x7f0000001100)=""/134, &(0x7f00000011c0)=0x86) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f00000013c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001380)={&(0x7f0000001240)={0x124, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x802}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x680}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x57c94823}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_NAT_DST={0xa0, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2b}}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}, @CTA_LABELS={0x20, 0x16, 0x1, 0x0, [0x40, 0x735c, 0x8000, 0x5, 0xae5, 0x5, 0x1]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) r10 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001440)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001480)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000001400)="7f0b0c608747a3d809dfbc4489faaa7b3f4c6fcecc5541c0b52f3000f30e371ee89f96ae024784f5", 0x28, r10}, 0x68) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f00000015c0)={&(0x7f0000001500), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x24, r7, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x80) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x2000000, 0x80010, r2, 0xeed95000) 1m10.854299571s ago: executing program 2 (id=2610): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000000000000000000000000000000000003c0000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b8002944291189"], 0xfdef) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1, 0x0, 0xeeee0000, 0x1000, &(0x7f0000f9a000/0x1000)=nil}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}, 0x1c) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r7, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) 1m10.654043331s ago: executing program 2 (id=2611): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000000)={0x0, 0xe, 0x2017}) r2 = socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 32) r3 = syz_socket_connect_nvme_tcp() (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r4}, 0x10) (async, rerun: 64) setregid(0xffffffffffffffff, 0x0) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000100)="2eb6d36607080e3ece422ba4a9be9b3d0007e03dd6", 0x15}, {&(0x7f0000000140)="89fbb2ec", 0x4}], 0x2) (async) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f1, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc81100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x20, 0x3118a55668bf7371, 0x20, 0x25dfdbfd, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) (async, rerun: 32) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000040)=0xd, 0x4) (rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x3c, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x1, 0xfff2}, {0xd}, {0x1}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x50000000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48090}, 0x0) r9 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) 1m6.814145021s ago: executing program 53 (id=2583): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000400)="66baf80cb86c12b68def66bafc0cb800800000efb805000000b9000000000f01d966ba200066b8000066ef2e3e0f796c3c090f229d66b810008ec00fc7ae0030000066baf80cb81694f084ef66bafc0c66ed0f06ea08000000d100", 0x5b}], 0x1, 0x32, 0x0, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x70bd28, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad44b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000e00)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="7926b8687de4d9065df0", 0xa}, {&(0x7f0000000280)="b5f1dfc0fe810cc2efec734a256ce132e216a8c0bc31b66d7f705c826fe3", 0x1e}], 0x2, 0x0, 0x0, 0x840}], 0x1, 0x400480d1) recvmmsg(r5, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}], 0x1}}], 0x1, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, 0x0, &(0x7f0000000180)) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r8, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000020701010000000000000000010000070c000340000000000000cc96f5992d6afffffffffffffff8"], 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0xffe2) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x65) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@volatile}]}) ioprio_set$uid(0x3, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r9 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r9, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x6, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x402, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r9, r9, &(0x7f0000000080), 0x7f03) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x20) 1m5.284125267s ago: executing program 5 (id=2627): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9, 0xfc}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) r2 = syz_io_uring_setup(0x753b, &(0x7f0000000140)={0x0, 0xc8c7, 0x1, 0x0, 0xc2}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x110, &(0x7f0000000300)=0x1, 0x0, 0x4) (async) r5 = epoll_create1(0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000800)="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", 0x137}, {&(0x7f0000001c80)="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", 0x472}], 0x2}, 0x0) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x21, &(0x7f0000000540), 0x4) (async) sendmsg$inet(r7, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r9, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r5, &(0x7f0000000000)={0xa0000001}) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_ACCEPT={0xd, 0x22, 0x5, r8, &(0x7f00000003c0)=0x80, &(0x7f0000000400)=@ieee802154={0x24, @short}, 0x0, 0x80000, 0x1}) (async) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) (async) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, "0002002000", "07f217bd74511e465b5bf8de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1) 1m5.283214474s ago: executing program 5 (id=2628): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x8004000, 0x7, 0x8, 0x8000, 0x4, 0x0, 0x0, 0x10, 0x5}}, 0x50) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet(0x2, 0x800, 0x7ffffffc) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a4", 0xc1}, {&(0x7f00000002c0)="9c811ff5", 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337df9305959f", 0x6d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x133}], 0x1}}], 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b9"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x12) 1m5.193948s ago: executing program 5 (id=2629): syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="042f17aaaaaa"], 0x1a) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0xc4000) futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) 1m5.021963326s ago: executing program 5 (id=2630): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async, rerun: 64) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) (async, rerun: 32) socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x7fff, 0x8}) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0xc051) (async, rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x4) (rerun: 32) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x5005, 0x4000000002004003) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\b\x00\x00\x00B\x00\x00\x00@'], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000500)={&(0x7f0000000240), 0x0, 0x0, 0x0, 0x1, r4}, 0x38) sendmsg$nl_route_sched(r2, &(0x7f0000004040)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000000840)=@newtaction={0xe68, 0x30, 0x1, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{}, [{}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9ecc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xec}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {0x0, 0x7, 0x0, 0x8865}], [{}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) (async, rerun: 64) r5 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x1) (rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x5) fchdir(r6) (async, rerun: 64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'rose0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000016c0)=@delchain={0x1e0, 0x65, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff1, 0xa}, {0xfff2, 0x6}, {0xa, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x1}}, @TCA_RATE={0x6, 0x5, {0x6, 0x55}}, @filter_kind_options=@f_flow={{0x9}, {0x1a0, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x10000}, @TCA_FLOW_RSHIFT={0x8}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x1000}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff3, 0xfff2}}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x1}, @TCA_FLOW_EMATCHES={0x15c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0xe8, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x78, 0x3, 0xffff}, {0xe7, 0x5, 0x5, 0xcc4f}}}, @TCF_EM_CONTAINER={0x84, 0x1, 0x0, 0x0, {{0x9, 0x0, 0xfff8}, "d1cb64500403204ee4b894194766e4e94326ac4775c048f52583bd596dd03aa05d262d987369db94a96e8686e7460a7dc3c62358b91a5a8ab9de93c84bee8e11090719cedb15ee6dc5f4a774d5d48a2a8a6f4c9f83dfb38f8efc69f45df6836d760b7e20e320dcecee00543820e0cd9e969ae4429ac5"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x6, 0x1, 0x400}, {0x2, 0x9, 0x9, 0x4, 0x1, 0x1, 0x2}}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x1, 0x2, 0x400}, {0x4, 0x0, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x3, 0x1}, {0xe4, 0xc465, 0x7fff, 0x10}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_META={0x40, 0x3, 0x0, 0x0, {{0x9}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xcb, 0x2}, {0x0, 0x5a, 0x1}}}, @TCA_EM_META_RVALUE={0x27, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="75a9d00b", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x3c16dfbe, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="dee4b317b038c3"]}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8, 0x3, 0x7f}, {0x3, 0x2, 0xfffffffe, 0x5}}}]}]}, @TCA_FLOW_MASK={0x8, 0x6, 0x10000}, @TCA_FLOW_MASK={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x860e}]}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x40}, 0x4001) (async) getdents64(r7, &(0x7f0000000180)=""/169, 0xbb) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 1m4.964162309s ago: executing program 5 (id=2631): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x2c0400, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x10, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x8}}}}]}, 0x38}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) 1m4.963804584s ago: executing program 5 (id=2632): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa02}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="150000ffffffff00"/21], 0x15) r5 = dup(r4) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000000)=@filename='./file0\x00', 0xee01, &(0x7f0000000140)={0x7, 0xfffffffffffffffd, 0x0, 0x1}) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x0, 0xe}, 0x8) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x7}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c6bafa183566e90dba58dfaa1050c00000000000000cffd57ec575d"]) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa02}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) write$P9_RVERSION(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="150000ffffffff00"/21], 0x15) (async) dup(r4) (async) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000000)=@filename='./file0\x00', 0xee01, &(0x7f0000000140)={0x7, 0xfffffffffffffffd, 0x0, 0x1}) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) write$rfkill(r6, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x0, 0xe}, 0x8) (async) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x7}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c6bafa183566e90dba58dfaa1050c00000000000000cffd57ec575d"]) (async) 1m3.123046027s ago: executing program 54 (id=2602): membarrier(0x40, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x9}, 0x94) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r3, 0x3, 0x0, @val=@perf_event={0x1}}, 0x18) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/2:0:0:0\x00', 0x60201, 0x0) ioctl$BSG_IO(r5, 0x2285, &(0x7f0000000280)={0x51, 0x0, 0x0, 0x0, 0x0, 0xffffffffa6bcb026, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x104}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000500)='vlan1\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000440)=ANY=[@ANYRESOCT=r6], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x3, 0xff, 0xdf, 0x0, '\x00', 0x0, 0x58}) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f00000000c0)={'trans=virtio,', {[{@msize={'msize', 0x3d, 0x3525}}]}}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r8, &(0x7f0000003480)={0x2020}, 0x2020) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000340)={@broadcast, @empty, @val={@void, {0x8100, 0x4, 0x0, 0x3}}, {@generic={0x8035, "ae888bdfe14540810a7e51f9eab998026f7e3353f9bba3327c823dc07ba4e503d80dc12c4851f35669486eeb70de2d90c9a70e2d0be3fd36920066dc9aedf68196b2c4b0a6cfb77b2ded20f398fd14e025f2a49e99dc70f191ca9021fc18b072a5b39c84"}}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000006600), 0x0, 0x0) 59.70413309s ago: executing program 1 (id=2652): r0 = socket$inet(0x2, 0x1, 0x4) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@private=0xa010100, @private=0xa010100}, 0xc) listen(r0, 0x3) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaa91aaaaaaffffffffffff86dd604dd30800280600fe8000000000000000000000000000aafe80000000000000000000006755dfc8c89f5ee5", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0020002907800001312cfa38d35a6985f98e3c41160dadfca000000"], 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000200)={0x7, {{0x2, 0x4e22, @local}}}, 0x88) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x13, 0x0, 0x0}) read$FUSE(r2, &(0x7f0000000400)={0x2020}, 0x2020) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x4030, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendfile(r4, r4, &(0x7f0000000180)=0xfffffffffffffff9, 0xcc2f) pipe2(&(0x7f0000000100), 0x4080) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4f20, @multicast1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x28, 0xfd, 0x2, 0xffffffff}, {0x81}, {0x3, 0x0, 0x80}, {0x16, 0x3, 0xff}]}) 59.643738472s ago: executing program 1 (id=2653): socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000180)=""/147, 0xfdef) 59.638733183s ago: executing program 1 (id=2654): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) r2 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r2, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040), 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x89}], 0x1, 0x800, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(r4, 0x80503d01, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2193, 0xd000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) 59.556665027s ago: executing program 1 (id=2655): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/49, 0x31}], 0x1, 0x5, 0x3c) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)=0xcf) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$TIOCCONS(r1, 0x541d) 59.473123783s ago: executing program 1 (id=2656): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$nfs4(&(0x7f00000000c0)='autofs\x00', &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x1002840, &(0x7f0000000180)={[{'$-'}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 59.472500847s ago: executing program 1 (id=2657): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x0, 0x32, 0x0, 0x1}, 0x28) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x28080, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x108, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x54}}}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x82, 0xac, "93ac7b63ae01070081d76c112348394d685751f09eed22cbb058be9793e22c249277fec69664c002d21a3fea647ce4cf3204807a1c25fc0379ca722f6de560651da513cd27e02c5275b4940687e2d0e7323a5d0ac61208bc9f63e44fdf1947cbcf92a64faf8b2877d13cceae355b247ded799bd1139ed6e5706697736ee7"}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r2}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x9}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x31, 0xac, "e93a0c301f0ceb756691849944985f39f24bcc873fc1f81833618741db07d10b4b29e87a2ab8eeb5c0fb65ed00"}]}, 0x108}, 0x1, 0x0, 0x0, 0x408c0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000240)=ANY=[], 0x0) r3 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYBLOB="140000100001000000000000000000000a1400000000000000000000084700eb0000"], 0x28}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) r8 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r8, 0xc06864b8, &(0x7f0000000580)={0x0, 0x8c1, 0x80, 0x20203843, 0x3, [0x2], [0x810003], [0x5, 0x0, 0xffffffff, 0x46], [0x0, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001a80)={0x40, r7, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3ff, 0x3b}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x251b}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x10) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4, &(0x7f0000000600)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r10 = open(&(0x7f0000000140)='./bus\x00', 0x80, 0x12c) mknodat$loop(r10, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000001200)='./file1\x00') ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000140)=[0x9, 0x8]) 55.549639343s ago: executing program 55 (id=2611): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000000)={0x0, 0xe, 0x2017}) r2 = socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 32) r3 = syz_socket_connect_nvme_tcp() (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r4}, 0x10) (async, rerun: 64) setregid(0xffffffffffffffff, 0x0) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000100)="2eb6d36607080e3ece422ba4a9be9b3d0007e03dd6", 0x15}, {&(0x7f0000000140)="89fbb2ec", 0x4}], 0x2) (async) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f1, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc81100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x20, 0x3118a55668bf7371, 0x20, 0x25dfdbfd, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) (async, rerun: 32) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000040)=0xd, 0x4) (rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x3c, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x1, 0xfff2}, {0xd}, {0x1}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x50000000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48090}, 0x0) r9 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) 49.92284649s ago: executing program 56 (id=2632): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa02}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="150000ffffffff00"/21], 0x15) r5 = dup(r4) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000000)=@filename='./file0\x00', 0xee01, &(0x7f0000000140)={0x7, 0xfffffffffffffffd, 0x0, 0x1}) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x0, 0xe}, 0x8) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x7}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c6bafa183566e90dba58dfaa1050c00000000000000cffd57ec575d"]) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa02}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) write$P9_RVERSION(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="150000ffffffff00"/21], 0x15) (async) dup(r4) (async) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000000)=@filename='./file0\x00', 0xee01, &(0x7f0000000140)={0x7, 0xfffffffffffffffd, 0x0, 0x1}) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) write$rfkill(r6, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x0, 0xe}, 0x8) (async) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x7}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c6bafa183566e90dba58dfaa1050c00000000000000cffd57ec575d"]) (async) 44.209030967s ago: executing program 57 (id=2657): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x0, 0x32, 0x0, 0x1}, 0x28) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x28080, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x108, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x54}}}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x82, 0xac, "93ac7b63ae01070081d76c112348394d685751f09eed22cbb058be9793e22c249277fec69664c002d21a3fea647ce4cf3204807a1c25fc0379ca722f6de560651da513cd27e02c5275b4940687e2d0e7323a5d0ac61208bc9f63e44fdf1947cbcf92a64faf8b2877d13cceae355b247ded799bd1139ed6e5706697736ee7"}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r2}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x9}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x31, 0xac, "e93a0c301f0ceb756691849944985f39f24bcc873fc1f81833618741db07d10b4b29e87a2ab8eeb5c0fb65ed00"}]}, 0x108}, 0x1, 0x0, 0x0, 0x408c0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000240)=ANY=[], 0x0) r3 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYBLOB="140000100001000000000000000000000a1400000000000000000000084700eb0000"], 0x28}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) r8 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r8, 0xc06864b8, &(0x7f0000000580)={0x0, 0x8c1, 0x80, 0x20203843, 0x3, [0x2], [0x810003], [0x5, 0x0, 0xffffffff, 0x46], [0x0, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001a80)={0x40, r7, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3ff, 0x3b}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x251b}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x10) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4, &(0x7f0000000600)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r10 = open(&(0x7f0000000140)='./bus\x00', 0x80, 0x12c) mknodat$loop(r10, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000001200)='./file1\x00') ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000140)=[0x9, 0x8]) 34.875042408s ago: executing program 7 (id=2928): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000a000085000000ad0000009500000000000000b3cd91115eb8e652f2de1652464abeffe45ea5d02a47dd0af49d3cbdb819ac0afe07341685ca0461afbead16a3e9cb460665223ffb26b9fd6339402d71f59771e951e6ffa0e9c6c9a7352c6b"], &(0x7f0000000340)='GPL\x00', 0x3}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x42) fcntl$setlease(r0, 0x400, 0x0) move_mount(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', r0, &(0x7f0000000100)='./file1\x00', 0x100) r1 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) tkill(r1, 0x12) ptrace(0x4208, r1) ptrace(0x4207, r1) fremovexattr(r0, &(0x7f0000000040)=@random={'osx.', '$\x00'}) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) 34.801027402s ago: executing program 7 (id=2930): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@getstats={0x1c, 0x5e, 0x10, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) syz_usb_ep_read(r0, 0x1, 0x12, &(0x7f0000000080)=""/18) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)={0x40, 0x24, 0x5, {0x5, 0x0, 