last executing test programs: 5m7.522761567s ago: executing program 3 (id=592): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) shutdown(r1, 0x0) close(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x1a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000040)=0x84) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value, 0x8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000380)={"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"}) (async) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x6000, 0x3, 0x0, 0xeffffdff, 0x0, [{0x2, 0x81, 0xfc, '\x00', 0x5}, {0x4, 0x9, 0x82, '\x00', 0x7c}, {0xfc, 0x12, 0x4, '\x00', 0xb9}, {0x11, 0x8b, 0x0, '\x00', 0x7d}, {0xfe, 0x9, 0x4, '\x00', 0xa}, {0x0, 0x0, 0xfe, '\x00', 0x2}, {0xfc, 0x0, 0x6}, {0x0, 0xfa}, {0x1, 0x8f, 0x40, '\x00', 0x4}, {0xa8, 0x6, 0x0, '\x00', 0xf}, {0xe, 0x0, 0x0, '\x00', 0xfc}, {0x50, 0x99, 0x2, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0x42, 0x2, 0x6}, {0xc3, 0x0, 0x8, '\x00', 0x49}, {0x0, 0x21, 0x80, '\x00', 0x5}, {0x3}, {0x0, 0x2, 0x2, '\x00', 0x10}, {0x48, 0x0, 0xd}, {0x0, 0x80}, {0x0, 0x2, 0x0, '\x00', 0x37}, {0xfd, 0x8, 0x0, '\x00', 0x5}, {0x0, 0x4, 0x2, '\x00', 0x5}, {0x7f, 0xff, 0x3, '\x00', 0x7}]}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000001200), 0xa8e00) (async) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001200), 0xa8e00) read(r10, &(0x7f0000000200)=""/209, 0xd1) socket$nl_route(0x10, 0x3, 0x0) 5m7.23232215s ago: executing program 3 (id=595): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000300)={0x0, 0x0, {0x3, 0x2, 0xa, 0x0, 0x5}, 0x800}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) write$P9_RSTATu(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="330200007d00000005f2000000000000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f5bde05"], 0x233) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000ac0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000300)={0x0, 0x0, {0x3, 0x2, 0xa, 0x0, 0x5}, 0x800}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) (async) write$P9_RSTATu(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="330200007d00000005f2000000000000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f5bde05"], 0x233) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async) setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000080)=0x3, 0x4) (async) syz_emit_ethernet(0x36, &(0x7f0000000ac0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) (async) 5m7.230473835s ago: executing program 3 (id=597): ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000000)=""/36) (async) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000040)=0x6) r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000100)=@generic={0x3, 0x1000, 0x1}) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000140)={0x21}) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x80, 0x8, 0xe63, 0x40, {{0x6, 0x4, 0x2, 0x4, 0x18, 0x65, 0x0, 0x5, 0x4, 0x0, @multicast1, @broadcast, {[@end]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@mpls_newroute={0xb4, 0x18, 0x100, 0x70bd26, 0x25dfdbfe, {0x1c, 0x94, 0x14, 0x6, 0xfd, 0x0, 0xff, 0x8, 0x400}, [@RTA_DST={0x8, 0x1, {0x9, 0x0, 0x1}}, @RTA_NEWDST={0x84, 0x13, [{0x8, 0x0, 0x1}, {0x7ff}, {0x9}, {0xe, 0x0, 0x1}, {0x200, 0x0, 0x1}, {0x39a}, {0x9}, {0x6}, {0x35, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0x4}, {0x5, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x6}, {0x7}, {0x1, 0x0, 0x1}, {0x5}, {0x9, 0x0, 0x1}, {0x2}, {0x7, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x400, 0x0, 0x1}, {0xffff8, 0x0, 0x1}, {0x4}, {0xb, 0x0, 0x1}, {0xf, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5b0, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x3}]}, @RTA_MULTIPATH={0xc, 0x9, {0x8000, 0x15, 0x1, r2}}]}, 0xb4}}, 0x24000080) (async, rerun: 64) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000400)=0x60, 0x80800) (async, rerun: 64) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000000480)={0xd, 0x8, [{0x7e8, 0x0, 0x7}, {0xffff, 0x0, 0xd}, {0xc51, 0x0, 0x2}, {0x6, 0x0, 0x4}, {0xf0b, 0x0, 0xaf}, {0x6, 0x0, 0x200}, {0x343, 0x0, 0x3}, {0x8, 0x0, 0x617c}, {0xc978, 0x0, 0x6}, {0x8, 0x0, 0xd}, {0x0, 0x0, 0x401}, {0x10001, 0x0, 0x6}, {0x5, 0x0, 0xede}, {0xfffff19d, 0x0, 0x4}, {0xfffffff9, 0x0, 0x2}, {0xd5a6, 0x0, 0x6}]}) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000840)={0x0, &(0x7f0000000640)=[@nested_vmlaunch={0x12f, 0x18, 0x1}, @uexit={0x0, 0x18, 0xf4}, @rdmsr={0x66, 0x18, {0x275}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @guest16=0x810, 0x3, 0x1, 0x80000000}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x63, 0x7, 0x1, 0x2}}, @wrmsr={0x65, 0x20, {0x877, 0x5}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x6, 0x7, 0x1}}, @nested_amd_invlpga={0x17d, 0x20, {0x80a0000, 0xb853}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x581, 0x1000, 0x31e, 0x68000000000000}}, @wrmsr={0x65, 0x20, {0xa29, 0x7fffffff}}, @nested_amd_vmload={0x182, 0x18, 0x1}], 0x1c8}) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f0000000880)) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000a40)=0xe, 0x4) (async, rerun: 64) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000a80)={0x0, 'dummy0\x00', 0x1}, 0x18) (async, rerun: 64) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000ac0)=0xd5f, 0x4) (async) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000b00)={0x6}, 0x4) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0xd401f1ed8c891d58}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe17}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}]}, 0x2c}}, 0x4800) socket$phonet_pipe(0x23, 0x5, 0x2) (async) write$fb(r3, &(0x7f0000000c80)="50c5ee87f0acf0992474f7645a5d940b2e37d5bf0879", 0x16) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r3) getsockname$packet(r3, &(0x7f0000000d40)={0x11, 0x0, 0x0}, &(0x7f0000000d80)=0x14) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0xa8, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0xa8}}, 0x4) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000f00)="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") (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, &(0x7f0000001000)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000001040)={0x0, 0x0, r3}) (async) mq_timedsend(r3, &(0x7f0000001080)="b07bd40625e229a6a94185bc135bdc0094a9f8ef0c33edc72430cd61437b38c009826cb20238bce0bbbf", 0x2a, 0x4, &(0x7f00000010c0)={0x0, 0x3938700}) (async) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000001100)=0x1, &(0x7f0000001140)=0x4) 5m7.142011927s ago: executing program 3 (id=599): syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @volatile={0x0, 0x0, 0x0, 0xa}]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x46}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x13c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff6}}, [@qdisc_kind_options=@q_red={{0x8}, {0x110, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x13c}}, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x8017, 0x0) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c76657273696f6e010000003030302c00"]) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) write$P9_RVERSION(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff"], 0x15) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x2c, r5, 0x10ada85e65c25349, 0x70bd2b, 0x0, {{0x67}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x4}}}}, [@NL80211_ATTR_TID_CONFIG={0x4, 0x142}]}, 0x2c}}, 0x6048004) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, r5, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}}, 0x8011) syz_clone3(&(0x7f00000004c0)={0x100801000, &(0x7f0000000180), 0x0, 0x0, {0x1d}, &(0x7f0000000240)=""/118, 0x76, 0x0, 0x0}, 0x58) 5m6.950807581s ago: executing program 3 (id=605): r0 = syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000040)={0x0, 0x3}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) mount$9p_unix(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f00000002c0), 0xa, &(0x7f0000000340)={'trans=unix,', {[{@cache_loose}, {@cache_fscache}, {@cachetag={'cachetag', 0x3d, 'net_prio.prioidx\x00'}}, {@fscache}, {@cache_fscache}, {@cache_fscache}, {@uname={'uname', 0x3d, '+'}}, {@msize={'msize', 0x3d, 0xba5}}, {@posixacl}, {@cache_readahead}]}}) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000040)=0xd0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000280)=0x1) chdir(&(0x7f0000000280)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x80) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(r4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000300)={r6, @in6={{0xa, 0x4e20, 0x8, @loopback, 0x3}}}, &(0x7f0000000280)=0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000003c0)={r6, 0x1c, "303a8f4f7014e947069b06bab5ec8570064d2a93e4f3eafecd42074d"}, &(0x7f0000000040)=0x24) faccessat(r3, &(0x7f00000000c0)='./file1\x00', 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000801, 0x0, &(0x7f0000000140)={0xd81f, 0x1, 0x8000, 0x9, 0x4000000201, 0x80000007ffffffd, 0x9, 0x841d, 0x800000e2}) 5m6.761707514s ago: executing program 3 (id=607): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'veth0_to_bridge\x00', {0x2}, 0xfffe}) 5m6.669487004s ago: executing program 32 (id=607): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'veth0_to_bridge\x00', {0x2}, 0xfffe}) 5m0.482204643s ago: executing program 0 (id=694): capset(&(0x7f0000000080)={0x19980330}, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getpeername(r0, 0x0, 0x0) (async) getpeername(r0, 0x0, 0x0) pwritev(r0, &(0x7f0000000a00)=[{&(0x7f0000000740)="48ff81d57d54981913637f868b09cb5d531f4543626540a11bb89ae8a34d6fb783e68d25020f39e6b390e7cc519e2c02930de70cf0a9b767d769b889b1c797e3234495072c3ba34d6818f9558ad6b15d6ba19f2801f625a584796a997bae5e3846903e5a07675a5f66a820750598ba99b9705576631e9dfd4cb8aae46f49e83b534e5403461bf8624d0b19ad40c7dbb357381d81082894d5764e974a287e33d1499d9817e4d18a30d2b0e9338be8865f4d295f7182baf65eb30f5945eb534acc5e38f9693911217ddbffab19b399527fe90af66a6cfafa931a02b15e3b25d5368466d70173e847c81f0c3be609bb84736ba772a56052dc7d2e", 0xf9}, {&(0x7f0000000840)="d2ae92c96a69c7f160ac922db26dc6c6163b226c12822b4c74fa1d8ffed3cca3a9041f64865959815ad47e3beef2bd218648132ef29e7570047c34ba0b093a9e186a07d99f935808688f2e6b5cf580aad22e8fb67649520c1719ad7531351915be320719688fd426c47a154dd1b89937f32197368210b088aee7cca79d", 0x7d}, {&(0x7f00000008c0)="0b98ad0e84bdbfa916184c93e4888259d485f4a001a690208c01f4aa4dadb01230e62c98482fe6748c92f738f97d7e7d863cfcac44f8a7e47f48760b339b0e20a0853af269d58c83065b64889cee03c2cf3bef2b36af79", 0x57}, {&(0x7f0000000940)="7c42a22031aa2e958fcbffe8f813d4d05efd03ac938638c431fb383e961776584b36cea29409eedd73eb70c0659f2ad7a7fc6409d24aa9290cc2a194b5de65759a448d63b7f399f288d26e0b8f4aaef0e55d56142c07e47d2e6ab45726484f3e3ed2e3fc47437e6db77a8663fa42f0c0d3877f907d98ccd0acfd9db1cdb84781ff63859aadf8b55427d7b6f81ed061af33c0d8b0bb", 0x95}, {&(0x7f0000000e00)="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", 0x1ca}, {&(0x7f0000000ac0)="bb046b957b98d1557ae901891de7b7d520f1743cffffffff000000005a0cbd4ebe9df4f56bfa9bfdeef087f37644397d6b8ceb7272dd6575fc44a983bcb20772672dbab3b2d08c59993097065ede1fe251ff02e12322f9085a95cc3d02eb1e0d4f465f99176665a22e64daafb2d14c60c334d7c1395ae24593cb7e3f3193a45465aa3eee17b492302c0b0b400a22c38d28859891cbb99180392ecca2d9897222576efd113ad57474333f8139dd197c47e400fcffffffffffffd709a48092dd5cc16ef0fbad260f0e1d6380ff09344b9b0b1bc31cf754ed0c01961981455066ab1cac6769a3b222686208ee373d39c3a0a8f9005878ea0a", 0xf7}], 0x6, 0x6, 0xfffffff7) r1 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x40084146, &(0x7f0000000080)) (async) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x40084146, &(0x7f0000000080)) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000000300)=ANY=[@ANYRESHEX=r2], 0x56) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000, 0xffffffffffffffff}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000340)={0x0, 0x0, r4}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000340)={0x0, 0x0, r4}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) (async) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x114, 0x5, 0x101, 0x200}}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r6, r5, 0xff, 0x0) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r8, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) vmsplice(r7, &(0x7f0000001700)=[{&(0x7f0000001340)="89", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140), 0x0, 0x80800, 0x0, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xdd8}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xdd8}]}}}]}, 0x3c}}, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000700)={0x2}) getsockopt$inet6_mreq(r9, 0x29, 0x452d9750c5c845f5, &(0x7f0000000240), &(0x7f0000000280)=0x14) (async) getsockopt$inet6_mreq(r9, 0x29, 0x452d9750c5c845f5, &(0x7f0000000240), &(0x7f0000000280)=0x14) 4m59.591982504s ago: executing program 0 (id=703): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000100037042bbd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="080c0400040200005400128009000100626f6e64000000004400028008001c003d0900000800030006"], 0x74}, 0x1, 0x0, 0x0, 0x4040880}, 0x2400c050) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x800, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r5, r6, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000600)=@acquire={0x2cc, 0x17, 0x400, 0x70bd28, 0x25dfdbfb, {{@in=@multicast2, 0x4d6, 0x2b}, @in=@rand_addr=0x64010101, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@rand_addr=0x64010100, 0x4e22, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x80, 0x2f, r1, r2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@remote, 0x4e22, 0x0, 0x4e21, 0x6, 0x2, 0x20, 0x0, 0x2f, r1, r5}, {0x363, 0x0, 0xfffffffffffff80c, 0x7fffffff, 0x10000, 0x4b, 0x4, 0x1000}, {0x9, 0x360f, 0xc, 0x1}, 0xfff, 0x6e6bb9, 0x0, 0x1, 0x0, 0x2}, 0x7, 0x5, 0x7, 0x70bd2a}, [@migrate={0x180, 0x11, [{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast2, @in6=@mcast1, @in=@local, 0x6c, 0x7, 0x0, 0x3504, 0x2, 0x2}, {@in=@private=0xa010102, @in6=@loopback, @in6=@loopback, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x6c, 0x3, 0x0, 0x0, 0x2, 0xa}, {@in=@broadcast, @in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010102, 0xff, 0x2, 0x0, 0x3504, 0xa, 0xa}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@mcast2, @in6=@mcast2, @in=@private=0xa010100, 0x2b, 0x0, 0x0, 0x3507, 0x0, 0xa}, {@in=@multicast1, @in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, @in6=@private0, 0x3c, 0x4, 0x0, 0x0, 0xa, 0x8}]}, @replay_val={0x10, 0xa, {0x70bd28, 0x70bd28, 0x2}}, @coaddr={0x14, 0xe, @in=@loopback}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x20000800}, 0x448c4) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000600)=@acquire={0x2cc, 0x17, 0x400, 0x70bd28, 0x25dfdbfb, {{@in=@multicast2, 0x4d6, 0x2b}, @in=@rand_addr=0x64010101, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@rand_addr=0x64010100, 0x4e22, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x80, 0x2f, r1, r2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@remote, 0x4e22, 0x0, 0x4e21, 0x6, 0x2, 0x20, 0x0, 0x2f, r1, r5}, {0x363, 0x0, 0xfffffffffffff80c, 0x7fffffff, 0x10000, 0x4b, 0x4, 0x1000}, {0x9, 0x360f, 0xc, 0x1}, 0xfff, 0x6e6bb9, 0x0, 0x1, 0x0, 0x2}, 0x7, 0x5, 0x7, 0x70bd2a}, [@migrate={0x180, 0x11, [{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast2, @in6=@mcast1, @in=@local, 0x6c, 0x7, 0x0, 0x3504, 0x2, 0x2}, {@in=@private=0xa010102, @in6=@loopback, @in6=@loopback, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x6c, 0x3, 0x0, 0x0, 0x2, 0xa}, {@in=@broadcast, @in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010102, 0xff, 0x2, 0x0, 0x3504, 0xa, 0xa}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@mcast2, @in6=@mcast2, @in=@private=0xa010100, 0x2b, 0x0, 0x0, 0x3507, 0x0, 0xa}, {@in=@multicast1, @in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, @in6=@private0, 0x3c, 0x4, 0x0, 0x0, 0xa, 0x8}]}, @replay_val={0x10, 0xa, {0x70bd28, 0x70bd28, 0x2}}, @coaddr={0x14, 0xe, @in=@loopback}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x20000800}, 0x448c4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x800) (async) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x800) 4m59.529456129s ago: executing program 0 (id=706): syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x20, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x54, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x5e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}]}, 0x54}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = gettid() r6 = syz_open_procfs(r5, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r6, &(0x7f00000001c0)='0\x00', 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x3f000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}]}, 0x48}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000100), 0x3) r8 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) r9 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000000780)={0x3, {{0xa, 0x4e23, 0x9, @mcast1, 0x8}}}, 0x90) close(0x4) socket$inet_udp(0x2, 0x2, 0x0) 4m59.441629682s ago: executing program 0 (id=707): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x17}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x60085}, 0x3d1f705b7b82bbe) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb4, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_MODES={0x94, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_VALUE={0x3a, 0x4, "a9d2486cdff88dfdd59749d4ae876203ff55f56faaa4bdd40d9b1e329f92ae7b1080017193f4af69fd41602726ade4ec62ab7b22decc"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_THP_DISABLE(0x42, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000300)={@multicast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "fc1046", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20}}}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="c200"}) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val={0x0, 0x890d}, @val={0x3, 0x80, 0x4, 0x4, 0x9}, @ipv4=@generic={{0x24, 0x4, 0x1, 0x15, 0x145, 0x64, 0x0, 0xe, 0x1, 0x0, @multicast2, @loopback, {[@ssrr={0x89, 0x7, 0xcf, [@private=0xa010101]}, @timestamp_addr={0x44, 0x44, 0xc0, 0x1, 0x6, [{@private=0xa010101, 0x6}, {@multicast1, 0x2}, {@local, 0xea3}, {@empty, 0xc14}, {@local, 0x9}, {@empty, 0xa}, {@empty, 0xffff18e4}, {@multicast1, 0x8}]}, @timestamp_prespec={0x44, 0x2c, 0xee, 0x3, 0xe, [{@remote}, {@private=0xa010102}, {@empty, 0xc}, {@rand_addr=0x64010101, 0x20d}, {@remote, 0x9}]}, @ra={0x94, 0x4}]}}, "88ea7a424dc20770f229c500a1f22969af7a9a6523bfec5c85b7a32bdff817baf4bf74ab66872456a988cdf84b21492a9869575a21ad9299e44bffbcd7cdfca5cf593c04b9a53f3cb8b27697dcd4dfedce80f9c4cafd16412b3aa169ba47c9a31508c42f3152687fb13d885358998c3cf981015cd2d9c7c3e3eb969647a9ee4da5cb42cf0084e86e8a589f99985492aa3d6ff6a3f600ce94252ad09aac80fe91917d3b14f08dc29d4ed89794d3a765c00333a3a530"}}, 0x153) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 4m59.426064189s ago: executing program 0 (id=708): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r0 = userfaultfd(0x1) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) accept(0xffffffffffffffff, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0), 0x20201, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000040)) (async) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000680)='7', 0x1}], 0x1) (async) syz_usb_connect(0x5, 0x36, 0x0, 0x0) (async) close(r2) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) listen(r1, 0x3e5) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) (async) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1802000043000701fefffffffcdbdf25037c000004004580000201"], 0x218}}, 0xc000) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffe0, 0x1}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0xb, 0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 4m59.143920446s ago: executing program 0 (id=710): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff060002000800395032303030"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff060002000800395032303030"], 0x15) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) (async) 4m44.001382867s ago: executing program 33 (id=710): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff060002000800395032303030"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff060002000800395032303030"], 0x15) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) (async) 2m59.611986566s ago: executing program 5 (id=2285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newqdisc={0x188, 0x24, 0x100, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xa, 0x6}, {0xc, 0x8}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xcba, 0x9}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xcd}]}}, @TCA_STAB={0x138, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe5, 0x9, 0x9, 0x87e0, 0x2590cb2361c1b272, 0x7621, 0x4, 0x5}}, {0xe, 0x2, [0x1000, 0x1ff, 0x7, 0xffff, 0x81]}}, {{0x1c, 0x1, {0x0, 0x1, 0x8, 0x5, 0x1, 0x8a7e594, 0x8, 0x8}}, {0x14, 0x2, [0x1c01, 0x8, 0x3, 0x5, 0xd1, 0x218, 0x80, 0x8]}}, {{0x1c, 0x1, {0x0, 0xff, 0x3, 0x9, 0x0, 0x7, 0x4a, 0x6}}, {0x10, 0x2, [0xb0a9, 0xed3f, 0xf9ca, 0x0, 0x2, 0x6]}}, {{0x1c, 0x1, {0x1, 0x1, 0x0, 0x9, 0x0, 0xe68, 0x81, 0x2}}, {0x8, 0x2, [0x5, 0x2]}}, {{0x1c, 0x1, {0x2, 0x80, 0x6, 0x9777, 0x1, 0x200, 0x800, 0x2}}, {0x8, 0x2, [0x7, 0x7ff]}}, {{0x1c, 0x1, {0xb, 0xff, 0x1, 0x2, 0xbec2ae5f028d38e3, 0x3, 0x0, 0x9}}, {0x16, 0x2, [0xdf4, 0x2, 0x9, 0x9, 0x2c, 0x7, 0x1, 0x7, 0x200]}}, {{0x1c, 0x1, {0x3, 0x81, 0x8, 0x7, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x7, 0x401, 0xbd6f, 0x4, 0x2, 0x9]}}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newqdisc={0x188, 0x24, 0x100, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xa, 0x6}, {0xc, 0x8}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xcba, 0x9}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xcd}]}}, @TCA_STAB={0x138, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe5, 0x9, 0x9, 0x87e0, 0x2590cb2361c1b272, 0x7621, 0x4, 0x5}}, {0xe, 0x2, [0x1000, 0x1ff, 0x7, 0xffff, 0x81]}}, {{0x1c, 0x1, {0x0, 0x1, 0x8, 0x5, 0x1, 0x8a7e594, 0x8, 0x8}}, {0x14, 0x2, [0x1c01, 0x8, 0x3, 0x5, 0xd1, 0x218, 0x80, 0x8]}}, {{0x1c, 0x1, {0x0, 0xff, 0x3, 0x9, 0x0, 0x7, 0x4a, 0x6}}, {0x10, 0x2, [0xb0a9, 0xed3f, 0xf9ca, 0x0, 0x2, 0x6]}}, {{0x1c, 0x1, {0x1, 0x1, 0x0, 0x9, 0x0, 0xe68, 0x81, 0x2}}, {0x8, 0x2, [0x5, 0x2]}}, {{0x1c, 0x1, {0x2, 0x80, 0x6, 0x9777, 0x1, 0x200, 0x800, 0x2}}, {0x8, 0x2, [0x7, 0x7ff]}}, {{0x1c, 0x1, {0xb, 0xff, 0x1, 0x2, 0xbec2ae5f028d38e3, 0x3, 0x0, 0x9}}, {0x16, 0x2, [0xdf4, 0x2, 0x9, 0x9, 0x2c, 0x7, 0x1, 0x7, 0x200]}}, {{0x1c, 0x1, {0x3, 0x81, 0x8, 0x7, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x7, 0x401, 0xbd6f, 0x4, 0x2, 0x9]}}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x1000, 0x4e9, {0xffffffffffffffff}, {0xee01}, 0x1a2908f, 0x7}) fcntl$lock(r4, 0x25, &(0x7f0000000180)={0x1, 0x4, 0x0, 0x200000, r7}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 2m59.360949934s ago: executing program 5 (id=2290): r0 = syz_clone(0x10ea22f000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x42142, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$FUSE_NOTIFY_INVAL_INODE(r1, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000002c0)=ANY=[@ANYRES64=r5, @ANYRESHEX=r3, @ANYRES16=r0, @ANYRES16, @ANYRESOCT=r5], 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read$FUSE(r9, &(0x7f00000000c0)={0x2020}, 0x2020) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000002100)=[{0x0, 0x1, {0x2, 0x1}, {0x2, 0x1, 0x4}, 0x2, 0xfd}, {0x2, 0x1, {0x2, 0x1, 0x4}, {0x0, 0x0, 0x6}, 0x0, 0xfd}, {0x2, 0x2, {0x0, 0x0, 0x2}, {0x2, 0xf0}, 0xfd}, {0x3, 0x3, {0x2, 0x1}, {0x0, 0x0, 0x1}, 0xff}, {0x2, 0x1, {0x1, 0x0, 0x1}, {0x2, 0xff, 0x3}, 0xfd, 0xfe}, {0x2, 0x0, {0x2, 0x0, 0x4}, {0x2, 0x1, 0x3}, 0x0, 0x2}, {0x0, 0x2, {0x1, 0x0, 0x4}, {0x2, 0x0, 0x2}, 0xff, 0xfd}, {0x0, 0x2, {0x1, 0x1, 0x4}, {0x1, 0x1, 0x4}, 0xfe, 0xff}, {0x0, 0x1, {0x0, 0x0, 0x3}, {0x2}, 0x0, 0xfd}, {0x1, 0x0, {0x0, 0xff, 0x1}, {0x1, 0x1, 0x4}, 0xfe}], 0x140) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001d00010029bd7000fedbdf2507000000", @ANYRES32=r8, @ANYBLOB="80007e0a0a000200aaaaaaaaaaeeffff05000500"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) read(r10, &(0x7f0000000140)=""/59, 0x3b) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r6, @ANYRESHEX=r6, @ANYRESHEX=r6, @ANYRES32, @ANYRES64=r6, @ANYRES16=r8], 0x1c}, 0x1, 0x0, 0x0, 0x20000042}, 0x4000080) openat$cgroup(r5, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) 2m59.153601372s ago: executing program 5 (id=2294): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x19d000, 0x28) mkdirat(r0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20) (async) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m59.130451249s ago: executing program 5 (id=2296): creat(&(0x7f00000063c0)='./file0\x00', 0x120) socket$nl_generic(0x10, 0x3, 0x10) rmdir(&(0x7f0000007880)='./file0\x00') syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="1eef4f52e1241299c27f50d847009ec90006af8d8e20b609a5f2c121f8a9b5a94d6ecb9bf0f26368fe1f9a31e4a7acb5e29fd6d25a3eac777d63ed799407af", @ANYRES64=0x0], 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633"], 0x6f4}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 2m59.042074601s ago: executing program 5 (id=2297): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000500)="94ee65c3489d47f746cbb94e0f261b29fb59684baac18c59", 0x8}, 0x38) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000200)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="02017d298cdc18000e3580009f0001140000002f0600ac141414e0000003808a89723a0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000061f2d72698b22ef954faa5ac27bc4f1d5e31e7260003905f"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd0c, 0x10, &(0x7f0000000000), 0x76}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x17, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0x9, 0x41595556, 0x7, 0x5, [{0x8000006, 0xd382}, {0xdc5, 0x7}, {0x0, 0x4}, {0x6, 0x10000}, {0x1000, 0xd3}, {0x6, 0x6}, {0x1, 0x5}, {0xdfffffff, 0x8000}], 0x7, 0x7, 0x2, 0x0, 0x1}}) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000200)) munmap(&(0x7f0000003000/0x1000)=nil, 0x1000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000001c0)={@my=0x0}) move_pages(0x0, 0x4, &(0x7f0000000040)=[&(0x7f0000002000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000007000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 2m59.030844373s ago: executing program 5 (id=2298): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029047000ffdbdf250e0000003400028008000800060000000885000000000000080006000001000005000d000000000008000600090000000800050004000000"], 0x48}, 0x1, 0x0, 0x0, 0x40081e0}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x981181, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000080)={{0x4, 0xffffffff, 0x0, 0x9e, 0x3, 0x1, 0xf, 0x0, 0x0, 0xf9, 0x0, 0x7f}, {0xd000, 0x8080000, 0x3, 0x5, 0xc2, 0xc0, 0x9, 0x66, 0xc5, 0x7, 0x30, 0x40}, {0xdddd0000, 0xdddd1000, 0xf, 0x6, 0xb, 0x34, 0xe, 0x6, 0x3, 0xc, 0x2, 0xff}, {0x8000000, 0x80a0000, 0xc, 0x58, 0x7f, 0x76, 0x2, 0xc, 0x7f, 0xfc, 0x9, 0xf}, {0x504ce1cb89483871, 0x1000, 0xa, 0x8f, 0x80, 0x2, 0x9, 0x3, 0x1, 0x8, 0x4, 0x6}, {0xdddd1000, 0x6000, 0x3, 0x2, 0x3, 0x7, 0x1, 0xb7, 0x2, 0x1, 0xf8, 0xd}, {0xf7f71000, 0x100000, 0x10, 0x2, 0x8, 0x3, 0x6, 0x0, 0x9, 0xb, 0x6, 0x7}, {0xeeee0000, 0x5000, 0x9, 0x6, 0xff, 0x0, 0x9, 0x80, 0x9, 0x8f, 0xdb, 0x31}, {0x4000, 0x59}, {0x4, 0x6}, 0x10000, 0x0, 0x1, 0x151, 0x3, 0x1000, 0xdddd1000, [0x8, 0x3, 0x3, 0x3]}) memfd_create(&(0x7f0000000240)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\x03\x00\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\x06e\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\x04\x00\x00\x00\x00\x00\x00\x00\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xb0\xc9\b\x00\x81\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00W]\x94|.s\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\x14v\xb6\x04\xf2U\xb4\xf6\xbeq\xa0\xb3K*\xa0\xb15\xf5\r\x11\\\xf8\xc0\xb8\xb9\xddT\xcb\x00\x00\xff\xff\xff\xff\xff\xff\xff\x7f\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&dw\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\x03\x00\x00\x00\x00\x00\x00\x00\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd75\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\xa2K\xa1\xb3\xce\x1e\x96{%\xa8\xc7\x93\xdb\x80v+o\xb8\xe8\x1b\x06\xfbwb\x11\xb7\x9fu\xf3\xd3\x7f\x04k\xa0B\xa5\xc9\xb1\xec\xb1\xf6\x11\xc1O\xecG\xe6q5\x97u\x0fl\x90\x9b\x9f\xaf\xfb\xdf\x12^\xc9\x92|\x11\"\xd7\xb5\xf0\xdc\\\f\xec\xfd\xa1\xfdVZ*\xeb\xde\x14\xe0\x8b\x1c\x820b\x89\xbd\xd7\x0e\x9b\xf2\xe9A\xfb\x89\xc6\x84\x14b\xd4\x7f\xdf.\x05\x00S\xf5\x19\xb4fE\x87\xd4E\xc8>\x8f\x05Bg\x15\xe1\x8c\x94ERT\xac\xb4\x00\x00\x00\x00\x00\x00\x00\xc4\x0f\xc1\x9e\xf6#f\x03\xb0\xe4\xb6\xf5\x04z+Pa\xbc\x12a7z\xad6\xf7\xeb\xa7\x88\"\xcf\xf6\xcfP\x12\a;h\x95\x90\x83\x06\x00\x00\x00X\x9a\xd5U\x8e\n\xcej\xf0\xfcX\x84\x1a\xc93\x0f\x89\x04\xe1,J\x8f\xcb\x89\xae\xc5\xa1\xee\xe1 \xa0\xa3\x0e\x894\xab7\xb0\xd9\xaf\xa9/\x91\xf2\xf6sqS\xdd\xb54\xd8$igU\xcf\x0fO\xd4\xe0\x96X$\xe9r\x8d\xf3c\x0e\xba\xd4\x1c,\fV\xa3\x00', 0x7) socket(0x2, 0x80805, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r5], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x6e0}]}) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000001a00000825bd7000fedbdf251c140040fd02ff090004000014001200050030eac62ae064a48cb18cb64da87105001a000000000008000400", @ANYRES32=r1, @ANYBLOB="080001ea000000001400120002001e8713d7b7f20fab64c81b09006d"], 0x5c}, 0x1, 0x0, 0x0, 0x8850}, 0x20004011) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000304000000", @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006c6f7770616e00000400028008000500", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x8000) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x3}) 2m43.643300454s ago: executing program 34 (id=2298): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029047000ffdbdf250e0000003400028008000800060000000885000000000000080006000001000005000d000000000008000600090000000800050004000000"], 0x48}, 0x1, 0x0, 0x0, 0x40081e0}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x981181, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000080)={{0x4, 0xffffffff, 0x0, 0x9e, 0x3, 0x1, 0xf, 0x0, 0x0, 0xf9, 0x0, 0x7f}, {0xd000, 0x8080000, 0x3, 0x5, 0xc2, 0xc0, 0x9, 0x66, 0xc5, 0x7, 0x30, 0x40}, {0xdddd0000, 0xdddd1000, 0xf, 0x6, 0xb, 0x34, 0xe, 0x6, 0x3, 0xc, 0x2, 0xff}, {0x8000000, 0x80a0000, 0xc, 0x58, 0x7f, 0x76, 0x2, 0xc, 0x7f, 0xfc, 0x9, 0xf}, {0x504ce1cb89483871, 0x1000, 0xa, 0x8f, 0x80, 0x2, 0x9, 0x3, 0x1, 0x8, 0x4, 0x6}, {0xdddd1000, 0x6000, 0x3, 0x2, 0x3, 0x7, 0x1, 0xb7, 0x2, 0x1, 0xf8, 0xd}, {0xf7f71000, 0x100000, 0x10, 0x2, 0x8, 0x3, 0x6, 0x0, 0x9, 0xb, 0x6, 0x7}, {0xeeee0000, 0x5000, 0x9, 0x6, 0xff, 0x0, 0x9, 0x80, 0x9, 0x8f, 0xdb, 0x31}, {0x4000, 0x59}, {0x4, 0x6}, 0x10000, 0x0, 0x1, 0x151, 0x3, 0x1000, 0xdddd1000, [0x8, 0x3, 0x3, 0x3]}) memfd_create(&(0x7f0000000240)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\x03\x00\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\x06e\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\x04\x00\x00\x00\x00\x00\x00\x00\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xb0\xc9\b\x00\x81\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00W]\x94|.s\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\x14v\xb6\x04\xf2U\xb4\xf6\xbeq\xa0\xb3K*\xa0\xb15\xf5\r\x11\\\xf8\xc0\xb8\xb9\xddT\xcb\x00\x00\xff\xff\xff\xff\xff\xff\xff\x7f\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&dw\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\x03\x00\x00\x00\x00\x00\x00\x00\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd75\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\xa2K\xa1\xb3\xce\x1e\x96{%\xa8\xc7\x93\xdb\x80v+o\xb8\xe8\x1b\x06\xfbwb\x11\xb7\x9fu\xf3\xd3\x7f\x04k\xa0B\xa5\xc9\xb1\xec\xb1\xf6\x11\xc1O\xecG\xe6q5\x97u\x0fl\x90\x9b\x9f\xaf\xfb\xdf\x12^\xc9\x92|\x11\"\xd7\xb5\xf0\xdc\\\f\xec\xfd\xa1\xfdVZ*\xeb\xde\x14\xe0\x8b\x1c\x820b\x89\xbd\xd7\x0e\x9b\xf2\xe9A\xfb\x89\xc6\x84\x14b\xd4\x7f\xdf.\x05\x00S\xf5\x19\xb4fE\x87\xd4E\xc8>\x8f\x05Bg\x15\xe1\x8c\x94ERT\xac\xb4\x00\x00\x00\x00\x00\x00\x00\xc4\x0f\xc1\x9e\xf6#f\x03\xb0\xe4\xb6\xf5\x04z+Pa\xbc\x12a7z\xad6\xf7\xeb\xa7\x88\"\xcf\xf6\xcfP\x12\a;h\x95\x90\x83\x06\x00\x00\x00X\x9a\xd5U\x8e\n\xcej\xf0\xfcX\x84\x1a\xc93\x0f\x89\x04\xe1,J\x8f\xcb\x89\xae\xc5\xa1\xee\xe1 \xa0\xa3\x0e\x894\xab7\xb0\xd9\xaf\xa9/\x91\xf2\xf6sqS\xdd\xb54\xd8$igU\xcf\x0fO\xd4\xe0\x96X$\xe9r\x8d\xf3c\x0e\xba\xd4\x1c,\fV\xa3\x00', 0x7) socket(0x2, 0x80805, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r5], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x6e0}]}) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000001a00000825bd7000fedbdf251c140040fd02ff090004000014001200050030eac62ae064a48cb18cb64da87105001a000000000008000400", @ANYRES32=r1, @ANYBLOB="080001ea000000001400120002001e8713d7b7f20fab64c81b09006d"], 0x5c}, 0x1, 0x0, 0x0, 0x8850}, 0x20004011) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000304000000", @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006c6f7770616e00000400028008000500", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x8000) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x3}) 1m26.313308839s ago: executing program 1 (id=3016): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m24.853770696s ago: executing program 1 (id=3031): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x53, 0x0, 0x5, {0x8007, 0x1}, {0x40, 0x2}, @const={0x2, {0xf, 0x5, 0x5, 0x1004}}}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x141e00, 0xa0) connect$pppl2tp(r0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x882a01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x1307) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$COMEDI_SUBDINFO(r1, 0x80486402, &(0x7f00000000c0)) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000440)=[{0x1, 0x1, {0x0, 0xff, 0x2}, {0x1, 0xff, 0x4}, 0x2, 0xfd}], 0x20) 1m24.755468463s ago: executing program 1 (id=3032): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = open(0x0, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) writev(r2, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0xc0105500, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 1m24.697604749s ago: executing program 1 (id=3033): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000010b00000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, r2, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c3}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newqdisc={0x50, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}, @TCA_RATE={0x6, 0x5, {0x3e, 0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) vmsplice(r8, &(0x7f0000000500)=[{&(0x7f0000000240)="bc6c740f5a6bea1857fb0688c3296aecc1bdbe88e207cb28e272cc8ba8bc37584937b5d57753e2726583c573b84cc3db71b58563a9232032060d6326e8be4ee1a1f96a71a2c7c96cb538e32dfb65bbcc7a6a1a90c1cde658e17b20784de5702a27393603e6931fcb", 0x68}, {&(0x7f00000001c0)="a710c424898c75a74fee2379ecdbadb4ea", 0x11}, {&(0x7f00000002c0)="7f88ab01b06c6c07a3ac9baaada93b37d7f725aeca44f5438e1d1289bae5f6dcea0f24bee331394bbb2bc7e7735b1ee3135afa893e0b6e", 0x37}, {&(0x7f0000000300)="e704a84f1806db9cda912a273c664315c64c348ade4e89f37de50d95deedd1e0d00c781fc54c853bcb55a5044234c61ce3a920e7a72d44e7f97f02cbd9bd6ce816133f072e5a3693dfb57208f848a47aef5c473191df03e2beb326096f6760076662535fb03b78d17044cbc7023867476e99d3cf6363e6d0a8423265c902f1f599aca198bf0eb49904beb46242979c4b1cbffc97f403715f64d4fcfddb8edef49de1796ca0942c8d06b12b9ae6675d0388f95dac52d16b5d65b61bd908472d367dfb0efd1b4a137eb500936d7896", 0xce}, {&(0x7f0000000400)="d8964639d6467304d8305f5e4a6c4c", 0xf}, {&(0x7f0000000440)="6399073be764bae2508bdc894b553096eaf2da98aba8c610db37918601c55046517586e4147237531cc534764e276ec8dcadd6f72352163df00605cd85b478dade917a945faabc7c6df7404c649079bb49faf85d1cb29c7d22ae7c9075c74eea15f80fedf3aeda07a7bd266602019074a86c8b30f2ea3805d3b2800c0be4cdb1fc8820e962cf6331af899d6d141f0273b40c17fbb75bcb8b88647e7310573e516118fe4ee8e37eca5f24060119eeb30442465d4d", 0xb4}], 0x6, 0x9) r9 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f000055e000/0x4000)=nil, 0x4000, 0x1, 0x2010, r9, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="10000000040000000800000037e3be00"/28, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8, @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r12}, &(0x7f0000000000), &(0x7f0000000040)=r13}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r12}, &(0x7f0000000400), &(0x7f0000000440)=r11}, 0x20) pwritev2(r9, &(0x7f0000000000)=[{&(0x7f0000000080)="2976aaa77d3c3404ecfb333d7ce4d521b30e6b2e88fc560b85eff4288bec1e89728fe0342ae25bf7d10ff47b2d2faff1de64a969be09b6f0cb04106d94338646e746bd381d0d2f0de4bbc199a251f705573b4599895ede19680001183cc9deb9c5a0bd5886c4335ebdf147b53bacc6dec866429fb28eaa069c45d5b63f966061615e93afa8afd0da33109677d1287da93a5cafab6a40f41167bfaec7e187a4f24ca996187a6069655dd5bc5659", 0xad}], 0x1, 0x7, 0x1a6, 0x7) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000580)=r2) r14 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x801, 0x0) ioctl$SNAPSHOT_S2RAM(r14, 0x330b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 1m24.320087009s ago: executing program 1 (id=3034): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0xf, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) mknodat(r1, &(0x7f0000000280)='./file0\x00', 0x8, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='uid']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x0, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2, r2}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r2, r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x2}]}, &(0x7f0000000b00)='syzkaller\x00', 0x2, 0x0, 0x0, 0xef3d8d17c68839ca, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4, r4}, &(0x7f0000000600), &(0x7f0000000640)=r3}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000a80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 1m24.23942875s ago: executing program 1 (id=3035): r0 = io_uring_setup(0x7d5, &(0x7f0000000500)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x8800, 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = fcntl$dupfd(r3, 0x406, r4) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r5, 0x400455c8, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) 1m6.310074778s ago: executing program 35 (id=3035): r0 = io_uring_setup(0x7d5, &(0x7f0000000500)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x8800, 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = fcntl$dupfd(r3, 0x406, r4) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r5, 0x400455c8, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) 1m4.360121874s ago: executing program 2 (id=3075): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="10010000", @ANYRES16=0x0, @ANYBLOB="c88845e7e05ae5ad00ff0000000000000017"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, {0x10, 0xfff2}, {}, {0xffff, 0x10}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) 1m2.690500044s ago: executing program 2 (id=3077): syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0xfdcd, 0x0, @wg=@data}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, r0}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2, r2}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) (async, rerun: 32) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2200}}, 0x83}}, 0x40) (async, rerun: 32) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000084}, 0x44) (async, rerun: 32) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r9, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r9, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x1095, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r10, r11, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000c80)={{{@in=@empty, @in=@private=0xa010102, 0x4e22, 0x3, 0x4e22, 0x4, 0x2, 0xa0, 0xa0, 0xff, r7, r10}, {0x8, 0x8, 0x100000000, 0x80000001, 0x5, 0x4d8, 0xefd2, 0x80000000}, {0x1, 0x1, 0x7fffffffffffffff, 0x4}, 0x7, 0x6e6bb2, 0x1, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x4d4, 0x3c}, 0xa, @in=@empty, 0x3506, 0x3, 0x3, 0x2, 0x9bbf, 0x5, 0x9}}, 0xe8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000a80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) (async) capset(&(0x7f0000000d80)={0x19980330, r12}, &(0x7f0000000dc0)={0x80000000, 0x84, 0x8001, 0x0, 0x8, 0x2}) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) (rerun: 32) 1m2.611321156s ago: executing program 2 (id=3080): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x194, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@loopback, 0x0, 0xecdf, 0x0, 0x200}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x64010100, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x8, 0x400800, 0x0, 0x400}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0xc0}}]}, 0x194}}, 0x4050) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) unshare(0x400) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtclass={0xa4, 0x28, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {0x7, 0xe}, {0xfffc, 0x3}}, [@tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x64, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0xe, 0x1c, 0x2ef}}, @TCA_HFSC_FSC={0x10, 0x2, {0xc99f, 0xc, 0x3}}, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0x7, 0x6}}, @TCA_HFSC_RSC={0x10, 0x1, {0x3ff, 0x8}}, @TCA_HFSC_FSC={0x10, 0x2, {0x4, 0x6, 0x3}}, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x5, 0x3ff}}]}}]}, 0xa4}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000180)={0x1, 0x5, 0x5, &(0x7f0000000100)={0x1c, "b6f5eac76e436afb93e063ed9db4f9bf42fd27e6a154034b28a38d7b6ef7ffe7e6"}}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0x2}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x10}]}}]}, 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x194, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@loopback, 0x0, 0xecdf, 0x0, 0x200}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x64010100, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x8, 0x400800, 0x0, 0x400}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0xc0}}]}, 0x194}}, 0x4050) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) unshare(0x400) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtclass={0xa4, 0x28, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {0x7, 0xe}, {0xfffc, 0x3}}, [@tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x64, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0xe, 0x1c, 0x2ef}}, @TCA_HFSC_FSC={0x10, 0x2, {0xc99f, 0xc, 0x3}}, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0x7, 0x6}}, @TCA_HFSC_RSC={0x10, 0x1, {0x3ff, 0x8}}, @TCA_HFSC_FSC={0x10, 0x2, {0x4, 0x6, 0x3}}, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x5, 0x3ff}}]}}]}, 0xa4}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00'}) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) (async) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000180)={0x1, 0x5, 0x5, &(0x7f0000000100)={0x1c, "b6f5eac76e436afb93e063ed9db4f9bf42fd27e6a154034b28a38d7b6ef7ffe7e6"}}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0x2}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x10}]}}]}, 0x3c}}, 0x0) (async) 1m2.472282431s ago: executing program 2 (id=3084): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) pselect6(0x40, &(0x7f0000000040)={0x9, 0x62ca, 0x20, 0x0, 0x100000, 0xffffffffffffffff, 0x53, 0xecbc}, 0x0, 0x0, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x1}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x420f, r2, 0x0, 0x60000000000000) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') getdents64(r1, &(0x7f0000000400)=""/4096, 0x1000) 1m2.268730455s ago: executing program 2 (id=3088): r0 = syz_io_uring_setup(0x497, &(0x7f0000000140)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340), &(0x7f0000000600)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a", @ANYRES64, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x24000004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) rt_tgsigqueueinfo(r2, r2, 0x400000a, &(0x7f0000000600)={0x81, 0x40000003, 0xfffff2bb}) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{&(0x7f0000000240)="0e90e360ad0bc481da5cf47628b373116821f714d06a2161398ebcc855fbbc6725487c3ca36cc2fb6f981733b12d1c270efb892e49277d1c12c4cba8692b15afcb3375ec01407628e44c812b026ffd8c59be47644657b2dfdd16f30d628611fd51633d920f993f1a5b4e1f568efa31996a2142faeb39a9064787fa069c52", 0x7e, 0x1}, {&(0x7f0000000000)="996898fe5bce3fd76a15", 0x6}, {&(0x7f0000000380)="073836c3191e92c7039f784fce15185a58056f8e49f2bb8aa6d32c749eae3e7c0123f76ff9777debfca46d8773f495d63d85db947e5d71fa9f0cfe54994ddf403309409600756b1d996ecb0f8f5178a6ce45ca6324177715d4be8b92b8ebae883fa21b5350e8d3fcc5891a9f0e736c6db70f9b62848a5161c413f7fc491cf978bf1340971e78aa730da00962fd0997e50e6f110dbd603c0ec51443bc00c647734683aee0c9bfd30a8910ce998a9c93f6ef3dc408e88ddfc38f65757bea005a1f61bbd28bc09926405f34e8485de13a1a0f47978266ed8b1ef4c4f3", 0xdb, 0x1}, {&(0x7f00000002c0)="321e370fe24bfe7bb2cf2bba4c53b1b5bcbb1acc4d24f1c69c1cc6af7e5624589d3ef6fa7526673eed795f", 0x2b, 0x2}, {&(0x7f0000000480)="82b2dcb7bbe4653223f48aac7e2036598c358e5c10c2a865dbc8c65cc6d1e9b7ed056381a92d52f076f49e1faa04bfdb50f2529d52d17e2c7b1b7c528c7d0c0b14abfbfd46b0f5942c90b0adf4d8e70beb4f5d5f7844faf2e7fa487b56fecf3a2d429db22adf6eaf4b36bbee8d56dcfff36ce686828319283d4328708e72f918863e0b361a5dbae80653ee96a19de5ada0161af89a29b3121a96c6268fda8d6e6ea2a17a14925cb4a79c7e86f61ec3233d7039fdc55c4f958a6f459c28ba1e55309f0aa9966ff7e3654353e98c3508", 0xcf, 0x3}]}, 0x5, 0x21}, 0x1) 1m1.888818973s ago: executing program 2 (id=3096): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) (async) syz_emit_ethernet(0x58, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv4={0x800, @generic={{0xa, 0x4, 0x1, 0x6, 0x4a, 0x65, 0x0, 0x2, 0x62, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, {[@lsrr={0x83, 0x13, 0x97, [@multicast1, @rand_addr=0x64010101, @broadcast, @multicast1]}]}}, "c8e045faf5b2d7c8d6c15839a7df1d4fb524e79679bd25caa3cc16cad773b05b2e0e"}}}}, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f0000000640)=[@code={0xa, 0x5f, {"f0470fb335c24d0000430f015e188f6978807a0048b8385dd79080582d3e0f23c00f21f835020005000f23f864f3450f32b805000000b9050000000f01d9c4e2e10ae50ff8c7f30fd6d7470f01d1"}}], 0x5f}) (async) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)="8c") ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) (async) ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f0000000040)={0x101ff, 0x2c0, 0x300, &(0x7f00000006c0)=[0x8, 0x1000, 0x2, 0xfffffffffffffffb, 0x3, 0x8, 0x4, 0x40, 0xd3, 0x9, 0x7, 0xfffffffffffffffd, 0x4, 0x5, 0x2, 0x8, 0x45a, 0x4, 0x5, 0x2815833, 0x158cb628, 0x0, 0x0, 0x0, 0x80, 0x40, 0x7, 0xb4, 0x0, 0x6, 0x6, 0x1, 0x800, 0x5, 0x101, 0x7fffffffffffffff, 0x8001, 0x5, 0xffffffffffffff80, 0xffff, 0xf, 0x80000000, 0x8000000000000001, 0x2, 0x0, 0x400, 0x5, 0x1, 0x8, 0xc1, 0x6c0000000000000, 0xbfc, 0x6d, 0x2, 0x7fff, 0x3ff, 0x800, 0x1, 0x5, 0x0, 0x0, 0x9, 0x3, 0x9c, 0x0, 0x70e6, 0xfffffffffffffff9, 0xffff, 0x8000000000000001, 0xb, 0xe, 0x1, 0xc4d, 0x5a9, 0xb, 0x1, 0x9, 0xeff, 0x1, 0x3, 0x0, 0x8000000000000000, 0x9, 0x6, 0x2, 0x8, 0xffffffff, 0x58, 0x7, 0x8000, 0x0, 0x7, 0x1, 0x8, 0x7f, 0x1ff, 0x8, 0x200, 0x6, 0x47cc, 0x6, 0x8, 0x4f48, 0x6, 0x1, 0x6, 0x100000001, 0xa53, 0xffffffffffff4100, 0x10001, 0x4, 0x5, 0xf9, 0x8, 0x5, 0x3, 0x2, 0x3, 0x9, 0x4, 0x6, 0x5, 0x10, 0x7, 0x1, 0x4b94a99a, 0x80000000, 0x7]}) (async) r7 = syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) ioctl$KVM_GET_MSRS_sys(r12, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x487, 0x0, 0x9}]}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x30, r10, 0x5, 0x70bd27, 0x20003, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x81}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005}, 0x20000010) (async) sendmsg$NL80211_CMD_DISASSOCIATE(r8, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1f4, r10, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_IE={0x1d2, 0x2a, [@random={0x4, 0x52, "c4f27644dc57687a8c0b9cc425c5559e34609f1d7b73f68a0275fbbe0dd7b99f41c5d0168cbe68187a50cca5fdf7fb7e63b901a34be645ce5f1028ea156de61c1c5cab8055e7601e865be8293170a7fa6664"}, @mesh_id={0x72, 0x6}, @ht={0x2d, 0x1a, {0x800, 0x0, 0x0, 0x0, {0xc, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x1, 0x2}, 0x400, 0x2, 0xe}}, @channel_switch={0x25, 0x3, {0x1, 0xe, 0x80}}, @peer_mgmt={0x75, 0x8, {0x1, 0x2, @val=0x3, @val=0xc, @void}}, @measure_req={0x26, 0xed, {0xfe, 0x1, 0xd, "5e4864765be60ee7d2e9a58154443ac0e4e8056a4e2d63d2293882cb731df8caa36f8bc07ed636fcd17daea9c117db6f7d756e4cf07bf976d92778d42e8f9e4f977a82cf8dfe2ca63f3b748b8fdeb51c7aa4d8caef40ed36ad6e8195fb199ed35603398d3c19afccc0530214840e2cbda09598988f8cc7566f9435ab24faf8c82eb0552999ef7d18853877bd591434969cc725592d2fab23502f04b5506147bf2500935d5ddb1aee72a56863bf93554590741b5c5351886ec782317f4330c56a03cee782fe04f8168bd90527bbb04a0264bf505544cc2a70d4ad96f8b72329e26efe6087f693ba23faa3"}}, @fast_bss_trans={0x37, 0x56, {0x43, 0x1, "52ae2d33d2efecdff4168514da0f0688", "df70f53d5e7c6b35b1ef9a84a46a0dd3c8a0b2940f1012abd13f245621b38472", "577f28e4b883e61b7268f8518cbce703fd7b1927a07acbb567ab9c2cd3e9a129", [{0x3, 