last executing test programs: 6m14.248976821s ago: executing program 32 (id=3221): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x34, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_clone3(&(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x13, r6, 0x0) ioctl$CDROMREADALL(r6, 0x5318, &(0x7f0000000440)) setsockopt$ALG_SET_KEY(r5, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 5m24.20621147s ago: executing program 33 (id=4228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 4m5.31290438s ago: executing program 34 (id=5491): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1c4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x50, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}]]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000006180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6ec6b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca00", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x101, {0x5, 0x2, 0x0, 0xfffffffffffffffd, 0x4, 0x3a1b, {0x40, 0x3, 0xa, 0x10000, 0x1001, 0x7, 0x800, 0x81, 0x120, 0x2000, 0x0, r5, 0x0, 0x440, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x29, 0x800002, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x200000, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2, 0x12) bind$unix(r6, &(0x7f0000001e80)=@file={0x1, './file0\x00'}, 0x6e) 2m52.274236141s ago: executing program 6 (id=6590): r0 = fsopen(&(0x7f0000000000)='romfs\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async, rerun: 64) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='nl80211\x00', &(0x7f0000000100)='./file0\x00', r1) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) 2m52.211919018s ago: executing program 6 (id=6591): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc010000000000000000000000000000000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001700000000002abd7000000000000000000000000000000000004c001400686d61632873686132353629"], 0x1a0}}, 0x0) 2m52.210681048s ago: executing program 6 (id=6593): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x82, 0x0, 0x0, 0x0, 0x0, @private0}}}}}}, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x82, 0x0, 0x0, 0x0, 0x0, @private0}}}}}}, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) (async) 2m52.107760118s ago: executing program 6 (id=6595): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) setreuid(0x0, 0xee01) close_range(r0, 0xffffffffffffffff, 0x0) 2m52.08725964s ago: executing program 6 (id=6598): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040ecb590404"], 0x7) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x4, 0x0, 0x0, {[@md5sig={0x13, 0x12, "473ecfd2106a00"}]}}}}}}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x70bd25, 0x2000, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@bridge_getlink={0x240, 0x12, 0x100, 0x70bd28, 0x25dfdbfb, {0x7, 0x0, 0x0, r3, 0x8440, 0x108}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x8}, @IFLA_VF_PORTS={0x44, 0x18, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xfa}, @IFLA_PORT_PROFILE={0xb, 0x2, 'ip6gre\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d6797fad6f7e8e1bf636546fbde8a455"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "f8a0f57737081081200a62395551daf2"}]}]}, @IFLA_PORT_SELF={0x14, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_VF={0x8, 0x1, 0x102}]}, @IFLA_LINK_NETNSID={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x400}, @IFLA_VFINFO_LIST={0x1a8, 0x16, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x9}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1ff, 0xe8}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7, 0x6}}, @IFLA_VF_MAC={0x28, 0x1, {0x6, @random="0585387cbd26"}}]}, {0x10c, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xabd, 0x400}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4, 0x3}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xff, 0x8000}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0xfb4, 0xce1, 0x88a8}}, {0x14, 0x1, {0x5, 0x25f, 0x6, 0x8100}}, {0x14, 0x1, {0x1, 0x500, 0x12, 0x8100}}, {0x14, 0x1, {0x2, 0x11c, 0x101, 0x8100}}, {0x14, 0x1, {0x80000000, 0x296, 0x1000, 0x88a8}}, {0x14, 0x1, {0x7, 0x1bb, 0x3, 0x8100}}, {0x14, 0x1, {0xac, 0xa39, 0x6, 0x88a8}}, {0x14, 0x1, {0x3, 0xda, 0x7, 0x8100}}]}, @IFLA_VF_VLAN={0x10, 0x2, {0xffffffb6, 0x31e, 0x1}}, @IFLA_VF_VLAN={0x10, 0x2, {0x8, 0xf99, 0xd07}}, @IFLA_VF_VLAN={0x10, 0x2, {0x5, 0xf29, 