'rn5'}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x804}}, &(0x7f0000000200)={0x0, 0xf, 0x3a, {0x5, 0xf, 0x3a, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "bea72ddc628e4f9cdef4a1e8b1377fc4"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "e20a224d71a54f3b88c5b99397815fb4"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x5, 0x9}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd, 0x2, 0x8, 0x1, "19ee8aa8", "ea58471d"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x80, 0x8, 0x9, 0x2, 0x5, 0xfff0}}}, &(0x7f0000000780)={0x84, &(0x7f0000000380)={0x20, 0x15, 0x17, "bb7d144a7eba537f39a83e9c42022fea552f0316748145"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x80, 0x2, [0xf0]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x81}, &(0x7f0000000500)={0x40, 0x9, 0x1}, &(0x7f0000000540)={0x40, 0xb, 0x2, "5db7"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000005c0)={0x40, 0x13, 0x6}, &(0x7f0000000600)={0x40, 0x17, 0x6, @random="fe03857f10a3"}, &(0x7f0000000640)={0x40, 0x19, 0x2, "4d92"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x8}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x7f}}) r1 = socket(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f0000000000)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 31.690295028s ago: executing program 7 (id=2988): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000040)) r1 = socket(0x2b, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x8000000, 0x0, 0xff, 0x6, 0x4}, 0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x40) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="02000000010000000000000010000100000000002000"/36], 0x24, 0x3) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) recvmmsg(r5, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/47, 0x2f}], 0x1}, 0x3ff}], 0x1, 0x123, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2, 0xa000000}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52, 0x0, 0x1}, 0x28) shutdown(r5, 0x1) chmod(&(0x7f00000002c0)='./bus\x00', 0x87) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r6 = dup(r4) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x1}]}}]}, 0x3c}}, 0x4000010) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r9) sendmsg$IEEE802154_LLSEC_SETPARAMS(r9, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000ffdbdf2524f8000005002a00030000000a0001007770616e31"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@fowner_gt}]}}) 30.353919022s ago: executing program 7 (id=2996): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x210, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x220, 0x3, 0xc2, 0x9, 0x10, 0x3}, 0x3b, &(0x7f0000000180)={0x5, 0xf, 0x3b, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0xd, 0xfff7}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0xa61, 0xf000, 0xffff}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xa, 0x3, 0x5}, @wireless={0xb, 0x10, 0x1, 0x2, 0x9, 0x4, 0x2, 0x8001, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0xd}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x43, 0x2, 0xd2}]}, 0x4, [{0x33, &(0x7f00000001c0)=ANY=[@ANYBLOB="33039bfd6a6fa559660f3340bb94427bb25d82e55e12a9b059b88f143026452810e510530cc81df1349717b1b5795421612a5e"]}, {0xa, &(0x7f0000000200)=@string={0xa, 0x3, "1d37fcb32e5ecb89"}}, {0x55, &(0x7f0000000240)=@string={0x55, 0x3, "effca8c09fc138121d06fb82c34b738f06e27434f3b031631b20ec54be800c3a47570d9227b13da54dd747c17c327be30620ab1c3f671419cde9bbbd09112194d29685bdde1e4018b91f98ea7fdd99f3c8bc9d"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3009}}]}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, &(0x7f0000000680)={0xa22fc007, 0x0, "ee9a8000bc5e143f8437bb6bbe34fb7e7b692abe4bb49c3df484131ac9564da5", 0xffffff81, 0x9, 0xebc3, 0x5, 0x140}) close_range(r1, r5, 0x0) bind$netrom(r2, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) timer_create(0x7, &(0x7f0000000080)={0x0, 0x25, 0x2}, &(0x7f00000000c0)=0x0) timer_settime(r6, 0x0, &(0x7f0000000100), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 28.799963504s ago: executing program 7 (id=3022): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0x6dc8}]}}}]}, 0x40}}, 0x0) 28.538872914s ago: executing program 7 (id=3026): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400200, 0x10) openat(r0, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) mkdir(0x0, 0x0) lsm_set_self_attr(0x66, &(0x7f0000000080)={0x65, 0x403, 0x20}, 0x20, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 28.503047076s ago: executing program 58 (id=3026): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400200, 0x10) openat(r0, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) mkdir(0x0, 0x0) lsm_set_self_attr(0x66, &(0x7f0000000080)={0x65, 0x403, 0x20}, 0x20, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 16.594270428s ago: executing program 3 (id=3205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000800)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000940)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYBLOB="010029bd7000fddbdf250f000f00000800030000000000000000", @ANYBLOB="6a29664fa06276041216cf643e711267d9654ae11bbb9ea5faf101b5ae2aeac245a5131b10650a17ac276f186d0ca7d0649a47e13f5528687823cb53bee5cb032912c40ff21fcc90a891ce97bcbfc639214ca8960b8b612ff94ddf48e9be00a63dd963a9d3312aa3aca1e9406b6d8ca3dda48d8611cdf6a49a6ea98ceab60b4d7f97359896d9080d161b6bf3c747c99e42c4687a3995f6d0dea044df9a44d6085b47052da693baa3b2c9bd0500000000000000cdcd4274ab66152166a7a53b45b1a3d21509627813c4f2d72804376de618ca3f6e019980ae715d4ec2e4d545be15a55d0762b70715eaf5736f31a57ec89c172479aa8221f1d99c7dbc90f40472f920fa53c8f0b11438f4a85780143f3e7215c1ac927be4eb878d69739cfd6377b4119be1f8fad980b067b339", @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x40) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x4, 0x4, 0x0, [0x0, 0x18000000], [0x8200, 0x1], 0x1}}, 0x7}) r3 = syz_io_uring_setup(0x328, &(0x7f0000000680)={0x0, 0x6fa9, 0x800}, &(0x7f0000000080)=0x0, &(0x7f00000004c0)=0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000540)=@assoc_value={0x0, 0x1}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0xfffffffd, 0xb, 0x0, 0x100, 0x4}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x2, 0x10a5, 0x3, 0x0, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x18603, 0x0, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56061, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xa}, {0x8, 0xfff2}}}, 0x24}}, 0x4b880) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000180)={0x0, 0x20000, 0x800, 0x7f, 0x1}, 0x20) ioctl$sock_SIOCGIFCONF(r8, 0x8912, &(0x7f00000002c0)=@buf={0x9e, &(0x7f0000000400)="182eda3d47c85b6c61acf180551532cfeeffdbf20b924cc6001e999867c709082fbc717c684310c3a58a57f066f759b57343ee2cac81d23ddd773926db8e4466141be3d7194b03b4bcb876d16873ef03599c430b65db4afef93226f45eb9168793e05ba953f7e27e561aaa15d469d4d13280119a3ea1d4092b1124b2113485402ff25f88db1249ec8c18c16cfd06465ce9752cc535717ca0ff3b4fda99d9"}) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r8) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)=ANY=[@ANYRESHEX=r4, @ANYRES16=r10, @ANYBLOB="08002cbd7000fddbdf251b000000080001007063690011000200303030303a30303a31302e300000000008000b0006000000080001007063690011000200303030303a30303a31302e300000000008000b00060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00feffffff"], 0x84}, 0x1, 0x0, 0x0, 0xc000}, 0x20000800) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r8, 0xffffffff80000202, r11, &(0x7f0000000380)='./file0\x00') r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r12, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="180000001514"], 0x18}}, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000080)={0x5, 0x7, 0x4, 0x5, 0x7, {0x0, 0x2710}, {0x4, 0xc, 0xcf, 0xc, 0x37, 0x6, 'Eh9\"'}, 0x3, 0x4, {}, 0x8, 0x0, r6}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@fd={0x7, 0xa, 0x4, 0x0, 0xffffffff, {}, {0x1, 0x0, 0x5, 0x1, 0x8, 0x6, "5d9904cc"}, 0x80, 0x4, {}, 0x8, 0x0, r6}) 15.664951629s ago: executing program 3 (id=3215): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x600}, {r1, 0x9411}], 0x2, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) connect$unix(r4, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x7d) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000740)={'pimreg0\x00', 0x0}) (async) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000001ed602, 0x0) (async) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r9, 0x2000000000000153, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x0, r8, 0x0, 0xfe00}]) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r8, @ANYRES32=r7], 0x20}}, 0x40840) 15.129291759s ago: executing program 3 (id=3221): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000080)=@ethtool_ts_info}) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 15.129093286s ago: executing program 3 (id=3222): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x10041ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x18, 0x1, 0x1, "3a8e07ca5de21f0077ab7a4d8601acc620004b5c000000000000002100", 0x3231564e}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) umount2(&(0x7f0000000100)='./file0/file0\x00', 0x1) 15.068634728s ago: executing program 3 (id=3223): ioprio_set$uid(0x3, 0x0, 0x0) (async) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(r2, 0x80503d01, &(0x7f0000000100)) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) write$selinux_user(r1, &(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x27) (async) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x1, "92f3aec889aead4372495190f56f10fe4852f3e47eb566d7f3e56dd754345844", 0x1, 0x1}) (async) sync() 14.793277732s ago: executing program 3 (id=3224): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="c0d1c01073280616"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) close_range(r1, r1, 0x0) 14.755274646s ago: executing program 59 (id=3224): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="c0d1c01073280616"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) close_range(r1, r1, 0x0) 4.931923023s ago: executing program 9 (id=3322): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x10}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}}, 0x24}}, 0x24004000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0109220c"], 0x7) 4.930311811s ago: executing program 9 (id=3325): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) pipe2$watch_queue(&(0x7f00000003c0), 0x80) (async) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x1e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x66, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x35, 0x0, 0xd, 0x65]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0x2d}, 0x48, r1) keyctl$KEYCTL_MOVE(0x1e, r5, r1, r2, 0x0) (async) keyctl$KEYCTL_MOVE(0x1e, r5, r1, r2, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x40) (async) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x40) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="80fd02000040", 0x6}], 0x1, 0xfffffffd, 0xc87) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40, 0x23) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x4100, 0x0) (async) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x4100, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6, {0x8}}, './file0\x00'}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000002300)={0x2020}, 0x2020) (async) read$FUSE(r6, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000001200)={0x50, 0x0, r8, {0x7, 0x27, 0x0, 0x500000, 0x3}}, 0x50) (async) write$FUSE_INIT(r6, &(0x7f0000001200)={0x50, 0x0, r8, {0x7, 0x27, 0x0, 0x500000, 0x3}}, 0x50) llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r6, &(0x7f0000006380)="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", 0x2000, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x18, 0x0, 0x9, {0xf}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.004376337s ago: executing program 9 (id=3343): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400048000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r0, 0x1) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2204880, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x100, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) (async) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f00000000c0)={r1}, 0x1) 3.946541722s ago: executing program 9 (id=3345): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a40), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c22d000051428ecd5dd2fd642b4012833408a8eb8557fda02c8ad4faba8bbaa8bf8371767a9d3df7530e", @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf25010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x20000800) r2 = socket$inet_smc(0x2b, 0x1, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000743ab0008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001d2c0000000b0a911f1e1c000000000000070000000900010073797a30000000000c0010"], 0xb0}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0x64, 0x4, 0x368, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'veth0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x100000001) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)=@x86={0xb6, 0x4, 0xfd, 0x0, 0x8, 0xc, 0xa, 0x47, 0x4, 0x5, 0x5, 0x40, 0x0, 0x4, 0x1, 0x9, 0x6, 0x0, 0x9, '\x00', 0xb, 0x74f}) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0xf4e) writev(r6, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x15d142, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r10, 0xffffffffffffffff}) close_range(r7, r8, 0x0) ioctl$SYNC_IOC_FILE_INFO(r11, 0xc0383e04, &(0x7f0000000280)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r12 = syz_open_procfs(0x0, &(0x7f00000003c0)='fd\x00') getdents64(r12, 0x0, 0x0) close(r2) 3.8864924s ago: executing program 8 (id=3346): syz_emit_ethernet(0x2a, &(0x7f00000019c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x80, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x220040, 0x0) write$sndseq(r0, &(0x7f0000000100)=[{0x9, 0x3b, 0x7, 0x9, @tick=0x5, {0x1, 0x8b}, {0x9}, @raw8={"c2ebca87a5fa93953e8ef923"}}], 0x1c) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x80042, 0x4, 0x2}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_UDP_DST={0x6}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) close(r1) 3.786291552s ago: executing program 8 (id=3347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendfile(r0, r0, 0x0, 0x20ffa1) 3.71577631s ago: executing program 8 (id=3348): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be", 0x1}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x38}, 0x0) read$char_usb(r1, &(0x7f0000000180)=""/147, 0xfdef) 2.971921888s ago: executing program 9 (id=3359): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x154, 0x30, 0x871a15abc695fb3d, 0x2, 0x0, {}, [{0x140, 0x1, [@m_tunnel_key={0x13c, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x1, 0xfffffffd}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0xd5, 0x6, "db46c5bc06f9d098935bc8db781e62861396065cce52bb5632a068c1f4080411ff7667fd020000ad13a6babe00f50e0c2cf8a74fd7a0058ea5435750f32308e3adcb5e12078fe4a0406ff3d33433ddc92e7b5a050aa91345ed557ec546b747fef024b45cc9c25d41e728102c40665b571c99202c7990c767c656bbc5e38630a8f531599f41848d583d1d2308320232f9c6514cf7eba58a67a367118bc395fc0200019a226e89a62579563da2903f77c24a963a4a341e79ae4c170da6c9699799af3ae2108bfbb9018814f4c18cd119e528"}, {0xc}, {0xc}}}]}]}, 0x154}}, 0x0) 2.971190565s ago: executing program 9 (id=3360): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x4}, 0x94) r1 = socket(0x8, 0x80000, 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES8=r2, @ANYRESDEC=r4, @ANYRES8=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001000031425bd70000000000000000000", @ANYRES32=r4, @ANYBLOB="00050000000000000a000100aaaaaaaaaaaa0000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r10, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r10, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r10, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0xffffff5c}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r7}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000040b7030000000000008500000006000000870000000000000095", @ANYRESOCT=0x0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES32=r0, @ANYRESHEX=r0], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0xcb, &(0x7f0000000140)=""/203}, 0x94) r11 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r11, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.894044449s ago: executing program 8 (id=3361): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x600}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x44, r2, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x44}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) socket$netlink(0x10, 0x3, 0x0) 2.82856893s ago: executing program 8 (id=3362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f00000000c0)='./bus\x00') (async) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r2, 0x4, 0x2c00) (async) write$FUSE_STATFS(r2, &(0x7f0000000200)={0x60, 0x0, 0x0, {{0x9, 0x5, 0x5, 0x2, 0x400069a, 0xae, 0x2400000, 0x800}}}, 0xfffffec2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x20000000, 0x0, 0x5}, 0x2}) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000532d224286d44c6fac699221f1a9d1ac90ea685a62c4d57af6993c54f128d11a470f1c9ee459e6750fb0ed8141b5cd8c02b4b0d7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000000)=""/32, 0x20, 0x0, &(0x7f0000000040)=""/125, 0x7d}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r6, 0x1, 0x0, 0x1, {0x25}}, 0x14}}, 0x4040004) (async) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r3, 0x0, 0x25, 0x19, @val=@target_btf_id=r4}, 0x14) 2.745320663s ago: executing program 8 (id=3365): r0 = epoll_create1(0x0) r1 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000280)={0x0, 0x23, 0x9, {0x9, 0x21, "d62d6eae636df3"}}, 0x0}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b02, 0x0) r3 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207f0455c000000000000109022d0001000060020904000407030003000921000007012205000905810300040c0206090503"], 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="000e57"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.679034768s ago: executing program 6 (id=3366): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendfile(r0, r0, 0x0, 0x20fffb) 2.649886543s ago: executing program 6 (id=3367): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001340)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x1, {0xa, 0x0, 0x10}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020642500000000002020207b1af8ff00000000bfa1010000000100070100e200ffffffb782000008000000b703000834120000850000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x2a, 0x2, 0x0) accept4$inet6(r1, 0x0, 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xb, 0x7, 0xd, 0x8, 0x1}, &(0x7f0000000080)=0x14) 2.614603256s ago: executing program 6 (id=3368): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x5c, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x40c89}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x32}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0xe3}}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) sendmmsg$inet6(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="aa35a0a2f6b0adcc7022ee2a88893e95e2cbb9f32fae0758239cf365e7d5f4ed88bc346266552b95644302e5643d94ec967f62a33a3fdc992ce210fd04b4601973ced8ef7d8b5425a12c86efce8aa496bf018689b489f19ee83b42e5f8fd7a1cefd5eef617210f1c0e34128c81b37ab303321455b4a06f8a5d1b05c0947435bbe1229d410fe61f2fdcc3496c29009c377e1e0c7c891411b9c03a8aa6dec9dfd2a535baf10a11ea50c0d8bcf4b8b6b3a31d1fc130c81f992fb5ffcf34661badc0844da42cdbce7d5418df10a388ae0c31090a7bcc720ae8aaf8243e21e59e5d8bb92cf90303c3b519c5ba8f0fca9f", 0xee}, {&(0x7f0000000340)="ea68739891fc7405d2a847bc93e82300b207bc50f459e3d113fb6ddf0b97bb3ca83bef248f00bdb0b5729da8e4728d2c6fa7a39481e02f97ea4de56f6089f378afa234f0729d17fbfd44ad8a26c8427d00580091bae0c8977863fc536b6394b1b5147065a2db3f9f4ebdd55760ab573df2584d831db68a958348cc3092ec207b5c0b235552be8f798ea8e3c268e0285c8ae37a5de33dc9dd8e71e2d08c7ae95ed31cbfc6f88baba5c260be04a1", 0xad}, {&(0x7f0000000000)="29822bbf9559d9c74e6215e8062d9d60ae429b31b87b039531e17deb9cdd106fac6f96d1dc14d72b97dd891cd6a431062a8b31ce468ec24439588acc94b89ef63b07074ec303352ae3481b85d69127abea7cf54286c2e827b669160ddcbd183d8ebd51feaee888c6a22bc3896bb2df1c2a404bed61193c", 0x77}, {&(0x7f0000000400)="8c2acb336ff9daafd61837426ce2dbfe93167899f5e46c90cec501ec371881214da12af3f22c02acc29cbba88bb0681586dd8f60e89b9a74ff5ad6fdd4ae5c488fde2e590eca52570b20126e4b618d78465f95f58e23f6e588fb8a76d92788e82fa1258075dcb0be717980e723d27c740c21565577a8be2d1eb9397d69acee8c769630a5eeb736c39a4a1b1e2dd72cb12f49a938aab2feb236b4b133421509345a1263231d724ea459bc40d58a37a8bd62316650e042", 0xb6}, {&(0x7f00000002c0)="37416671f3305872fd52928654a46b9a17ee756b858ea5818a68cc37bc02b7911b607d", 0x23}, {&(0x7f00000004c0)="8926e464a9375d66db87072cd783c0e3aa22ccc080db38febe857198dd9e8896d792df372b372dc1561c1a6ab5321b1fcf3e3b36fc3d7974a721e000e23a9020fce33174045221de7094917b1bb1f1a791ebec8ddca1dc95764453992fad5e58b0d219c6b2619aa257c4f4b3b9cfe7aac9279a75ea96b605417b9a20cf1f01d42b212bd12321fdcb9a7a09dcba0ec4746d58902b18f8247ee4afe41797e2201629fe32e999d37700bfbfd8990115e20febdfe1fa", 0xb4}], 0x6, &(0x7f0000000600)=[@rthdr={{0x18, 0x29, 0x39, {0x87, 0x0, 0x0, 0x6}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x3c, 0xc, 0x0, 0xf0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private0]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x16, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @jumbo={0xc2, 0x4, 0x6}, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xd}}], 0x100}}, {{&(0x7f0000000700)={0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd}, 0x1c, &(0x7f0000000740), 0x0, &(0x7f0000000800)=[@tclass={{0x14, 0x29, 0x43, 0xfffffff7}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @rthdr={{0x28, 0x29, 0x39, {0x84, 0x2, 0x0, 0x7, 0x0, [@empty]}}}, @dstopts={{0x30, 0x29, 0x37, {0x29, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x2}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x6, 0x0, '\x00', [@ra={0x5, 0x2, 0x4}]}}}, @dstopts_2292={{0xe0, 0x29, 0x4, {0x5c, 0x18, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x1, 0x8e, "8e9a5f7bf513d28fe5c20f83841e45fbd140816a8ca3484b359c078d93d2346deb001995d66db0712a9ec90e3b088fa9fad7c63aab71bc4bf5db609e8583246c829347c0ca446251ae8d778a6d74614f38efeb7a949ea1cb8cecacd62089376a9844b79885deb7338cdba959a366f3271d0bad4db2d07148df1696535c1fcc421375e2285ab84f4e472cddd65130"}, @calipso={0x7, 0x28, {0x2, 0x8, 0x3, 0x64ed, [0x8001, 0x1, 0x2, 0x6]}}, @pad1]}}}, @rthdr={{0x58, 0x29, 0x39, {0x89, 0x8, 0x0, 0x2, 0x0, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @private1]}}}], 