0x2, "9bb3"}]}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r7, 0xc0405665, &(0x7f00000004c0)={0x0, 0x1, 0x0, 0x20, 0x9959, 0x8, 0x2}) (async, rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) (rerun: 32) 1m1.777454563s ago: executing program 36 (id=3096): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) (async) syz_emit_ethernet(0x58, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv4={0x800, @generic={{0xa, 0x4, 0x1, 0x6, 0x4a, 0x65, 0x0, 0x2, 0x62, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, {[@lsrr={0x83, 0x13, 0x97, [@multicast1, @rand_addr=0x64010101, @broadcast, @multicast1]}]}}, "c8e045faf5b2d7c8d6c15839a7df1d4fb524e79679bd25caa3cc16cad773b05b2e0e"}}}}, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f0000000640)=[@code={0xa, 0x5f, {"f0470fb335c24d0000430f015e188f6978807a0048b8385dd79080582d3e0f23c00f21f835020005000f23f864f3450f32b805000000b9050000000f01d9c4e2e10ae50ff8c7f30fd6d7470f01d1"}}], 0x5f}) (async) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)="8c") ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) (async) ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f0000000040)={0x101ff, 0x2c0, 0x300, &(0x7f00000006c0)=[0x8, 0x1000, 0x2, 0xfffffffffffffffb, 0x3, 0x8, 0x4, 0x40, 0xd3, 0x9, 0x7, 0xfffffffffffffffd, 0x4, 0x5, 0x2, 0x8, 0x45a, 0x4, 0x5, 0x2815833, 0x158cb628, 0x0, 0x0, 0x0, 0x80, 0x40, 0x7, 0xb4, 0x0, 0x6, 0x6, 0x1, 0x800, 0x5, 0x101, 0x7fffffffffffffff, 0x8001, 0x5, 0xffffffffffffff80, 0xffff, 0xf, 0x80000000, 0x8000000000000001, 0x2, 0x0, 0x400, 0x5, 0x1, 0x8, 0xc1, 0x6c0000000000000, 0xbfc, 0x6d, 0x2, 0x7fff, 0x3ff, 0x800, 0x1, 0x5, 0x0, 0x0, 0x9, 0x3, 0x9c, 0x0, 0x70e6, 0xfffffffffffffff9, 0xffff, 0x8000000000000001, 0xb, 0xe, 0x1, 0xc4d, 0x5a9, 0xb, 0x1, 0x9, 0xeff, 0x1, 0x3, 0x0, 0x8000000000000000, 0x9, 0x6, 0x2, 0x8, 0xffffffff, 0x58, 0x7, 0x8000, 0x0, 0x7, 0x1, 0x8, 0x7f, 0x1ff, 0x8, 0x200, 0x6, 0x47cc, 0x6, 0x8, 0x4f48, 0x6, 0x1, 0x6, 0x100000001, 0xa53, 0xffffffffffff4100, 0x10001, 0x4, 0x5, 0xf9, 0x8, 0x5, 0x3, 0x2, 0x3, 0x9, 0x4, 0x6, 0x5, 0x10, 0x7, 0x1, 0x4b94a99a, 0x80000000, 0x7]}) (async) r7 = syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) ioctl$KVM_GET_MSRS_sys(r12, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x487, 0x0, 0x9}]}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x30, r10, 0x5, 0x70bd27, 0x20003, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x81}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005}, 0x20000010) (async) sendmsg$NL80211_CMD_DISASSOCIATE(r8, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1f4, r10, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_IE={0x1d2, 0x2a, [@random={0x4, 0x52, "c4f27644dc57687a8c0b9cc425c5559e34609f1d7b73f68a0275fbbe0dd7b99f41c5d0168cbe68187a50cca5fdf7fb7e63b901a34be645ce5f1028ea156de61c1c5cab8055e7601e865be8293170a7fa6664"}, @mesh_id={0x72, 0x6}, @ht={0x2d, 0x1a, {0x800, 0x0, 0x0, 0x0, {0xc, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x1, 0x2}, 0x400, 0x2, 0xe}}, @channel_switch={0x25, 0x3, {0x1, 0xe, 0x80}}, @peer_mgmt={0x75, 0x8, {0x1, 0x2, @val=0x3, @val=0xc, @void}}, @measure_req={0x26, 0xed, {0xfe, 0x1, 0xd, "5e4864765be60ee7d2e9a58154443ac0e4e8056a4e2d63d2293882cb731df8caa36f8bc07ed636fcd17daea9c117db6f7d756e4cf07bf976d92778d42e8f9e4f977a82cf8dfe2ca63f3b748b8fdeb51c7aa4d8caef40ed36ad6e8195fb199ed35603398d3c19afccc0530214840e2cbda09598988f8cc7566f9435ab24faf8c82eb0552999ef7d18853877bd591434969cc725592d2fab23502f04b5506147bf2500935d5ddb1aee72a56863bf93554590741b5c5351886ec782317f4330c56a03cee782fe04f8168bd90527bbb04a0264bf505544cc2a70d4ad96f8b72329e26efe6087f693ba23faa3"}}, @fast_bss_trans={0x37, 0x56, {0x43, 0x1, "52ae2d33d2efecdff4168514da0f0688", "df70f53d5e7c6b35b1ef9a84a46a0dd3c8a0b2940f1012abd13f245621b38472", "577f28e4b883e61b7268f8518cbce703fd7b1927a07acbb567ab9c2cd3e9a129", [{0x3, 0x2, "9bb3"}]}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r7, 0xc0405665, &(0x7f00000004c0)={0x0, 0x1, 0x0, 0x20, 0x9959, 0x8, 0x2}) (async, rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) (rerun: 32) 1.816981453s ago: executing program 4 (id=4139): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000009000000000000000001000085000000000000000001000000000000000000bc74872d93892f720e615b020214a057f9227e050151debda9a6922ae70fe86c73944c17717f5bfa17de679ec27bd22283b4cf017fec7a1219c1968b025fee4c81eb46e0beb606768664ce3ae0eced37741180139520832dfa6d5a419f9b46603da6ba60b34c5c25f1c692ec6252dcc8b590d536c03c3779d7c8154934b808009d62a4e4d19785213834791c28e7a864e28be21de8db0af5a83384"], 0x0, 0x3e}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002900)=ANY=[@ANYBLOB="440000001a000100090000007cdbdf2502000000", @ANYRES32=0x0, @ANYBLOB="00000000140003000700000000000000000000000000000014000100fe800000001ee9c047ee0000000000009fe8c52ed97fe1ad65e20d47d2d4cb179a621cdf7deca62cff030000faa7235483c9cac0d9c2909b69192d2238a7a3d13c86c233e470e7bbde330d9cbd397ba33437b8a5b4098e3407fda7cf41c64e645e158d9bb02fe267000000000000000000"], 0x99}}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x833, 0x0, 0x4}, &(0x7f00000001c0)=0x9c) fchdir(r1) r3 = syz_open_dev$vcsn(&(0x7f00000000c0), 0xfa3, 0x44002) sendmsg$inet6(r3, &(0x7f00000028c0)={&(0x7f00000001c0)={0xa, 0x4e22, 0xfffffff8, @loopback, 0x5}, 0x1c, &(0x7f0000002500)=[{&(0x7f0000000240)="4d0f8550834f4032fff2f6180e85cffe5e7ed5072f0763793c3a8d1bdcd6f4bfcab52c05763c392c7619fc25dfca317c44", 0x31}, {&(0x7f0000000300)="a06c4dd5fa14f0055b56042273c309b65c2adb017339d2d090e284e6c79503a6eadaec3494d4cd5d217c1895be7b4fe0faccf5cec96e9d5062f1df672cae93d8b3a0421c9f2c605cec6b99a62055e096169d2b493f2cd7272567fd1ce801bef8be47fbbbe462588bbae5041fc37828e4a88ccdd3a57abebbd271581555b4c3086a9791dc6f9efa5ce9", 0x89}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f00000023c0)="640c33221b777af6375b18f59192215adb4bfcfc56d25f09779e917961f44f2de8eb19f9040332caee20e6493587587ba4bf15685ca6b4942420694decdf2ec670e30d458eca28ca2ffbabde7f866f02242dda331fafe64b9d1cb28b374044b618954abceb78068af06224f894cebba182877461ca00570cb9641d99d8764a5f0470d922e9ab9509dd264f9bc4b37d7685c5a3c2aff8961dcceff9ae4fcc201f59c3a951bf94646c961c2e987959705c9338d11beb186b9a4c1b", 0xba}, {&(0x7f0000002480)="0f9b3ad7af99493ce17338176013e50d301f0bdebf65279d858e5a0810d6e6a87ea8dea432fa3fbe17d6084633644e3b4d8fd893b498805f0b63fee15326b844a86b5f3d6903a0f6ad7afcc031f882a20edde70805cda73fdc78055e709bda7b2616dd9c0e9b430ec02120c8f4f29a2139897ead", 0x74}, {&(0x7f0000000280)="25c1c49a52d3b2fa575ce79bbf032c784234090cf9edc956ab6e95aff937404becc4bd45809cfc9b07", 0x29}], 0x7, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], 0x308}, 0x4800) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)=@v1={0x1000000, [{0x0, 0x8001}]}, 0xc, 0x2) 1.808756433s ago: executing program 8 (id=4142): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000004, 0x42031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x24, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x13}, @generic={0x81, 0xa, 0x6, 0x0, 0x5}, @jmp={0x5, 0x0, 0x1, 0x8, 0x1, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0xd, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x5, 0x2, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000280)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000002c0)=[{0x2, 0x2, 0x5, 0x8}, {0x1, 0x4, 0x0, 0xa28b33b27719c973}, {0x2, 0x4, 0x1, 0x5677bbc9f727aa80}, {0x4, 0x2, 0x2, 0xa}, {0x0, 0x1, 0xf, 0x4}, {0x0, 0x1, 0x5, 0x5}, {0x2, 0x4, 0x2, 0x4}], 0x10, 0x100}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x80, 0x80, 0x2, 0x0, {{0x20, 0x4, 0x3, 0x9, 0x80, 0x64, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010100, @remote, {[@rr={0x7, 0xf, 0x8c, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x24, 0x60, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@multicast1, 0x7fff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80}, {@private=0xa010102, 0x1fe2}]}, @ssrr={0x89, 0xb, 0x4c, [@local, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x25, 0x1, [{0x2, 0x2}, {0x1, 0x9, "8e7a41408f8399"}, {0x1, 0x6, "ce5ef1a9"}, {0x1, 0x7, "1a4ff4fbdf"}, {0x0, 0x5, "02e406"}, {0x2, 0x2}]}, @ra={0x94, 0x4}, @end]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r9, r10, 0x25, 0x5, @void}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x24000, 0x2) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002cbd7000fddbdf257b00000008000300", @ANYRES32=r6, @ANYBLOB="9eec5ace5966959327ac72f275b321024c1d1e646de424d11b5f42802cda0f8e06b4cad580a6ae42e07d80f333f78349d4ccc87e8c65150ae4dea87e5e82a0c1d76147872dc5e203e3bbf4c89dc84b0a92a782eedb5755bc1488746d47bfff17fae7e78f806d4212df8e8a5b10aa85e5a5b52a8857ed48be7455459a3561ae386eee"], 0x1c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000) mremap(&(0x7f00008aa000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r11 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r11, &(0x7f0000000780)={&(0x7f0000000680)={0x1d, r10, 0x3, {0x2, 0x0, 0x2}, 0xff}, 0x18, &(0x7f0000000740)={&(0x7f00000006c0)="30cff2e54ca67639aa4e7b98dea22a163fd1bbf682bfb28f0bf63790fa2c09449661d59d10bb0c37fa9e8c8040d578b24a64bd85245e75d6c611462f63ec83641cb1b45a9eb9e1ad04068de8b944e4f5ad16659f1f2cd5b753de72f602e0468304e56cea67c146af0b8df7d6fc1a850f", 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x20044824) 1.760439537s ago: executing program 4 (id=4143): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000700)={{'\x00', 0x1}, {0x7fffffff}, 0x164, 0x0, 0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)="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", 0x1c6, 0x0, &(0x7f00000004c0)={0x2, 0x164, {0x1, 0xc, 0x71, "6bc817eb91180950c7e7b16cf8d39c25af986e84a7b2b6a01822a0d2bfc53d214c0c539c1b587429bfddb311e90f2250c25c37fd87278efc47d37d2aa204760102412d9add2292c6c31d518501275813b7d4727fb6c73632eb14e908b6d3861ae4610d6fcdc914b662d98a4447eee674bf", 0xe6, "ef889f1f84252f7c4db223ccd9706b290331c96efe05ff8baf38f6b65ca0756517bcebe9f63d4d4abe6a16f7205fe57b749e58dbb149cfe9168df9ba6aedb849d8c34a725e088f1e226060817801721df3a2e661a5d2f6e5366aeca3e6ec0f5a19a329df02f1fb9c9d1c056642c812a32224f92c0dae6157aea5733f6c4749687854b697001855aa7d995d1f3286059e63ffa2ea6a722514c64302a0fcd4a4c214e18f5f7b5644d8e9d13c924f1d572cf2b564937a3783963608fc9714b363de55313dad796a72a91a3f99487d2c653164c73bc2d604d129b8bf40886d0379c97291e8a4c5e8"}, 0xb6, "bea327205f48f1dc2d1439c069df0ed02a2e84ff5e5edd215e152dcdff4bddeb99bee607d58083b65247ab9b2b2dd4207955ced550f1e653b608c8a72883fe89fc3382aa5f5a6888087d16cf98ff215454e11deaeaad8166d412baa3f84f8826cdb0a5dd5fd156bb88b39ea024aeb381eb8c8ba1aa20811cf5575be1a341ef1f064948f49eb75c59495f5e81cd05ac99b8a0b5ecb582086d1b32b164f0826d3ef40d30397c05d9b49e16d54bc94e37ad3d23f3e03ff8"}, 0x226}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) (async, rerun: 64) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) ppoll(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)={[0x7]}, 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x200c4004) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r4, 0x20000, 0x1000}}}}}}]}, 0x48}}, 0x0) 1.760205094s ago: executing program 4 (id=4144): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000240)={0x8, 0x2}, 0x74) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f", @ANYRESDEC=r0, @ANYRES64=0x0], 0x24}, 0x1, 0x0, 0x0, 0x4048890}, 0x0) 1.695667085s ago: executing program 8 (id=4145): prlimit64(0x0, 0x0, &(0x7f0000000000)={0x9, 0x100009b}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x102, 0x0) (async) write(r1, &(0x7f0000004200)="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", 0xf81) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.694754142s ago: executing program 4 (id=4147): write$tcp_mem(0xffffffffffffffff, &(0x7f0000000300)={0x99e, 0x20, 0x7fff, 0x20, 0x9}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000100), 0x0}, 0x20) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe8000000000000000000000000000bb060001000a00000008000600777272000c0007002e00000005000000080009002700feff060002001100000008000b00736970000800080009000000060004"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x48, r4, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008010}, 0x8800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001600)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000600)="ef3d2b2ab3", 0x5}, 0x68) write$tun(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffb800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) 1.630452944s ago: executing program 8 (id=4148): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$CDROM_GET_MCN(r0, 0x5311, 0x0) r1 = syz_clone(0xd104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000002440)='cgroup\x00') read$FUSE(r2, &(0x7f0000000240)={0x2020}, 0x2020) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000180)) (async) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000180)) r3 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) (async) ioctl$BLKRRPART(r3, 0x125f, 0x0) ioctl$CDROMVOLCTRL(r0, 0x530a, &(0x7f0000000100)={0x67, 0xd, 0x10}) (async) ioctl$CDROMVOLCTRL(r0, 0x530a, &(0x7f0000000100)={0x67, 0xd, 0x10}) pwrite64(r3, &(0x7f0000000000)="d5c2a51d3966b520181e2225fea9125bce772e7fcbd819f29aae22d9cd57d1ef3d4d6c138e3af64d162270b1b16fd4b378d06db3b5575b802e37cde49a8b832fbcf219e80d210c9d06c28dd36d9daccd8ab9340b1a3ec48abd5774282174b0766238cc8355d77a8e0cae8dd91de3dd5dce8db544601e3818df45b1a705176c59abe70e90c580f244ea0f4df91249aca127f85c3944c5e21654f45655f36b1a920590a7136a011d441293dc7ee92de3b0dc05a6ecf6872590231f0bf58dd74ab2571bfb086f463e66ddffbcfda97795fb22ecb04d", 0xd4, 0x2) 1.490139099s ago: executing program 4 (id=4151): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x6db0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001040)="d2ff2c14ed9299fb8c2b16e9d925f9847de7b398b372cc04f980e696d0973cf22e147cae5fb1aed446eb46ee7c35eeaaf543d52ea6d3c06022ced51774e41c4bb9838e790cbb54434d74cf259aeb998b71ed66c3b5fe33b82fcad19ed78df8100afbe650e7e314b7f9004da43b58b6e48f71524488755ded446e881c930a47e0", 0x80) write$UHID_INPUT(r1, &(0x7f0000000000)={0x9, {"a2e3ad084fc752f91b29090955f70e0dd038e7ff7fc6e5539b3272078b089b34393b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d336d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000048000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b473e2ffd9d44b56871495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3527138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aad66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b8e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247f33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fcec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b00", 0xfffffffffffffdc8}}, 0x1006) 1.488352355s ago: executing program 4 (id=4153): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x46080, 0x0) ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f00000000c0)={@lba=0x6, 0x2, 0xf, &(0x7f0000000040)=""/15}) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r3) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000240)={r2}) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000080)) 1.290197863s ago: executing program 8 (id=4155): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0xd) r1 = openat$cgroup_subtree(r0, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) 1.29003535s ago: executing program 6 (id=4156): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x83, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x8000]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010100000000000000000700ffff140007800800124000000005050015000900000005000100f6ffff38050005000a00000005000400000000000900020073797a310000000013000300686173683a6e65742c6966616365"], 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.289618643s ago: executing program 8 (id=4157): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000940)=@dellinkprop={0x28, 0x12, 0x201, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0xa, 0xffffffffffffffff}]}, 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x400, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x11, r4, 0x10000000) 1.147460233s ago: executing program 6 (id=4158): r0 = socket$nl_route(0x10, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240), &(0x7f0000000380)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280), 0x0, 0x1, 0x7}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts={{0x18, 0x29, 0x37, {0x2c}}}, @hoplimit={{0x14}}, @hopopts={{0xa0, 0x29, 0x36, {0x5e, 0x10, '\x00', [@generic={0xff, 0x41, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70"}, @pad1, @pad1, @calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0xfff, [0x2, 0x4, 0x966]}}, @calipso={0x7, 0x8, {0x0, 0x0, 0x7, 0x6}}, @generic={0x8}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3}}]}}}, @rthdr={{0x18}}], 0x100}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(0x0, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 1.107650107s ago: executing program 8 (id=4160): r0 = syz_open_dev$swradio(&(0x7f0000000540), 0x0, 0x2) poll(&(0x7f0000000580)=[{r0, 0x3}], 0x1, 0x4) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000005c0)=0x5) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xc8902, 0x0) write$binfmt_misc(r1, 0x0, 0x0) r2 = socket(0x1e, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x89f2, &(0x7f0000000080)={'bond0\x00', @ifru_map={0x1, 0x5, 0x100, 0x7f}}) (async) ioctl$sock_ifreq(r2, 0x89f2, &(0x7f0000000080)={'bond0\x00', @ifru_map={0x1, 0x5, 0x100, 0x7f}}) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x8000, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x8000, 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8a240, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f0000000200)=[{r5, 0xf53d88be910a007d}], 0x1, &(0x7f00000000c0), 0x0, 0x0) (async) ppoll(&(0x7f0000000200)=[{r5, 0xf53d88be910a007d}], 0x1, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000180)=0x7) 660.202333ms ago: executing program 6 (id=4165): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002040), 0xc2001, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}}], 0x4000000000002d9, 0x10022, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r2, 0x0) munmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ff8000/0x2000)=nil) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000000c0)=0x32, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f0000000000)="09000000e700140000007ef52f6de22befb3f639a6d845706b6ddd4f52a02d442622c1067b24c4cdd9a651de", 0x2c, 0x4040054, &(0x7f0000000080)={0x11, 0x1b, r3, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x14) 368.361952ms ago: executing program 6 (id=4168): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x489, 0x0, 0xffff}]}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) fsopen(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="7cb4", @ANYRES16=r3, @ANYBLOB="010000000020ffdbdf2505000000180001801400020073797a5f74756e0000000000000000000500060003000000"], 0x34}}, 0x42880) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r6 = fanotify_init(0xf00, 0x0) fanotify_mark(r6, 0x105, 0x40009975, r5, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlink(&(0x7f00000001c0)='./file0/file1\x00') umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 309.619925ms ago: executing program 7 (id=4169): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x47, 0x500, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008000a"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 308.934277ms ago: executing program 6 (id=4170): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r2, 0x80045113, &(0x7f0000000280)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) chdir(&(0x7f0000000000)='./file0\x00') write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x800000d, @mcast1}, r3, 0x4040099d}}, 0x48) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/xfrm_stat\x00') close_range(r4, 0xffffffffffffffff, 0x0) futimesat(r4, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x0, 0xea60}}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x7fff}}, './file0\x00'}) recvmsg$can_raw(r4, &(0x7f0000000380)={&(0x7f0000000240)=@sco, 0x80, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/65, 0x41}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000340)=""/45, 0x2d}, {&(0x7f0000000440)=""/249, 0xf9}, {&(0x7f0000000540)=""/177, 0xb1}], 0x5, &(0x7f00000006c0)=""/106, 0x6a}, 0x2) 308.753781ms ago: executing program 7 (id=4171): creat(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f0000000d40)='./file0\x00', 0x42c3, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) fcntl$setlease(r0, 0x400, 0x0) unlink(&(0x7f0000000040)='./file0\x00') mount$nfs4(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000000)=ANY=[@ANYRES64]) 239.672111ms ago: executing program 7 (id=4172): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$qrtrtun(r0, &(0x7f00000014c0)="6eed76c7359092f0f4787f58d263627feefba682091eef1d481dcb8002f607fdcc7946c649e31053b97502ca4b72ed8f8eedaaa9524475ff31025c2dd71fe6c355600889d3b17c41543066952536b022a4106d1ec9d3033e0ed5ab946952a8520ef2c1dcc51eaf09dfd9c31b0d6d39f875af32888481bdb3a645b9560a0f71d7345c1b59c5a11cd56851ca97482570bcca9794b70958f95711bfd01d52d4051092fa0cae0d2d13f228fafd5400bf7ab0cff62fe14807c9aac9b1a3a0a396fef8a39791f26acd75aeefe16a10c95b3a3bf2a0ad557906dd19c0d024669431babc3b5ab61229f417b97fc3caaab3ef57c04c01059192733be2464fe86a42e0c477870686b6e272d83dcfe72f34bdbc3ef798f88e32d0f1f8342300a558e8599c23ab89b9bb321ad0827a5ea819aee6f44110a83c24fa1c851f10b36e144c6225f442ba32bafafb24d38597cecaa00cd78e220b815143d174182553d3acf89bf3d45ae29f4a92b984753f89ac971fafecc57806abaf64e066373dbd2bad322fe3b7ecbdbd3868959f88108e8a665cb6bf4b86ad267179d91d61949b29814637e0922f508478ae56957978dcbc1aa5bb38d41747b392fe80e643ad465295ad274d175918908af4607d26232b5c42f1e391f18031ba81b8e34920061d6c78de53aaf5264b7cf93728a9dcea0924ddf3580ba39c15ed52b75e01b7b8b9ce77b062499ae13c6dcd702884bdb6a5a9952d3df15f050c2403634d3be8566a4218a6c55a9bbfe89c75b9395e24167f268acc4a90234233f4fe60f887f0e820deb70236c775dcc275a61dd431d88527f6c9b811fff4cd71e3911f2fbff159ac5f2ea16f70457c98d2b6e2d6c26991a4aca5105a1ae2d00164a86981d6cc920b0aae8e26adb83ebfcdf59375331fad408777201fbe71a59767107cde95d08b6dbc6186427914ab8e36f922f51b7192fa304eb8f65984a29c6e4e4bb294a44f2370266d4d0e47c7d92478b1ad89c61c70616003e720c2c68ca1150bb114236bdd81675162bac54e9b8b7f22d5b8b272d1b5b49e4f0f758dba0386523180ba9cbb2676b2f9689e9ea8c3fb80cb512ab2b60ece372b121990111eb6d439d34e6f5a454c2c2b3594f797fe8ed1d8fc2ac9c07b0b74e0004c3b6c3d157c96521ff43ae6bbbb8606cc7df8451ef278b106b3b3ca92a659f71476e254081958b677286d9239aa7d8986fb5328c603f86c8ed889e01deae066083e0acaa3a8da0be56937fd94ffac7ec56b89bc97c33903512b3a24b8948268be607be3c711189444d31b54d4da4514002cd751620ba1b21a6859375c6e5dd09b202de07acb960e40c565a729eaaccbb36641e70007cf27d42dfbbb8fd65912864e7389885917e4c783481e938fe69f0c8084c40aaaab3a24b2f644dd1e10ad4172750c045940374c4d9b53fbeb7ee13ec51133b2dce8aaf89659d5cc32eacd80e5513bc27b670efe70054bbcf684426c31219b13175160f679cb9d3630bd1db6c6b218b7721bf803473639595e1ed62798b866753e26733d281818d913c72aa2e16b4bfd7cf43069c0822b7af4f0f4d851e4afc4309e166d1cd103bf769bdc8e931f578b143ee0c3f91ba287e2457b25f1da7f84dc07fe226590c1c9df8fd0c0f860881d904a2aec7109f126ef5cf74481d521009c43f0196cc9e50de5da3ae17210687191cb920cc7c787d9cbdea34c34f3e3c2518d009fe5720bb783058e9bb4cbea5082de9cb9df37a949b6831150461c681cfe8d3792070bbf3eb34d5844a3e79441e93f7cc5916e58ca1f982559d0a96e2ff975b1c9477dea0cf2450384db33607e64718cf91b078042194132955a09caec70052d2a6fd1654fa4164708f9d336a7c42b75cbd4fb33ef99ea826b5251323b8c2acd6bd5fcead7a96e9363e29c3fb9a6bee010f84f8fcad27c65c84ba566cbc8ce1ee21fce5162a6060985e96f9b84fe04ec85c8621d2febac30d42591ae29631168aa8374271667e392b7922ef0fc1a2f27f35d4c4c7d50e55b4db83e7e7b964151de9f3b9c9880e6706e26d5dd3a5953ba1887fe028f8a6f6135359ad76c69fe596b95a7e472b932e7e156fe968c9c5d7369d7e2060a6401cbfa257163ad8a862fc7f303f03ecb1e4272cc29e37a3593d10aad5bdf9a84c74e841bf549a0e39b5ae41fc9cbc628f0334586b0243ac507b5772eeea6d4b9bdf869c6c234674e8b45baf4d797569c2cc88108e492230455cdb1738d65f5354323c78cbedde052fe5028c218d851ff462bf5e15e558c7bc3771b0628f8d6568aac5875154e1ca151b77769ce1bc2b5a0fd4a1a8767e232d7cc8fe86b8b47e7e8733ba68583b2d65efa655165994dec0863f6873e4920455c15b0e0bdce86343d0a2a70f9a42f228e6c4f0c75255f447b883db9033cfb6fc7ab1160cbb6908974bfc153d69a0ed96fc0d7e98abd792a67fdf4558d26ecaa4ac15387372ec7b73558d8bcd68372949b7fd8fa98ace69a34c2c45aad8ff3f8b472a0d1e52ae09ac363c348ed2a80bd25ac3dd49268c574bea9c1948467db6b75a821aca6a297a5cb3c68386a7275c7c5a79ae939a62ad94758ad35b013b646eb4425f29e204ddaad7d0e9d700090b03be7d4bc33cc18438d87c7af20ffc620cfc4e2971ae2f8e925a