0x4}}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0x8001}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xa321, 0xd}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3ff, 0x73c, 0x7fffffff, 0x8100}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0x9}}]}]}]}, 0x240}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r4, &(0x7f0000000300)) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x8, 0x8, 0x9, 0x5, 0x1}) 2m51.955187497s ago: executing program 6 (id=6600): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x480, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x17c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@private=0xa010101, 0x0, 0x0, 0x4e21}, {@in=@broadcast, 0x0, 0x33}, @in6=@remote, {}, {0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x40000, 0x10000}, 0x0, 0x0, 0xa}, [@algo_auth={0x89, 0x1, {{'sha256\x00'}, 0x208, "a9d2bef95a4d26c618abe6c962b582cf72b7b4e665b9f2e35a455c315dc31664a7f666e087997bbc7c595538e71494ebf8926f58ae3e07675b41af9fe1b3a7bec8"}}]}, 0x17c}}, 0x0) (async) write(0xffffffffffffffff, &(0x7f00000006c0)=';\x00\x00', 0x3) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async, rerun: 32) io_uring_enter(r4, 0xc49, 0x7721, 0x16, 0x0, 0x0) (async, rerun: 32) r5 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:cekit_disk_exec_t:s0 user_u\x00'/50], 0x32) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x8}, 0x94) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffffe, 0x3, 0xe691, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0xd1, 0x0, 0x6, 0x6], 0x8080000, 0x8340}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m36.561750044s ago: executing program 35 (id=6600): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x480, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x17c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@private=0xa010101, 0x0, 0x0, 0x4e21}, {@in=@broadcast, 0x0, 0x33}, @in6=@remote, {}, {0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x40000, 0x10000}, 0x0, 0x0, 0xa}, [@algo_auth={0x89, 0x1, {{'sha256\x00'}, 0x208, "a9d2bef95a4d26c618abe6c962b582cf72b7b4e665b9f2e35a455c315dc31664a7f666e087997bbc7c595538e71494ebf8926f58ae3e07675b41af9fe1b3a7bec8"}}]}, 0x17c}}, 0x0) (async) write(0xffffffffffffffff, &(0x7f00000006c0)=';\x00\x00', 0x3) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async, rerun: 32) io_uring_enter(r4, 0xc49, 0x7721, 0x16, 0x0, 0x0) (async, rerun: 32) r5 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:cekit_disk_exec_t:s0 user_u\x00'/50], 0x32) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x8}, 0x94) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffffe, 0x3, 0xe691, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0xd1, 0x0, 0x6, 0x6], 0x8080000, 0x8340}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m31.734084038s ago: executing program 1 (id=6806): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x7000, 0x8, 0x6f, 0x6, 0xe4, 0x40, 0x7, 0x0, 0x0, 0x19}, {0x10000, 0x5000, 0xa, 0x0, 0x40, 0x5, 0x80, 0x7f, 0x5, 0x3, 0x3, 0xfc}, {0xdddd1000, 0x0, 0xe, 0x5, 0x6, 0x9, 0x0, 0x9, 0x1, 0xa7, 0x9, 0x81}, {0x6000, 0x2000, 0xc, 0x6, 0x0, 0x41, 0x0, 0xff, 0x8, 0x7, 0x81, 0x8}, {0x2000, 0xeeef3004, 0x3, 0x3, 0x6, 0x7, 0xaa, 0x7f, 0x4, 0x81, 0xf7, 0x83}, {0xa000, 0x40000, 0xb, 0xa0, 0xb1, 0x8, 0x8, 0xa0, 0x84, 0xf, 0x1, 0xfd}, {0xffff1000, 0x58000, 0x10, 0x4, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0xff, 0x70}, {0x100000, 0xdddd0000, 0xe, 0x5, 0xf, 0x0, 0x1, 0x34, 0x1, 0xc, 0x7, 0x7}, {0xeeef0000, 0x30}, {0x10000, 0x9}, 0x80000031, 0x0, 0x4000, 0x12025, 0x5, 0x10800, 0x25000, [0x5, 0x4, 0x7, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 48) 2m31.442684483s ago: executing program 1 (id=6808): r0 = socket(0x1, 0x2400000001, 0x2) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000140), &(0x7f0000000240)=0x10) (async) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000140), &(0x7f0000000240)=0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) socket$packet(0x11, 0xc2340cf684d20d18, 0x300) (async) socket$packet(0x11, 0xc2340cf684d20d18, 0x300) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xfffffffffffffffe) socket$netlink(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$cdrom(0xffffffffffffff9c, &(0x7f0000003940), 0x0, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100), &(0x7f00000001c0)) (async) r4 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x40000, 