0x220}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a40)="aa8b281cfc716903d391e2f708aedc400ce7cbdb722af00b5f581788bc5b95171cd2f7e39ab69d17e8e6ff222bdb96a7047a21d0af9c5f25fbda7115941b9a3a01a1fb07b6cd40f56cd7c4b0f4cd4ea5555a3b51393ff8d1bf95eb7672e60aca739176160632c2a781ef06fc9c237ad808d7bf061ea3a26699e034e7d4031177beb8f58a1f966ff300382a571d509a9ac0c71e6cbca41efb0ac0cd4548d3a86f4c0649e8a58b54d1bcd78e48ca4c63227dac24ac19dc5af0a9f3c983a6391d652546a1f2cea48cbbf53a72e8d341dd0df7c84cb6d59583eb642e", 0xda}], 0x1, &(0x7f0000000b80)=[@rthdr_2292={{0x58, 0x29, 0x39, {0x2c, 0x8, 0x1, 0x8, 0x0, [@private2, @local, @mcast2, @private2]}}}, @tclass={{0x14, 0x29, 0x43, 0x7f}}], 0x70}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000c00)="d6ab809068ae66ffe383e0d40d6da091a136f50e799e5d534c5486bab23d803fd90e6038bf995a427a5595c1e609d13e908a8bbd354582730f8148c508d603bd17a1f2912f440825dc42267046294f73bcc572f9b8afcbf9c9350f89667892364d68ee9ace89a2c1e8616a21b65260a65ac2f454fc18b368a461eb3944ecf3be4a0cea66e87bf7adaea405979480f34464bb41e2aa872b0f783e3f6ad5099491c6742c399b368751bc40e2e3b4fd3bd7bf31b1334ec8ef2dc4268d7e29815820944084a3f51079fb7612823ae74d987d1f3b22af6c0f76c9ea259e", 0xdb}, {&(0x7f0000000d00)="94c5def602a569ef7e645ec56995d5727b6b7675ffc919a64dbf44ad98527b514ad5e1139ee7c8637f8c987232df8d1c32c78d5fbc77c46d4c9191d9b3f46c63d0493863ddf52f6002584d626cac96912f5963ff21dec31ee2e0219344b61af3daabe81bb3a7baa7ae8647a06340ceb7b243c9fe6dce045a3413843459ae2da2bf67908fbc56936f4ce2e1b03531b5420f393bc789be496be9c8bcc3d280b6d2ed9aa8fbbefc0bca58a8d57b269b2e113b9913a5473ca02873c96d43907c0a7b8bbeb7f63158e9dd49d29068453b07", 0xcf}, {&(0x7f0000000e00)="999d3333573ed9edea9d74cab7b80fb29677263c52e438e32efc51e49c7a1cf3e05c5ff1609a2e740636dfc882bbf508c925850a54f7634885c1b3e7105333b6438a1aaebe454a6e0d518eec3c0f90e090bc16f198be3308b47f208026bd2e58cca95f55bd5de76af0c6ac32c5", 0x6d}, {&(0x7f0000000e80)="0a273578916e8b2f1c63fd5b2e7af27804b1eff62263497038e87a9111f5a18fe62987ca1bf7", 0x26}], 0x4, &(0x7f0000000f00)=[@dontfrag={{0x14, 0x29, 0x3e, 0xd}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x11, 0x2, 0x1, 0x7, 0x0, [@mcast2]}}}, @rthdr={{0x38, 0x29, 0x39, {0x32, 0x4, 0x2, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1]}}}, @rthdr={{0x78, 0x29, 0x39, {0x33, 0xc, 0x1, 0x10, 0x0, [@mcast1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r3}}}, @rthdr={{0x28, 0x29, 0x39, {0x4, 0x2, 0x0, 0x5, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}]}}}], 0x158}}], 0x4, 0x4040000) (async) sendmmsg$inet6(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="aa35a0a2f6b0adcc7022ee2a88893e95e2cbb9f32fae0758239cf365e7d5f4ed88bc346266552b95644302e5643d94ec967f62a33a3fdc992ce210fd04b4601973ced8ef7d8b5425a12c86efce8aa496bf018689b489f19ee83b42e5f8fd7a1cefd5eef617210f1c0e34128c81b37ab303321455b4a06f8a5d1b05c0947435bbe1229d410fe61f2fdcc3496c29009c377e1e0c7c891411b9c03a8aa6dec9dfd2a535baf10a11ea50c0d8bcf4b8b6b3a31d1fc130c81f992fb5ffcf34661badc0844da42cdbce7d5418df10a388ae0c31090a7bcc720ae8aaf8243e21e59e5d8bb92cf90303c3b519c5ba8f0fca9f", 0xee}, {&(0x7f0000000340)="ea68739891fc7405d2a847bc93e82300b207bc50f459e3d113fb6ddf0b97bb3ca83bef248f00bdb0b5729da8e4728d2c6fa7a39481e02f97ea4de56f6089f378afa234f0729d17fbfd44ad8a26c8427d00580091bae0c8977863fc536b6394b1b5147065a2db3f9f4ebdd55760ab573df2584d831db68a958348cc3092ec207b5c0b235552be8f798ea8e3c268e0285c8ae37a5de33dc9dd8e71e2d08c7ae95ed31cbfc6f88baba5c260be04a1", 0xad}, {&(0x7f0000000000)="29822bbf9559d9c74e6215e8062d9d60ae429b31b87b039531e17deb9cdd106fac6f96d1dc14d72b97dd891cd6a431062a8b31ce468ec24439588acc94b89ef63b07074ec303352ae3481b85d69127abea7cf54286c2e827b669160ddcbd183d8ebd51feaee888c6a22bc3896bb2df1c2a404bed61193c", 0x77}, {&(0x7f0000000400)="8c2acb336ff9daafd61837426ce2dbfe93167899f5e46c90cec501ec371881214da12af3f22c02acc29cbba88bb0681586dd8f60e89b9a74ff5ad6fdd4ae5c488fde2e590eca52570b20126e4b618d78465f95f58e23f6e588fb8a76d92788e82fa1258075dcb0be717980e723d27c740c21565577a8be2d1eb9397d69acee8c769630a5eeb736c39a4a1b1e2dd72cb12f49a938aab2feb236b4b133421509345a1263231d724ea459bc40d58a37a8bd62316650e042", 0xb6}, {&(0x7f00000002c0)="37416671f3305872fd52928654a46b9a17ee756b858ea5818a68cc37bc02b7911b607d", 0x23}, {&(0x7f00000004c0)="8926e464a9375d66db87072cd783c0e3aa22ccc080db38febe857198dd9e8896d792df372b372dc1561c1a6ab5321b1fcf3e3b36fc3d7974a721e000e23a9020fce33174045221de7094917b1bb1f1a791ebec8ddca1dc95764453992fad5e58b0d219c6b2619aa257c4f4b3b9cfe7aac9279a75ea96b605417b9a20cf1f01d42b212bd12321fdcb9a7a09dcba0ec4746d58902b18f8247ee4afe41797e2201629fe32e999d37700bfbfd8990115e20febdfe1fa", 0xb4}], 0x6, &(0x7f0000000600)=[@rthdr={{0x18, 0x29, 0x39, {0x87, 0x0, 0x0, 0x6}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x3c, 0xc, 0x0, 0xf0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private0]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x16, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @jumbo={0xc2, 0x4, 0x6}, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xd}}], 0x100}}, {{&(0x7f0000000700)={0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd}, 0x1c, &(0x7f0000000740), 0x0, &(0x7f0000000800)=[@tclass={{0x14, 0x29, 0x43, 0xfffffff7}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @rthdr={{0x28, 0x29, 0x39, {0x84, 0x2, 0x0, 0x7, 0x0, [@empty]}}}, @dstopts={{0x30, 0x29, 0x37, {0x29, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x2}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x6, 0x0, '\x00', [@ra={0x5, 0x2, 0x4}]}}}, @dstopts_2292={{0xe0, 0x29, 0x4, {0x5c, 0x18, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x1, 0x8e, "8e9a5f7bf513d28fe5c20f83841e45fbd140816a8ca3484b359c078d93d2346deb001995d66db0712a9ec90e3b088fa9fad7c63aab71bc4bf5db609e8583246c829347c0ca446251ae8d778a6d74614f38efeb7a949ea1cb8cecacd62089376a9844b79885deb7338cdba959a366f3271d0bad4db2d07148df1696535c1fcc421375e2285ab84f4e472cddd65130"}, @calipso={0x7, 0x28, {0x2, 0x8, 0x3, 0x64ed, [0x8001, 0x1, 0x2, 0x6]}}, @pad1]}}}, @rthdr={{0x58, 0x29, 0x39, {0x89, 0x8, 0x0, 0x2, 0x0, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @private1]}}}], 0x220}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a40)="aa8b281cfc716903d391e2f708aedc400ce7cbdb722af00b5f581788bc5b95171cd2f7e39ab69d17e8e6ff222bdb96a7047a21d0af9c5f25fbda7115941b9a3a01a1fb07b6cd40f56cd7c4b0f4cd4ea5555a3b51393ff8d1bf95eb7672e60aca739176160632c2a781ef06fc9c237ad808d7bf061ea3a26699e034e7d4031177beb8f58a1f966ff300382a571d509a9ac0c71e6cbca41efb0ac0cd4548d3a86f4c0649e8a58b54d1bcd78e48ca4c63227dac24ac19dc5af0a9f3c983a6391d652546a1f2cea48cbbf53a72e8d341dd0df7c84cb6d59583eb642e", 0xda}], 0x1, &(0x7f0000000b80)=[@rthdr_2292={{0x58, 0x29, 0x39, {0x2c, 0x8, 0x1, 0x8, 0x0, [@private2, @local, @mcast2, @private2]}}}, @tclass={{0x14, 0x29, 0x43, 0x7f}}], 0x70}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000c00)="d6ab809068ae66ffe383e0d40d6da091a136f50e799e5d534c5486bab23d803fd90e6038bf995a427a5595c1e609d13e908a8bbd354582730f8148c508d603bd17a1f2912f440825dc42267046294f73bcc572f9b8afcbf9c9350f89667892364d68ee9ace89a2c1e8616a21b65260a65ac2f454fc18b368a461eb3944ecf3be4a0cea66e87bf7adaea405979480f34464bb41e2aa872b0f783e3f6ad5099491c6742c399b368751bc40e2e3b4fd3bd7bf31b1334ec8ef2dc4268d7e29815820944084a3f51079fb7612823ae74d987d1f3b22af6c0f76c9ea259e", 0xdb}, {&(0x7f0000000d00)="94c5def602a569ef7e645ec56995d5727b6b7675ffc919a64dbf44ad98527b514ad5e1139ee7c8637f8c987232df8d1c32c78d5fbc77c46d4c9191d9b3f46c63d0493863ddf52f6002584d626cac96912f5963ff21dec31ee2e0219344b61af3daabe81bb3a7baa7ae8647a06340ceb7b243c9fe6dce045a3413843459ae2da2bf67908fbc56936f4ce2e1b03531b5420f393bc789be496be9c8bcc3d280b6d2ed9aa8fbbefc0bca58a8d57b269b2e113b9913a5473ca02873c96d43907c0a7b8bbeb7f63158e9dd49d29068453b07", 0xcf}, {&(0x7f0000000e00)="999d3333573ed9edea9d74cab7b80fb29677263c52e438e32efc51e49c7a1cf3e05c5ff1609a2e740636dfc882bbf508c925850a54f7634885c1b3e7105333b6438a1aaebe454a6e0d518eec3c0f90e090bc16f198be3308b47f208026bd2e58cca95f55bd5de76af0c6ac32c5", 0x6d}, {&(0x7f0000000e80)="0a273578916e8b2f1c63fd5b2e7af27804b1eff62263497038e87a9111f5a18fe62987ca1bf7", 0x26}], 0x4, &(0x7f0000000f00)=[@dontfrag={{0x14, 0x29, 0x3e, 0xd}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x11, 0x2, 0x1, 0x7, 0x0, [@mcast2]}}}, @rthdr={{0x38, 0x29, 0x39, {0x32, 0x4, 0x2, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1]}}}, @rthdr={{0x78, 0x29, 0x39, {0x33, 0xc, 0x1, 0x10, 0x0, [@mcast1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r3}}}, @rthdr={{0x28, 0x29, 0x39, {0x4, 0x2, 0x0, 0x5, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}]}}}], 0x158}}], 0x4, 0x4040000) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.09837774s ago: executing program 6 (id=3370): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1, 0x1, 0x0, "d2ea61bf62041dae026e9e8203614554307c83d774dfc0fb62602f9a84c3bbe4", 0x32315559}) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000003c0)={0x3, @pix_mp={0x8, 0x8, 0x32315559, 0x0, 0x3, [{0x6, 0x9}, {0xb9, 0x567}, {0x0, 0xfffffffc}, {0x3, 0x9}, {0xdd35, 0x5}, {0x3, 0x4}, {0xed7, 0x3}, {0x9, 0x1}], 0x95, 0x0, 0x3, 0x2, 0x4}}) (async) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="14200000", @ANYRES16=0x0, @ANYBLOB="05a3fdffffff000000000d000000"], 0x14}, 0x1, 0x0, 0x0, 0x24004804}, 0x20000000) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000004c0)={[0x0, 0x20000000, 0x3, 0xc7, 0x0, 0x2, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a5, 0x2000000000003ff, 0x2], 0xdddd1000, 0x200306}) ioctl$KVM_RUN(r6, 0xae80, 0x0) close(r3) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) listen(r7, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2986dd60fba50900180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60020002907800001e0435c1"], 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000600)={0x33}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x9}, 0x1c) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) (async) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000200)={0x0, 0x3f00, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000100000024000300a05ca84f0cb00845174f08076f8d784308000100000000000000000000000000000000005979c9072778d71fb8c2d5b120598a7e7c5a5e78c50bd8fec921e3c45f3f62a92c801f09a2e31ebbf56574e4d50e11f9edbad634c1f34ffdbf68c85188", @ANYRES32=r11, @ANYBLOB], 0x40}}, 0x0) (async) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000bc0)={0x324, r12, 0xa8b299ffa9ee371d, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r11}, @WGDEVICE_A_PEERS={0x308, 0x8, 0x0, 0x1, [{0x304, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x9, @empty, 0x9}}, @WGPEER_A_ALLOWEDIPS={0x110, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ALLOWEDIPS={0x170, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x9}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}}, {0x5, 0x3, 0x2}}]}]}]}]}]}, 0x324}}, 0x40800) (async) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00) 1.931810716s ago: executing program 6 (id=3371): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x140001, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x48980, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x20000000009) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x1b) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xf34) recvfrom$inet6(r1, &(0x7f00000004c0)=""/209, 0xd1, 0x100, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x4000200, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r6, &(0x7f0000004100)={0x2020}, 0x2020) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xd) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x140001, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) sendto$inet6(r1, 0x0, 0x0, 0x20004041, 0x0, 0x0) (async) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x48980, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) (async) fcntl$dupfd(r3, 0x0, r3) (async) ioctl$TCFLSH(r4, 0x400455c8, 0x20000000009) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x1b) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xf34) (async) recvfrom$inet6(r1, &(0x7f00000004c0)=""/209, 0xd1, 0x100, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) syz_clone(0x4000200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') (async) read$FUSE(r6, &(0x7f0000004100)={0x2020}, 0x2020) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xd) (async) 1.016440623s ago: executing program 0 (id=3376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendfile(r0, r0, 0x0, 0x400000) 980.265752ms ago: executing program 0 (id=3377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r3, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) (async) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="7140ccb10342667e000002"], 0x1c}}, 0x0) (async) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18) (async) renameat2(r5, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) (async) unlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) (async) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x4c, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010106}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x4c}}, 0x40) 936.872146ms ago: executing program 0 (id=3378): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async, rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x470bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x64e10, 0x36a01}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x4882) (async) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x6, 0x0) (async, rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)={0x4c, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004415}, 0x20000000) (async) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x24008041) (async, rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (rerun: 64) 898.339558ms ago: executing program 0 (id=3379): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="c00000001300e999000000000080000020090000000000000000000000000002ac1e00010000000000000000000000000004000a006000bd5ebd5fad3fdb742c29529221f56746c158f987603d69fa2e0d1335000008000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000100030000000008001f0001000000"], 0xc0}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x21, 0x3, 0x580, 0x4b0, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x4b0, 0xffffffff, 0xffffffff, 0x4b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0x220, 0x248, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'sit0\x00', {0x0, 0x6, 0x0, 0x0, 0x0, 0x101, 0x5}}}, @inet=@rpfilter={{0x28}, {0xbc}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv0\x00', 'veth1\x00'}, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private1, [], @ipv4=@remote}, {@ipv6=@dev, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@ipv4=@multicast2, [], @ipv6=@loopback}, {@ipv6=@remote, [], @ipv4=@local}]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) 864.579853ms ago: executing program 0 (id=3380): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be", 0x1}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x38}, 0x0) read$char_usb(r1, &(0x7f0000000180)=""/147, 0xfdef) 139.00555ms ago: executing program 6 (id=3381): r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) (async) ioctl$VIDIOC_REQBUFS(r1, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) (async) shmctl$IPC_RMID(r0, 0x0) 0s ago: executing program 0 (id=3382): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a010c005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99080805", @ANYRES16], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x181) rmdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x29) r2 = open_tree(r1, &(0x7f0000000280)='\x00', 0x89901) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f1993536996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) recvmmsg(r3, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{0x0}, {&(0x7f0000000b00)=""/243, 0xf3}], 0x2}, 0x4}], 0x1, 0x0, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000140)=""/212, 0xd4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fremovexattr(r7, &(0x7f0000000100)=@known='security.selinux\x00') link(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='./file0\x00') write$tun(r5, &(0x7f0000000240)=ANY=[], 0xfdef) kernel console output (not intermixed with test programs): 8][ T6701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.830680][ T6701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.854909][ T6704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.857419][ T6704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.898323][T14489] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2644'. [ 405.014894][ T5959] Bluetooth: hci2: command tx timeout [ 405.126839][T14497] sch_tbf: burst 0 is lower than device geneve0 mtu (1464) ! [ 405.140374][T14497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5138 sclass=netlink_route_socket pid=14497 comm=syz.6.2660 [ 405.279626][T14504] netlink: 'syz.6.2662': attribute type 1 has an invalid length. [ 405.397438][T14507] openvswitch: netlink: Flow actions attr not present in new flow. [ 405.494930][ T5959] Bluetooth: hci1: command tx timeout [ 405.499465][ T40] audit: type=1400 audit(2000000327.679:804): avc: denied { accept } for pid=14508 comm="syz.6.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 405.583358][T14516] overlay: filesystem on ./bus is read-only [ 405.637905][T14518] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 407.734992][ T5959] Bluetooth: hci2: command tx timeout [ 408.439312][ T5947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 408.444894][ T5947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 408.447932][ T5947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 408.452006][ T5947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 408.452180][T14536] syzkaller1: entered promiscuous mode [ 408.454486][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 408.456752][T14536] syzkaller1: entered allmulticast mode [ 408.490191][T14533] lo speed is unknown, defaulting to 1000 [ 408.625973][ T73] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.702089][ T73] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.711464][T14533] chnl_net:caif_netlink_parms(): no params data found [ 408.799983][ T73] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.818091][T14533] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.820564][T14533] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.823253][T14533] bridge_slave_0: entered allmulticast mode [ 408.826332][T14533] bridge_slave_0: entered promiscuous mode [ 408.829567][T14533] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.831841][T14533] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.834162][T14533] bridge_slave_1: entered allmulticast mode [ 408.838085][T14533] bridge_slave_1: entered promiscuous mode [ 408.875049][T14533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.881820][T14533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.911586][ T73] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.112512][T14533] team0: Port device team_slave_0 added [ 409.123051][T14533] team0: Port device team_slave_1 added [ 409.259797][T14533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.263588][T14533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.273974][T14533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.280404][T14533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.282564][T14533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.290971][T14533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.338859][T14533] hsr_slave_0: entered promiscuous mode [ 409.341147][T14533] hsr_slave_1: entered promiscuous mode [ 409.343314][T14533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.346340][T14533] Cannot create hsr debugfs directory [ 409.407229][ T73] bridge_slave_1: left allmulticast mode [ 409.409054][ T73] bridge_slave_1: left promiscuous mode [ 409.411192][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.415271][ T73] bridge_slave_0: left allmulticast mode [ 409.417156][ T73] bridge_slave_0: left promiscuous mode [ 409.419533][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.739316][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.743745][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.748087][ T73] bond0 (unregistering): Released all slaves [ 409.952363][ T5947] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 409.971833][T14564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25996 sclass=netlink_route_socket pid=14564 comm=syz.6.2682 [ 410.158152][ T73] hsr_slave_0: left promiscuous mode [ 410.160288][ T73] hsr_slave_1: left promiscuous mode [ 410.162271][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.164542][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.170110][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.172390][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.198810][ T73] veth1_macvtap: left promiscuous mode [ 410.200795][ T73] veth0_macvtap: left promiscuous mode [ 410.203182][ T73] veth1_vlan: left promiscuous mode [ 410.205553][ T73] veth0_vlan: left promiscuous mode [ 410.244454][T14567] Bluetooth: MGMT ver 1.23 [ 410.292502][ T40] audit: type=1326 audit(2000000332.469:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14568 comm="syz.6.2684" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1f038e929 code=0x0 [ 410.545795][ T5947] Bluetooth: hci0: command tx timeout [ 410.966515][ T73] team0 (unregistering): Port device team_slave_1 removed [ 411.050459][ T73] team0 (unregistering): Port device team_slave_0 removed [ 411.210172][T14575] tmpfs: Bad value for 'mpol' [ 411.989249][T14533] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 411.993417][T14533] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 411.997432][T14533] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 412.001324][T14533] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 412.062044][T14533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.071755][T14533] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.081857][ T6701] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.084713][ T6701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.088479][ T6701] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.091739][ T6701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.200899][T14533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.314562][T14602] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2690'. [ 412.327959][T14533] veth0_vlan: entered promiscuous mode [ 412.337061][T14533] veth1_vlan: entered promiscuous mode [ 412.361709][T14533] veth0_macvtap: entered promiscuous mode [ 412.365554][T14533] veth1_macvtap: entered promiscuous mode [ 412.373646][T14533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.380139][T14533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.384561][T14533] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.388505][T14533] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.391170][T14533] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.391224][ T40] audit: type=1400 audit(2000000334.569:806): avc: denied { mounton } for pid=14607 comm="syz.6.2692" path="/34/file0" dev="tmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 412.401073][T14533] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.445263][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.448229][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.460750][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.463138][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.501211][T14611] openvswitch: netlink: IP tunnel dst address not specified [ 412.615341][ T5947] Bluetooth: hci0: command tx timeout [ 412.658030][T14617] netlink: 'syz.7.2694': attribute type 1 has an invalid length. [ 412.661592][T14617] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.2694'. [ 412.665591][T14617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=14617 comm=syz.7.2694 [ 413.414200][T14635] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2699'. [ 413.419694][T14636] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2699'. [ 413.493023][T14641] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 413.560475][T14645] binder: 14644:14645 ioctl c0306201 2000000003c0 returned -14 [ 413.567370][T14645] netlink: 'syz.6.2703': attribute type 2 has an invalid length. [ 413.570603][T14645] netlink: 1184 bytes leftover after parsing attributes in process `syz.6.2703'. [ 413.617623][T14647] loop2: detected capacity change from 0 to 7 [ 413.621840][T14647] loop2: p1 [ 413.622955][T14647] loop2: partition table partially beyond EOD, truncated [ 413.625330][T14647] loop2: p1 size 3506438144 extends beyond EOD, truncated [ 413.629015][T14650] xt_cgroup: invalid path, errno=-2 [ 413.630771][T14650] xt_cgroup: invalid path, errno=-2 [ 413.632461][T14650] xt_cgroup: invalid path, errno=-2 [ 413.634155][T14650] xt_cgroup: invalid path, errno=-2 [ 413.635952][T14650] xt_cgroup: invalid path, errno=-2 [ 413.637665][T14650] xt_cgroup: invalid path, errno=-2 [ 413.639377][T14650] xt_cgroup: invalid path, errno=-2 [ 413.641074][T14650] xt_cgroup: invalid path, errno=-2 [ 413.643275][T14650] xt_cgroup: invalid path, errno=-2 [ 413.645145][T14650] xt_cgroup: invalid path, errno=-2 [ 413.678681][T14654] 9pnet_fd: Insufficient options for proto=fd [ 413.689351][T14652] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2706'. [ 413.692165][T14652] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2706'. [ 413.749756][T14671] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 413.774022][ T40] audit: type=1400 audit(2000000335.949:807): avc: denied { execute } for pid=14672 comm="syz.6.2712" path="/dev/dsp" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 413.786345][ T40] audit: type=1400 audit(2000000335.959:808): avc: denied { execute } for pid=14672 comm="syz.6.2712" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=66374 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 414.085873][ T5959] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 414.089023][ T5959] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 414.093503][ T5959] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 414.098424][ T5959] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 414.101181][ T5959] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 414.126128][T14692] lo speed is unknown, defaulting to 1000 [ 414.302458][T14692] chnl_net:caif_netlink_parms(): no params data found [ 414.397443][T14692] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.401911][T14692] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.406130][T14692] bridge_slave_0: entered allmulticast mode [ 414.410039][T14692] bridge_slave_0: entered promiscuous mode [ 414.413397][T14692] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.415971][T14692] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.418279][T14692] bridge_slave_1: entered allmulticast mode [ 414.421472][T14692] bridge_slave_1: entered promiscuous mode [ 414.456408][T14692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.461145][T14692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.500643][T14692] team0: Port device team_slave_0 added [ 414.505029][T14692] team0: Port device team_slave_1 added [ 414.536754][T14692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.538995][T14692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.547406][T14692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.551931][T14692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.554080][T14692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.562176][T14692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.601387][T14692] hsr_slave_0: entered promiscuous mode [ 414.603706][T14692] hsr_slave_1: entered promiscuous mode [ 414.606608][T14692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 414.608970][T14692] Cannot create hsr debugfs directory [ 414.704799][ T5959] Bluetooth: hci0: command tx timeout [ 414.725100][ T40] audit: type=1400 audit(2000000336.909:809): avc: denied { map } for pid=14700 comm="syz.6.2718" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 414.733380][ T40] audit: type=1400 audit(2000000336.909:810): avc: denied { execute } for pid=14700 comm="syz.6.2718" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 414.920238][T14713] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2722'. [ 414.979536][T14692] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 414.984261][T14692] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 414.988306][T14692] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 414.992290][T14692] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 415.044415][T14692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.055037][T14692] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.061494][ T6701] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.064132][ T6701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.069773][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.072032][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.202498][T14692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.292435][ T40] audit: type=1400 audit(2000000337.469:811): avc: denied { map } for pid=14738 comm="syz.7.2726" path="socket:[66433]" dev="sockfs" ino=66433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 415.308030][ T40] audit: type=1400 audit(2000000337.469:812): avc: denied { accept } for pid=14738 comm="syz.7.2726" path="socket:[66433]" dev="sockfs" ino=66433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 415.357713][T14692] veth0_vlan: entered promiscuous mode [ 415.362468][T14692] veth1_vlan: entered promiscuous mode [ 415.373858][T14692] veth0_macvtap: entered promiscuous mode [ 415.384084][T14692] veth1_macvtap: entered promiscuous mode [ 415.394275][T14692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.394615][T14745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1312 sclass=netlink_route_socket pid=14745 comm=syz.7.2727 [ 415.400132][T14692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.401271][T14745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1313 sclass=netlink_route_socket pid=14745 comm=syz.7.2727 [ 415.407548][T14692] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.410285][T14692] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.412989][T14692] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.415998][T14692] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.466031][ T6701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.468483][ T6701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.484155][ T6701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.487224][ T6701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.534667][T14758] netlink: 212376 bytes leftover after parsing attributes in process `syz.9.2716'. [ 415.789249][T14776] 9p: Unknown uid 00000000004294967295 [ 415.790162][ T40] audit: type=1400 audit(2000000337.969:813): avc: denied { write } for pid=14774 comm="syz.7.2735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 415.810508][ T40] audit: type=1400 audit(2000000337.969:814): avc: denied { read } for pid=14774 comm="syz.7.2735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 415.881967][T14784] tipc: Started in network mode [ 415.883565][T14784] tipc: Node identity e0000002, cluster identity 4711 [ 415.886091][T14784] tipc: Enabling of bearer rejected, failed to enable media [ 415.975913][T14798] SELinux: policydb magic number 0x184a does not match expected magic number 0xf97cff8c [ 415.978985][T14798] SELinux: failed to load policy [ 415.999838][ T40] audit: type=1400 audit(2000000338.179:815): avc: denied { mount } for pid=14799 comm="syz.9.2743" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 416.138188][ T5959] Bluetooth: hci3: command tx timeout [ 416.204489][ T40] audit: type=1400 audit(2000000338.379:816): avc: denied { module_load } for pid=14808 comm="syz.6.2746" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=68736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 416.222128][T14809] Invalid ELF header magic: != ELF [ 416.228184][ T40] audit: type=1400 audit(2000000338.409:817): avc: denied { read write } for pid=14692 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 416.236892][ T40] audit: type=1400 audit(2000000338.409:818): avc: denied { open } for pid=14692 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 416.253807][ T40] audit: type=1400 audit(2000000338.409:819): avc: denied { ioctl } for pid=14692 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 416.268840][ T40] audit: type=1326 audit(2000000338.449:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14812 comm="syz.6.2748" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc1f038e929 code=0x0 [ 416.310755][ T40] audit: type=1400 audit(2000000338.489:821): avc: denied { setattr } for pid=14821 comm="syz.7.2751" path="socket:[70763]" dev="sockfs" ino=70763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 416.349533][T14826] overlay: Bad value for 'workdir' [ 416.475010][T14841] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2759'. [ 416.553924][T14854] openvswitch: netlink: Key type 179 is out of range max 32 [ 416.774957][ T5959] Bluetooth: hci0: command tx timeout [ 416.832379][T14872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=14872 comm=syz.6.2770 [ 416.869689][T14874] openvswitch: netlink: Tunnel attr 14 has unexpected len 2 expected 0 [ 416.884730][ T838] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 417.034827][ T838] usb 12-1: Using ep0 maxpacket: 16 [ 417.040510][ T838] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.043902][ T838] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.047486][ T838] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 417.051481][ T838] usb 12-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 417.054308][ T838] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.058121][ T838] usb 12-1: config 0 descriptor?? [ 417.466350][ T838] HID 045e:07da: Invalid code 65791 type 1 [ 417.470744][ T838] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/0003:045E:07DA.001C/input/input37 [ 417.477755][ T838] microsoft 0003:045E:07DA.001C: input,hidraw2: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 417.504612][T14888] __nla_validate_parse: 3 callbacks suppressed [ 417.506656][T14888] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2778'. [ 417.538444][T14890] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2779'. [ 417.887495][T14901] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2782'. [ 418.214848][ T5959] Bluetooth: hci3: command tx timeout [ 418.566909][T14917] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2788'. [ 418.570483][T14917] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2788'. [ 418.750043][T14924] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 419.127338][T14943] vxfs: WRONG superblock magic 00000000 at 1 [ 419.130114][T14943] vxfs: WRONG superblock magic 00000000 at 8 [ 419.132258][T14943] vxfs: can't find superblock. [ 419.608377][ T53] usb 12-1: USB disconnect, device number 2 [ 419.634228][T14961] hfs: can't find a HFS filesystem on dev sr0 [ 419.747480][ T5947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 419.750954][ T5947] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 419.753962][ T5947] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 419.761018][ T5947] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 419.764502][ T5947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 419.786141][T14969] lo speed is unknown, defaulting to 1000 [ 419.835664][T14981] fuse: Bad value for 'fd' [ 419.932716][ T7265] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.951280][T14992] netlink: 'syz.7.2815': attribute type 10 has an invalid length. [ 419.961420][T14992] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.964275][T14992] bridge_slave_1: left allmulticast mode [ 419.966521][T14992] bridge_slave_1: left promiscuous mode [ 419.968425][T14992] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.974966][T14992] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 419.983599][T14994] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2816'. [ 420.028181][T14998] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2817'. [ 420.029555][ T7265] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.042899][T14998] 0ªî{X¹¦: renamed from macvtap0 (while UP) [ 420.046865][T14998] 0ªî{X¹¦: entered allmulticast mode [ 420.048654][T14998] veth0_macvtap: entered allmulticast mode [ 420.051050][T14998] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 420.101513][T14969] chnl_net:caif_netlink_parms(): no params data found [ 420.151971][ T7265] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.206926][T14969] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.209415][T14969] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.212131][T14969] bridge_slave_0: entered allmulticast mode [ 420.214870][T14969] bridge_slave_0: entered promiscuous mode [ 420.217999][T14969] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.220422][T14969] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.223394][T14969] bridge_slave_1: entered allmulticast mode [ 420.227636][T14969] bridge_slave_1: entered promiscuous mode [ 420.266704][ T7265] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.297934][T14969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.302569][T14969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.305180][ T5947] Bluetooth: hci3: command tx timeout [ 420.339325][T14969] team0: Port device team_slave_0 added [ 420.343637][T14969] team0: Port device team_slave_1 added [ 420.373618][T14969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.376157][T14969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.384452][T14969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.388801][T14969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.391266][T14969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.399643][T14969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.463437][T14969] hsr_slave_0: entered promiscuous mode [ 420.468552][T14969] hsr_slave_1: entered promiscuous mode [ 420.470746][T14969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.473138][T14969] Cannot create hsr debugfs directory [ 420.495702][T15025] : entered promiscuous mode [ 420.553225][ T7265] bridge_slave_1: left allmulticast mode [ 420.555217][ T7265] bridge_slave_1: left promiscuous mode [ 420.557360][ T7265] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.568504][ T7265] bridge_slave_0: left allmulticast mode [ 420.570892][ T7265] bridge_slave_0: left promiscuous mode [ 420.573355][ T7265] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.731276][T15040] overlayfs: failed to resolve './file3': -2 [ 420.850303][ T7265] team0: Port device bond0 removed [ 420.854177][ T7265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.858847][ T7265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.862654][ T7265] bond0 (unregistering): Released all slaves [ 420.875709][T15034] ipvlan1: mtu less than device minimum [ 420.877520][T15031] sp0: Synchronizing with TNC [ 421.025439][T15062] IPVS: length: 211 != 8 [ 421.025453][ T40] kauditd_printk_skb: 49 callbacks suppressed [ 421.025464][ T40] audit: type=1400 audit(2000000375.207:871): avc: denied { getopt } for pid=15061 comm="syz.6.2836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 421.150739][T15073] program syz.7.2834 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 421.156385][T15073] ata1.00: invalid service action 31 [ 421.793440][ T5947] Bluetooth: hci1: command tx timeout [ 421.860712][T15081] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 421.865296][T15081] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 421.866570][T15079] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2840'. [ 421.868343][T15081] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 421.874079][T15079] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2840'. [ 421.876982][T15081] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 421.913716][ T40] audit: type=1400 audit(2000000376.125:872): avc: denied { search } for pid=15084 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 421.928523][ T40] audit: type=1400 audit(2000000376.125:873): avc: denied { read } for pid=15084 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 421.994588][ T7265] hsr_slave_0: left promiscuous mode [ 421.998386][ T7265] hsr_slave_1: left promiscuous mode [ 422.001180][ T7265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.004424][ T7265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.007780][ T7265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.010977][ T7265] batman_adv: batadv0: Removing interface: batadv_slave_1 syzkaller syzkaller login: [ 422.042351][ T7265] veth1_macvtap: left promiscuous mode [ 422.044210][ T7265] veth0_macvtap: left promiscuous mode [ 422.047439][ T7265] veth1_vlan: left promiscuous mode [ 422.049224][ T7265] veth0_vlan: left promiscuous mode [ 422.143079][ T6599] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 422.292313][ T6599] usb 12-1: Using ep0 maxpacket: 16 [ 422.295363][ T6599] usb 12-1: config index 0 descriptor too short (expected 8192, got 61) [ 422.298862][ T6599] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.302186][ T6599] usb 12-1: config 0 has no interfaces? [ 422.304244][ T6599] usb 12-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 422.307184][ T6599] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.311736][ T6599] usb 12-1: config 0 descriptor?? [ 422.559425][T15098] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2840'. [ 422.564837][T15098] netlink: 'syz.7.2840': attribute type 5 has an invalid length. [ 422.802537][ T7265] team0 (unregistering): Port device team_slave_1 removed [ 422.890630][ T7265] team0 (unregistering): Port device team_slave_0 removed [ 423.498067][T15098] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.501317][T15098] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.504144][T15098] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.506838][T15098] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.510538][T15098] vxlan0: entered promiscuous mode [ 423.517190][T15102] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 423.520790][T15102] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2845'. [ 423.523890][T15102] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 423.583187][T15110] netlink: 'syz.6.2848': attribute type 10 has an invalid length. [ 423.595003][T15110] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 423.717606][T14969] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 423.733563][T14969] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 423.744725][T14969] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 423.750904][T14969] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 423.755599][ T40] audit: type=1400 audit(2000000378.018:874): avc: denied { relabelfrom } for pid=15120 comm="syz.6.2851" name="RAWv6" dev="sockfs" ino=72466 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 423.756974][T15121] SELinux: Context system_u:object_r:inetd_log_t:s0 is not valid (left unmapped). [ 423.769173][ T40] audit: type=1400 audit(2000000378.039:875): avc: denied { relabelto } for pid=15120 comm="syz.6.2851" name="RAWv6" dev="sockfs" ino=72466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=rawip_socket permissive=1 trawcon="system_u:object_r:inetd_log_t:s0" [ 423.773554][T15121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50192 sclass=netlink_route_socket pid=15121 comm=syz.6.2851 [ 423.806131][ T5947] Bluetooth: hci1: command tx timeout [ 423.819423][T14969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.828527][T14969] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.833846][ T7273] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.836094][ T7273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.858352][ T6704] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.860590][ T6704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.923094][T15132] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 423.927032][T15132] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 424.002184][T14969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.027294][T14969] veth0_vlan: entered promiscuous mode [ 424.034044][T14969] veth1_vlan: entered promiscuous mode [ 424.052880][T14969] veth0_macvtap: entered promiscuous mode [ 424.056472][T14969] veth1_macvtap: entered promiscuous mode [ 424.067383][T14969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.075536][T14969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.080060][T14969] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.082748][T14969] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.085403][T14969] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.089813][T14969] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.228918][ T7273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.231327][ T7273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.240891][T15145] netlink: 'syz.6.2855': attribute type 9 has an invalid length. [ 424.243316][T15145] netlink: 212012 bytes leftover after parsing attributes in process `syz.6.2855'. [ 424.246504][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.246516][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.536302][ T6012] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 424.577913][T15149] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2856'. [ 424.711700][ T6012] usb 8-1: Using ep0 maxpacket: 8 [ 424.716371][ T6012] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 424.718940][ T6012] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 424.722392][ T6012] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 424.726556][ T6012] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 424.729949][ T6012] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 424.734148][ T6012] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 424.737003][ T6012] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.745967][T15156] xt_SECMARK: invalid mode: 0 [ 424.784061][ T6599] usb 12-1: string descriptor 0 read error: -71 [ 424.788053][ T6599] usb 12-1: USB disconnect, device number 3 [ 424.841177][T15168] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2863'. [ 424.844007][T15168] netlink: 43 bytes leftover after parsing attributes in process `syz.9.2863'. [ 424.846734][T15168] netlink: 'syz.9.2863': attribute type 5 has an invalid length. [ 424.849242][T15168] netlink: 43 bytes leftover after parsing attributes in process `syz.9.2863'. [ 424.904010][T15173] can0: slcan on ttyS3. [ 424.938372][ T6012] usb 8-1: usb_control_msg returned -32 [ 424.940251][ T6012] usbtmc 8-1:16.0: can't read capabilities [ 424.962128][T15179] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2866'. [ 424.975375][T15173] can0 (unregistered): slcan off ttyS3. [ 425.081106][ T6003] IPVS: starting estimator thread 0... [ 425.089066][ T40] audit: type=1400 audit(2000000379.393:876): avc: denied { create } for pid=15193 comm="syz.6.2870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 425.099835][ T40] audit: type=1400 audit(2000000379.403:877): avc: denied { ioctl } for pid=15193 comm="syz.6.2870" path="socket:[71591]" dev="sockfs" ino=71591 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 425.107793][ T40] audit: type=1400 audit(2000000379.403:878): avc: denied { ioctl } for pid=15187 comm="syz.9.2869" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 425.129101][ T40] audit: type=1400 audit(2000000379.424:879): avc: denied { connect } for pid=15198 comm="syz.7.2872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 425.129762][T15199] [U] [ 425.136213][T15199] [U] [ 425.137104][T15199] [U] [ 425.137938][T15201] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2873'. [ 425.137983][T15199] [U] [ 425.142513][T15199] [U] [ 425.143454][T15199] [U] [ 425.144340][T15199] [U] [ 425.145221][T15199] [U] [ 425.146037][T15201] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2873'. [ 425.146361][T15199] [U] [ 425.149797][T15199] [U] [ 425.150700][T15199] [U] [ 425.151602][T15199] [U] [ 425.154195][T15199] [U] [ 425.155128][T15199] [U] [ 425.156012][T15199] [U] [ 425.156950][T15199] [U] [ 425.166173][T15198] [U] [ 425.170859][T15195] IPVS: using max 43 ests per chain, 103200 per kthread [ 425.411356][ T40] audit: type=1400 audit(2000000379.721:880): avc: denied { accept } for pid=15219 comm="syz.6.2881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 425.484210][ T9] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 425.614872][T15241] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 425.619713][T15241] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.623829][T15241] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.638950][ T9] usb 12-1: Using ep0 maxpacket: 16 [ 425.641935][ T9] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 425.645945][ T9] usb 12-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 425.649316][ T9] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.653043][ T9] usb 12-1: config 0 descriptor?? [ 425.657855][ T9] input: bcm5974 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/input/input38 [ 425.828168][T15244] lo speed is unknown, defaulting to 1000 [ 425.844095][ T5947] Bluetooth: hci1: command tx timeout [ 425.907256][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 425.907266][ T40] audit: type=1400 audit(2000000380.233:887): avc: denied { map } for pid=15208 comm="syz.7.2877" path="/dev/vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 425.973837][ T5344] bcm5974 12-1:0.0: could not read from device [ 425.978417][ T9] bcm5974 12-1:0.0: could not read from device [ 425.987556][ T5344] bcm5974 12-1:0.0: could not read from device [ 425.990420][ T9] input: failed to attach handler mousedev to device input38, error: -5 [ 425.994475][ T9] usb 12-1: USB disconnect, device number 4 [ 426.195956][ T6003] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 426.343916][ T6003] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.347449][ T6003] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.350620][ T6003] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 426.355196][ T6003] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 426.358184][ T6003] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.361865][ T6003] usb 14-1: config 0 descriptor?? [ 426.650881][T15265] lo speed is unknown, defaulting to 1000 [ 426.753264][ T59] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 426.767970][ T6003] plantronics 0003:047F:FFFF.001D: hiddev2,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 426.926471][ T59] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 426.930214][ T59] usb 11-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 426.935006][ T59] usb 11-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 426.955666][ T59] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 426.958467][ T59] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.961015][ T59] usb 11-1: Product: syz [ 426.962382][ T59] usb 11-1: Manufacturer: syz [ 426.963853][ T59] usb 11-1: SerialNumber: syz [ 427.100302][ T40] audit: type=1400 audit(2000000381.450:888): avc: denied { ioctl } for pid=15271 comm="syz.7.2897" path="socket:[69499]" dev="sockfs" ino=69499 ioctlcmd=0x8981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 427.165192][ T59] cdc_ncm 11-1:1.0: bind() failure [ 427.168819][ T59] cdc_ncm 11-1:1.1: CDC Union missing and no IAD found [ 427.171067][ T59] cdc_ncm 11-1:1.1: bind() failure [ 427.175428][ T59] usb 11-1: USB disconnect, device number 5 [ 427.232735][ T6012] usb 8-1: USB disconnect, device number 9 [ 427.314052][T15281] xt_cluster: node mask cannot exceed total number of nodes [ 427.465049][ T40] audit: type=1400 audit(2000000381.818:889): avc: denied { append } for pid=15285 comm="syz.3.2901" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 427.465398][T15286] loop6: detected capacity change from 0 to 524287999 [ 427.498854][T15286] tipc: Started in network mode [ 427.500919][T15286] tipc: Node identity ac1414aa, cluster identity 4711 [ 427.503703][T15286] tipc: Enabled bearer , priority 10 [ 427.869349][ T5947] Bluetooth: hci1: command tx timeout [ 428.172924][ T6003] usb 9-1: reset high-speed USB device number 31 using dummy_hcd [ 428.500821][ T40] audit: type=1326 audit(2000000382.879:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15296 comm="syz.6.2903" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f038e929 code=0x7fc00000 [ 428.604299][ T9048] tipc: Node number set to 2886997162 [ 428.768600][T15328] delete_channel: no stack [ 428.802720][ T40] audit: type=1400 audit(2000000383.185:891): avc: denied { read } for pid=15336 comm="syz.3.2916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 428.941115][T15369] overlay: ./bus is not a directory [ 428.941906][ T5956] usb 14-1: USB disconnect, device number 2 [ 428.971587][ T40] audit: type=1400 audit(2000000383.358:892): avc: denied { lock } for pid=15370 comm="syz.3.2926" path="/16/file0/cpuacct.usage_sys" dev="9p" ino=35913959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 428.984480][T15373] bond1: entered allmulticast mode [ 429.031934][ T40] audit: type=1326 audit(2000000383.419:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15370 comm="syz.3.2926" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbe7f8e929 code=0x0 [ 429.080327][T15388] 9pnet_virtio: no channels available for device syz [ 429.116053][ T40] audit: type=1800 audit(2000000383.501:894): pid=15390 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.2934" name="bus" dev="overlay" ino=691 res=0 errno=0 [ 429.146824][T15394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45080 sclass=netlink_route_socket pid=15394 comm=syz.9.2935 [ 429.285865][ T2294] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 429.336981][T15407] __nla_validate_parse: 7 callbacks suppressed [ 429.336993][T15407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2940'. [ 429.345361][T15407] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 429.348013][T15407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.417923][T15412] netlink: 'syz.6.2942': attribute type 5 has an invalid length. [ 429.421032][T15412] netlink: 'syz.6.2942': attribute type 25 has an invalid length. [ 429.441330][ T2294] usb 12-1: Using ep0 maxpacket: 8 [ 429.446772][ T2294] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 429.449551][ T2294] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.452466][ T2294] usb 12-1: Product: syz [ 429.453768][ T2294] usb 12-1: Manufacturer: syz [ 429.455217][ T2294] usb 12-1: SerialNumber: syz [ 429.559349][ T40] audit: type=1400 audit(2000524671.951:895): avc: denied { mounton } for pid=15419 comm="syz.3.2945" path="/21/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 429.594303][T15425] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 429.666090][ T2294] usblp 12-1:1.0: usblp1: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 429.678379][T15430] 9pnet_fd: Insufficient options for proto=fd [ 429.755806][T15432] Bluetooth: MGMT ver 1.23 [ 429.797100][ T59] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 429.920410][T15453] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 429.951966][ T59] usb 11-1: Using ep0 maxpacket: 8 [ 429.958073][ T59] usb 11-1: config 2 interface 0 has no altsetting 0 [ 429.962401][ T59] usb 11-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 429.965219][ T59] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.968152][ T59] usb 11-1: Product: syz [ 429.973707][ T59] usb 11-1: Manufacturer: syz [ 429.975215][ T59] usb 11-1: SerialNumber: syz [ 430.049085][T15462] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2956'. [ 430.054195][T15462] 9pnet_fd: Insufficient options for proto=fd [ 430.062494][T15462] overlayfs: failed to resolve './file0/file0': -2 [ 430.114399][ T40] audit: type=1400 audit(2000524672.485:896): avc: denied { setopt } for pid=15466 comm="syz.9.2958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 430.194620][ T59] usb 11-1: USB disconnect, device number 6 [ 430.383605][T15484] netlink: 'syz.3.2963': attribute type 1 has an invalid length. [ 430.386808][T15484] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2963'. [ 430.396539][ C1] sr 2:0:0:0: [sr0] tag#22 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 430.399763][ C1] sr 2:0:0:0: [sr0] tag#22 CDB: opcode=0x96 96 43 8e ee d7 42 7e b8 ae 87 04 a2 [ 430.576613][T15490] netlink: 'syz.3.2965': attribute type 4 has an invalid length. [ 430.579116][T15490] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2965'. [ 431.045702][ T40] audit: type=1400 audit(2000524673.387:897): avc: denied { write } for pid=15517 comm="syz.6.2974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 431.096771][ T40] audit: type=1400 audit(2000524673.435:898): avc: denied { getopt } for pid=15517 comm="syz.6.2974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 431.098286][T15518] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=101 sclass=netlink_tcpdiag_socket pid=15518 comm=syz.6.2974 [ 431.111301][T15518] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=15518 comm=syz.6.2974 [ 431.156724][ T40] audit: type=1400 audit(2000524673.503:899): avc: denied { ioctl } for pid=15524 comm="syz.3.2978" path="socket:[74032]" dev="sockfs" ino=74032 ioctlcmd=0xf512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 431.165910][T15526] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2978'. [ 431.189539][T15532] ipvlan2: entered promiscuous mode [ 431.541097][T15547] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 431.543133][T15547] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 431.547623][T15547] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 431.552574][T15547] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 431.554572][T15547] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 431.559494][T15547] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 431.563306][T15547] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 431.565215][T15547] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 431.568865][T15547] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 431.573538][T15547] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 431.575452][T15547] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 431.578220][T15547] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 431.581102][T15547] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 431.583626][T15547] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 431.587774][T15547] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 431.623194][ T9048] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 431.777471][ T9048] usb 14-1: Using ep0 maxpacket: 8 [ 431.780432][ T9048] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 431.784401][ T9048] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 431.788135][ T9048] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.791863][ T9048] usb 14-1: config 0 descriptor?? [ 432.009024][ T9048] iowarrior 14-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior2 [ 432.110895][ T9048] usb 12-1: USB disconnect, device number 5 [ 432.114925][ T9048] usblp1: removed [ 432.146016][T15559] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 432.794850][T15568] netlink: 'syz.3.2990': attribute type 21 has an invalid length. [ 432.798035][T15568] IPv6: NLM_F_CREATE should be specified when creating new route [ 433.108750][ T40] audit: type=1400 audit(2000524675.398:900): avc: denied { write } for pid=15574 comm="syz.3.2993" lport=43177 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 433.116053][ T40] audit: type=1400 audit(2000524675.398:901): avc: denied { setopt } for pid=15574 comm="syz.3.2993" lport=43177 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 433.152273][T15580] loop9: detected capacity change from 0 to 8 [ 433.160034][T15580] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 433.161729][T15580] loop9: partition table partially beyond EOD, truncated [ 433.164118][T15580] loop9: p1 size 81768186 extends beyond EOD, truncated [ 433.197575][ T40] audit: type=1400 audit(2000524675.486:902): avc: denied { append } for pid=15582 comm="syz.3.2995" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 433.417281][ T40] audit: type=1400 audit(2000524675.700:903): avc: denied { watch watch_reads } for pid=15582 comm="syz.3.2995" path="/dev/pts/0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 433.464342][ T6003] usb 9-1: device descriptor read/64, error -110 [ 433.638255][ T5947] Bluetooth: hci4: command 0x0c1a tx timeout [ 433.639116][ T5959] Bluetooth: hci1: command 0x0c1a tx timeout [ 433.639168][ T5310] Bluetooth: hci0: command 0x0c1a tx timeout [ 433.639214][ T5310] Bluetooth: hci2: command 0x0c1a tx timeout [ 433.639305][ T5955] Bluetooth: hci3: command 0x0c1a tx timeout [ 433.714220][ T6003] usb 9-1: reset high-speed USB device number 31 using dummy_hcd [ 433.812507][ T24] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 433.853442][ T6003] usb 9-1: device descriptor read/64, error -32 [ 433.968688][ T24] usb 12-1: config 22 has an invalid interface number: 2 but max is 0 [ 433.973042][ T24] usb 12-1: config 22 has no interface number 0 [ 433.975748][ T24] usb 12-1: config 22 interface 2 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 433.980020][ T24] usb 12-1: config 22 interface 2 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 433.984897][ T24] usb 12-1: config 22 interface 2 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 433.989584][ T24] usb 12-1: config 22 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 433.993998][ T24] usb 12-1: config 22 interface 2 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 433.999556][ T24] usb 12-1: config 22 interface 2 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 434.004080][ T24] usb 12-1: config 22 interface 2 altsetting 0 endpoint 0x8E has an invalid bInterval 136, changing to 11 [ 434.009003][ T24] usb 12-1: config 22 interface 2 altsetting 0 endpoint 0x8E has invalid maxpacket 58356, setting to 1024 [ 434.012401][ T24] usb 12-1: config 22 interface 2 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 434.015672][ T24] usb 12-1: config 22 interface 2 altsetting 0 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 434.021504][ T24] usb 12-1: New USB device found, idVendor=19d2, idProduct=1402, bcdDevice= 1.e2 [ 434.024273][ T24] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.026755][ T24] usb 12-1: Product: ﳯ삨솟ሸØ苻䯃轳㑴냳挱‛哬肾㨌å‡éˆë„§ê”½í셇㉼î»â€†á²«æœ¿á¤”î§ë¶»á„‰é¡é›’붅ỞᡀᾹ볈 [ 434.031198][ T24] usb 12-1: Manufacturer: ãœë¼å¸®è§‹ [ 434.032909][ T24] usb 12-1: SerialNumber: 〉 [ 434.100340][ T6003] usb 9-1: reset high-speed USB device number 31 using dummy_hcd [ 434.142612][ T6003] usb 9-1: device descriptor read/8, error -32 [ 434.244441][ T40] audit: type=1400 audit(2000524676.509:904): avc: denied { connect } for pid=15586 comm="syz.7.2996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 434.310836][T15609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3004'. [ 434.407137][ T6003] usb 9-1: reset high-speed USB device number 31 using dummy_hcd [ 434.427886][ T6003] usb 9-1: device descriptor read/8, error -32 [ 434.483548][ T6030] usb 14-1: USB disconnect, device number 3 [ 434.500381][ T24] usb 12-1: USB disconnect, device number 6 [ 434.539969][T15630] ufs: You didn't specify the type of your ufs filesystem [ 434.539969][T15630] [ 434.539969][T15630] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 434.539969][T15630] [ 434.539969][T15630] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 434.548822][ T6003] raw-gadget.0 gadget.4: failed to queue suspend event [ 434.556971][T15630] ufs: failed to set blocksize [ 434.566552][ T53] usb 9-1: USB disconnect, device number 31 [ 434.581497][ T53] raw-gadget.0 gadget.4: failed to queue reset event [ 434.598509][ T40] audit: type=1400 audit(2000524676.851:905): avc: denied { name_bind } for pid=15633 comm="syz.9.3010" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 434.615680][ T40] audit: type=1400 audit(2000524676.870:906): avc: denied { execmod } for pid=15633 comm="syz.9.3010" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=76198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 434.648985][ T5959] Bluetooth: hci2: unexpected event for opcode 0x0c22 [ 434.653284][ T53] raw-gadget.0 gadget.4: failed to queue resume event [ 434.714544][ T53] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 434.717066][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 434.719439][ T53] raw-gadget.0 gadget.4: failed to queue reset event [ 434.774234][T15652] tmpfs: Unknown parameter 'quoVa' [ 434.787679][ T53] raw-gadget.0 gadget.4: failed to queue resume event [ 434.849388][ T53] usb 9-1: device descriptor read/64, error -32 [ 434.971486][ T53] raw-gadget.0 gadget.4: failed to queue suspend event [ 434.974396][ T53] raw-gadget.0 gadget.4: failed to queue reset event [ 435.014304][T15660] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3021'. [ 435.018397][T15660] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3021'. [ 435.052686][ T53] raw-gadget.0 gadget.4: failed to queue resume event [ 435.124259][ T53] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 435.126886][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 435.129345][ T53] raw-gadget.0 gadget.4: failed to queue reset event [ 435.174601][T15674] netlink: 'syz.9.3024': attribute type 2 has an invalid length. [ 435.178929][T15676] netlink: 'syz.9.3024': attribute type 2 has an invalid length. [ 435.206315][ T53] raw-gadget.0 gadget.4: failed to queue resume event [ 435.277707][ T53] usb 9-1: device descriptor read/64, error -32 [ 435.284437][T15680] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3027'. [ 435.309347][ T7290] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.313505][ T7290] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.386162][T15686] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 435.389001][T15686] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3029'. [ 435.400530][ T53] raw-gadget.0 gadget.4: failed to queue suspend event [ 435.406783][ T7290] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.410041][ T7290] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.411915][ T53] usb usb9-port1: attempt power cycle [ 435.416275][ T53] raw-gadget.0 gadget.4: failed to queue disconnect event [ 435.421289][ T53] raw-gadget.0 gadget.4: failed to queue reset event [ 435.482714][ T7290] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.486010][ T7290] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.513140][ T53] raw-gadget.0 gadget.4: failed to queue resume event [ 435.517927][ T53] raw-gadget.0 gadget.4: failed to queue reset event [ 435.562069][ T5957] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 435.575222][ T5957] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 435.578793][ T5957] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 435.582379][ T5957] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 435.587248][ T5957] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 435.620399][ T7290] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.624875][ T7290] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.637304][T15697] lo speed is unknown, defaulting to 1000 [ 435.735610][T15717] nbd: socks must be embedded in a SOCK_ITEM attr [ 435.738344][ T53] raw-gadget.0 gadget.4: failed to queue resume event [ 435.769056][ T5959] Bluetooth: hci1: command 0x0c1a tx timeout [ 435.769597][ T5957] Bluetooth: hci4: command 0x0c1a tx timeout [ 435.779257][ T5957] Bluetooth: hci3: command 0x0c1a tx timeout [ 435.786385][ T7290] bridge_slave_0: left allmulticast mode [ 435.788157][ T7290] bridge_slave_0: left promiscuous mode [ 435.790695][ T7290] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.810310][ T53] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 435.840788][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 435.843718][ T53] usb 9-1: device descriptor read/8, error -32 [ 435.963306][ T53] raw-gadget.0 gadget.4: failed to queue suspend event [ 435.966871][ T53] raw-gadget.0 gadget.4: failed to queue reset event [ 436.034858][ T53] raw-gadget.0 gadget.4: failed to queue resume event [ 436.096304][ T53] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 436.115782][ T5957] Bluetooth: hci2: unexpected event for opcode 0x040e [ 436.129255][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 436.131632][ T53] usb 9-1: device descriptor read/8, error -32 [ 436.205807][T15739] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3046'. [ 436.209028][T15739] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3046'. [ 436.212321][ T7290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.218270][ T7290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.222695][ T7290] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 436.226673][ T7290] bond0 (unregistering): Released all slaves [ 436.239252][ T53] raw-gadget.0 gadget.4: failed to queue suspend event [ 436.243265][ T53] usb usb9-port1: unable to enumerate USB device [ 436.309713][ T7290] : left promiscuous mode [ 436.360950][T15697] chnl_net:caif_netlink_parms(): no params data found [ 436.379488][T15753] FAULT_INJECTION: forcing a failure. [ 436.379488][T15753] name failslab, interval 1, probability 0, space 0, times 0 [ 436.383668][T15753] CPU: 3 UID: 0 PID: 15753 Comm: syz.3.3050 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 436.383684][T15753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 436.383691][T15753] Call Trace: [ 436.383695][T15753] [ 436.383699][T15753] dump_stack_lvl+0x16c/0x1f0 [ 436.383734][T15753] should_fail_ex+0x512/0x640 [ 436.383753][T15753] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 436.383768][T15753] should_failslab+0xc2/0x120 [ 436.383784][T15753] __kmalloc_cache_noprof+0x6a/0x3e0 [ 436.383795][T15753] ? find_held_lock+0x2b/0x80 [ 436.383810][T15753] ? alloc_pipe_info+0x10e/0x590 [ 436.383828][T15753] alloc_pipe_info+0x10e/0x590 [ 436.383845][T15753] splice_direct_to_actor+0x77d/0xa30 [ 436.383861][T15753] ? __pfx_direct_splice_actor+0x10/0x10 [ 436.383876][T15753] ? find_held_lock+0x2b/0x80 [ 436.383890][T15753] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 436.383903][T15753] ? get_pid_task+0xfc/0x250 [ 436.383918][T15753] do_splice_direct+0x174/0x240 [ 436.383932][T15753] ? __pfx_do_splice_direct+0x10/0x10 [ 436.383946][T15753] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 436.383960][T15753] ? bpf_lsm_file_permission+0x9/0x10 [ 436.383978][T15753] ? security_file_permission+0x71/0x210 [ 436.383994][T15753] ? rw_verify_area+0xcf/0x680 [ 436.384007][T15753] do_sendfile+0xb06/0xe50 [ 436.384023][T15753] ? __pfx_do_sendfile+0x10/0x10 [ 436.384036][T15753] ? __fget_files+0x20e/0x3c0 [ 436.384054][T15753] __x64_sys_sendfile64+0x1d8/0x220 [ 436.384070][T15753] ? ksys_write+0x1ac/0x250 [ 436.384083][T15753] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 436.384104][T15753] do_syscall_64+0xcd/0x4c0 [ 436.384121][T15753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.384132][T15753] RIP: 0033:0x7fdbe7f8e929 [ 436.384141][T15753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.384152][T15753] RSP: 002b:00007fdbe8edb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 436.384163][T15753] RAX: ffffffffffffffda RBX: 00007fdbe81b5fa0 RCX: 00007fdbe7f8e929 [ 436.384170][T15753] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 436.384176][T15753] RBP: 00007fdbe8edb090 R08: 0000000000000000 R09: 0000000000000000 [ 436.384184][T15753] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 436.384190][T15753] R13: 0000000000000000 R14: 00007fdbe81b5fa0 R15: 00007ffc420ea568 [ 436.384204][T15753] [ 436.497269][T15697] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.499638][T15697] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.501946][T15697] bridge_slave_0: entered allmulticast mode [ 436.504605][T15697] bridge_slave_0: entered promiscuous mode [ 436.510576][ T7290] tipc: Left network mode [ 436.513024][T15697] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.522985][T15697] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.526438][T15697] bridge_slave_1: entered allmulticast mode [ 436.530183][T15697] bridge_slave_1: entered promiscuous mode [ 436.541626][T15763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.544661][T15763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.547121][T15761] netlink: 'syz.6.3052': attribute type 1 has an invalid length. [ 436.549596][T15761] netlink: 'syz.6.3052': attribute type 4 has an invalid length. [ 436.552100][T15761] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.3052'. [ 436.557176][T15761] binder: 15760:15761 ioctl c0189373 200000000300 returned -22 [ 436.610098][T15697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.614617][T15697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.664769][T15697] team0: Port device team_slave_0 added [ 436.701375][T15697] team0: Port device team_slave_1 added [ 436.735110][T15697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.735122][T15697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.735152][T15697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.736028][T15697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.736036][T15697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.736064][T15697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.785712][T15697] hsr_slave_0: entered promiscuous mode [ 436.796822][T13501] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 436.798150][T15697] hsr_slave_1: entered promiscuous mode [ 436.803611][T15697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.803625][T15697] Cannot create hsr debugfs directory [ 436.863644][ T7290] hsr_slave_0: left promiscuous mode [ 436.866080][ T7290] hsr_slave_1: left promiscuous mode [ 436.868136][ T7290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.870514][ T7290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.880735][ T7290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.883126][ T7290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.893369][ T24] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 436.915387][ T7290] veth1_macvtap: left promiscuous mode [ 436.917224][ T7290] veth0_macvtap: left allmulticast mode [ 436.919024][ T7290] veth0_macvtap: left promiscuous mode [ 436.921068][ T7290] veth1_vlan: left promiscuous mode [ 436.922734][ T7290] veth0_vlan: left promiscuous mode [ 436.944654][T13501] usb 8-1: Using ep0 maxpacket: 8 [ 436.956975][T13501] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 436.960063][T13501] usb 8-1: config 179 has no interface number 0 [ 436.961962][T13501] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 436.965648][T13501] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 436.968964][T13501] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 436.972270][T13501] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 436.976434][T13501] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 436.979132][T13501] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.983744][T15764] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 437.056629][ T24] usb 14-1: Using ep0 maxpacket: 8 [ 437.060368][ T24] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 437.063652][ T24] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 437.067854][ T24] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 437.071984][ T24] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 437.075869][ T24] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 437.081585][ T24] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 437.085428][ T24] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.208068][T13501] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input41 [ 437.297150][T15774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.300167][T15774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.303990][T15774] xt_hashlimit: size too large, truncated to 1048576 [ 437.361028][T15782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.368940][T15782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.369655][T15783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.375950][T15783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.404435][T15763] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3053'. [ 437.409185][ T24] usb 14-1: usb_control_msg returned -71 [ 437.413992][ T24] usbtmc 14-1:16.0: can't read capabilities [ 437.425669][ T24] usb 14-1: USB disconnect, device number 4 [ 437.430929][T15786] FAULT_INJECTION: forcing a failure. [ 437.430929][T15786] name failslab, interval 1, probability 0, space 0, times 0 [ 437.435473][T15786] CPU: 3 UID: 0 PID: 15786 Comm: syz.9.3060 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 437.435488][T15786] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 437.435496][T15786] Call Trace: [ 437.435500][T15786] [ 437.435504][T15786] dump_stack_lvl+0x16c/0x1f0 [ 437.435523][T15786] should_fail_ex+0x512/0x640 [ 437.435538][T15786] ? __kmalloc_noprof+0xbf/0x510 [ 437.435554][T15786] ? alloc_pipe_info+0x1ec/0x590 [ 437.435569][T15786] should_failslab+0xc2/0x120 [ 437.435585][T15786] __kmalloc_noprof+0xd2/0x510 [ 437.435602][T15786] alloc_pipe_info+0x1ec/0x590 [ 437.435619][T15786] splice_direct_to_actor+0x77d/0xa30 [ 437.435635][T15786] ? __pfx_direct_splice_actor+0x10/0x10 [ 437.435650][T15786] ? find_held_lock+0x2b/0x80 [ 437.435665][T15786] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 437.435678][T15786] ? get_pid_task+0xfc/0x250 [ 437.435692][T15786] do_splice_direct+0x174/0x240 [ 437.435706][T15786] ? __pfx_do_splice_direct+0x10/0x10 [ 437.435720][T15786] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 437.435735][T15786] ? bpf_lsm_file_permission+0x9/0x10 [ 437.435757][T15786] ? security_file_permission+0x71/0x210 [ 437.435780][T15786] ? rw_verify_area+0xcf/0x680 [ 437.435793][T15786] do_sendfile+0xb06/0xe50 [ 437.435809][T15786] ? __pfx_do_sendfile+0x10/0x10 [ 437.435822][T15786] ? __fget_files+0x20e/0x3c0 [ 437.435840][T15786] __x64_sys_sendfile64+0x1d8/0x220 [ 437.435856][T15786] ? ksys_write+0x1ac/0x250 [ 437.435869][T15786] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 437.435890][T15786] do_syscall_64+0xcd/0x4c0 [ 437.435906][T15786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.435917][T15786] RIP: 0033:0x7f89dc78e929 [ 437.435926][T15786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.435938][T15786] RSP: 002b:00007f89dd592038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 437.435948][T15786] RAX: ffffffffffffffda RBX: 00007f89dc9b5fa0 RCX: 00007f89dc78e929 [ 437.435955][T15786] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 437.435962][T15786] RBP: 00007f89dd592090 R08: 0000000000000000 R09: 0000000000000000 [ 437.435968][T15786] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 437.435974][T15786] R13: 0000000000000000 R14: 00007f89dc9b5fa0 R15: 00007ffefe3c3d98 [ 437.435988][T15786] [ 437.661776][ T5957] Bluetooth: hci0: command tx timeout [ 437.827903][ T7290] team0 (unregistering): Port device team_slave_1 removed [ 437.903919][ T5947] Bluetooth: hci1: command 0x0c1a tx timeout [ 437.905822][ T5959] Bluetooth: hci4: command 0x0c1a tx timeout [ 437.907707][ T5957] Bluetooth: hci3: command 0x0c1a tx timeout [ 437.932249][ T7290] team0 (unregistering): Port device team_slave_0 removed [ 438.606366][T15787] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3053'. [ 438.614189][T15799] syzkaller1: entered promiscuous mode [ 438.616023][T15799] syzkaller1: entered allmulticast mode [ 438.619418][ T6599] usb 8-1: USB disconnect, device number 10 [ 438.619505][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 438.624541][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 438.821036][T15822] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3073'. [ 438.826133][T15822] unsupported nlmsg_type 40 [ 439.019718][T15841] veth0: entered promiscuous mode [ 439.032627][T15840] veth0: left promiscuous mode [ 439.060124][ T7290] IPVS: stop unused estimator thread 0... [ 439.172577][T15697] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 439.176576][T15697] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 439.184389][T15697] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 439.188521][T15697] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 439.241263][T15697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.252031][T15697] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.258066][ T7261] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.260358][ T7261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.268940][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.271257][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.384428][T15697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.405082][T13501] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 439.405727][T15697] veth0_vlan: entered promiscuous mode [ 439.413262][T15697] veth1_vlan: entered promiscuous mode [ 439.429701][T15697] veth0_macvtap: entered promiscuous mode [ 439.436684][T15697] veth1_macvtap: entered promiscuous mode [ 439.445952][T15697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.450383][T15697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.457171][T15697] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.460062][T15697] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.462797][T15697] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.465845][T15697] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.506074][ T7290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.510022][ T7290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.522099][ T7261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.528617][ T7261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.572835][T15887] loop6: detected capacity change from 0 to 524287999 [ 439.585193][T13501] usb 11-1: Using ep0 maxpacket: 32 [ 439.589216][T13501] usb 11-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 64 [ 439.593566][T13501] usb 11-1: config 1 interface 0 has no altsetting 0 [ 439.597647][T13501] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 439.600806][T13501] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.603833][T13501] usb 11-1: Product: syz [ 439.605588][T13501] usb 11-1: Manufacturer: ï­ì‚¡Ç´çŽî§œè²¡ì›ç¨ªæ›¢ïƒ™á¢µåƒà· á©—à»ì©Ÿà®«æ£³ì“½ç‚¢âª¼ä¡¾á¶•é’‡ã‚ºé´¹á—멿眉⚯煫킒밓쑃Ḭ囂々鱈뮢১픦á¨ï± á·²å››âƒ‹é¦é‘·ë¤‘䔿ᗵ蠅嚋࿾䉷緹禕璕档蕭䉗닡昫䫽ꓲﾧꚀáŸåµ Æœæ½¯íž’涳벿êžÔ™í“˜â‘µá¾žì ™á—¯â­žæ ´â’“낖壵ഽ곶♃硎尜 [ 439.615646][T13501] usb 11-1: SerialNumber: syz [ 439.618995][T15845] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 439.735975][T15894] netlink: 'syz.3.3093': attribute type 30 has an invalid length. [ 439.743679][T15894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.768417][ T5959] Bluetooth: hci0: command tx timeout [ 439.781713][T15899] 9pnet_fd: Insufficient options for proto=fd [ 439.832542][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 439.832558][ T40] audit: type=1400 audit(2000524681.982:909): avc: denied { getopt } for pid=15844 comm="syz.6.3080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 439.854171][T13501] usb 11-1: USB disconnect, device number 7 [ 440.127613][ T9048] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 440.178450][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.183398][ T40] audit: type=1400 audit(2000524682.317:910): avc: denied { read } for pid=15921 comm="syz.9.3104" lport=59464 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 440.256853][ T5959] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 440.259989][ T5959] Bluetooth: hci2: Injecting HCI hardware error event [ 440.264450][ T5959] Bluetooth: hci2: hardware error 0x00 [ 440.277072][ T9048] usb 8-1: Using ep0 maxpacket: 16 [ 440.280398][ T9048] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.283896][ T9048] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.287044][ T9048] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 440.291180][ T9048] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 440.294048][ T9048] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.298368][ T9048] usb 8-1: config 0 descriptor?? [ 440.475192][T15928] loop6: detected capacity change from 0 to 7 [ 440.478577][T15928] Dev loop6: unable to read RDB block 7 [ 440.481757][T15928] loop6: unable to read partition table [ 440.484341][T15928] loop6: partition table beyond EOD, truncated [ 440.486965][T15928] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 440.493268][ T40] audit: type=1400 audit(2000524682.631:911): avc: denied { map } for pid=15927 comm="syz.9.3106" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 440.616036][T15945] x_tables: duplicate underflow at hook 3 [ 440.722314][ T9048] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 440.724676][ T9048] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 440.726972][ T9048] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 440.729268][ T9048] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 440.731526][ T9048] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 440.735184][ T9048] input: HID 0955:7214 Haptics as /devices/virtual/input/input42 [ 440.746069][ T9048] shield 0003:0955:7214.001E: Registered Thunderstrike controller [ 440.748593][ T9048] shield 0003:0955:7214.001E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 440.762519][T15950] input: syz1 as /devices/virtual/input/input43 [ 441.069184][ T61] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 441.070137][ T24] usb 8-1: USB disconnect, device number 11 [ 441.072795][ T61] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 441.080467][ T61] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 441.086205][ T61] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 441.112647][T15966] omfs: Invalid superblock (0) [ 441.264231][T15979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7440 sclass=netlink_route_socket pid=15979 comm=syz.0.3123 [ 441.266745][T15981] dummy0: entered promiscuous mode [ 441.269308][T15980] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(37) [ 441.273232][T15980] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 441.275836][T15980] vhci_hcd vhci_hcd.0: Device attached [ 441.286504][T15983] vhci_hcd: connection closed [ 441.286735][ T7261] vhci_hcd: stop threads [ 441.290545][ T7261] vhci_hcd: release socket [ 441.292097][ T7261] vhci_hcd: disconnect device [ 441.562006][T15994] netlink: 'syz.9.3127': attribute type 1 has an invalid length. [ 441.564459][T15994] __nla_validate_parse: 3 callbacks suppressed [ 441.564467][T15994] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3127'. [ 441.661430][T15992] kvm: pic: non byte write [ 441.883474][ T5957] Bluetooth: hci0: command tx timeout [ 442.380706][ T5959] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 442.662397][T16053] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3143'. [ 442.665470][T16054] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3143'. [ 442.751647][T16063] overlay: filesystem on ./bus not supported as upperdir [ 442.768960][T16060] kernel read not supported for file /policy (pid: 16060 comm: syz.0.3146) [ 442.772722][ T40] audit: type=1400 audit(2000524684.866:912): avc: denied { read } for pid=16059 comm="syz.0.3146" name="usbmon4" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 442.782951][ T40] audit: type=1400 audit(2000524684.866:913): avc: denied { open } for pid=16059 comm="syz.0.3146" path="/dev/usbmon4" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 442.816971][ T40] audit: type=1326 audit(2000524684.905:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16066 comm="syz.3.3148" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbe7f8e929 code=0x0 [ 443.557915][ T1329] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 443.719839][ T1329] usb 14-1: Using ep0 maxpacket: 8 [ 443.726164][ T1329] usb 14-1: config 0 has no interfaces? [ 443.727953][ T1329] usb 14-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 443.731513][ T1329] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.735283][ T1329] usb 14-1: config 0 descriptor?? [ 443.759606][ T40] audit: type=1400 audit(2000524685.842:915): avc: denied { read } for pid=16112 comm="syz.0.3162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 443.810941][T16114] xt_hashlimit: size too large, truncated to 1048576 [ 443.871982][ T61] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 443.896577][T16119] QAT: Invalid ioctl -2144835806 [ 443.942771][ T1329] usb 14-1: USB disconnect, device number 5 [ 444.003744][ T5959] Bluetooth: hci0: command tx timeout [ 444.028271][ T61] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.031537][ T61] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 444.035107][ T61] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 444.038128][ T61] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 444.043299][ T61] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 444.046380][ T61] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 444.048860][ T61] usb 8-1: Manufacturer: syz [ 444.051639][ T61] usb 8-1: config 0 descriptor?? [ 444.328087][ T61] rc_core: IR keymap rc-hauppauge not found [ 444.331878][ T61] Registered IR keymap rc-empty [ 444.333470][ T61] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 444.349019][ T61] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 444.368927][ T61] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 444.373377][ T61] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input44 [ 444.377930][ T61] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 444.409297][ T61] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 444.426911][T16135] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 444.429369][ T61] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 444.449637][ T61] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 444.481005][ T61] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 444.498969][T16137] ipvlan3: entered promiscuous mode [ 444.510504][ T61] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 444.530795][ T61] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 444.551028][ T61] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 444.572577][ T61] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 444.592824][ T40] audit: type=1326 audit(2000524686.671:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16142 comm="syz.9.3173" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dc78e929 code=0x7ff00000 [ 444.600260][ T40] audit: type=1326 audit(2000524686.671:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16142 comm="syz.9.3173" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dc78e929 code=0x7ff00000 [ 444.602416][ T61] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 444.609661][ T40] audit: type=1326 audit(2000524686.671:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16142 