0fc9f4f8e4f012d8cbf98f035ea1b590e888cd594b28d2d4ad37eea113504e8355853e573d7e85f023b604dba2f5e2ff16c0edc2c47de4b2acf60845432386f74b547b979d54b12c7eaadcb9477f4c8a1edc6afb34bed039e659f9c40f8dca944d3e220cf05c98eaacbdfb12e5c9793faa931ee5a9812c5f5893907b9a8265a3b238604b789fd13f445c7ae4e96ab4aecea07acd39da2bb8fdc244615fccbf6827a02d8292535499212dc6d7eaac70a328a98262883d3783e343bd721f234d5f4de5c6bf0d1dac4e13dc991195cca8cad9366cef70fd23a2f7e7df0440a2ca4427d1f995d9d3d75b23828e3dcec6b1c20493781eb3523824594309ccd50e09212a3bcf9c0e2627bb3e3ab63e10be81d6a27acc3895357b7a5bbad3fc5eea714c2d44ac13de33dd3e83faa1641ae61cc693e3ce508782cb51075c9c643f07381f67d2aecbd7f462e74ece739d65479646555149d46f599c32dcd13a5a1ea01a121160215cc549ca47a0834ba5ff599daf45e5b4a0301dc961d92366bf816450acea02eb4a031f60d2a46efd255a6b08951c261cf24fce612c3d402963482d4b6755de4abdbf52c0f0a9b524aa65a7754333b7e3ed499ece05af3de92fe071f87cc8560323401f3944f27bef8504c5a32ca4a6c82589b1b9b186875f858d19122656a6aea418bab52132a1729d6de3eee689c2bae8c5652af15841e53c376b0cfe068376201a85bd0bf19279962420f8953a72824d42c580a9c5f8a4efa86d72585a3911f395119ff528ef4536a9f3600c2f8845e7783ce82f8dadeca631b5cdeda06af3d76b9b3148acda895df877efb48a69e2ab2de4e0b100b07ca32bf79196005a5a2ec48232682c6be4890bd431029adeb97c75982e777f9f246f063dece324843ce22eb61ded17ee0f09b57453677dd7d5bfc7e7d21dc8bcb44058e16243e997cdba5700fadfd719f960d284b75a33c0c97f6c9f8ca74aa3892438204bc28165c4e439d2797ab3aa40cef969a1930fe74bbcb47c6e91d892f78a077a79555504e230c55ae0fe0e016c38e031b7e0d6c163d87e3463a2e38702d26a2d4c0696b7555d4c19fe5c2f2f29cfe8b81e259798e60e5d4209904faf0498c96180468af1319f5aff1394865f0a3aac41284b9ec71892e0c8b497dcf7f385e9743787ee191e2fcb4f881bb21bdbab7cf387c2712879a73993bf9a9ba6975e5bf19909e059f5f0d155902eebc6ee8d51bdde4400dc92ff644ffc8e13006833737d106e4746e297a052c6a27221033f4512f470d6e2d4c464fa172539a4423e10ed83cb4a1c93bda43adf10ec4c5a1987ef27c7a5336c3d03e333d7b101641810fc96c8ba651d9ec936e73d3a9659788dc5cf81a83605f4f20334529e2a59d2234a169ba5eb315ecc255f12f0d5c841e5100f858b61f7320f26872e4e3764a4662ba90dbf118f233b4f251d5808216879ef608fce8aa49eec1a2f9d8a084f1a31d124e68b9abc361d96870c1c2f34196e6c9e24ed4326bb4104a09a2be5e49753be777ee23d6b314da5f9e7395f855179c85ac15aa8f1e384f640e05d9748131679e18e45f748843ce6afa12d053cbb7f5486d37c629748b6520f662780a696eac406287d22c038010435157d68470226d3894ff69d2e6ac4887244405ed734f502f0a4ebcaba405fa632b40fb3023aa5f0921e253cc7c19294ebefd158ef760129753811ff5230bf465b6033959a7fec51ff319773d18326e7ae66dc5f055fa66ab8f415e52834bb1fe05c309d340f4676a184637b9af9469e3327dfa51611235763f92d591c4e32fa066e38379847391d75dcde8890fbc2b7f67fb0d13c5998c5a1f1e5936eee616584e347dac73873e36424cdc75770a28c286f9f03b93b83d7c1e329df83ec163202be9b981ec4d90b9f4e405615e975a148dd7e4c21ff8eb5def188aff63e0d7342700f775720cb24af79173bf5a5d63676ef50319e062cff9b01c4be01f237c9f685c531cb52e8131fa4ff95c5b100c59c121d60fe20766e6b675914bcf9ba5c9424502c0a44288cd571dd5571e3d41f30ce6a97115e2c4efa72681b3d991722c3c7b6bfe64123ef7d8604b4eec670abc46e70abd90ded0cb036888a0b71d5fd8a1087df9e5a62aadb8fd6eaa99d2ec2451a0082db44ecca31fba0f7294f2415bf2f6429ceadf05b1f092c8986203176c1b77fac4fb933dfd63031ec175a22b9f521160a59ba2f68574a27fb8860e1a5b8130d91acfa828a7f1a0fff16139601af293557559e5b936d4d55110183129d6040e6003c84f072194e5fdf8941289ace90e59fb4abdeff35ad7c2d3ed2582d10dc885e919901e01b3b13d362034c5d32931e844b0c62cb248854fb6942f6e864226ba9d91f015f9201e25ad70356fabcd561a2c267f8d13fb6005af841e00b4ce1bba83f10ce1a0b1b7925e9aeda83c06dd3a75290b2b31276e50f63e3eb1698fb586d56c1153a07fab8c4ecffcab5c141d6b7be0fe1764cb6c3b6f4dffa5841da7f5f14836d635fc74a912b0933618644dd02cd81358ee8572868b8cbe400058078439fdfc7758331088eca35668ce7055d0a1c3c0b23017da4036f4e31d110d1701b6a0014d85c6d3f40204370c201f8a031a0f361341ed285aaf86cb1d9298ede4b6878f5bf8c8aa6716f447d190b98888e477592765ee7c6e0cb5c091f1a7f7211f94d6170e12b30db0ba047dd1058b75f97057c6614d9026b54149f74ccd196c7cfded424ae4e57e8d77f84f996ffba8a6ea22aa09dd267f8444cb49fd82b219392412dd7c2b866069905b5327b5c6912d8fa457d9322476edbbfd55163209f71ad8f805db4e724f6f19bbde1ac5e2d23b03ee434df07807e85edb566c7deb2d4e8347e5ceda5cb80a0bf3c9e8ca1f679a34d1032e53d1cbc850f28742fe0ebee60e9c03001407255f1dffeb7d7bc305e94c3bf350b97e5e7454ae13afb57a136180938cb698a07bf85453bcbe1a8b11e65dcbaf0583357e8dd4f15c5ec027b7b769dcda32fbfd9befa1c7260f88da89ce958d404c8b9142c9190bb4ed07b44c8477b4578a680d3ee4afe060e402089cbdc18b5c8cb0916c93bfd55ffe01dfa544a198ffb7024d82", 0x1000) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 239.314476ms ago: executing program 6 (id=4173): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000040)={0x1, 0x1}) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x80) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x20, 0x8000, 0x5, 0x0, {{0x35, 0x4, 0x1, 0x0, 0xd4, 0x67, 0x0, 0x81, 0x29, 0x0, @multicast2, @rand_addr=0x64010100, {[@end, @ssrr={0x89, 0x7, 0x89, [@loopback]}, @end, @timestamp_addr={0x44, 0xc, 0x1b, 0x1, 0x8, [{@loopback, 0xd8ee}]}, @cipso={0x86, 0x60, 0x3, [{0x5, 0xb, "a239d0a185871fe753"}, {0x6, 0xd, "23858bf70d01365269132b"}, {0x0, 0x10, "36710d2bd3c5426f8fcef3a09202"}, {0x2, 0x10, "027f34c5e575bbfbfb1a8468e115"}, {0x7, 0x3, "19"}, {0x0, 0x10, "b7a188ecf51348e19ac02d94325e"}, {0x0, 0xf, "53a1ae1a57845f375d553b027d"}]}, @ssrr={0x89, 0x23, 0x5f, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0x44}, @multicast2, @remote, @empty, @private=0xa010101]}, @timestamp_prespec={0x44, 0x1c, 0xd0, 0x3, 0x1, [{@loopback, 0x9}, {@local, 0x401}, {@private=0xa010101, 0x8}]}, @generic={0x86, 0xb, "330c90e8d04c141269"}, @end]}}}}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x39, 0x1, &(0x7f0000000200)=ANY=[@ANYRESHEX=r1], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x100, 0x78, '\x00', r3, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) write$cgroup_subtree(r2, &(0x7f0000000340)=ANY=[], 0x9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) 237.933833ms ago: executing program 7 (id=4174): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="4d912b2c29", 0x5}], 0x1, &(0x7f0000000340)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x0, 0x49, 0x8, 0x2, 0xffffffff, 0x3, 0x7fffffff}}], 0x30}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 180.18984ms ago: executing program 7 (id=4175): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) connect(r1, &(0x7f0000000000)=@ll={0x11, 0xf6, r3, 0x1, 0x7, 0x6, @multicast}, 0x80) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x510, 0x1f0, 0x0, 0x148, 0x1f0, 0x148, 0x478, 0x240, 0x240, 0x478, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x8000000, 0x1, 0x1, 'syz1\x00', 0x5}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r0, 0x0, 0x0) 0s ago: executing program 7 (id=4176): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000f3, 0x0, 0x400006}]}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r5, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x80, @loopback, 0xfffffffc}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x107842, 0xa) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000000)='./file0\x00', 0xe0000217) splice(r6, 0x0, r8, 0x0, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xffffffff}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x3b90, 0x4) sendto$inet6(r5, &(0x7f0000000b80)='f', 0x1, 0x4040801, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r5) close(0x3) ioctl$sock_ifreq(r4, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='gre0\x00'}) kernel console output (not intermixed with test programs): ed promiscuous mode [ 346.037205][T16215] syzkaller0: entered allmulticast mode [ 346.042144][T16224] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16224 comm=syz.6.3072 [ 346.981739][ T5951] Bluetooth: hci2: command tx timeout [ 347.797236][T16240] netlink: 'syz.4.3076': attribute type 11 has an invalid length. [ 347.889899][T16111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.058684][T16264] loop5: detected capacity change from 0 to 7 [ 348.070203][T16078] Dev loop5: unable to read RDB block 7 [ 348.077163][T16078] loop5: unable to read partition table [ 348.078375][T16111] veth0_vlan: entered promiscuous mode [ 348.082538][T16078] loop5: partition table beyond EOD, truncated [ 348.085906][T16111] veth1_vlan: entered promiscuous mode [ 348.089668][T16264] Dev loop5: unable to read RDB block 7 [ 348.095148][T16264] loop5: unable to read partition table [ 348.097777][T16264] loop5: partition table beyond EOD, truncated [ 348.099891][T16111] veth0_macvtap: entered promiscuous mode [ 348.106993][T16111] veth1_macvtap: entered promiscuous mode [ 348.110688][T16264] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 348.126348][T16111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.145443][T16111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.153880][T11098] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.155688][T16279] XFS (nullb0): Invalid superblock magic number [ 348.157586][T11098] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.189376][T11098] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.199168][T16291] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 348.199247][T11098] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.293659][T16302] netlink: 'syz.4.3087': attribute type 10 has an invalid length. [ 348.299563][ T3753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.302060][T16291] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 348.306119][ T3753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.308105][T16291] overlayfs: failed to look up (tracing) for ino (-66) [ 348.336122][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.339406][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.366889][T16305] xt_recent: Unsupported userspace flags (000000b2) [ 348.402175][T16307] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 348.405003][T16307] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 348.408615][T16307] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 348.623994][T16326] netlink: 'syz.7.3094': attribute type 1 has an invalid length. [ 348.626574][T16328] netlink: 'syz.7.3094': attribute type 1 has an invalid length. [ 348.782610][ T72] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.896715][T16349] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 348.910644][T16349] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 348.914807][T16349] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 348.924456][ T72] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.945192][ T5940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 348.949789][ T5940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 348.955796][ T5940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 348.962731][ T5940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 348.966563][ T5940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 348.971432][T16352] syzkaller0: entered promiscuous mode [ 348.973768][T16352] syzkaller0: entered allmulticast mode [ 348.981440][T16352] ip6t_srh: unknown srh match flags 4000 [ 349.006273][ T72] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.060988][ T5951] Bluetooth: hci2: command tx timeout [ 349.084004][ T72] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.250757][ T6009] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 349.294281][T16361] netlink: 'syz.6.3103': attribute type 21 has an invalid length. [ 349.398225][ T72] veth1_to_team: left allmulticast mode [ 349.401229][ T72] veth1_to_team: left promiscuous mode [ 349.404042][ T72] bridge0: port 3(veth1_to_team) entered disabled state [ 349.409031][ T72] bridge_slave_1: left allmulticast mode [ 349.412564][ T72] bridge_slave_1: left promiscuous mode [ 349.415283][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.420613][ T6009] usb 12-1: Using ep0 maxpacket: 8 [ 349.423920][ T72] bridge_slave_0: left allmulticast mode [ 349.426513][ T72] bridge_slave_0: left promiscuous mode [ 349.428757][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.432025][ T6009] usb 12-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 349.435626][ T6009] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.624900][ T72] dvmrp8 (unregistering): left allmulticast mode [ 349.655762][ T6009] usb 12-1: string descriptor 0 read error: -71 [ 349.661697][ T6009] pvrusb2: Hardware description: Terratec Grabster AV400 [ 349.664007][ T6009] pvrusb2: ********** [ 349.665347][ T6009] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 349.668681][ T6009] pvrusb2: Important functionality might not be entirely working. [ 349.690565][ T6009] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 349.694204][ T6009] pvrusb2: ********** [ 349.710807][ T2496] pvrusb2: Invalid write control endpoint [ 349.721549][ T6009] usb 12-1: USB disconnect, device number 2 [ 349.750252][ T2496] pvrusb2: Invalid write control endpoint [ 349.753060][ T2496] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 349.757817][ T2496] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 349.760325][ T2496] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 349.765170][ T2496] pvrusb2: Device being rendered inoperable [ 349.776639][ T2496] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 349.781236][ T2496] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 349.793394][ T2496] pvrusb2: Attached sub-driver cx25840 [ 349.795574][ T2496] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 349.798861][ T2496] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 349.864925][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.875188][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.880114][ T72] bond0 (unregistering): Released all slaves [ 349.916718][T16350] chnl_net:caif_netlink_parms(): no params data found [ 349.933966][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 349.933977][ T40] audit: type=1400 audit(2000000363.998:1132): avc: denied { setopt } for pid=16369 comm="syz.4.3105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 349.964183][ T72] tipc: Left network mode [ 349.979168][ T40] audit: type=1400 audit(2000000364.038:1133): avc: denied { read write } for pid=16374 comm="syz.4.3106" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 349.996391][ T40] audit: type=1400 audit(2000000364.038:1134): avc: denied { open } for pid=16374 comm="syz.4.3106" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 350.076849][T16350] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.080477][T16350] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.083432][T16350] bridge_slave_0: entered allmulticast mode [ 350.086301][T16350] bridge_slave_0: entered promiscuous mode [ 350.091548][T16350] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.093977][T16350] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.096727][T16350] bridge_slave_1: entered allmulticast mode [ 350.099427][T16350] bridge_slave_1: entered promiscuous mode [ 350.116236][T16350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.121232][T16350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.151665][T16350] team0: Port device team_slave_0 added [ 350.186277][T16350] team0: Port device team_slave_1 added [ 350.234750][T16350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.237813][T16350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.239509][ T40] audit: type=1400 audit(2000000620.292:1135): avc: denied { write } for pid=16395 comm="syz.4.3110" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 350.247911][T16350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.249357][T16350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.275982][T16350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.288497][T16350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.389069][T16350] hsr_slave_0: entered promiscuous mode [ 350.402443][T16350] hsr_slave_1: entered promiscuous mode [ 350.404554][T16350] debugfs: 'hsr0' already exists in 'hsr' [ 350.406415][T16350] Cannot create hsr debugfs directory [ 350.450011][ T40] audit: type=1400 audit(2000000620.502:1136): avc: denied { getopt } for pid=16414 comm="syz.6.3113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 350.466546][ T40] audit: type=1400 audit(2000000620.512:1137): avc: denied { ioctl } for pid=16414 comm="syz.6.3113" path="socket:[78178]" dev="sockfs" ino=78178 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 350.496644][ T72] hsr_slave_0: left promiscuous mode [ 350.504359][ T40] audit: type=1400 audit(2000000620.562:1138): avc: denied { setopt } for pid=16417 comm="syz.6.3114" lport=48194 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 350.510716][ T72] hsr_slave_1: left promiscuous mode [ 350.521110][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.527488][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.539024][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.541669][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.567078][ T72] veth1_macvtap: left promiscuous mode [ 350.568985][ T72] veth0_macvtap: left promiscuous mode [ 350.572056][ T72] veth1_vlan: left promiscuous mode [ 350.574072][ T72] veth0_vlan: left promiscuous mode [ 351.027675][ T72] team0 (unregistering): Port device team_slave_1 removed [ 351.053845][ T72] team0 (unregistering): Port device team_slave_0 removed [ 351.064153][ T5951] Bluetooth: hci3: command tx timeout [ 351.140674][ T5951] Bluetooth: hci2: command tx timeout [ 351.423509][T16446] xt_bpf: check failed: parse error [ 351.453389][ T40] audit: type=1400 audit(2000000621.522:1139): avc: denied { connect } for pid=16445 comm="syz.4.3120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 351.468713][ T40] audit: type=1400 audit(2000000621.522:1140): avc: denied { write } for pid=16445 comm="syz.4.3120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 351.516161][ T40] audit: type=1400 audit(2000000621.572:1141): avc: denied { execute_no_trans } for pid=16451 comm="syz.7.3121" path="/10/file0" dev="tmpfs" ino=73 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 351.527841][T16453] __nla_validate_parse: 11 callbacks suppressed [ 351.527858][T16453] netlink: 168 bytes leftover after parsing attributes in process `syz.7.3121'. [ 351.534462][T16453] netlink: 168 bytes leftover after parsing attributes in process `syz.7.3121'. [ 351.592506][T16350] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 351.625381][T16350] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 351.641914][T16350] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 351.644518][T16467] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.647572][T16467] IPv6: NLM_F_CREATE should be set when creating new route [ 351.650007][T16467] IPv6: NLM_F_CREATE should be set when creating new route [ 351.652359][T16467] IPv6: NLM_F_CREATE should be set when creating new route [ 351.658017][T16350] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 351.750134][T16478] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3124'. [ 351.817473][T16350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.828437][T16350] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.833908][T11098] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.836360][T11098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.844518][T11103] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.846835][T11103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.896969][T16350] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 351.901720][T16350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 351.954276][T16503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.032553][T16350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.045640][T16513] tipc: Started in network mode [ 352.047695][T16513] tipc: Node identity 92e8486f48fe, cluster identity 4711 [ 352.051094][T16513] tipc: Enabled bearer , priority 0 [ 352.055591][T16513] syzkaller0: entered promiscuous mode [ 352.057889][T16513] syzkaller0: entered allmulticast mode [ 352.078716][T16513] tipc: Resetting bearer [ 352.100863][T16513] tipc: Disabling bearer [ 352.148379][T16521] syzkaller0: entered promiscuous mode [ 352.150949][T16521] syzkaller0: entered allmulticast mode [ 352.166664][T16521] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3134'. [ 352.173018][T16521] ip6gre1: entered promiscuous mode [ 352.181603][T16521] ip6gre1: entered allmulticast mode [ 352.185208][T11098] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 352.188192][T11098] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 352.211818][ T6009] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 352.334289][ T6009] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 352.710880][ T9488] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 353.139411][ T5951] Bluetooth: hci3: command tx timeout [ 353.218314][ T5951] Bluetooth: hci2: command tx timeout [ 353.949036][T16350] veth0_vlan: entered promiscuous mode [ 353.962895][T16350] veth1_vlan: entered promiscuous mode [ 354.005001][T16350] veth0_macvtap: entered promiscuous mode [ 354.012174][T16350] veth1_macvtap: entered promiscuous mode [ 354.022783][T16350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.033039][T16350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.045985][T11103] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.048904][T11103] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.058995][T11103] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.062485][T11103] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.143199][T11098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.147591][T11098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.180648][T11098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.183336][T11098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.295463][T16605] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3151'. [ 354.299048][T16605] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3151'. [ 354.372213][T16614] fuse: Unknown parameter 'grou00000000000000000000' [ 354.463324][T16624] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3158'. [ 354.546265][T16639] 8021q: VLANs not supported on tunl0 [ 354.569961][T16635] sock: sock_set_timeout: `syz.8.3161' (pid 16635) tries to set negative timeout [ 354.644820][T16649] fuse: Unknown parameter 'grou00000000000000000000' [ 354.906736][T16674] hpfs: Bad magic ... probably not HPFS [ 354.911449][T16674] hpfs: Bad magic ... probably not HPFS [ 354.926824][T16680] xt_ecn: cannot match TCP bits for non-tcp packets [ 355.075737][T16688] netlink: 'syz.6.3177': attribute type 21 has an invalid length. [ 355.078690][T16688] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3177'. [ 355.083415][T16688] netlink: 'syz.6.3177': attribute type 21 has an invalid length. [ 355.086285][T16688] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3177'. [ 355.211582][ T5951] Bluetooth: hci3: command tx timeout [ 355.218097][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 355.218114][ T40] audit: type=1400 audit(2000000625.272:1174): avc: denied { bind } for pid=16689 comm="syz.7.3178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 355.227977][T16691] Unsupported ieee802154 address type: 0 [ 355.234937][T16693] syzkaller1: entered promiscuous mode [ 355.236722][T16693] syzkaller1: entered allmulticast mode [ 355.614517][T16720] 9pnet_fd: Insufficient options for proto=fd [ 355.663625][T16725] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3183'. [ 355.785798][ T40] audit: type=1400 audit(2000000625.842:1175): avc: denied { bind } for pid=16738 comm="syz.8.3187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 355.794692][ T40] audit: type=1400 audit(2000000625.852:1176): avc: denied { name_bind } for pid=16738 comm="syz.8.3187" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 355.811325][ T40] audit: type=1400 audit(2000000625.852:1177): avc: denied { node_bind } for pid=16738 comm="syz.8.3187" saddr=10.1.1.