0x0, {0x2, 0x0, 0x0, 0x8, 0xfd, 0x1, 0xfe, 0x1, 0x3400}, [@RTA_NH_ID={0x8, 0x16, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200400c8}, 0x4010) (async) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x40000, 0x0, {0x2, 0x0, 0x0, 0x8, 0xfd, 0x1, 0xfe, 0x1, 0x3400}, [@RTA_NH_ID={0x8, 0x16, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200400c8}, 0x4010) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1}) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) dup(r2) (async) r8 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="f2ab3e2e410fc7696a266643c160cf5af3ad460f009b0000000066baf80cb8609c4087ef66bafc0cedb8010000000f01c166b807010f00d8660f383a16c4a17d72d117", 0x43}], 0x1, 0x72, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x14, 0x0, 0x0) setrlimit(0x7, &(0x7f0000000000)={0x9, 0x100000000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="c421fc107500c4417877c744240039010000c74424028a000000ff1c240f20c035040000002e0f4019400f1278c8c443a96c13053e41220a48b861000000000000000f23c00f21f84c3500000b000023f8f20f1eca66baf80cb8b428c987ef66bafc0cb843b50000ef", 0x69}], 0x1, 0x11, 0x0, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8001, 0x0, 0x20}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323}, {0x0, 0x6, 0x1}, {0x0, 0x8}, 0x70bd29, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x2, 0x4e22, 0x1, @in6=@empty}}, @encap={0x1c, 0x4, {0x2, 0x4e21, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x170}}, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) setsockopt(r3, 0x2, 0xfff, &(0x7f0000000300)="039b68fa570c72582db1ddabfcdee22d46a17bbf73466b0edb75053a88f1fb2afb93ee8225c5697e1349fd9a74158a53ad628de7d1117c236a02d6ce2fde30f0ff9d11e34115eafb96f6156ec248b408efd30e42a8411f1c3115f4604e2de3cf84091217d1a7414a1476353ee2d5ef8bdad02766417b1f98704df516cf5beb43e2b5e510400245d02c7810ff898683dd0a21a1e8a72c6e41b3ebfb57723153de6afd8c98d82ea72452", 0xa9) (async) setsockopt(r3, 0x2, 0xfff, &(0x7f0000000300)="039b68fa570c72582db1ddabfcdee22d46a17bbf73466b0edb75053a88f1fb2afb93ee8225c5697e1349fd9a74158a53ad628de7d1117c236a02d6ce2fde30f0ff9d11e34115eafb96f6156ec248b408efd30e42a8411f1c3115f4604e2de3cf84091217d1a7414a1476353ee2d5ef8bdad02766417b1f98704df516cf5beb43e2b5e510400245d02c7810ff898683dd0a21a1e8a72c6e41b3ebfb57723153de6afd8c98d82ea72452", 0xa9) 2m31.242986821s ago: executing program 1 (id=6813): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc010000000000000000000000000000000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a0}}, 0x0) 2m31.242606175s ago: executing program 1 (id=6814): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) unshare(0x28000600) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80, 0x5) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) ptrace(0x10, r2) ptrace(0x4210, r2) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x103, 0x0, 0x4, 0x0, {0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x2}}}, 0x32) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r5, 0xd000}, {r0, 0x408a}, {r0, 0x8088}, {r1, 0x22}, {r5, 0x9011}], 0x5, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)={[0xfffffffffffff800]}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) unshare(0x28000600) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80, 0x5) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) (async) connect$can_bcm(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) (async) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) (async) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) (async) ptrace(0x10, r2) (async) ptrace(0x4210, r2) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x103, 0x0, 0x4, 0x0, {0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x2}}}, 0x32) (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) (async) ppoll(&(0x7f0000000080)=[{r5, 0xd000}, {r0, 0x408a}, {r0, 0x8088}, {r1, 0x22}, {r5, 0x9011}], 0x5, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)={[0xfffffffffffff800]}, 0x8) (async) 2m31.105430101s ago: executing program 1 (id=6815): r0 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$CDROMPAUSE(r0, 0x5301) 2m30.193646s ago: executing program 1 (id=6820): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x9, 0xfe, 0x9, 0x8, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x5, 0x0, 0xffffffff, 0x81, 0x2}}]}}}]}, 0x78}}, 0x20040084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000f01c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2m30.116930669s