comm="syz.9.3173" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dc78e929 code=0x7ff00000 [ 444.625189][ T61] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 444.628064][ T61] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 444.633483][ T61] usb 8-1: USB disconnect, device number 12 [ 444.783499][T16148] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 444.787595][T16148] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 444.792876][T16148] netlink: 'syz.6.3174': attribute type 4 has an invalid length. [ 444.915843][ T40] kauditd_printk_skb: 2934 callbacks suppressed [ 444.915856][ T40] audit: type=1326 audit(2000524686.976:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16142 comm="syz.9.3173" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dc78e929 code=0x7ff00000 [ 444.925245][ T40] audit: type=1326 audit(2000524686.986:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16142 comm="syz.9.3173" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dc78e929 code=0x7ff00000 [ 444.932439][ T40] audit: type=1326 audit(2000524686.986:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16142 comm="syz.9.3173" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dc78e929 code=0x7ff00000 [ 444.939557][ T40] audit: type=1326 audit(2000524686.986:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16142 comm="syz.9.3173" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dc78e929 code=0x7ff00000 [ 444.947160][ T40] audit: type=1326 audit(2000524686.986:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16142 comm="syz.9.3173" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dc78e929 code=0x7ff00000 [ 444.954136][ T40] audit: type=1326 audit(2000524686.986:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16142 comm="syz.9.3173" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dc78e929 code=0x7ff00000 [ 444.961328][ T40] audit: type=1326 audit(2000524686.986:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16142 comm="syz.9.3173" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dc78e929 code=0x7ff00000 [ 444.968813][ T40] audit: type=1326 audit(2000524686.986:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16142 comm="syz.9.3173" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dc78e929 code=0x7ff00000 [ 444.975900][ T40] audit: type=1326 audit(2000524686.986:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16142 comm="syz.9.3173" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dc78e929 code=0x7ff00000 [ 444.982993][ T40] audit: type=1326 audit(2000524686.986:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16142 comm="syz.9.3173" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dc78e929 code=0x7ff00000 [ 445.343764][T16173] dns_resolver: Unsupported content type (234) [ 445.389095][T16172] netlink: 'syz.0.3182': attribute type 1 has an invalid length. [ 446.276103][T16176] ceph: No mds server is up or the cluster is laggy [ 446.278589][T16179] ceph: No mds server is up or the cluster is laggy [ 446.359896][T16196] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 446.459665][T16204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3192'. [ 446.519007][T16208] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3194'. [ 446.550231][T16206] cdrom: dropping to single frame dma [ 446.963597][T16233] fuse: Unknown parameter 'gr]up_id' [ 447.011086][T16233] batadv_slave_1: entered promiscuous mode [ 447.013833][T16233] netlink: 2056 bytes leftover after parsing attributes in process `syz.3.3202'. [ 447.127829][T16233] team0 (unregistering): Port device team_slave_0 removed [ 447.133169][T16233] team0 (unregistering): Port device team_slave_1 removed [ 447.196812][T16232] batadv_slave_1: left promiscuous mode [ 447.421801][T16245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3205'. [ 447.449214][T16247] netlink: 'syz.6.3206': attribute type 1 has an invalid length. [ 447.493881][T16251] FAULT_INJECTION: forcing a failure. [ 447.493881][T16251] name (null), interval 1, probability 0, space 0, times 1 [ 447.498571][T16251] CPU: 3 UID: 0 PID: 16251 Comm: syz.6.3207 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 447.498588][T16251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 447.498595][T16251] Call Trace: [ 447.498599][T16251] [ 447.498603][T16251] dump_stack_lvl+0x16c/0x1f0 [ 447.498623][T16251] should_fail_ex+0x512/0x640 [ 447.498641][T16251] null_queue_rq+0x24d/0xfd0 [ 447.498657][T16251] ? blk_add_trace_unplug+0x164/0x350 [ 447.498675][T16251] null_queue_rqs+0xe9/0x2f0 [ 447.498689][T16251] ? __pfx_null_queue_rqs+0x10/0x10 [ 447.498705][T16251] ? guard_bio_eod+0x104/0x8b0 [ 447.498724][T16251] __blk_mq_flush_list+0x9a/0xc0 [ 447.498740][T16251] blk_mq_dispatch_queue_requests+0x184/0x7b0 [ 447.498756][T16251] blk_mq_flush_plug_list+0x1f2/0x600 [ 447.498771][T16251] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 447.498789][T16251] __blk_flush_plug+0x2c4/0x4b0 [ 447.498804][T16251] ? __pfx___blk_flush_plug+0x10/0x10 [ 447.498816][T16251] ? folio_batch_move_lru+0x2c3/0x3b0 [ 447.498832][T16251] ? __pfx_lru_add+0x10/0x10 [ 447.498848][T16251] blk_finish_plug+0x53/0xa0 [ 447.498860][T16251] read_pages+0x583/0xc70 [ 447.498904][T16251] ? __pfx_read_pages+0x10/0x10 [ 447.498919][T16251] ? find_held_lock+0x2b/0x80 [ 447.498937][T16251] page_cache_ra_order+0x69a/0xd00 [ 447.498956][T16251] page_cache_sync_ra+0x4b4/0x9c0 [ 447.498972][T16251] filemap_get_pages+0xb62/0x1c20 [ 447.498993][T16251] ? __pfx_filemap_get_pages+0x10/0x10 [ 447.499012][T16251] ? __pfx___might_resched+0x10/0x10 [ 447.499031][T16251] filemap_splice_read+0x5cb/0xcd0 [ 447.499047][T16251] ? do_sendfile+0xb06/0xe50 [ 447.499059][T16251] ? __x64_sys_sendfile64+0x1d8/0x220 [ 447.499075][T16251] ? do_syscall_64+0xcd/0x4c0 [ 447.499095][T16251] ? __pfx_filemap_splice_read+0x10/0x10 [ 447.499127][T16251] ? lockdep_init_map_type+0x5c/0x280 [ 447.499141][T16251] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 447.499156][T16251] ? __pfx_filemap_splice_read+0x10/0x10 [ 447.499173][T16251] do_splice_read+0x282/0x370 [ 447.499188][T16251] splice_direct_to_actor+0x2a1/0xa30 [ 447.499203][T16251] ? __pfx_direct_splice_actor+0x10/0x10 [ 447.499220][T16251] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 447.499233][T16251] ? get_pid_task+0xfc/0x250 [ 447.499247][T16251] do_splice_direct+0x174/0x240 [ 447.499261][T16251] ? __pfx_do_splice_direct+0x10/0x10 [ 447.499276][T16251] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 447.499290][T16251] ? bpf_lsm_file_permission+0x9/0x10 [ 447.499307][T16251] ? security_file_permission+0x71/0x210 [ 447.499323][T16251] ? rw_verify_area+0xcf/0x680 [ 447.499336][T16251] do_sendfile+0xb06/0xe50 [ 447.499352][T16251] ? __pfx_do_sendfile+0x10/0x10 [ 447.499365][T16251] ? __fget_files+0x20e/0x3c0 [ 447.499390][T16251] __x64_sys_sendfile64+0x1d8/0x220 [ 447.499406][T16251] ? ksys_write+0x1ac/0x250 [ 447.499419][T16251] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 447.499439][T16251] do_syscall_64+0xcd/0x4c0 [ 447.499456][T16251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.499467][T16251] RIP: 0033:0x7fc1f038e929 [ 447.499477][T16251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.499488][T16251] RSP: 002b:00007fc1f128c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 447.499498][T16251] RAX: ffffffffffffffda RBX: 00007fc1f05b5fa0 RCX: 00007fc1f038e929 [ 447.499505][T16251] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 447.499511][T16251] RBP: 00007fc1f128c090 R08: 0000000000000000 R09: 0000000000000000 [ 447.499520][T16251] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000002 [ 447.499530][T16251] R13: 0000000000000000 R14: 00007fc1f05b5fa0 R15: 00007ffc39a2acc8 [ 447.499551][T16251] [ 447.916086][T16264] loop6: detected capacity change from 0 to 7 [ 448.029959][T16274] netlink: 'syz.0.3214': attribute type 10 has an invalid length. [ 448.039301][T16274] hsr_slave_0: left promiscuous mode [ 448.042609][T16274] hsr_slave_1: left promiscuous mode [ 448.696009][T16299] netlink: 45 bytes leftover after parsing attributes in process `syz.3.3221'. [ 449.027104][ T6696] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.129529][ T6696] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.232870][ T6696] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.236046][T16304] usb usb8: usbfs: interface 0 claimed by hub while 'syz.6.3226' resets device [ 449.242305][T16308] usb usb8: usbfs: interface 0 claimed by hub while 'syz.6.3226' resets device [ 449.248473][ T5957] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 449.252807][ T5957] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 449.262234][ T5957] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 449.266302][ T5957] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 449.270810][ T5957] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 449.289237][T16305] lo speed is unknown, defaulting to 1000 [ 449.308794][ T6696] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.324114][T16313] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3228'. [ 449.337825][T16313] netlink: 830 bytes leftover after parsing attributes in process `syz.6.3228'. [ 449.415880][ T6696] bridge_slave_1: left allmulticast mode [ 449.417777][ T6696] bridge_slave_1: left promiscuous mode [ 449.420194][ T6696] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.425487][ T6696] bridge_slave_0: left allmulticast mode [ 449.429134][ T6696] bridge_slave_0: left promiscuous mode [ 449.431922][ T6696] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.523693][T16321] binder: 16320:16321 ioctl c0306201 200000000180 returned -22 [ 449.685713][ T6696] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.690824][ T6696] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.694475][ T6696] bond0 (unregistering): Released all slaves [ 449.777487][T16305] chnl_net:caif_netlink_parms(): no params data found [ 449.788433][ T6696] tipc: Disabling bearer [ 449.790663][ T6696] tipc: Left network mode [ 449.873152][T16305] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.876217][T16305] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.879195][T16305] bridge_slave_0: entered allmulticast mode [ 449.883246][T16305] bridge_slave_0: entered promiscuous mode [ 449.887693][T16305] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.890664][T16305] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.893777][T16305] bridge_slave_1: entered allmulticast mode [ 449.898112][T16305] bridge_slave_1: entered promiscuous mode [ 449.950324][T16305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.957244][T16305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.014911][T16305] team0: Port device team_slave_0 added [ 450.019129][T16305] team0: Port device team_slave_1 added [ 450.085426][T16305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.087632][T16305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.095910][T16305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.103042][ T6696] hsr_slave_0: left promiscuous mode [ 450.117547][ T6696] hsr_slave_1: left promiscuous mode [ 450.119630][ T6696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.121936][ T6696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.124949][ T6696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.127278][ T6696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.151472][ T6696] veth1_macvtap: left promiscuous mode [ 450.153338][ T6696] veth0_macvtap: left promiscuous mode [ 450.155173][ T6696] veth1_vlan: left promiscuous mode [ 450.156846][ T6696] veth0_vlan: left promiscuous mode [ 450.461711][ T40] kauditd_printk_skb: 26611 callbacks suppressed [ 450.461723][ T40] audit: type=1400 audit(2000524692.466:30474): avc: denied { ioctl } for pid=16338 comm="syz.0.3235" path="socket:[80556]" dev="sockfs" ino=80556 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 450.462657][T16339] netlink: 'syz.0.3235': attribute type 1 has an invalid length. [ 451.363761][ T5959] Bluetooth: hci1: command tx timeout [ 451.516265][T16305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.518417][T16305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.526774][T16305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.548069][T16341] gretap1: entered promiscuous mode [ 451.596044][T16305] hsr_slave_0: entered promiscuous mode [ 451.598314][T16305] hsr_slave_1: entered promiscuous mode [ 451.600724][T16305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 451.603854][T16305] Cannot create hsr debugfs directory [ 451.729540][T16305] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.732846][T16305] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 451.827247][T16305] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.830497][T16305] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 451.912301][T16305] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.915529][T16305] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 451.992122][T16305] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.995298][T16305] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 452.085979][T16305] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 452.090363][T16305] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 452.094257][T16305] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 452.098000][T16305] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 452.142979][T16305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.154533][T16305] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.159586][ T6694] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.161848][ T6694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.168169][ T7282] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.170437][ T7282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.284184][T16305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.424524][T16305] veth0_vlan: entered promiscuous mode [ 452.429186][T16305] veth1_vlan: entered promiscuous mode [ 452.443970][T16305] veth0_macvtap: entered promiscuous mode [ 452.447660][T16305] veth1_macvtap: entered promiscuous mode [ 452.449611][T16367] overlayfs: failed to resolve './file0': -2 [ 452.457778][T16305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.463248][T16305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.467975][T16305] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.470672][T16305] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.473925][T16305] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.476737][T16305] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.485405][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.492910][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.505411][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.508692][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.511877][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.516193][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.521016][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.524798][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.529392][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.532607][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.535606][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.538001][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.539335][ T6696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.540897][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.543323][ T6696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.546723][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.551298][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.553750][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.553765][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.559116][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.562115][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.565459][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.568681][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.568689][ T9367] null_blk: rq ffff888028d24380 timed out [ 452.570528][ T6696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.570541][ T6696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.571806][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.571826][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.571843][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.571860][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.571877][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.574542][ T9367] timeout error, dev nullb0, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 8 prio class 0 [ 452.577012][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.598600][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.601407][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.604388][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.607410][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.610538][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.613017][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.615830][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.618253][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.620657][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.623033][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.625693][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.628128][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.630873][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.633331][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.635948][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.638355][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 452.645473][ T6030] hid-generic 0000:007F:FFFFFFFE.001F: hidraw1: HID v0.00 Device [syz1] on syz0 [ 452.759214][T16379] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 452.918593][T16381] sch_fq: defrate 4 ignored. [ 452.926705][T16381] sch_fq: defrate 4 ignored. [ 452.931123][T16381] sch_fq: defrate 4 ignored. [ 452.933503][T16381] sch_fq: defrate 4 ignored. [ 452.935046][T16381] sch_fq: defrate 4 ignored. [ 452.936602][T16381] sch_fq: defrate 4 ignored. [ 452.938752][T16381] sch_fq: defrate 4 ignored. [ 452.940291][T16381] sch_fq: defrate 4 ignored. [ 452.941798][T16381] sch_fq: defrate 4 ignored. [ 452.943315][T16381] sch_fq: defrate 4 ignored. [ 453.004545][T16385] kAFS: unparsable volume name [ 453.472307][T16397] xt_CT: No such helper "pptp" [ 453.592367][T16419] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3256'. [ 453.607115][ T6030] kernel write not supported for file /snd/seq (pid: 6030 comm: kworker/2:3) [ 453.760885][ T40] audit: type=1326 audit(2000524695.739:30475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16432 comm="syz.6.3262" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1f038e929 code=0x0 [ 453.767958][ T40] audit: type=1326 audit(2000524695.739:30476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16432 comm="syz.6.3262" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1f038e929 code=0x0 [ 454.171349][ T40] audit: type=1400 audit(2000524696.146:30477): avc: denied { write } for pid=16442 comm="syz.6.3264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 454.188410][ T5959] Bluetooth: hci3: unexpected event for opcode 0x6c22 [ 454.210669][T16449] netlink: 236 bytes leftover after parsing attributes in process `syz.9.3266'. [ 454.281233][T16453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16453 comm=syz.9.3267 [ 454.360566][T16459] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3268'. [ 454.363453][T16459] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 454.365961][T16459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.438350][T16465] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3270'. [ 454.443435][T16465] syz.6.3270: attempt to access beyond end of device [ 454.443435][T16465] nbd6: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 454.447482][T16465] SQUASHFS error: Failed to read block 0x0: -5 [ 454.450686][T16465] unable to read squashfs_super_block [ 454.493014][T16467] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 454.623765][T16469] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3272'. [ 454.690467][T16472] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 454.695579][T16483] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 454.941645][ T6599] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 454.942105][T16493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 454.953141][ T40] audit: type=1400 audit(2000524696.930:30478): avc: denied { setattr } for pid=16492 comm="syz.6.3282" name="#4a" dev="tmpfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 455.102675][ T6599] usb 13-1: Using ep0 maxpacket: 32 [ 455.105753][ T6599] usb 13-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 455.108638][ T6599] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.112487][ T6599] usb 13-1: config 0 descriptor?? [ 455.119407][ T6599] as10x_usb: device has been detected [ 455.121402][ T6599] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 455.130789][ T6599] usb 13-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 455.136697][ T6599] as10x_usb: error during firmware upload part1 [ 455.138951][ T6599] Registered device nBox DVB-T Dongle [ 455.175287][ T5959] Bluetooth: hci3: unexpected event for opcode 0x6c22 [ 455.279066][T16518] netlink: 'syz.6.3290': attribute type 13 has an invalid length. [ 455.281694][T16518] macvtap0: entered promiscuous mode [ 455.286109][T16518] macvtap0: refused to change device tx_queue_len [ 455.295254][T16515] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3289'. [ 455.329140][ T1329] usb 13-1: USB disconnect, device number 5 [ 455.340528][T16522] dns_resolver: Unsupported content type (180) [ 455.345099][ T1329] Unregistered device nBox DVB-T Dongle [ 455.345787][ T1329] as10x_usb: device has been disconnected [ 455.462973][ T40] audit: type=1400 audit(2000524697.427:30479): avc: denied { name_bind } for pid=16533 comm="syz.9.3294" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 455.475380][ T40] audit: type=1400 audit(2000524697.447:30480): avc: denied { name_connect } for pid=16533 comm="syz.9.3294" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 455.575355][T16534] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16534 comm=syz.9.3294 [ 455.600072][T16540] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3296'. [ 455.691765][T16545] SELinux: ebitmap start bit (511) is not a multiple of the map unit size (64) [ 455.694628][T16545] SELinux: failed to load policy [ 455.696520][T16545] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 455.804743][T16554] ntfs3(sr0): Primary boot signature is not NTFS. [ 