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 355.830768][ T40] audit: type=1400 audit(2000000625.852:1178): avc: denied { connect } for pid=16741 comm="syz.4.3186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 355.838712][ T40] audit: type=1400 audit(2000000625.872:1179): avc: denied { write } for pid=16738 comm="syz.8.3187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 355.864640][T16747] ip6t_rpfilter: unknown options [ 355.869514][ T40] audit: type=1400 audit(2000000625.922:1180): avc: denied { bind } for pid=16741 comm="syz.4.3186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 355.870851][T16747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.884271][ T40] audit: type=1400 audit(2000000625.922:1181): avc: denied { listen } for pid=16741 comm="syz.4.3186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 355.893102][ T40] audit: type=1400 audit(2000000625.922:1182): avc: denied { accept } for pid=16741 comm="syz.4.3186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 355.933832][ T40] audit: type=1400 audit(2000000625.992:1183): avc: denied { mount } for pid=16749 comm="syz.6.3189" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 356.090728][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 356.349717][T16775] fuse: Unknown parameter 'group_id00000000000000000000' [ 356.401510][T16777] netlink: 'syz.8.3198': attribute type 29 has an invalid length. [ 356.570317][T16780] __nla_validate_parse: 2 callbacks suppressed [ 356.570330][T16780] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3199'. [ 356.637567][T16779] netlink: 'syz.8.3199': attribute type 4 has an invalid length. [ 356.835561][T16792] overlayfs: failed to clone lowerpath [ 356.933892][T16797] fuse: Unknown parameter 'group_id00000000000000000000' [ 357.034423][T16810] vcan0: tx address claim with dest, not broadcast [ 357.072240][T16823] program syz.8.3212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 357.145152][T16836] fuse: Bad value for 'user_id' [ 357.147207][T16836] fuse: Bad value for 'user_id' [ 357.292742][ T5951] Bluetooth: hci3: command tx timeout [ 357.483552][T16864] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 357.483902][T16865] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 357.596747][T16875] fuse: Bad value for 'user_id' [ 357.598817][T16875] fuse: Bad value for 'user_id' [ 357.797914][ T24] libceph: connect (1)[c::]:6789 error -101 [ 357.800428][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 357.892241][T16895] ceph: No mds server is up or the cluster is laggy [ 358.102115][T16922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.301847][T16929] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3238'. [ 358.309877][T16930] netlink: 'syz.8.3238': attribute type 9 has an invalid length. [ 358.401619][T16934] netlink: 193976 bytes leftover after parsing attributes in process `syz.8.3239'. [ 358.445401][T16937] fuse: Bad value for 'fd' [ 358.524834][T16941] overlayfs: conflicting options: nfs_export=on,index=off [ 358.995987][T16958] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 358.999068][T16958] overlayfs: missing 'lowerdir' [ 359.040699][T16962] netlink: 'syz.8.3249': attribute type 4 has an invalid length. [ 359.048193][T16962] netlink: 'syz.8.3249': attribute type 4 has an invalid length. [ 359.091360][T16964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16964 comm=syz.8.3250 [ 359.807827][ C2] vcan0: j1939_tp_rxtimer: 0xffff88803a733400: rx timeout, send abort [ 359.923886][T17005] bridge3: entered promiscuous mode [ 359.974605][T17008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3263'. [ 360.017613][T17010] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3264'. [ 360.156229][T17016] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 360.265313][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 360.265325][ T40] audit: type=1400 audit(2000000630.322:1217): avc: denied { call } for pid=17018 comm="syz.8.3268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 360.273759][ T40] audit: type=1400 audit(2000000630.342:1218): avc: denied { transfer } for pid=17018 comm="syz.8.3268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 360.307882][ C2] vcan0: j1939_tp_rxtimer: 0xffff88803a730000: rx timeout, send abort [ 360.311475][ C2] vcan0: j1939_tp_rxtimer: 0xffff88803a733400: abort rx timeout. Force session deactivation [ 360.446951][T17024] netlink: 'syz.4.3270': attribute type 1 has an invalid length. [ 360.447613][T17025] netlink: 'syz.4.3270': attribute type 1 has an invalid length. [ 360.459386][T17024] bond1: entered promiscuous mode [ 360.461418][T17024] 8021q: adding VLAN 0 to HW filter on device bond1 [ 360.472193][T17024] bond1: (slave bridge1): making interface the new active one [ 360.474864][T17024] bridge1: entered promiscuous mode [ 360.477143][T17024] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 360.480411][ T40] audit: type=1400 audit(2000000630.532:1219): avc: denied { write } for pid=17023 comm="syz.4.3270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 360.488427][ T40] audit: type=1400 audit(2000000630.532:1220): avc: denied { write } for pid=17023 comm="syz.4.3270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 360.521027][T17029] fuse: Invalid rootmode [ 360.530627][ T24] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 360.623283][T17031] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.625908][T17031] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.680669][ T24] usb 13-1: Using ep0 maxpacket: 16 [ 360.683988][ T24] usb 13-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 360.687644][ T24] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.691373][ T24] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.695487][ T24] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 360.699640][ T24] usb 13-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 360.703457][ T24] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.708251][ T24] usb 13-1: config 0 descriptor?? [ 360.786850][T17031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.807158][T17031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.810935][ C2] vcan0: j1939_tp_rxtimer: 0xffff88803a730000: abort rx timeout. Force session deactivation [ 360.915011][T17019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.918036][T17019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.000879][ T6419] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.004709][ T6419] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.008615][ T6419] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.012999][ T6419] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.045424][T17036] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 361.047404][T17036] PKCS7: Only support pkcs7_signedData type [ 361.086551][ T40] audit: type=1400 audit(2000000631.142:1221): avc: denied { append } for pid=17037 comm="syz.4.3274" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 361.103698][ T40] audit: type=1400 audit(2000000631.162:1222): avc: denied { setattr } for pid=17037 comm="syz.4.3274" name="/" dev="9p" ino=71827799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 361.136088][ T24] input: HID 0458:5013 as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/0003:0458:5013.0009/input/input33 [ 361.206833][ T24] input: HID 0458:5013 as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/0003:0458:5013.0009/input/input34 [ 361.257818][ T40] audit: type=1400 audit(2000000631.312:1223): avc: denied { getopt } for pid=17043 comm="syz.6.3277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 361.310717][ T24] kye 0003:0458:5013.0009: input,hiddev0,hidraw1: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.8-1/input0 [ 361.327626][ T40] audit: type=1400 audit(2000000631.382:1224): avc: denied { append } for pid=17018 comm="syz.8.3268" name="event4" dev="devtmpfs" ino=3353 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 361.340138][T17055] fuse: Invalid rootmode [ 361.347896][ T1156] usb 13-1: USB disconnect, device number 2 [ 361.384037][T17059] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3282'. [ 361.387108][T17059] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3282'. [ 361.390087][T17059] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3282'. [ 361.393528][T17059] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3282'. [ 361.396541][T17059] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3282'. [ 361.433064][T17065] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 361.433064][T17065] The task syz.4.3281 (17065) triggered the difference, watch for misbehavior. [ 361.439601][ T40] audit: type=1400 audit(2000000631.492:1225): avc: denied { read } for pid=17056 comm="syz.4.3281" name="usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 361.449003][ T40] audit: type=1400 audit(2000000631.502:1226): avc: denied { open } for pid=17056 comm="syz.4.3281" path="/dev/usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 362.002988][T17075] __nla_validate_parse: 28 callbacks suppressed [ 362.003004][T17075] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3285'. [ 362.272514][T17092] xt_l2tp: v2 doesn't support IP mode [ 362.277556][T17094] fuse: Invalid rootmode [ 362.285439][T17092] tipc: Started in network mode [ 362.287067][T17092] tipc: Node identity 2e6a76c7c28c, cluster identity 4711 [ 362.289453][T17092] tipc: Enabled bearer , priority 0 [ 362.296498][T17092] tipc: Resetting bearer [ 362.320166][T17096] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 362.384625][T17098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3293'. [ 362.394944][T17091] tipc: Disabling bearer [ 362.458498][T17107] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3295'. [ 362.505119][ T5951] Bluetooth: hci3: Malformed LE Event: 0x0d [ 362.596669][T17120] (syz.8.3300,17120,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 362.601787][T17120] (syz.8.3300,17120,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 362.604754][T17120] (syz.8.3300,17120,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 362.608443][T17120] (syz.8.3300,17120,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 362.656446][T17120] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3300'. [ 362.705273][T17120] hsr_slave_1 (unregistering): left promiscuous mode [ 362.930920][T17138] overlayfs: conflicting options: nfs_export=on,index=off [ 363.005767][T17141] 9pnet_fd: p9_fd_create_tcp (17141): problem binding to privport [ 363.169096][T17155] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3312'. [ 363.174040][T17155] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3312'. [ 363.398188][T17164] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.500559][T17164] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.611678][T17164] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.712558][T17164] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.739379][T17184] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3321'. [ 363.834083][ T1155] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.847969][ T1155] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.871857][ T72] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.884159][ T72] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.356814][T17217] bond2 (unregistering): Released all slaves [ 364.408646][T17224] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3331'. [ 364.514609][T17237] fuse: Unknown parameter 'use00000000000000000000' [ 364.720365][T17263] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3341'. [ 364.732847][T17263] netlink: 124 bytes leftover after parsing attributes in process `syz.8.3341'. [ 364.737454][T17263] nbd: couldn't find a device at index 0 [ 364.894588][T17277] fuse: Unknown parameter 'use00000000000000000000' [ 364.927841][T17280] netlink: 'syz.8.3347': attribute type 1 has an invalid length. [ 364.932626][T17280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.374469][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 365.374485][ T40] audit: type=1326 audit(2000000635.432:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17240 comm="syz.4.3337" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0579f9acb9 code=0x7fc00000 [ 365.486646][T17310] fuse: Unknown parameter 'use00000000000000000000' [ 365.589923][ C3] hrtimer: interrupt took 17350 ns [ 365.710711][ T6037] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 365.738452][T17341] syz_tun: entered allmulticast mode [ 365.745048][T17341] dvmrp6: entered allmulticast mode [ 365.851008][ T6037] usb 12-1: device descriptor read/64, error -71 [ 365.865959][T17348] fuse: Unknown parameter 'user_i00000000000000000000' [ 365.904620][T17352] tmpfs: Bad value for 'mpol' [ 365.906853][T17352] netlink: 'syz.6.3369': attribute type 11 has an invalid length. [ 365.911614][T17352] tmpfs: Bad value for 'mpol' [ 365.913981][T17352] netlink: 'syz.6.3369': attribute type 11 has an invalid length. [ 365.984745][ T40] audit: type=1400 audit(2000000636.042:1253): avc: denied { create } for pid=17357 comm="syz.6.3371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 365.995598][ T40] audit: type=1400 audit(2000000636.052:1254): avc: denied { sys_admin } for pid=17357 comm="syz.6.3371" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 366.100650][ T6037] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 366.120608][ T9623] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 366.240600][ T6037] usb 12-1: device descriptor read/64, error -71 [ 366.293317][ T9623] usb 9-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.297808][ T9623] usb 9-1: config 1 interface 0 has no altsetting 0 [ 366.311233][ T9623] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 366.314485][ T9623] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 366.317136][ T9623] usb 9-1: SerialNumber: syz [ 366.350849][ T6037] usb usb12-port1: attempt power cycle [ 366.643738][T17368] IPVS: Scheduler module ip_vs_sip not found [ 366.698268][ T40] audit: type=1400 audit(2000000636.752:1255): avc: denied { listen } for pid=17367 comm="syz.6.3373" lport=45821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 366.706752][ T40] audit: type=1400 audit(2000000636.752:1256): avc: denied { accept } for pid=17367 comm="syz.6.3373" lport=45821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 366.720654][ T6037] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 366.736105][T17350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.739005][T17350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.748831][ T9623] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 366.753968][ T6037] usb 12-1: device descriptor read/8, error -71 [ 366.762096][ T9623] usb 9-1: USB disconnect, device number 40 [ 367.000636][ T6037] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 367.021720][ T6037] usb 12-1: device descriptor read/8, error -71 [ 367.131015][ T6037] usb usb12-port1: unable to enumerate USB device [ 367.287499][T17377] __nla_validate_parse: 2 callbacks suppressed [ 367.287517][T17377] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3375'. [ 367.293940][T17377] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3375'. [ 367.297125][ T40] audit: type=1400 audit(2000000637.362:1257): avc: denied { write } for pid=17378 comm="syz.8.3376" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 367.299696][T17379] autofs4:pid:17379:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 367.305365][ T40] audit: type=1400 audit(2000000637.362:1258): avc: denied { open } for pid=17378 comm="syz.8.3376" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 367.318480][ T40] audit: type=1400 audit(2000000637.362:1259): avc: denied { ioctl } for pid=17378 comm="syz.8.3376" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 367.341348][ T40] audit: type=1400 audit(2000000637.372:1260): avc: denied { write } for pid=17376 comm="syz.4.3375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 367.348873][ T40] audit: type=1400 audit(2000000637.372:1261): avc: denied { getopt } for pid=17376 comm="syz.4.3375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 367.575793][T17412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17412 comm=syz.6.3385 [ 367.586927][T17412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17412 comm=syz.6.3385 [ 367.617969][T17408] XFS (nullb0): Invalid superblock magic number [ 367.757341][T17429] ext2: Unknown parameter '/dev/loop' [ 367.829962][T17434] fuse: Unknown parameter 'user_id00000000000000000000' [ 368.494291][T17445] netlink: 830 bytes leftover after parsing attributes in process `syz.7.3397'. [ 368.859758][T17481] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3409'. [ 368.980605][ T6009] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 369.100697][T15084] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 369.130629][ T6009] usb 12-1: Using ep0 maxpacket: 8 [ 369.134492][ T6009] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 369.137667][ T6009] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 369.141136][ T6009] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 369.144342][ T6009] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 369.148422][ T6009] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 369.151438][ T6009] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.262542][T15084] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 369.266050][T15084] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.270363][T15084] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.274799][T15084] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 369.281673][T15084] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 369.284660][T15084] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 369.287446][T15084] usb 9-1: Manufacturer: syz [ 369.291199][T15084] usb 9-1: config 0 descriptor?? [ 369.357700][ T6009] usb 12-1: GET_CAPABILITIES returned 0 [ 369.359600][ T6009] usbtmc 12-1:16.0: can't read capabilities [ 369.370622][ T5951] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 369.376039][ T5951] Bluetooth: hci3: Injecting HCI hardware error event [ 369.379875][ T5951] Bluetooth: hci3: hardware error 0x00 [ 369.559424][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.563404][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.567298][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.570685][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.574138][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.577038][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.579991][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.582943][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.585826][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.588593][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.591950][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.594874][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.597755][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.600627][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.603623][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.606660][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.699081][T15084] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 369.712531][T15084] appleir 0003:05AC:8243.000A: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 369.901688][T17479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3408'. [ 369.907233][T17479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3408'. [ 369.926018][T15084] usb 9-1: USB disconnect, device number 41 [ 369.928206][ T5940] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 370.606226][T17535] fuse: Bad value for 'fd' [ 370.792703][T17560] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3429'. [ 370.830454][T17564] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3430'. [ 371.037850][T17579] tipc: Enabled bearer , priority 0 [ 371.044169][T17578] tipc: Resetting bearer [ 371.059878][T17578] tipc: Disabling bearer [ 371.116880][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 371.116893][ T40] audit: type=1400 audit(2000000641.172:1273): avc: denied { mounton } for pid=17586 comm="syz.4.3439" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 371.122433][T17587] cgroup: Name too long [ 371.169297][T17601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3443'. [ 371.174352][T17601] netlink: 'syz.4.3443': attribute type 11 has an invalid length. [ 371.180472][T17601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3443'. [ 371.196293][T17601] netlink: 'syz.4.3443': attribute type 11 has an invalid length. [ 371.200575][ T3753] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.203773][ T3753] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.216053][ T3753] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.230208][ T3753] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.259278][T17608] fuse: Unknown parameter '0x0000000000000004' [ 371.287384][ T40] audit: type=1400 audit(2000000641.342:1274): avc: denied { listen } for pid=17611 comm="syz.6.3446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 371.296720][ T40] audit: type=1400 audit(2000000641.352:1275): avc: denied { accept } for pid=17611 comm="syz.6.3446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 371.375645][ T40] audit: type=1326 audit(2000000641.432:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17614 comm="syz.4.3447" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0579f9acb9 code=0x0 [ 371.405890][ T40] audit: type=1400 audit(2000000641.462:1277): avc: denied { ioctl } for pid=17623 comm="syz.6.3450" path="socket:[85204]" dev="sockfs" ino=85204 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 371.418554][ T40] audit: type=1400 audit(2000000641.472:1278): avc: denied { relabelfrom } for pid=17625 comm="syz.8.3451" name="NETLINK" dev="sockfs" ino=83693 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 371.418640][T17626] SELinux: Context xino=on is not valid (left unmapped). [ 371.434833][ T40] audit: type=1400 audit(2000000641.492:1279): avc: denied { relabelto } for pid=17625 comm="syz.8.3451" name="NETLINK" dev="sockfs" ino=83693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_generic_socket permissive=1 trawcon="xino=on" [ 371.460726][ T5951] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 371.493952][T17615] netlink: 'syz.4.3447': attribute type 13 has an invalid length. [ 371.496637][T17615] netlink: 'syz.4.3447': attribute type 27 has an invalid length. [ 371.508137][T17626] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 371.511758][T17626] overlayfs: overlapping lowerdir path [ 371.555176][T17640] fuse: Unknown parameter '0x0000000000000004' [ 371.592626][ T40] audit: type=1400 audit(2000000641.652:1280): avc: denied { setopt } for pid=17643 comm="syz.8.3456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 371.637305][T17648] overlayfs: failed to clone upperpath [ 371.688659][T17653] : renamed from bond0 (while UP) [ 371.734821][ T142] usb 12-1: USB disconnect, device number 7 [ 371.783766][ T40] audit: type=1400 audit(2000000641.842:1281): avc: denied { execute } for pid=17661 comm="syz.8.3462" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 372.022360][T17680] overlayfs: failed to resolve 'fowner<00000000000000000000': -2 [ 372.025120][ T40] audit: type=1400 audit(2000000642.082:1282): avc: denied { mounton } for pid=17675 comm="syz.8.3467" path="/100/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 372.034027][T17678] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 372.240279][T17702] netlink: 'syz.4.3475': attribute type 4 has an invalid length. [ 372.256373][T17706] tmpfs: Bad value for 'mpol' [ 372.411013][T17718] __nla_validate_parse: 6 callbacks suppressed [ 372.411024][T17718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3480'. [ 372.473589][T17726] netlink: 'syz.8.3481': attribute type 33 has an invalid length. [ 372.476636][T17726] netlink: 152 bytes leftover after parsing attributes in process `syz.8.3481'. [ 372.578130][T17735] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 372.580556][T17735] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 372.586736][T17735] vhci_hcd vhci_hcd.0: Device attached [ 372.743935][T17744] xt_l2tp: v2 doesn't support IP mode [ 372.747400][T17744] xt_CT: You must specify a L4 protocol and not use inversions on it [ 372.784795][T17746] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3489'. [ 372.831299][ T9623] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 372.890908][T15084] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 372.969752][T17760] SELinux: Context system_u:object_r:crack_db_t:s0 is not valid (left unmapped). [ 373.061534][T15084] usb 9-1: Using ep0 maxpacket: 8 [ 373.068978][T15084] usb 9-1: config 0 has an invalid descriptor of length 253, skipping remainder of the config [ 373.073952][T15084] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 373.078095][T15084] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 373.083053][T15084] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.089476][T15084] usb 9-1: config 0 descriptor?? [ 373.102127][T17773] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 373.116144][T17773] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 