ago: executing program 36 (id=6820): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x9, 0xfe, 0x9, 0x8, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x5, 0x0, 0xffffffff, 0x81, 0x2}}]}}}]}, 0x78}}, 0x20040084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000f01c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2m8.123755982s ago: executing program 5 (id=7143): syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x1, 0x2000) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000140)={0x0, 0x0, 0x4, &(0x7f00000000c0)={0x0, "50f04611cbc3ad9335b1cad63f1683e3bfdb00"}}) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x4000886) 2m8.123262256s ago: executing program 5 (id=7144): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010125bd7000000008001c00000008000300", @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4804) creat(&(0x7f00000000c0)='./file0\x00', 0x48) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0x2, 0x7}], 0xee01}, 0x18, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x15c}}, 0x20008080) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m7.890664992s ago: executing program 5 (id=7151): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x3a) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={r2, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x19, 0x667, 0x0, 0x8, 0x6, 0xff}, 0x9c) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0xa, 0x3) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r6, 0x0, r7, 0x0, 0x8, 0xe) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250200000002000005000000000500130001"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x8080) r9 = socket(0x10, 0x803, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3f}}}}]}]}, 0x84}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x1, 0x2000, {0x0, 0x0, 0x0, r11, {}, {0x9, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x8}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004050}, 0x4010) 2m7.761286144s ago: executing program 5 (id=7153): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x102) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x20a80, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0xc0000101, 0x0, 0x7}]}) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00') (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregs(0xe, r3, 0x2, &(0x7f0000000040)=""/143) 2m7.68515967s ago: executing program 5 (id=7154): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000001c0)=0xc) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="a95c55bcc7cb4a9362a5ce533229c8ee", 0x20) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r2) r4 = io_uring_setup(0x6560, &(0x7f0000000280)={0x0, 0x609e, 0x2, 0x3, 0x1a1}) syz_io_uring_setup(0xc2b, &(0x7f0000000300)={0x0, 0x48cf, 0x400, 0x3, 0x1a3, 0x0, r4}, &(0x7f0000000380), &(0x7f00000003c0)) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r5, &(0x7f0000000300)="e21bb75e165794c63d1b8ec8dd78752d2469ef19ad538364a4d9f8ba51483be8eea1eb38ea2199e668c1075ccda9fe8a5223", 0xfffffcf7) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f00000000c0)={0x3, @raw_data="da709a1344d315bfd985bd4d6182eecdbcf861dd04fdbe24cb0e6930180f9cefc1d3917f04335605be3b5c520cded2747668d039ca2cd930d84ccd73c829c4091e59c2ec3b837c4341455d445d3b55f802548e80035234c1a6a19f41b8a4b68ed7a8d30eb2510a264c4a1742c1269e66e40b56c136e1fb7cc427ec845f93551442bab3b449b8604cc646cd460e2449b4a68cb2972954ca8f12f8def61badd72d72471058611a2746d9390ad6c7be7e00e4403aca23002cb47f5c8826746562278f3155eef5fd186b"}) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000080)={0x0, "b8819abe830087fffe82bb3915daf944c3968e5a7c02d94f403b3392a3406e33", 0x0, 0x1}) 2m7.368272463s ago: executing program 5 (id=7167): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x202, 0xfffe, 0x0, 0x2}}, 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x7, 0x4000000004007, 0x4, 0x0, 0x40, 0xb1, 0x200, 0x4, 0xffff, 0x6, 0x100000000039, 0x9, 0x5], 0x0, 0x105887}) ioctl$KVM_RUN(r8, 0xae80, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={r9, 0x58, &(0x7f0000000400)=[@in6={0xa, 0x4e21, 0x2, @remote, 0x8}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e22, 0x53c, @mcast2, 0x3}]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x25, &(0x7f0000001500)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffe}, 