455.807839][T16554] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 456.511973][ T6599] usb 13-1: new full-speed USB device number 6 using dummy_hcd [ 456.664098][ T6599] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 456.667251][ T6599] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 9504, setting to 64 [ 456.670591][ T6599] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.673022][ T5957] Bluetooth: hci1: command tx timeout [ 456.675059][ T6599] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 456.679312][ T6599] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.886558][ T6599] usb 13-1: GET_CAPABILITIES returned 0 [ 456.888350][ T6599] usbtmc 13-1:16.0: can't read capabilities [ 457.103136][ T6599] usb 13-1: USB disconnect, device number 6 [ 457.719469][ T5959] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 457.719738][ T5957] Bluetooth: hci5: command 0x1003 tx timeout [ 457.754747][T16587] netlink: 'syz.9.3313': attribute type 23 has an invalid length. [ 457.762554][T16589] random: crng reseeded on system resumption [ 457.771170][T16587] netlink: 'syz.9.3313': attribute type 10 has an invalid length. [ 457.771775][T16589] Restarting kernel threads ... [ 457.774273][T16587] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3313'. [ 457.776202][T16589] Done restarting kernel threads. [ 457.790756][T16589] netlink: 292 bytes leftover after parsing attributes in process `syz.6.3314'. [ 457.796433][T16587] team0: Port device geneve0 added [ 457.802624][ T40] audit: type=1400 audit(2000524699.762:30481): avc: denied { set_context_mgr } for pid=16586 comm="syz.9.3313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 458.031344][ T6003] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 458.192121][ T6003] usb 11-1: Using ep0 maxpacket: 8 [ 458.195195][ T6003] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 458.198327][ T6003] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 458.201450][ T6003] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 458.205116][ T6003] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 458.209136][ T6003] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 458.212082][ T6003] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.419454][ T6003] usb 11-1: GET_CAPABILITIES returned 0 [ 458.421281][ T6003] usbtmc 11-1:16.0: can't read capabilities [ 458.625336][T16589] netlink: 'syz.6.3314': attribute type 29 has an invalid length. [ 458.628192][T16589] netlink: 'syz.6.3314': attribute type 29 has an invalid length. [ 458.630950][T16589] netlink: 'syz.6.3314': attribute type 29 has an invalid length. [ 458.635027][ T6030] usb 11-1: USB disconnect, device number 8 [ 458.808843][T16602] netlink: 'syz.8.3317': attribute type 10 has an invalid length. [ 458.828861][T16602] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 458.903048][ T5959] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 459.179628][T16641] xt_hashlimit: invalid interval [ 459.189802][T16641] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3332'. [ 459.300927][T16647] netlink: 'syz.0.3335': attribute type 1 has an invalid length. [ 459.479398][ T61] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 459.514057][T16662] netlink: 'syz.0.3339': attribute type 1 has an invalid length. [ 459.630642][ T61] usb 11-1: Using ep0 maxpacket: 8 [ 459.634571][ T61] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 459.637960][ T61] usb 11-1: config 0 has no interface number 0 [ 459.641292][ T61] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 459.644862][ T61] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 459.648381][ T61] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 459.651933][ T61] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 459.657231][ T61] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 459.661424][ T61] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.665323][ T61] usb 11-1: config 0 descriptor?? [ 459.669452][ T61] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 459.820896][T16668] IPVS: length: 98 != 8 [ 459.858469][ T40] audit: type=1400 audit(2000524701.801:30482): avc: denied { shutdown } for pid=16674 comm="syz.9.3343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 459.871860][ T61] usb 11-1: USB disconnect, device number 9 [ 459.877696][ T61] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 459.885440][T16678] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3344'. [ 459.889145][T16678] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3344'. [ 459.897336][T16678] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3344'. [ 459.989516][T16685] ip6t_REJECT: ECHOREPLY is not supported [ 460.461199][T16701] netlink: 'syz.0.3352': attribute type 10 has an invalid length. [ 460.466782][T16703] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 460.468860][T16703] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 460.469969][T16701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.473379][T16703] vhci_hcd vhci_hcd.0: Device attached [ 460.475921][T16701] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 460.480263][T16701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.483650][T16701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.488076][T16706] vhci_hcd: connection closed [ 460.488328][ T6694] vhci_hcd: stop threads [ 460.491240][ T6694] vhci_hcd: release socket [ 460.492691][ T6694] vhci_hcd: disconnect device [ 460.493343][T16701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.497605][T16701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.509296][T16701] bond0: (slave batadv0): Releasing backup interface [ 460.672992][T16712] Trying to write to read-only block-device nullb0 [ 460.723418][T16716] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 460.726925][T16716] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 460.730574][T16716] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 460.878957][ T40] audit: type=1400 audit(2000524702.816:30483): avc: denied { create } for pid=16723 comm="syz.9.3360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 460.879763][T16724] netlink: 'syz.9.3360': attribute type 1 has an invalid length. [ 460.897986][T16724] 8021q: adding VLAN 0 to HW filter on device bond2 [ 460.903714][T16724] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3360'. [ 460.909543][T16724] bond2: entered promiscuous mode [ 461.218170][T13501] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 461.328710][ T2294] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 461.372452][T13501] usb 14-1: Using ep0 maxpacket: 8 [ 461.375419][T13501] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 461.379129][T13501] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 461.382560][T13501] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 461.385920][T13501] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 461.391085][T13501] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 461.394795][T13501] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.489510][ T2294] usb 13-1: Using ep0 maxpacket: 8 [ 461.497046][ T2294] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 461.499939][ T2294] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 461.503063][ T2294] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 461.506075][ T2294] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 461.519475][ T2294] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 461.523837][ T2294] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 461.526641][ T2294] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.604519][T13501] usb 14-1: GET_CAPABILITIES returned 0 [ 461.607091][T13501] usbtmc 14-1:16.0: can't read capabilities [ 461.735856][ T2294] usb 13-1: usb_control_msg returned -32 [ 461.737633][ T2294] usbtmc 13-1:16.0: can't read capabilities [ 461.958928][ T5957] Bluetooth: hci5: sending frame failed (-49) [ 461.962371][ T5959] Bluetooth: hci5: Entering manufacturer mode failed (-49) [ 462.005428][T16763] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3371'. [ 462.008064][T16763] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3371'. [ 462.443920][T16770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.446886][T16770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.450052][T16770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.452960][T16770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.461791][T16771] 8021q: adding VLAN 0 to HW filter on device bond1 [ 462.477557][T16769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 462.479859][T16769] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 462.484608][T16769] bond1: (slave vxcan5): Error -95 calling set_mac_address [ 462.658857][T16770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.665027][T16770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.730519][ T40] audit: type=1400 audit(2000524704.657:30484): avc: denied { read } for pid=16778 comm="syz.0.3375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 462.781542][ T40] audit: type=1400 audit(2000524704.707:30485): avc: denied { write } for pid=16778 comm="syz.0.3375" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 462.781749][T16779] netlink: 272 bytes leftover after parsing attributes in process `syz.0.3375'. [ 462.903404][T16787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3377'. [ 462.973945][T16796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3379'. [ 462.977863][T16796] ip6t_rpfilter: unknown options [ 463.899693][ T2294] usb 14-1: USB disconnect, device number 6 [ 463.902382][T16726] TCP: out of memory -- consider tuning tcp_mem [ 463.907801][T16726] ------------[ cut here ]------------ [ 463.910187][T16726] WARNING: CPU: 2 PID: 16726 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x684/0x830 [ 463.913241][T16726] Modules linked in: [ 463.915330][T16726] CPU: 2 UID: 0 PID: 16726 Comm: syz.9.3360 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 463.921182][T16726] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 463.924554][T16726] RIP: 0010:inet_sock_destruct+0x684/0x830 [ 463.926414][T16726] Code: 0f 0b 90 e9 12 fe ff ff e8 19 c1 b5 f7 90 0f 0b 90 e9 5e fe ff ff e8 0b c1 b5 f7 90 0f 0b 90 e9 94 fe ff ff e8 fd c0 b5 f7 90 <0f> 0b 90 e9 d3 fe ff ff e8 5f 9c 1c f8 e9 d7 fc ff ff 4c 89 ff e8 [ 463.932678][T16726] RSP: 0018:ffffc90004e07940 EFLAGS: 00010293 [ 463.934591][T16726] RAX: 0000000000000000 RBX: ffff88802cdebfc0 RCX: ffffffff8a062487 [ 463.937077][T16726] RDX: ffff8880572fc880 RSI: ffffffff8a0625b3 RDI: 0000000000000005 [ 463.939550][T16726] RBP: 0000000080002000 R08: 0000000000000005 R09: 0000000000000000 [ 463.942759][T16726] R10: 0000000080002000 R11: 0000000000000001 R12: ffff88802cdebfc0 [ 463.945229][T16726] R13: ffff88802cdec050 R14: 0000000000000000 R15: ffff888037edc2c0 [ 463.947685][T16726] FS: 0000000000000000(0000) GS:ffff8880d6918000(0000) knlGS:0000000000000000 [ 463.950780][T16726] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 463.952842][T16726] CR2: 00007fc1f124ad58 CR3: 000000010dff5000 CR4: 0000000000352ef0 [ 463.955325][T16726] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 463.957800][T16726] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 463.960615][T16726] Call Trace: [ 463.961679][T16726] [ 463.962621][T16726] ? __pfx_inet_sock_destruct+0x10/0x10 [ 463.964361][T16726] __sk_destruct+0x81/0x980 [ 463.965816][T16726] sk_destruct+0xc2/0xf0 [ 463.967162][T16726] __sk_free+0xf4/0x3e0 [ 463.968477][T16726] sk_free+0x6a/0x90 [ 463.969724][T16726] tcp_close+0xd3/0x120 [ 463.971508][T16726] inet_release+0x13f/0x280 [ 463.972948][T16726] __sock_release+0xb0/0x270 [ 463.974417][T16726] ? __pfx_sock_close+0x10/0x10 [ 463.975968][T16726] sock_close+0x1c/0x30 [ 463.977292][T16726] __fput+0x3ff/0xb70 [ 463.978560][T16726] task_work_run+0x14d/0x240 [ 463.980044][T16726] ? __pfx_task_work_run+0x10/0x10 [ 463.982091][T16726] ? do_raw_spin_unlock+0x172/0x230 [ 463.983751][T16726] do_exit+0x86c/0x2bd0 [ 463.985063][T16726] ? __pfx_do_exit+0x10/0x10 [ 463.986531][T16726] ? do_raw_spin_lock+0x12c/0x2b0 [ 463.988124][T16726] ? find_held_lock+0x2b/0x80 [ 463.989614][T16726] do_group_exit+0xd3/0x2a0 [ 463.991349][T16726] get_signal+0x2673/0x26d0 [ 463.992791][T16726] ? hrtimer_nanosleep+0x187/0x380 [ 463.994412][T16726] ? __pfx_get_signal+0x10/0x10 [ 463.995974][T16726] ? do_futex+0x122/0x350 [ 463.997353][T16726] ? __pfx_do_futex+0x10/0x10 [ 463.998850][T16726] arch_do_signal_or_restart+0x8f/0x7d0 [ 464.000662][T16726] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 464.002594][T16726] ? xfd_validate_state+0x61/0x180 [ 464.004219][T16726] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 464.006151][T16726] exit_to_user_mode_loop+0x84/0x110 [ 464.007811][T16726] do_syscall_64+0x3f6/0x4c0 [ 464.009285][T16726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.011226][T16726] RIP: 0033:0x7f89dc78e929 [ 464.013092][T16726] Code: Unable to access opcode bytes at 0x7f89dc78e8ff. [ 464.015269][T16726] RSP: 002b:00007f89dd5710e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 464.017861][T16726] RAX: fffffffffffffe00 RBX: 00007f89dc9b6088 RCX: 00007f89dc78e929 [ 464.020346][T16726] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f89dc9b6088 [ 464.023152][T16726] RBP: 00007f89dc9b6080 R08: 0000000000000000 R09: 0000000000000000 [ 464.025619][T16726] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f89dc9b608c [ 464.028076][T16726] R13: 0000000000000000 R14: 00007ffefe3c3cb0 R15: 00007ffefe3c3d98 [ 464.030611][T16726] [ 464.031613][T16726] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 464.033874][T16726] CPU: 2 UID: 0 PID: 16726 Comm: syz.9.3360 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 464.037573][T16726] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 464.040909][T16726] Call Trace: [ 464.041966][T16726] [ 464.042920][T16726] dump_stack_lvl+0x3d/0x1f0 [ 464.044388][T16726] panic+0x71c/0x800 [ 464.045634][T16726] ? __pfx_panic+0x10/0x10 [ 464.047061][T16726] ? show_trace_log_lvl+0x29b/0x3e0 [ 464.048711][T16726] ? check_panic_on_warn+0x1f/0xb0 [ 464.050327][T16726] ? inet_sock_destruct+0x684/0x830 [ 464.051975][T16726] check_panic_on_warn+0xab/0xb0 [ 464.053546][T16726] __warn+0xf6/0x3c0 [ 464.054796][T16726] ? inet_sock_destruct+0x684/0x830 [ 464.056439][T16726] report_bug+0x3c3/0x580 [ 464.057805][T16726] ? inet_sock_destruct+0x684/0x830 [ 464.059498][T16726] handle_bug+0x184/0x210 [ 464.060866][T16726] exc_invalid_op+0x17/0x50 [ 464.062306][T16726] asm_exc_invalid_op+0x1a/0x20 [ 464.063848][T16726] RIP: 0010:inet_sock_destruct+0x684/0x830 [ 464.065673][T16726] Code: 0f 0b 90 e9 12 fe ff ff e8 19 c1 b5 f7 90 0f 0b 90 e9 5e fe ff ff e8 0b c1 b5 f7 90 0f 0b 90 e9 94 fe ff ff e8 fd c0 b5 f7 90 <0f> 0b 90 e9 d3 fe ff ff e8 5f 9c 1c f8 e9 d7 fc ff ff 4c 89 ff e8 [ 464.071605][T16726] RSP: 0018:ffffc90004e07940 EFLAGS: 00010293 [ 464.073504][T16726] RAX: 0000000000000000 RBX: ffff88802cdebfc0 RCX: ffffffff8a062487 [ 464.075970][T16726] RDX: ffff8880572fc880 RSI: ffffffff8a0625b3 RDI: 0000000000000005 [ 464.078425][T16726] RBP: 0000000080002000 R08: 0000000000000005 R09: 0000000000000000 [ 464.080887][T16726] R10: 0000000080002000 R11: 0000000000000001 R12: ffff88802cdebfc0 [ 464.083355][T16726] R13: ffff88802cdec050 R14: 0000000000000000 R15: ffff888037edc2c0 [ 464.085816][T16726] ? inet_sock_destruct+0x557/0x830 [ 464.087463][T16726] ? inet_sock_destruct+0x683/0x830 [ 464.089100][T16726] ? __pfx_inet_sock_destruct+0x10/0x10 [ 464.090847][T16726] __sk_destruct+0x81/0x980 [ 464.092288][T16726] sk_destruct+0xc2/0xf0 [ 464.093631][T16726] __sk_free+0xf4/0x3e0 [ 464.094961][T16726] sk_free+0x6a/0x90 [ 464.096212][T16726] tcp_close+0xd3/0x120 [ 464.097535][T16726] inet_release+0x13f/0x280 [ 464.098987][T16726] __sock_release+0xb0/0x270 [ 464.100482][T16726] ? __pfx_sock_close+0x10/0x10 [ 464.102018][T16726] sock_close+0x1c/0x30 [ 464.103361][T16726] __fput+0x3ff/0xb70 [ 464.104633][T16726] task_work_run+0x14d/0x240 [ 464.106094][T16726] ? __pfx_task_work_run+0x10/0x10 [ 464.107717][T16726] ? do_raw_spin_unlock+0x172/0x230 [ 464.109355][T16726] do_exit+0x86c/0x2bd0 [ 464.110683][T16726] ? __pfx_do_exit+0x10/0x10 [ 464.112154][T16726] ? do_raw_spin_lock+0x12c/0x2b0 [ 464.113745][T16726] ? find_held_lock+0x2b/0x80 [ 464.115239][T16726] do_group_exit+0xd3/0x2a0 [ 464.116691][T16726] get_signal+0x2673/0x26d0 [ 464.118129][T16726] ? hrtimer_nanosleep+0x187/0x380 [ 464.119766][T16726] ? __pfx_get_signal+0x10/0x10 [ 464.121305][T16726] ? do_futex+0x122/0x350 [ 464.122672][T16726] ? __pfx_do_futex+0x10/0x10 [ 464.124182][T16726] arch_do_signal_or_restart+0x8f/0x7d0 [ 464.125912][T16726] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 464.127841][T16726] ? xfd_validate_state+0x61/0x180 [ 464.129452][T16726] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 464.131377][T16726] exit_to_user_mode_loop+0x84/0x110 [ 464.132992][T16726] do_syscall_64+0x3f6/0x4c0 [ 464.134451][T16726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.136320][T16726] RIP: 0033:0x7f89dc78e929 [ 464.137724][T16726] Code: Unable to access opcode bytes at 0x7f89dc78e8ff. [ 464.139914][T16726] RSP: 002b:00007f89dd5710e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 464.142490][T16726] RAX: fffffffffffffe00 RBX: 00007f89dc9b6088 RCX: 00007f89dc78e929 [ 464.144960][T16726] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f89dc9b6088 [ 464.147466][T16726] RBP: 00007f89dc9b6080 R08: 0000000000000000 R09: 0000000000000000 [ 464.149926][T16726] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f89dc9b608c [ 464.152394][T16726] R13: 0000000000000000 R14: 00007ffefe3c3cb0 R15: 00007ffefe3c3d98 [ 464.154877][T16726] [ 464.156566][T16726] Kernel Offset: disabled [ 464.157945][T16726] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:50:38 Registers: info registers vcpu 0 CPU#0 RAX=0000011a09ebb100 RBX=ffff88806a423a00 RCX=00000000000006e0 RDX=000000000000011a RSI=ffff88806a423a00 RDI=0000000000027df7 RBP=0000000000027df7 RSP=ffffc90000007ec8 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000019 R15=ffff88806a427c80 RIP=ffffffff81683545 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6718000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f26595726e0 CR3=000000010dff5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffefe3c4120 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89dc811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89dc811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89dc811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89dc811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89dc811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89dc811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000dd2ff3 RBX=0000000000000001 RCX=ffffffff8b881c69 RDX=0000000000000000 RSI=ffffffff8de3149c RDI=ffffffff8c158720 RBP=ffffed1003c53488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a6645 R10=ffff88806a53322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801e29a440 R14=ffffffff90a97450 R15=0000000000000000 RIP=ffffffff8b8807cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6818000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000040 CR3=0000000021a04000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556620edcc 000055556620ed20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555661fdd84 00005555661fdd80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555661fd490 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555566206178 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555566202aa8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 696c65732f01ffff ffffffffffffcd08 03800306800404a4 a808000100000c08 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0003800401c71000 080e49f400737461 74735f6568636163 2f6376612f78756e ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 696c65732e797469 727563657301ffff ffffffffffffdd08 0480030004000008 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e01ffffffffffff ffffef0809800304 80040100000e0806 040106c80078756e ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0107f7de10000980 040100000a080606 017cfe0b80040980 0404013fa2003065 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c69662f2e01ffff ffffffffffffef08 0b80030030656c69 662f2e01ffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffef080980 030480040100000e 0806040106c80078 756e696c65732e79 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7469727563657301 ffffffffffffffff dd08048003000400 00080003800401c7 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000050 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bb355 RDI=ffffffff9b0c22a0 RBP=ffffffff9b0c2260 RSP=ffffc90004e072b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000050 R14=ffffffff9b0c2260 R15=ffffffff855bb2f0 RIP=ffffffff855bb37f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6918000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc1f124ad58 CR3=000000010dff5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=3a810b1eb6134bdc DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffefe3c4120 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89dc811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89dc811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89dc811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89dc811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89dc811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89dc811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000097a541 RBX=0000000000000003 RCX=ffffffff8b881c69 RDX=0000000000000000 RSI=ffffffff8de3149c RDI=ffffffff8c158720 RBP=ffffed1003c56000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6645 R10=ffff88806a73322b R11=0000000000000001 R12=0000000000000003 R13=ffff88801e2b0000 R14=ffffffff90a97450 R15=0000000000000000 RIP=ffffffff8b8807cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a18000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555576df6808 CR3=00000000250fc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=3a810b1eb6134bdc DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e68011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e68011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e68011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e68011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e68011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e68011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03050906020c0400 0381050900052201 0700002109000300 0307040004090260 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e68ced100 00007f5e68185440 00007f5e68180004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e68185498 00007f5e68185490 00007f5e68185488 00007f5e68185480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000