373.145936][T17777] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3501'. [ 373.211854][T17785] tipc: Enabling of bearer rejected, failed to enable media [ 373.344654][T17788] futex_wake_op: syz.8.3507 tries to shift op by 32; fix this program [ 374.526122][T17858] fuse: Unknown parameter 'fd0x0000000000000004' [ 374.641303][T17871] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 374.643389][T17871] PKCS7: Only support pkcs7_signedData type [ 375.199901][T17915] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3546'. [ 375.279251][T17924] ip6erspan0: entered promiscuous mode [ 375.341032][T17927] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3549'. [ 375.473349][T17933] overlayfs: failed to resolve './file0': -2 [ 375.592342][ T6024] usb 9-1: USB disconnect, device number 42 [ 375.596881][T17736] vhci_hcd: connection reset by peer [ 375.614630][T11100] vhci_hcd vhci_hcd.4: stop threads [ 375.616446][T11100] vhci_hcd vhci_hcd.4: release socket [ 375.618379][T11100] vhci_hcd vhci_hcd.4: disconnect device [ 375.731122][T16268] usb 12-1: new full-speed USB device number 8 using dummy_hcd [ 375.883228][T16268] usb 12-1: config 0 has no interfaces? [ 375.887165][T17955] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3561'. [ 375.888088][T16268] usb 12-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 375.892647][T17955] netem: unknown loss type 13 [ 375.894336][T16268] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.896099][T17955] netem: change failed [ 375.898630][T16268] usb 12-1: Product: syz [ 375.901705][T16268] usb 12-1: Manufacturer: syz [ 375.904175][T16268] usb 12-1: SerialNumber: syz [ 375.907498][T16268] usb 12-1: config 0 descriptor?? [ 375.960720][ T6024] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 376.122652][ T6024] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 376.126456][ T6024] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.131064][ T6024] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.135066][ T6024] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 376.141155][ T6024] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 376.144684][ T6024] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 376.147853][ T6024] usb 9-1: Manufacturer: syz [ 376.152718][ T6024] usb 9-1: config 0 descriptor?? [ 376.269557][T17976] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.3567'. [ 376.314235][T17933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.318250][T17933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.333815][ T142] usb 12-1: USB disconnect, device number 8 [ 376.369587][T17987] netlink: 'syz.8.3572': attribute type 4 has an invalid length. [ 376.375056][T17987] netlink: 'syz.8.3572': attribute type 1 has an invalid length. [ 376.378161][T17987] netlink: 228 bytes leftover after parsing attributes in process `syz.8.3572'. [ 376.383841][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 376.384232][ T40] audit: type=1400 audit(2000000646.442:1317): avc: denied { connect } for pid=17986 comm="syz.8.3572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 376.511171][T17993] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3574'. [ 376.518997][T11102] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.525275][T11102] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.528532][T11102] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.532231][T11102] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.566783][ T6024] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 376.572200][ T6024] appleir 0003:05AC:8243.000B: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 376.964620][ T40] audit: type=1400 audit(2000000647.032:1318): avc: denied { read write } for pid=18007 comm="syz.7.3579" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 376.972694][ T40] audit: type=1400 audit(2000000647.032:1319): avc: denied { open } for pid=18007 comm="syz.7.3579" path="/dev/input/mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 376.990091][T18009] ./file0: Can't lookup blockdev [ 377.071538][T18013] veth0_to_bond: entered allmulticast mode [ 377.179530][T18014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65526 sclass=netlink_route_socket pid=18014 comm=syz.4.3555 [ 377.199951][T18014] overlayfs: missing 'lowerdir' [ 377.309246][T18023] GUP no longer grows the stack in syz.7.3583 (18023): 200000007000-20000000a000 (200000004000) [ 377.316210][T18023] CPU: 3 UID: 0 PID: 18023 Comm: syz.7.3583 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.316240][T18023] Tainted: [L]=SOFTLOCKUP [ 377.316246][T18023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 377.316257][T18023] Call Trace: [ 377.316265][T18023] [ 377.316272][T18023] dump_stack_lvl+0x100/0x190 [ 377.316326][T18023] gup_vma_lookup.cold+0x83/0x96 [ 377.316352][T18023] __get_user_pages+0x241/0x34d0 [ 377.316387][T18023] ? do_syscall_64+0xc9/0xf80 [ 377.316411][T18023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.316431][T18023] ? __pfx___get_user_pages+0x10/0x10 [ 377.316463][T18023] __gup_longterm_locked+0x279/0x16f0 [ 377.316490][T18023] ? __lock_acquire+0x3c0/0x2630 [ 377.316514][T18023] ? __pfx___gup_longterm_locked+0x10/0x10 [ 377.316552][T18023] pin_user_pages+0x13c/0x160 [ 377.316578][T18023] ? __pfx_pin_user_pages+0x10/0x10 [ 377.316614][T18023] xdp_umem_create+0x73e/0x11e0 [ 377.316647][T18023] xsk_setsockopt+0x7ba/0xa90 [ 377.316674][T18023] ? __pfx_xsk_setsockopt+0x10/0x10 [ 377.316699][T18023] ? find_held_lock+0x2b/0x80 [ 377.316721][T18023] ? __fget_files+0x215/0x3d0 [ 377.316748][T18023] ? selinux_socket_setsockopt+0x6a/0x80 [ 377.316784][T18023] ? __pfx_xsk_setsockopt+0x10/0x10 [ 377.316809][T18023] do_sock_setsockopt+0xf3/0x1d0 [ 377.316840][T18023] __sys_setsockopt+0x195/0x220 [ 377.316868][T18023] __x64_sys_setsockopt+0xbd/0x160 [ 377.316888][T18023] ? do_syscall_64+0x94/0xf80 [ 377.316905][T18023] ? lockdep_hardirqs_on+0x78/0x100 [ 377.316924][T18023] do_syscall_64+0xc9/0xf80 [ 377.316944][T18023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.316963][T18023] RIP: 0033:0x7f3d2af9acb9 [ 377.316978][T18023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.316994][T18023] RSP: 002b:00007f3d2beff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 377.317013][T18023] RAX: ffffffffffffffda RBX: 00007f3d2b215fa0 RCX: 00007f3d2af9acb9 [ 377.317025][T18023] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 377.317035][T18023] RBP: 00007f3d2b008bf7 R08: 0000000000000020 R09: 0000000000000000 [ 377.317045][T18023] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 377.317056][T18023] R13: 00007f3d2b216038 R14: 00007f3d2b215fa0 R15: 00007ffca91edc28 [ 377.317103][T18023] [ 377.511810][ T40] audit: type=1400 audit(2000000647.572:1320): avc: denied { read } for pid=18027 comm="syz.7.3584" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 377.526679][T18028] deleting an unspecified loop device is not supported. [ 377.541037][ T40] audit: type=1400 audit(2000000647.572:1321): avc: denied { open } for pid=18027 comm="syz.7.3584" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 377.551011][ T40] audit: type=1400 audit(2000000647.582:1322): avc: denied { ioctl } for pid=18027 comm="syz.7.3584" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 377.758693][ T6037] usb 9-1: USB disconnect, device number 43 [ 377.930776][ T9623] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 378.153491][ T40] audit: type=1400 audit(2000000648.212:1323): avc: denied { read } for pid=18041 comm="syz.6.3589" lport=30297 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 378.178729][T18042] mmap: syz.6.3589 (18042): VmData 29208576 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 378.709413][ T40] audit: type=1400 audit(2000000648.762:1324): avc: denied { ioctl } for pid=18075 comm="syz.4.3600" path="socket:[85697]" dev="sockfs" ino=85697 ioctlcmd=0x89e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 379.165291][T18080] sch_fq: defrate 0 ignored. [ 379.203687][ T40] audit: type=1400 audit(2000000649.262:1325): avc: denied { mounton } for pid=18081 comm="syz.8.3602" path="/144/file0" dev="tmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 379.260582][T18089] overlayfs: missing 'lowerdir' [ 379.263758][T18090] overlayfs: missing 'lowerdir' [ 379.365044][T18105] overlayfs: failed to resolve '/j': -2 [ 379.371568][T18105] 9p: Unknown Cache mode or invalid value fscache [ 379.446652][ T40] audit: type=1400 audit(2000000649.502:1326): avc: denied { bind } for pid=18113 comm="syz.6.3611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 379.531676][T18123] bridge_slave_0: invalid flags given to default FDB implementation [ 379.604162][T18130] tmpfs: Bad value for 'mpol' [ 379.718410][T18140] vivid-003: disconnect [ 379.727786][T18140] vivid-003: reconnect [ 379.761030][T18132] syz.7.3618 (18132) used greatest stack depth: 17368 bytes left [ 379.793763][T18147] syzkaller0: entered promiscuous mode [ 379.796216][T18147] syzkaller0: entered allmulticast mode [ 379.816455][T18147] tipc: Enabled bearer , priority 0 [ 379.825466][T18146] tipc: Resetting bearer [ 379.843370][T18146] tipc: Disabling bearer [ 380.092148][T18176] can0: slcan on ttyS3. [ 380.149109][T18188] __nla_validate_parse: 8 callbacks suppressed [ 380.149127][T18188] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3635'. [ 380.191020][T18175] can0 (unregistered): slcan off ttyS3. [ 380.223909][T18193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3637'. [ 380.229305][T18193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3637'. [ 380.650730][T16268] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 380.822057][T16268] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.825583][T16268] usb 13-1: config 1 interface 0 altsetting 93 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 380.829689][T16268] usb 13-1: config 1 interface 0 has no altsetting 0 [ 380.833267][T16268] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 380.836164][T16268] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 380.838751][T16268] usb 13-1: SerialNumber: syz [ 380.843893][T16268] cdc_ether 13-1:1.0: invalid descriptor buffer length [ 380.846183][T16268] usb 13-1: bad CDC descriptors [ 381.027628][T18217] netlink: 'syz.6.3644': attribute type 1 has an invalid length. [ 381.045121][T18217] bond0: entered promiscuous mode [ 381.048085][T18217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.055380][T18188] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3635'. [ 381.058653][T18188] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3635'. [ 381.101348][T18217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16400 sclass=netlink_route_socket pid=18217 comm=syz.6.3644 [ 381.106314][T18217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=18217 comm=syz.6.3644 [ 381.158630][T15084] usb 13-1: USB disconnect, device number 3 [ 381.622093][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 381.622104][ T40] audit: type=1400 audit(2000000651.682:1339): avc: denied { bind } for pid=18251 comm="syz.4.3655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 381.703490][ T40] audit: type=1400 audit(2000000651.752:1340): avc: denied { write } for pid=18257 comm="syz.8.3657" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 381.786038][T18258] syzkaller0: entered promiscuous mode [ 381.787949][T18258] syzkaller0: entered allmulticast mode [ 381.803277][ T40] audit: type=1400 audit(2000000651.862:1341): avc: denied { read } for pid=18257 comm="syz.8.3657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 381.820833][ T40] audit: type=1400 audit(2000000651.882:1342): avc: denied { setopt } for pid=18264 comm="syz.7.3656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 381.918879][T18275] netlink: 'syz.7.3660': attribute type 21 has an invalid length. [ 381.922881][T18275] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3660'. [ 381.933211][T18275] fuse: Bad value for 'user_id' [ 381.935925][T18275] fuse: Bad value for 'user_id' [ 381.939419][ T40] audit: type=1400 audit(2000000651.992:1343): avc: denied { read } for pid=18274 comm="syz.7.3660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 382.000978][T18281] macvlan0: entered promiscuous mode [ 382.007650][T18281] netlink: 'syz.7.3663': attribute type 1 has an invalid length. [ 382.013846][T18281] netlink: 'syz.7.3663': attribute type 2 has an invalid length. [ 382.021227][ T40] audit: type=1326 audit(2000000652.082:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18279 comm="syz.7.3663" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d2af9acb9 code=0x0 [ 382.034093][T18283] fuse: Bad value for 'group_id' [ 382.035778][T18283] fuse: Bad value for 'group_id' [ 382.043215][T18283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.078811][T18286] x_tables: duplicate underflow at hook 2 [ 382.082502][T18285] netlink: 'syz.7.3663': attribute type 10 has an invalid length. [ 382.093654][T18285] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 382.246424][ T40] audit: type=1400 audit(2000000652.302:1345): avc: denied { shutdown } for pid=18293 comm="syz.6.3669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 382.618214][ T40] audit: type=1400 audit(2000000652.672:1346): avc: denied { bind } for pid=18308 comm="syz.6.3673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 382.621552][T18310] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 382.674050][T18317] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3674'. [ 382.677118][T18317] netem: invalid attributes len -22 [ 382.678787][T18317] netem: change failed [ 382.915906][T18352] netlink: 'syz.7.3689': attribute type 2 has an invalid length. [ 383.046994][ T40] audit: type=1400 audit(2000000653.102:1347): avc: denied { write } for pid=18369 comm="syz.6.3693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 383.067513][T18368] syzkaller1: entered promiscuous mode [ 383.069819][T18368] syzkaller1: entered allmulticast mode [ 383.080088][ T40] audit: type=1400 audit(2000000653.132:1348): avc: denied { ioctl } for pid=18367 comm="syz.7.3692" path="socket:[89562]" dev="sockfs" ino=89562 ioctlcmd=0x6405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 383.516958][T18413] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 383.537439][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.557544][T18416] netlink: 'syz.8.3707': attribute type 30 has an invalid length. [ 383.579385][T18410] overlayfs: upper fs does not support tmpfile. [ 383.605971][T18410] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 383.860405][T18441] sctp: [Deprecated]: syz.8.3714 (pid 18441) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.860405][T18441] Use struct sctp_sack_info instead [ 383.975715][T18449] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3717'. [ 383.979243][T18449] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3717'. [ 383.990260][T18449] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3717'. [ 384.235878][T18467] 9p: Could not find request transport:  [ 384.243744][T18470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18470 comm=syz.6.3725 [ 384.252992][T18470] netlink: 'syz.6.3725': attribute type 1 has an invalid length. [ 384.282938][T18474] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 384.432851][T18485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.436507][T18485] batadv_slave_0: entered promiscuous mode [ 384.439055][T18485] batadv_slave_0: entered allmulticast mode [ 384.636521][T18498] 9p: Unknown access argument 18446744073709551615: -34 [ 384.715144][T18503] loop9: detected capacity change from 0 to 7 [ 384.715586][T18506] netlink: 'syz.6.3735': attribute type 10 has an invalid length. [ 384.721167][T18503] Dev loop9: unable to read RDB block 7 [ 384.721191][T18503] loop9: unable to read partition table [ 384.721280][T18503] loop9: partition table beyond EOD, truncated [ 384.721315][T18503] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 385.030602][ T1156] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 385.172968][T18527] bridge_slave_0: invalid flags given to default FDB implementation [ 385.180671][ T1156] usb 12-1: Using ep0 maxpacket: 32 [ 385.186073][ T1156] usb 12-1: config 2 has an invalid interface number: 88 but max is 0 [ 385.190253][ T1156] usb 12-1: config 2 has no interface number 0 [ 385.190294][ T1156] usb 12-1: config 2 interface 88 has no altsetting 0 [ 385.192751][ T1156] usb 12-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 385.192775][ T1156] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.192791][ T1156] usb 12-1: Product: syz [ 385.192803][ T1156] usb 12-1: Manufacturer: syz [ 385.192815][ T1156] usb 12-1: SerialNumber: syz [ 385.294961][T18532] netlink: 'syz.4.3743': attribute type 13 has an invalid length. [ 385.375482][T18532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.377352][T18532] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.386590][T18532] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 385.656490][T18547] vlan0: entered promiscuous mode [ 385.658319][T18547] bridge0: entered promiscuous mode [ 385.724940][T18551] 8021q: adding VLAN 0 to HW filter on device bond3 [ 385.769489][ T3753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.774403][ T3753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.796280][T18549] cdrom: dropping to single frame dma [ 385.803905][T18508] __nla_validate_parse: 7 callbacks suppressed [ 385.803918][T18508] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3736'. [ 385.815537][T18508] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3736'. [ 385.819627][ T1156] asix 12-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 385.826739][ T1156] asix 12-1:2.88: probe with driver asix failed with error -71 [ 385.839668][ T1156] usb 12-1: USB disconnect, device number 9 [ 385.976560][T18587] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3759'. [ 386.071646][T18599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=18599 comm=syz.6.3764 [ 386.115233][T18606] netem: change failed [ 386.151284][T18612] xt_nfacct: accounting object `syz0' does not exist [ 386.185873][T18614] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 386.228914][T18618] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input36 [ 386.370321][T18630] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3774'. [ 386.380845][T18637] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(0) [ 386.383587][T18637] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 386.386846][T18637] vhci_hcd vhci_hcd.0: Device attached [ 386.479716][T18653] netlink: 'syz.6.3780': attribute type 3 has an invalid length. [ 386.550473][T18664] !: entered promiscuous mode [ 386.553862][T18664] !: left promiscuous mode [ 386.650877][T15084] usb 52-1: SetAddress Request (2) to port 0 [ 386.653667][T15084] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd [ 386.677809][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 386.677826][ T40] audit: type=1400 audit(2000000656.732:1357): avc: denied { accept } for pid=18661 comm="syz.8.3782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 386.702500][ T40] audit: type=1400 audit(2000000656.762:1358): avc: denied { setopt } for pid=18672 comm="syz.4.3785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 386.741422][T18676] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3786'. [ 386.744892][T18676] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3786'. [ 386.747893][T18676] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3786'. [ 386.748430][T18677] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3786'. [ 386.751429][T18676] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3786'. [ 386.774959][T18676] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3786'. [ 386.824393][T18684] IPv6: syztnl0: Disabled Multicast RS [ 386.833213][T18684] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18684 comm=syz.6.3790 [ 386.855197][T18684] 8021q: adding VLAN 0 to HW filter on device bond4 [ 386.858013][T18683] syzkaller1: entered promiscuous mode [ 386.860192][T18683] syzkaller1: entered allmulticast mode [ 386.873211][T18684] bond4: (slave dummy0): making interface the new active one [ 386.876316][T18684] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 386.906095][T18638] vhci_hcd: connection reset by peer [ 386.908681][ T40] audit: type=1400 audit(2000000656.962:1359): avc: denied { write } for pid=18688 comm="syz.6.3791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 386.917243][ T72] vhci_hcd vhci_hcd.7: stop threads [ 386.918374][ T40] audit: type=1400 audit(2000000656.972:1360): avc: denied { read } for pid=18681 comm="syz.4.3789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 386.919110][ T72] vhci_hcd vhci_hcd.7: release socket [ 386.923749][ T72] vhci_hcd vhci_hcd.7: disconnect device [ 387.747055][T18718] erofs (device loop8): cannot find valid erofs superblock [ 387.753615][T18719] erofs (device loop8): cannot find valid erofs superblock [ 387.795656][T18723] xt_TCPMSS: Only works on TCP SYN packets [ 387.980863][T18729] veth0_to_team: entered promiscuous mode [ 387.984579][T18729] erspan0: entered promiscuous mode [ 388.033883][T18732] dlm: non-version read from control device 79 [ 388.080698][ T6024] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 388.086058][T18737] macsec1: entered promiscuous mode [ 388.088356][T18737] macsec1: entered allmulticast mode [ 388.153556][T18749] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 388.161369][T18749] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 388.167140][ T40] audit: type=1400 audit(2000000658.222:1361): avc: denied { getopt } for pid=18745 comm="syz.7.3811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 388.167265][T18749] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 388.177838][T18749] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 388.182658][T18749] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 388.188944][T18749] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 388.194178][T18749] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 388.202812][T18749] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 388.207399][T18749] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 388.212308][T18749] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 388.232490][ T6024] usb 9-1: config 1 has an invalid interface number: 32 but max is 0 [ 388.235164][ T6024] usb 9-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 388.238518][ T6024] usb 9-1: config 1 has no interface number 0 [ 388.240596][ T6024] usb 9-1: config 1 interface 32 altsetting 93 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.244756][ T6024] usb 9-1: config 1 interface 32 has no altsetting 0 [ 388.248023][ T6024] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 388.251179][ T6024] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 388.254602][ T6024] usb 9-1: SerialNumber: syz [ 388.672188][T18726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.677793][T18726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.767465][T18801] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 389.359483][T18819] validate_nla: 49 callbacks suppressed [ 389.359496][T18819] netlink: 'syz.6.3831': attribute type 1 has an invalid length. [ 389.368466][T18820] bond5: Unable to set up delay as MII monitoring is disabled [ 389.373717][T18820] bond5 (unregistering): Released all slaves [ 389.401156][T18819] 8021q: adding VLAN 0 to HW filter on device bond5 [ 389.418452][T18819] bond5: (slave ip6gretap1): making interface the new active one [ 389.422459][T18819] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 389.445276][T18825] IPVS: Scheduler module ip_vs_sip not found [ 389.789512][ T40] audit: type=1400 audit(2000000659.842:1362): avc: denied { checkpoint_restore } for pid=18845 comm="syz.7.3836" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 389.827215][T16268] libceph: connect (1)[c::]:6789 error -101 [ 389.829955][T16268] libceph: mon0 (1)[c::]:6789 connect error [ 390.101030][T16268] libceph: connect (1)[c::]:6789 error -101 [ 390.103741][T16268] libceph: mon0 (1)[c::]:6789 connect error [ 390.613067][T16268] libceph: connect (1)[c::]:6789 error -101 [ 390.616393][T16268] libceph: mon0 (1)[c::]:6789 connect error [ 390.735154][T18881] sctp: [Deprecated]: syz.8.3844 (pid 18881) Use of struct sctp_assoc_value in delayed_ack socket option. [ 390.735154][T18881] Use struct sctp_sack_info instead [ 390.743106][ T40] audit: type=1400 audit(2000000660.802:1363): avc: denied { read } for pid=18880 comm="syz.8.3844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 390.800276][ T6024] usb 9-1: USB disconnect, device number 44 [ 390.823363][T18846] ceph: No mds server is up or the cluster is laggy [ 390.918902][ T40] audit: type=1400 audit(2000000660.972:1364): avc: denied { write } for pid=18888 comm="syz.4.3849" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 390.966813][T18899] __nla_validate_parse: 31 callbacks suppressed [ 390.966827][T18899] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3847'. [ 390.984294][T18900] bond2 (unregistering): Released all slaves [ 391.155826][T18919] netlink: 'syz.6.3857': attribute type 13 has an invalid length. [ 391.189376][ T40] audit: type=1400 audit(2000000661.242:1365): avc: denied { shutdown } for pid=18912 comm="syz.7.3855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 391.390637][ T24] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 391.463788][T18934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3861'. [ 391.467093][T18934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3861'. [ 391.530683][ T6024] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 391.550643][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 391.553890][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 391.555947][ T24] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 391.558731][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.565591][ T24] usb 9-1: config 0 descriptor?? [ 391.609569][T18939] overlayfs: failed to clone upperpath [ 391.615916][T18941] fuse: Bad value for 'user_id' [ 391.617581][T18941] fuse: Bad value for 'user_id' [ 391.665516][T18947] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 391.670177][T18949] unsupported nla_type 4111 [ 391.690678][ T6024] usb 12-1: Using ep0 maxpacket: 8 [ 391.690703][T15084] usb 52-1: device descriptor read/8, error -110 [ 391.694281][ T6024] usb 12-1: config 2 interface 0 has no altsetting 0 [ 391.700133][ T6024] usb 12-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 391.704929][ T6024] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.707839][ T6024] usb 12-1: Product: syz [ 391.709676][ T6024] usb 12-1: Manufacturer: syz [ 391.712015][ T6024] usb 12-1: SerialNumber: syz [ 391.761661][T18952] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3867'. [ 391.795112][T18953] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3867'. [ 391.979988][ T24] mcp2221 0003:04D8:00DD.000C: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 392.079863][T18973] netlink: 'syz.8.3874': attribute type 1 has an invalid length. [ 392.086557][T15084] usb usb52-port1: attempt power cycle [ 392.123888][T18973] bond3: entered promiscuous mode [ 392.125826][T18973] 8021q: adding VLAN 0 to HW filter on device bond3 [ 392.135501][T18973] bond3: (slave bridge4): making interface the new active one [ 392.138914][T18973] bridge4: entered promiscuous mode [ 392.141690][T18973] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 392.174577][ T142] usb 9-1: USB disconnect, device number 45 [ 392.178902][T18980] netlink: 348 bytes leftover after parsing attributes in process `syz.8.3875'. [ 392.245632][ T40] audit: type=1400 audit(2000000662.302:1366): avc: denied { bind } for pid=18983 comm="syz.8.3877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 392.269451][T18986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=18986 comm=syz.8.3878 [ 392.270138][T18987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=18987 comm=syz.8.3878 [ 392.655055][T15084] usb usb52-port1: unable to enumerate USB device [ 392.751295][T18996] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 392.759424][T18996] IPv6: addrconf: prefix option has invalid lifetime [ 392.791746][T18965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.130725][ T5940] Bluetooth: hci2: command 0x0405 tx timeout [ 393.430447][T19010] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3887'. [ 393.915515][T19022] netlink: 'syz.6.3890': attribute type 21 has an invalid length. [ 393.918088][T19022] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3890'. [ 393.977298][T19028] netlink: 'syz.8.3892': attribute type 142 has an invalid length. [ 394.042196][ T40] audit: type=1400 audit(2000000664.102:1367): avc: denied { map } for pid=19033 comm="syz.8.3896" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 394.091718][T19042] vlan2: entered promiscuous mode [ 394.093977][T19042] bridge0: entered promiscuous mode [ 394.119579][ T6024] usb 12-1: USB disconnect, device number 10 [ 394.128002][T19045] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 394.201032][ T40] audit: type=1400 audit(2000000664.262:1368): avc: denied { append } for pid=19056 comm="syz.7.3904" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 394.219069][ T40] audit: type=1400 audit(2000000664.272:1369): avc: denied { ioctl } for pid=19056 comm="syz.7.3904" path="/dev/sg1" dev="devtmpfs" ino=727 ioctlcmd=0x2289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 394.246219][T19058] veth0_to_team: entered promiscuous mode [ 394.249028][T19058] veth0_to_team: left promiscuous mode [ 394.304087][ T40] audit: type=1400 audit(2000000664.362:1370): avc: denied { read } for pid=19062 comm="syz.6.3906" lport=33320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 394.314361][T19063] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3906'. [ 394.319164][T19063] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3906'. [ 394.372645][ T40] audit: type=1400 audit(2000000664.422:1371): avc: denied { name_bind } for pid=19062 comm="syz.6.3906" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 394.385366][ T40] audit: type=1400 audit(2000000664.432:1372): avc: denied { name_connect } for pid=19062 comm="syz.6.3906" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 395.114870][ T40] audit: type=1400 audit(2000000665.172:1373): avc: denied { write } for pid=19082 comm="syz.7.3910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 395.176776][ T40] audit: type=1804 audit(2000000665.232:1374): pid=19088 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.3912" name="file0" dev="tmpfs" ino=3012 res=1 errno=0 [ 395.178468][T19088] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: 0, delta: -1 [ 395.186785][T19088] ref_ctr decrement failed for inode: 0xbc4 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888032b3a4c0 [ 395.190219][T19088] uprobe: syz.6.3912:19088 failed to unregister, leaking uprobe [ 395.190560][ T40] audit: type=1400 audit(2000000665.242:1375): avc: denied { watch } for pid=19089 comm="syz.8.3913" path="/216/file0" dev="tmpfs" ino=1152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 395.332264][T19098] 9p: Bad value for 'wfdno' [ 395.825944][T19113] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 396.120090][T19118] __nla_validate_parse: 10 callbacks suppressed [ 396.120111][T19118] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3919'. [ 396.129409][T19122] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3919'. [ 396.314067][T19130] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 396.327093][T19130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=19130 comm=syz.7.3922 [ 396.338090][T19132] cgroup: Invalid name [ 396.553895][T19150] input: syz0 as /devices/virtual/input/input37 [ 396.627279][T19157] netlink: 'syz.7.3931': attribute type 1 has an invalid length. [ 396.881310][T19179] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3936'. [ 396.895295][ T46] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.898238][ T46] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.903885][T19179] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3936'. [ 396.908638][ T46] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.921159][ T46] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.093084][T19210] program syz.7.3944 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 397.292244][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 397.292262][ T40] audit: type=1400 audit(2000000667.352:1388): avc: denied { read write } for pid=19219 comm="syz.7.3948" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 397.321003][ T40] audit: type=1400 audit(2000000667.352:1389): avc: denied { open } for pid=19219 comm="syz.7.3948" path="/138/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 397.578739][ T40] audit: type=1400 audit(2000000667.632:1390): avc: denied { accept } for pid=19240 comm="syz.6.3955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 397.586909][ T40] audit: type=1326 audit(2000000667.642:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.6.3955" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcaf339acb9 code=0xffff0000 [ 397.630731][ T24] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 397.780618][ T24] usb 13-1: Using ep0 maxpacket: 16 [ 397.784856][ T24] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 397.791401][ T24] usb 13-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 397.795386][ T24] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.798906][ T24] usb 13-1: Product: syz [ 397.801061][ T24] usb 13-1: Manufacturer: syz [ 397.803115][ T24] usb 13-1: SerialNumber: syz [ 397.807468][ T24] usb 13-1: config 0 descriptor?? [ 397.818624][ T24] em28xx 13-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 397.823517][ T24] em28xx 13-1:0.0: DVB interface 0 found: bulk [ 398.153641][T19247] bond2: (slave bond_slave_1): Device is not our slave [ 398.156311][T19247] bond2: option active_slave: invalid value (bond_slave_1) [ 398.161975][T19247] bond2 (unregistering): Released all slaves [ 398.401608][T19257] erspan1: entered allmulticast mode [ 398.424737][ T24] em28xx 13-1:0.0: unknown em28xx chip ID (0) [ 398.688396][T19268] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3965'. [ 398.693435][T19269] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3965'. [ 398.780640][ T6024] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 398.837213][ T24] em28xx 13-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 398.839877][ T24] em28xx 13-1:0.0: board has no eeprom [ 398.902185][ T40] audit: type=1400 audit(2000000668.962:1392): avc: denied { watch_mount } for pid=19285 comm="syz.6.3969" path="/583/file0" dev="tmpfs" ino=3110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 398.930807][ T6024] usb 9-1: Using ep0 maxpacket: 16 [ 398.933988][ T6024] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 398.938801][ T6024] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 398.941929][ T6024] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.944571][ T6024] usb 9-1: Product: syz [ 398.945951][ T6024] usb 9-1: Manufacturer: syz [ 398.947470][ T6024] usb 9-1: SerialNumber: syz [ 398.950672][ T6024] usb 9-1: config 0 descriptor?? [ 398.955394][ T6024] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 398.960607][ T6024] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 399.139570][T19304] overlayfs: failed to clone lowerpath [ 399.190683][ T24] em28xx 13-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 399.194167][ T24] em28xx 13-1:0.0: dvb set to bulk mode. [ 399.210715][T15084] em28xx 13-1:0.0: Binding DVB extension [ 399.343821][T19313] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.346462][T19313] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.440153][T19313] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 399.449114][T19313] bond1: left promiscuous mode [ 399.450627][T19313] bridge1: left promiscuous mode [ 399.452190][T19313] bond1: left allmulticast mode [ 399.453701][T19313] bridge1: left allmulticast mode [ 399.458546][T19313] bridge3: left promiscuous mode [ 399.464456][T19313] bond0: left promiscuous mode [ 399.466984][T19313] vlan0: left promiscuous mode [ 399.468369][T19313] bridge0: left promiscuous mode [ 399.482256][ T3753] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.486065][ T3753] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.494643][ T3753] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.497774][ T3753] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.501550][ T3753] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.504704][ T3753] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.507580][ T3753] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.510557][ T3753] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.549389][T19302] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3951'. [ 399.553685][T19302] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3951'. [ 399.557590][T19302] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3951'. [ 399.560310][T19302] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3951'. [ 399.561566][ T6024] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 399.971660][ T6024] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 399.976765][ T6024] em28xx 9-1:0.0: board has no eeprom [ 400.170142][ T40] audit: type=1400 audit(2000000670.222:1393): avc: denied { mount } for pid=19319 comm="syz.6.3978" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 400.330645][ T6024] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 400.334306][ T6024] em28xx 9-1:0.0: dvb set to bulk mode. [ 400.334327][T19228] em28xx 13-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 400.345665][T19266] em28xx 13-1:0.0: reading from i2c device at 0x6 failed (error=-5) [ 400.349964][ T6024] usb 13-1: USB disconnect, device number 4 [ 400.353764][ T6024] em28xx 13-1:0.0: Disconnecting em28xx [ 400.367219][T15084] em28xx 13-1:0.0: Registering input extension [ 400.371498][ T9623] em28xx 9-1:0.0: Binding DVB extension [ 400.611530][ T40] audit: type=1326 audit(2000000670.672:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19333 comm="syz.7.3981" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2af9acb9 code=0x7ffc0000 [ 400.630710][ T40] audit: type=1326 audit(2000000670.682:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19333 comm="syz.7.3981" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2af9acb9 code=0x7ffc0000 [ 400.640147][ T40] audit: type=1326 audit(2000000670.682:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19333 comm="syz.7.3981" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3d2af9acb9 code=0x7ffc0000 [ 400.650982][ T40] audit: type=1326 audit(2000000670.692:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19333 comm="syz.7.3981" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2af9acb9 code=0x7ffc0000 [ 400.692353][T19336] tap0: tun_chr_ioctl cmd 1074025675 [ 400.694191][T19336] tap0: persist enabled [ 400.695870][T19336] tap0: tun_chr_ioctl cmd 1074025675 [ 400.697685][T19336] tap0: persist disabled [ 400.713385][ T142] usb 9-1: USB disconnect, device number 46 [ 400.715875][ T142] em28xx 9-1:0.0: Disconnecting em28xx [ 400.747747][ T9623] em28xx 9-1:0.0: Registering input extension [ 400.749862][ T6024] em28xx 13-1:0.0: Closing input extension [ 400.752499][ T142] em28xx 9-1:0.0: Closing input extension [ 400.775348][ T142] em28xx 9-1:0.0: Freeing device [ 400.781219][ T6024] em28xx 13-1:0.0: Freeing device [ 400.854326][T19339] overlayfs: failed to clone upperpath [ 400.914001][T19339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19339 comm=syz.6.3982 [ 401.262646][ T5940] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 401.267580][ T5940] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 401.274616][ T5940] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 401.278496][ T5940] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 401.283684][ T5940] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 401.422039][T19376] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3994'. [ 401.477200][T18928] syz_tun (unregistering): left allmulticast mode [ 401.546061][T19385] ubi: mtd0 is already attached to ubi0 [ 401.560179][T19368] chnl_net:caif_netlink_parms(): no params data found [ 401.582645][T19392] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3997'. [ 401.590203][T19393] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3997'. [ 401.598584][T19392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3997'. [ 401.604105][T19392] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3997'. [ 401.640744][T19368] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.643214][T19368] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.645613][T19368] bridge_slave_0: entered allmulticast mode [ 401.648391][T19368] bridge_slave_0: entered promiscuous mode [ 401.652296][T19368] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.654843][T19368] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.657201][T19368] bridge_slave_1: entered allmulticast mode [ 401.659924][T19368] bridge_slave_1: entered promiscuous mode [ 401.675600][T19368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.680212][T19368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.681071][T19408] IPVS: set_ctl: invalid protocol: 98 172.30.0.8:8213 [ 401.700164][T19368] team0: Port device team_slave_0 added [ 401.704026][T19368] team0: Port device team_slave_1 added [ 401.718962][T19368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.721483][T19368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.730796][T19368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.735722][T19368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.738022][T19368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.746767][T19368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.773028][T19368] hsr_slave_0: entered promiscuous mode [ 401.773457][T19420] devpts: Bad value for 'max' [ 401.775779][T19368] hsr_slave_1: entered promiscuous mode [ 401.778825][T19368] debugfs: 'hsr0' already exists in 'hsr' [ 401.780769][T19368] Cannot create hsr debugfs directory [ 401.814888][T19428] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4006'. [ 401.815622][T19427] MPI: mpi too large (130440 bits) [ 401.876906][T19436] SELinux: syz.4.4009 (19436) set checkreqprot to 1. This is no longer supported. [ 402.007385][T19459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4016'. [ 402.011638][T19460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4016'. [ 402.076709][T19456] could not allocate digest TFM handle cryptd(blake2b-160) [ 402.264171][T19368] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 402.268665][T19368] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 402.273305][T19368] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 402.277540][T19368] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 402.294557][T19368] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.297025][T19368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.299582][T19368] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.301968][T19368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.320667][T19486] loop6: detected capacity change from 0 to 2640 [ 402.323097][T19486] buffer_io_error: 12645 callbacks suppressed [ 402.323106][T19486] Buffer I/O error on dev loop6, logical block 0, async page read [ 402.329686][T19486] Buffer I/O error on dev loop6, logical block 0, async page read [ 402.333558][T19486] Buffer I/O error on dev loop6, logical block 0, async page read [ 402.336819][T19486] Buffer I/O error on dev loop6, logical block 0, async page read [ 402.340154][T19486] Buffer I/O error on dev loop6, logical block 0, async page read [ 402.343950][T19486] Buffer I/O error on dev loop6, logical block 0, async page read [ 402.347453][T19486] Buffer I/O error on dev loop6, logical block 0, async page read [ 402.350857][T19486] Buffer I/O error on dev loop6, logical block 0, async page read [ 402.354257][T19486] ldm_validate_partition_table(): Disk read failed. [ 402.357055][T19486] Buffer I/O error on dev loop6, logical block 0, async page read [ 402.360277][T19486] Buffer I/O error on dev loop6, logical block 0, async page read [ 402.363718][T19368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.366771][T19486] Dev loop6: unable to read RDB block 0 [ 402.369258][T19486] loop6: unable to read partition table [ 402.374160][ T3753] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.377922][ T3753] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.378328][T19486] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 402.400362][T19368] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.409571][ T3753] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.412403][ T3753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.420071][ T3753] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.422436][ T3753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.459676][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 402.459693][ T40] audit: type=1400 audit(2000000672.512:1413): avc: denied { map } for pid=19485 comm="syz.7.4021" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 402.551287][T19368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.714140][T19368] veth0_vlan: entered promiscuous mode [ 402.719979][T19368] veth1_vlan: entered promiscuous mode [ 402.738247][T19368] veth0_macvtap: entered promiscuous mode [ 402.743414][T19368] veth1_macvtap: entered promiscuous mode [ 402.751945][T19368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.760154][T19368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.770788][ T46] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.774729][ T46] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.779506][ T46] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.783672][ T46] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.842342][ T3753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.845748][ T3753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.861433][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.863976][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.887547][ T5346] ldm_validate_partition_table(): Disk read failed. [ 402.892163][ T5346] Dev loop6: unable to read RDB block 0 [ 402.894952][ T5346] loop6: unable to read partition table [ 403.019596][ T5346] ldm_validate_partition_table(): Disk read failed. [ 403.023474][ T5346] Dev loop6: unable to read RDB block 0 [ 403.025607][ T5346] loop6: unable to read partition table [ 403.169056][ T5346] ldm_validate_partition_table(): Disk read failed. [ 403.172764][ T5346] Dev loop6: unable to read RDB block 0 [ 403.175423][ T5346] loop6: unable to read partition table [ 403.244725][ T40] audit: type=1804 audit(2000000673.302:1414): pid=19515 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.4026" name="/newroot/171/bus/bus" dev="overlay" ino=939 res=1 errno=0 [ 403.380806][ T5940] Bluetooth: hci5: command tx timeout [ 403.529159][T19546] Bluetooth: MGMT ver 1.23 [ 403.533584][T19546] openvswitch: netlink: Message has 8 unknown bytes. [ 403.590647][ T9488] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 403.604595][T19552] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 403.654120][T19557] xt_CT: You must specify a L4 protocol and not use inversions on it [ 403.667960][T19557] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4038'. [ 403.740775][ T9488] usb 11-1: Using ep0 maxpacket: 16 [ 403.745568][ T9488] usb 11-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 403.748450][ T9488] usb 11-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 403.751599][ T9488] usb 11-1: Product: syz [ 403.753048][ T9488] usb 11-1: Manufacturer: syz [ 403.754863][ T9488] usb 11-1: SerialNumber: syz [ 403.760736][ T9488] usb 11-1: config 0 descriptor?? [ 403.967512][ T9] usb 11-1: USB disconnect, device number 2 [ 404.373998][T19574] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4042'. [ 404.398275][T19574] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19574 comm=syz.8.4042 [ 404.590373][T19585] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.592990][T19585] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.655636][T19585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.662904][T19585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.717668][T19602] overlay: ./file0 is not a directory [ 404.783841][T19596] syz.6.4044 (19596) used obsolete PPPIOCDETACH ioctl [ 404.784898][T11100] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.784919][T11100] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.784943][T11100] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.796374][T11100] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.799155][T11100] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.802292][T11100] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.818487][T11100] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.822764][T11100] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.020853][T16268] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 405.056968][T19632] syz.8.4060: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 405.062941][T19632] CPU: 1 UID: 0 PID: 19632 Comm: syz.8.4060 Tainted: G L syzkaller #0 PREEMPT(full) [ 405.062969][T19632] Tainted: [L]=SOFTLOCKUP [ 405.062976][T19632] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 405.062986][T19632] Call Trace: [ 405.062992][T19632] [ 405.062998][T19632] dump_stack_lvl+0x100/0x190 [ 405.063025][T19632] warn_alloc.cold+0x95/0x1c1 [ 405.063049][T19632] ? __pfx_warn_alloc+0x10/0x10 [ 405.063074][T19632] ? kasan_save_stack+0x3f/0x50 [ 405.063092][T19632] ? kasan_save_stack+0x30/0x50 [ 405.063109][T19632] ? kasan_save_track+0x14/0x30 [ 405.063127][T19632] ? xskq_create+0xfb/0x1d0 [ 405.063153][T19632] __vmalloc_node_range_noprof+0x1252/0x1530 [ 405.063182][T19632] ? xskq_create+0xfb/0x1d0 [ 405.063209][T19632] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 405.063239][T19632] ? xskq_create+0xfb/0x1d0 [ 405.063260][T19632] vmalloc_user_noprof+0x9e/0xe0 [ 405.063283][T19632] ? xskq_create+0xfb/0x1d0 [ 405.063306][T19632] xskq_create+0xfb/0x1d0 [ 405.063329][T19632] xsk_setsockopt+0x725/0xa90 [ 405.063352][T19632] ? __pfx_xsk_setsockopt+0x10/0x10 [ 405.063374][T19632] ? find_held_lock+0x2b/0x80 [ 405.063393][T19632] ? __fget_files+0x215/0x3d0 [ 405.063413][T19632] ? selinux_socket_setsockopt+0x6a/0x80 [ 405.063437][T19632] ? __pfx_xsk_setsockopt+0x10/0x10 [ 405.063458][T19632] do_sock_setsockopt+0xf3/0x1d0 [ 405.063483][T19632] __sys_setsockopt+0x195/0x220 [ 405.063506][T19632] __x64_sys_setsockopt+0xbd/0x160 [ 405.063522][T19632] ? do_syscall_64+0x94/0xf80 [ 405.063537][T19632] ? lockdep_hardirqs_on+0x78/0x100 [ 405.063551][T19632] do_syscall_64+0xc9/0xf80 [ 405.063569][T19632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.063584][T19632] RIP: 0033:0x7fefa839acb9 [ 405.063598][T19632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.063613][T19632] RSP: 002b:00007fefa923a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 405.063629][T19632] RAX: ffffffffffffffda RBX: 00007fefa8615fa0 RCX: 00007fefa839acb9 [ 405.063640][T19632] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 405.063651][T19632] RBP: 00007fefa8408bf7 R08: 0000000000000004 R09: 0000000000000000 [ 405.063660][T19632] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.063667][T19632] R13: 00007fefa8616038 R14: 00007fefa8615fa0 R15: 00007fff60b40518 [ 405.063683][T19632] [ 405.063692][T19632] Mem-Info: [ 405.067904][T19634] tmpfs: Bad value for 'huge' [ 405.069634][T19632] active_anon:8427 inactive_anon:1996 isolated_anon:32 [ 405.069634][T19632] active_file:9611 inactive_file:12346 isolated_file:0 [ 405.069634][T19632] unevictable:1767 dirty:154 writeback:0 [ 405.069634][T19632] slab_reclaimable:8973 slab_unreclaimable:105636 [ 405.069634][T19632] mapped:28763 shmem:5351 pagetables:2403 [ 405.069634][T19632] sec_pagetables:319 bounce:0 [ 405.069634][T19632] kernel_misc_reclaimable:0 [ 405.069634][T19632] free:416341 free_pcp:23675 free_cma:0 [ 405.143722][T19635] netlink: 'syz.6.4062': attribute type 13 has an invalid length. [ 405.146682][T19632] Node 0 active_anon:33624kB inactive_anon:7984kB active_file:31076kB inactive_file:48988kB unevictable:11724kB isolated(anon):128kB isolated(file):0kB mapped:68832kB dirty:612kB writeback:0kB shmem:17848kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:17088kB pagetables:9212kB sec_pagetables:1272kB all_unreclaimable? no Balloon:0kB [ 405.178131][T19632] Node 1 active_anon:84kB inactive_anon:0kB active_file:7368kB inactive_file:396kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46196kB dirty:4kB writeback:0kB shmem:3556kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:400kB sec_pagetables:4kB all_unreclaimable? yes Balloon:0kB [ 405.187683][T19632] Node 0 DMA free:14908kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:260kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:20kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:60kB local_pcp:4kB free_cma:0kB [ 405.197301][T19632] lowmem_reserve[]: 0 1231 1231 1231 1231 [ 405.199182][T19632] Node 0 DMA32 free:260956kB boost:2048kB min:29536kB low:36408kB high:43280kB reserved_highatomic:2048KB free_highatomic:1828KB active_anon:33636kB inactive_anon:7984kB active_file:30816kB inactive_file:48988kB unevictable:11760kB writepending:612kB zspages:2492kB present:2080628kB managed:1261184kB mlocked:8224kB bounce:0kB free_pcp:57948kB local_pcp:17344kB free_cma:0kB [ 405.210030][T19632] lowmem_reserve[]: 0 0 0 0 0 [ 405.211926][T19632] Node 1 Normal free:1384612kB boost:89436kB min:129188kB low:139124kB high:149060kB reserved_highatomic:2048KB free_highatomic:1940KB active_anon:84kB inactive_anon:0kB active_file:7368kB inactive_file:396kB unevictable:3536kB writepending:4kB zspages:7932kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:33596kB local_pcp:8928kB free_cma:0kB [ 405.222723][T19632] lowmem_reserve[]: 0 0 0 0 0 [ 405.224509][T19632] Node 0 DMA: 15*4kB (UM) 10*8kB (UM) 11*16kB (UM) 10*32kB (UM) 13*64kB (UM) 9*128kB (UM) 10*256kB (UM) 3*512kB (U) 4*1024kB (U) 2*2048kB (UM) 0*4096kB = 14908kB [ 405.229658][T19632] Node 0 DMA32: 2967*4kB (UMEH) 2659*8kB (UMEH) 865*16kB (UMEH) 624*32kB (UMEH) 281*64kB (UMH) 120*128kB (UMEH) 87*256kB (UMH) 68*512kB (UME) 79*1024kB (UMH) 11*2048kB (UM) 0*4096kB = 260804kB [ 405.235772][T16268] usb 9-1: Using ep0 maxpacket: 8 [ 405.237473][T19632] Node 1 Normal: 503*4kB (UMEH) 329*8kB (UMEH) 284*16kB (UMEH) 372*32kB (UMH) 299*64kB (UMEH) 185*128kB (UMEH) 91*256kB (UMH) 30*512kB (UM) 58*1024kB (UMH) 15*2048kB (UM) 291*4096kB (UM) = 1384612kB [ 405.244199][T19632] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 405.247334][T19632] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 405.253365][T16268] usb 9-1: unable to get BOS descriptor or descriptor too short [ 405.255756][T19632] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 405.257732][T16268] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 405.260156][T19632] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 405.262728][T16268] usb 9-1: can't read configurations, error -71 [ 405.266907][T19632] 28404 total pagecache pages [ 405.274188][T19632] 1100 pages in swap cache [ 405.276099][T19632] Free swap = 52908kB [ 405.278273][T19632] Total swap = 124996kB [ 405.280096][T19632] 1048443 pages RAM [ 405.281898][T19632] 0 pages HighMem/MovableOnly [ 405.283990][T19632] 283836 pages reserved [ 405.285808][T19632] 0 pages cma reserved [ 405.336580][T19637] netlink: 'syz.6.4063': attribute type 1 has an invalid length. [ 405.340031][T19637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=19637 comm=syz.6.4063 [ 405.442905][T19648] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 405.450860][ T5940] Bluetooth: hci5: command tx timeout [ 405.509886][ T40] audit: type=1400 audit(2000000002.120:1415): avc: denied { create } for pid=19654 comm="syz.8.4070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 405.518216][ T40] audit: type=1400 audit(2000000002.130:1416): avc: denied { ioctl } for pid=19654 comm="syz.8.4070" path="socket:[93551]" dev="sockfs" ino=93551 ioctlcmd=0x4d12 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 406.331744][T19654] delete_channel: no stack [ 406.389030][T19689] 8021q: VLANs not supported on caif0 [ 406.454997][T19699] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 406.457231][T19699] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 406.459737][T19699] vhci_hcd vhci_hcd.0: Device attached [ 406.463718][T19700] vhci_hcd: connection closed [ 406.463988][ T6419] vhci_hcd vhci_hcd.6: stop threads [ 406.468072][ T6419] vhci_hcd vhci_hcd.6: release socket [ 406.470378][ T6419] vhci_hcd vhci_hcd.6: disconnect device [ 406.556342][ T40] audit: type=1400 audit(2000000003.169:1417): avc: denied { setopt } for pid=19711 comm="syz.7.4088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 406.558523][T19712] netlink: 'syz.7.4088': attribute type 20 has an invalid length. [ 406.581417][T19713] __nla_validate_parse: 4 callbacks suppressed [ 406.581434][T19713] netlink: 7064 bytes leftover after parsing attributes in process `syz.8.4087'. [ 406.586591][T19713] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 406.599111][T19713] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4087'. [ 406.627504][ T40] audit: type=1400 audit(2000000003.239:1418): avc: denied { execute } for pid=19714 comm="syz.7.4089" path="/dev/audio1" dev="devtmpfs" ino=1323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 406.710771][T19717] fuse: Unknown parameter '' [ 406.864224][T19721] NILFS (nbd7): device size too small [ 406.902843][T19723] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 406.943294][T19726] loop5: detected capacity change from 0 to 7 [ 406.953145][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 406.957608][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 406.963212][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 406.966688][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 406.969935][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 406.974043][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 406.978490][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 406.981620][T17052] ldm_validate_partition_table(): Disk read failed. [ 406.984560][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 406.987916][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 406.992089][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 406.996846][ T40] audit: type=1400 audit(2000000003.609:1419): avc: denied { ioctl } for pid=19727 comm="syz.6.4095" path="socket:[96364]" dev="sockfs" ino=96364 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 406.999530][T19728] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4095'. [ 407.002478][T17052] Dev loop5: unable to read RDB block 0 [ 407.005866][T17052] loop5: unable to read partition table [ 407.011693][T17052] loop5: partition table beyond EOD, truncated [ 407.015773][T19726] ldm_validate_partition_table(): Disk read failed. [ 407.021656][T19726] Dev loop5: unable to read RDB block 0 [ 407.024087][T19726] loop5: unable to read partition table [ 407.026004][T19726] loop5: partition table beyond EOD, truncated [ 407.030138][T19726] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`{֐ȵ4FLQk݊5) failed (rc=-5) [ 407.208929][T19744] program syz.7.4099 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.299718][T19750] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4102'. [ 407.305535][T19750] 0: renamed from hsr0 (while UP) [ 407.310150][T19750] 0: entered allmulticast mode [ 407.314250][T19750] hsr_slave_0: entered allmulticast mode [ 407.316519][T19750] hsr_slave_1: entered allmulticast mode [ 407.319235][T19750] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 407.388549][T19754] xt_hashlimit: invalid interval [ 407.458423][T19767] usb usb8: usbfs: process 19767 (syz.6.4109) did not claim interface 0 before use [ 407.530671][ T5940] Bluetooth: hci5: command tx timeout [ 407.596037][T19773] tipc: Started in network mode [ 407.598006][T19773] tipc: Node identity 7f000001, cluster identity 4711 [ 407.601665][T19773] tipc: Enabling of bearer rejected, failed to enable media [ 407.607893][T19773] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 407.611141][T19773] tipc: Enabled bearer , priority 10 [ 407.614096][T19773] tmpfs: Bad value for 'mpol' [ 407.712681][ T6024] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 407.764416][T19784] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4115'. [ 407.861646][T19796] netlink: 'syz.4.4117': attribute type 30 has an invalid length. [ 407.890623][ T6024] usb 13-1: Using ep0 maxpacket: 32 [ 407.895987][ T6024] usb 13-1: config 0 has an invalid interface number: 119 but max is 0 [ 407.899400][ T6024] usb 13-1: config 0 has no interface number 0 [ 407.910606][ T6024] usb 13-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 407.922918][ T6024] usb 13-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 407.927945][ T6024] usb 13-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 407.935188][ T6024] usb 13-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 407.943327][ T6024] usb 13-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 407.947074][ T6024] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.949817][ T6024] usb 13-1: Product: syz [ 407.951605][ T6024] usb 13-1: Manufacturer: syz [ 407.953345][ T6024] usb 13-1: SerialNumber: syz [ 407.956349][ T6024] usb 13-1: config 0 descriptor?? [ 407.961406][T19766] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 407.966703][ T6024] input: bcm5974 as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.119/input/input40 [ 407.972157][ T5331] usb 13-1: BOGUS urb xfer, pipe 1 != type 3 [ 407.981093][ C0] bcm5974 13-1:0.119: trackpad urb failed: -1 [ 408.128057][ T40] audit: type=1400 audit(2000000004.739:1420): avc: denied { create } for pid=19811 comm="syz.7.4123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 408.159372][T19812] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4123'. [ 408.202253][ T9488] usb 13-1: USB disconnect, device number 5 [ 408.236727][ T40] audit: type=1400 audit(2000000004.849:1421): avc: denied { ioctl } for pid=19824 comm="syz.6.4126" path="socket:[95916]" dev="sockfs" ino=95916 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 408.443744][T19833] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 4π!FVluc'f`ކ;1 [ 408.608775][T19845] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4131'. [ 408.617266][T19845] netlink: 'syz.6.4131': attribute type 6 has an invalid length. [ 408.620665][T15084] tipc: Node number set to 2130706433 [ 408.633521][T19845] netlink: 'syz.6.4131': attribute type 4 has an invalid length. [ 408.636887][T19845] netlink: 17 bytes leftover after parsing attributes in process `syz.6.4131'. [ 408.729797][ T40] audit: type=1400 audit(2000000005.339:1422): avc: denied { write } for pid=19855 comm="syz.6.4135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 408.806816][T19870] netlink: 'syz.4.4139': attribute type 3 has an invalid length. [ 408.809254][T19870] netlink: 'syz.4.4139': attribute type 1 has an invalid length. [ 409.080084][T19905] delete_channel: no stack [ 409.258156][T19923] netlink: 'syz.6.4154': attribute type 8 has an invalid length. [ 409.261192][T19923] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4154'. [ 409.269722][T19923] bond0: entered promiscuous mode [ 409.274001][T19923] bond_slave_0: entered promiscuous mode [ 409.276215][T19923] bond_slave_1: entered promiscuous mode [ 409.283507][T19923] gretap0: entered promiscuous mode [ 409.286413][T19923] veth0: entered promiscuous mode [ 409.289338][T19923] debugfs: 'hsr0' already exists in 'hsr' [ 409.294342][T19923] Cannot create hsr debugfs directory [ 409.296410][T19923] hsr0: entered promiscuous mode [ 409.411830][ T40] audit: type=1400 audit(2000000006.029:1423): avc: denied { append } for pid=19933 comm="syz.8.4157" name="pfkey" dev="proc" ino=4026534430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 409.423687][ T40] audit: type=1400 audit(2000000006.039:1424): avc: denied { map } for pid=19933 comm="syz.8.4157" path="/proc/729/net/pfkey" dev="proc" ino=4026534430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 409.460627][ T1156] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 409.555702][T19936] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4158'. [ 409.611501][ T1156] usb 9-1: Using ep0 maxpacket: 8 [ 409.615295][ T1156] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 409.618419][ T1156] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 409.621741][ T1156] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 409.625157][ T1156] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 409.629982][ T1156] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 409.633887][ T1156] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.780744][T16266] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 409.852812][ T1156] usb 9-1: GET_CAPABILITIES returned 0 [ 409.855872][ T1156] usbtmc 9-1:16.0: can't read capabilities [ 409.930675][T16266] usb 13-1: Using ep0 maxpacket: 8 [ 409.933677][ T40] audit: type=1400 audit(2000000006.549:1425): avc: denied { read } for pid=19952 comm="syz.7.4164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 409.940353][T16266] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 409.945243][T16266] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 409.948989][T16266] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.956761][T16266] usb 13-1: config 0 descriptor?? [ 409.967872][T19955] random: crng reseeded on system resumption [ 410.060047][T16268] usb 9-1: USB disconnect, device number 49 [ 410.164990][T16266] iowarrior 13-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 410.182766][T19955] Restarting kernel threads ... [ 410.187741][T19955] Done restarting kernel threads. [ 410.305164][T19968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.312468][T19915] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 410.387230][T19976] usb usb8: usbfs: process 19976 (syz.6.4173) did not claim interface 0 before use [ 410.501003][T19981] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 410.697225][T19985] [ 410.698305][T19985] ====================================================== [ 410.701102][T19985] WARNING: possible circular locking dependency detected [ 410.703959][T19985] syzkaller #0 Tainted: G L [ 410.706684][T19985] ------------------------------------------------------ [ 410.709485][T19985] syz.7.4176/19985 is trying to acquire lock: [ 410.711932][T19985] ffff88802ca79868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 410.715159][T19985] [ 410.715159][T19985] but task is already holding lock: [ 410.718300][T19985] ffff88804e864420 (sb_writers#6){.+.+}-{0:0}, at: __do_splice+0x33b/0x370 [ 410.722140][T19985] [ 410.722140][T19985] which lock already depends on the new lock. [ 410.722140][T19985] [ 410.726661][T19985] [ 410.726661][T19985] the existing dependency chain (in reverse order) is: [ 410.730359][T19985] [ 410.730359][T19985] -> #3 (sb_writers#6){.+.+}-{0:0}: [ 410.733477][T19985] mnt_want_write+0x6f/0x450 [ 410.735500][T19985] ovl_create_object+0x12b/0x3b0 [ 410.737657][T19985] lookup_open.isra.0+0x139b/0x1890 [ 410.739937][T19985] path_openat+0x117d/0x3120 [ 410.742065][T19985] do_filp_open+0x1f7/0x420 [ 410.744258][T19985] do_sys_openat2+0x12e/0x220 [ 410.746406][T19985] __x64_sys_openat+0x12d/0x210 [ 410.748505][T19985] do_syscall_64+0xc9/0xf80 [ 410.750318][T19985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.753023][T19985] [ 410.753023][T19985] -> #2 (&ovl_i_mutex_dir_key[depth]#2){++++}-{4:4}: [ 410.756594][T19985] down_read+0x99/0x460 [ 410.758576][T19985] lookup_slow+0x42/0x70 [ 410.760574][T19985] path_lookupat+0x5e8/0xc40 [ 410.762739][T19985] filename_lookup+0x202/0x590 [ 410.764977][T19985] kern_path+0x35/0x50 [ 410.766955][T19985] lookup_bdev+0xd8/0x280 [ 410.768995][T19985] resume_store+0x1d6/0x460 [ 410.771025][T19985] kobj_attr_store+0x58/0x80 [ 410.773149][T19985] sysfs_kf_write+0xf2/0x150 [ 410.775342][T19985] kernfs_fop_write_iter+0x3e0/0x5f0 [ 410.777791][T19985] vfs_write+0x6ac/0x1070 [ 410.779729][T19985] ksys_write+0x12a/0x250 [ 410.781708][T19985] do_syscall_64+0xc9/0xf80 [ 410.783908][T19985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.786547][T19985] [ 410.786547][T19985] -> #1 (&of->mutex){+.+.}-{4:4}: [ 410.789501][T19985] __mutex_lock+0x1a2/0x1b90 [ 410.791645][T19985] kernfs_fop_write_iter+0x2c2/0x5f0 [ 410.794233][T19985] iter_file_splice_write+0x82b/0x10a0 [ 410.796840][T19985] do_splice+0x109c/0x1fd0 [ 410.798943][T19985] __do_splice+0x33b/0x370 [ 410.801092][T19985] __x64_sys_splice+0x187/0x250 [ 410.803365][T19985] do_syscall_64+0xc9/0xf80 [ 410.805424][T19985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.808040][T19985] [ 410.808040][T19985] -> #0 (&pipe->mutex){+.+.}-{4:4}: [ 410.811092][T19985] __lock_acquire+0x14b8/0x2630 [ 410.813381][T19985] lock_acquire+0x17c/0x330 [ 410.815470][T19985] __mutex_lock+0x1a2/0x1b90 [ 410.817469][T19985] pipe_lock+0x69/0x80 [ 410.818961][T19985] iter_file_splice_write+0x1f8/0x10a0 [ 410.821330][T19985] do_splice+0x109c/0x1fd0 [ 410.823352][T19985] __do_splice+0x33b/0x370 [ 410.825397][T19985] __x64_sys_splice+0x187/0x250 [ 410.827573][T19985] do_syscall_64+0xc9/0xf80 [ 410.829697][T19985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.832380][T19985] [ 410.832380][T19985] other info that might help us debug this: [ 410.832380][T19985] [ 410.836525][T19985] Chain exists of: [ 410.836525][T19985] &pipe->mutex --> &ovl_i_mutex_dir_key[depth]#2 --> sb_writers#6 [ 410.836525][T19985] [ 410.841884][T19985] Possible unsafe locking scenario: [ 410.841884][T19985] [ 410.844871][T19985] CPU0 CPU1 [ 410.847036][T19985] ---- ---- [ 410.849232][T19985] rlock(sb_writers#6); [ 410.851013][T19985] lock(&ovl_i_mutex_dir_key[depth]#2); [ 410.854582][T19985] lock(sb_writers#6); [ 410.857304][T19985] lock(&pipe->mutex); [ 410.859064][T19985] [ 410.859064][T19985] *** DEADLOCK *** [ 410.859064][T19985] [ 410.862493][T19985] 1 lock held by syz.7.4176/19985: [ 410.864562][T19985] #0: ffff88804e864420 (sb_writers#6){.+.+}-{0:0}, at: __do_splice+0x33b/0x370 [ 410.868407][T19985] [ 410.868407][T19985] stack backtrace: [ 410.870793][T19985] CPU: 0 UID: 0 PID: 19985 Comm: syz.7.4176 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.870829][T19985] Tainted: [L]=SOFTLOCKUP [ 410.870836][T19985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 410.870847][T19985] Call Trace: [ 410.870855][T19985] [ 410.870863][T19985] dump_stack_lvl+0x100/0x190 [ 410.870890][T19985] print_circular_bug.cold+0x178/0x1c7 [ 410.870918][T19985] check_noncircular+0x146/0x160 [ 410.870947][T19985] __lock_acquire+0x14b8/0x2630 [ 410.870964][T19985] ? __do_splice+0x33b/0x370 [ 410.870984][T19985] ? __x64_sys_splice+0x187/0x250 [ 410.871007][T19985] lock_acquire+0x17c/0x330 [ 410.871021][T19985] ? pipe_lock+0x69/0x80 [ 410.871046][T19985] ? __pfx___might_resched+0x10/0x10 [ 410.871070][T19985] __mutex_lock+0x1a2/0x1b90 [ 410.871091][T19985] ? pipe_lock+0x69/0x80 [ 410.871112][T19985] ? pipe_lock+0x69/0x80 [ 410.871135][T19985] ? __pfx___mutex_lock+0x10/0x10 [ 410.871155][T19985] ? rcu_is_watching+0x12/0xc0 [ 410.871174][T19985] ? iter_file_splice_write+0x1d3/0x10a0 [ 410.871194][T19985] ? trace_kmalloc+0x83/0xb0 [ 410.871214][T19985] ? __kmalloc_noprof+0x365/0x9c0 [ 410.871230][T19985] ? pipe_lock+0x69/0x80 [ 410.871248][T19985] pipe_lock+0x69/0x80 [ 410.871265][T19985] iter_file_splice_write+0x1f8/0x10a0 [ 410.871285][T19985] ? futex_unqueue+0x13d/0x2c0 [ 410.871304][T19985] ? __pfx___futex_wait+0x10/0x10 [ 410.871326][T19985] ? lockdep_hardirqs_on+0x78/0x100 [ 410.871344][T19985] ? __pfx_iter_file_splice_write+0x10/0x10 [ 410.871364][T19985] ? __lock_acquire+0x4a5/0x2630 [ 410.871382][T19985] ? find_held_lock+0x2b/0x80 [ 410.871407][T19985] ? __pfx_iter_file_splice_write+0x10/0x10 [ 410.871429][T19985] do_splice+0x109c/0x1fd0 [ 410.871448][T19985] ? __lock_acquire+0x4a5/0x2630 [ 410.871468][T19985] ? __pfx_do_splice+0x10/0x10 [ 410.871486][T19985] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 410.871506][T19985] ? find_held_lock+0x2b/0x80 [ 410.871527][T19985] __do_splice+0x33b/0x370 [ 410.871548][T19985] ? __pfx___do_splice+0x10/0x10 [ 410.871570][T19985] __x64_sys_splice+0x187/0x250 [ 410.871591][T19985] do_syscall_64+0xc9/0xf80 [ 410.871610][T19985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.871629][T19985] RIP: 0033:0x7f3d2af9acb9 [ 410.871645][T19985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.871662][T19985] RSP: 002b:00007f3d2bede028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 410.871680][T19985] RAX: ffffffffffffffda RBX: 00007f3d2b216090 RCX: 00007f3d2af9acb9 [ 410.871692][T19985] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000008 [ 410.871701][T19985] RBP: 00007f3d2b008bf7 R08: 0000000000000002 R09: 0000000000000000 [ 410.871713][T19985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.871724][T19985] R13: 00007f3d2b216128 R14: 00007f3d2b216090 R15: 00007ffca91edc28 [ 410.871742][T19985] [ 410.973683][T19986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.978138][T19986] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 410.983358][T19986] bond0: (slave gre0): Error -95 calling set_mac_address [ 412.548536][T10389] usb 13-1: USB disconnect, device number 6