0x90) gettid() socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@link_local, @random="f070a23f0d69", @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x2, 0x17, 0x2c, 0x66, 0x0, 0x6, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x89, 0x2}]}}, @timestamp={0xd, 0x0, 0x0, 0xfffb, 0x81, 0x2, 0x9, 0x5}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00020000008000050000000000000000766574680b0000000400028008001300", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x8000) 2m7.321816157s ago: executing program 37 (id=7167): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x202, 0xfffe, 0x0, 0x2}}, 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x7, 0x4000000004007, 0x4, 0x0, 0x40, 0xb1, 0x200, 0x4, 0xffff, 0x6, 0x100000000039, 0x9, 0x5], 0x0, 0x105887}) ioctl$KVM_RUN(r8, 0xae80, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={r9, 0x58, &(0x7f0000000400)=[@in6={0xa, 0x4e21, 0x2, @remote, 0x8}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e22, 0x53c, @mcast2, 0x3}]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x25, &(0x7f0000001500)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffe}, 0x90) gettid() socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@link_local, @random="f070a23f0d69", @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x2, 0x17, 0x2c, 0x66, 0x0, 0x6, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x89, 0x2}]}}, @timestamp={0xd, 0x0, 0x0, 0xfffb, 0x81, 0x2, 0x9, 0x5}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00020000008000050000000000000000766574680b0000000400028008001300", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x8000) 2m6.41580631s ago: executing program 8 (id=7186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast2, @loopback, 0xffffffff, 0xffffffff, 0x7, 0x9, {@mac=@random="3b4c52fb5365", {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x50, 0x1, 0xe, 0x9cd4, 0x0, 0xffff, 'veth0_to_team\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x20, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, {}, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x0, 'veth0_to_batadv\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast2, @loopback, 0xffffffff, 0xffffffff, 0x7, 0x9, {@mac=@random="3b4c52fb5365", {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x50, 0x1, 0xe, 0x9cd4, 0x0, 0xffff, 'veth0_to_team\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x20, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, {}, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x0, 'veth0_to_batadv\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x7}]}}]}, 0x44}}, 0x0) 2m6.205215602s ago: executing program 8 (id=7192): chdir(&(0x7f0000000240)='./file0\x00') socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) socket(0x10, 0x803, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) socket$inet(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@deltaction={0x14, 0x31, 0x8, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000002c0), 0x0) r2 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f0000000040)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r2, &(0x7f00000000c0)='ns/uts\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m5.345233254s ago: executing program 8 (id=7195): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc010000000000000000000000000000000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a0}}, 0x0) 2m5.336443116s ago: executing program 8 (id=7196): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000008f40), 0x80, 0x0) r1 = syz_io_uring_setup(0x178e, &(0x7f0000000100)={0x0, 0x5e98, 0x4, 0x0, 0x118, 0x0, r0}, &(0x7f0000000000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000400)={&(0x7f0000002000)={[{&(0x7f0000000180)="88f7b4e85e52085e96e0a953816ed90a1a453f2484db3e91731883531163a43764c01fb627d70e3af7c9175b58183a50b2c126a341c19aea66b5acba1f6f426558bf0cd462aa6cc4573a3c0deab3eef9f349b68807f1c872350f1eb5e907359406", 0x61, 0x2}, {&(0x7f0000000200)="76e4554f9703967cd8fabf7210c7d598fe4f8ce85a090203049aff70bbbd72bfc15f3a6be4512c1a3362a5ffc1588276e5172897273d8ab7323a0896aa7230b4", 0x40, 0x3}, {&(0x7f0000000240)="9dbfcb35fb86f78a988eca0513c7cacfff44807d28f968d835477513ad7fe68e0f070b0e0472bac767932cc073d5bdc9649ffb9fdf58ae4a114b5d241d9f096eabd0d3e59f9bc905f30bde975d1cdb8c48d648f477b0537e772700023ecb8574353b7765c094ff063021a09c3b18156ea4ab35bde695467320959a7f2f7ddec4df1c4764d8307fd5a9817a55433f311b2071acdc2ed43e57d1dcc8f66234669ac6", 0xa1, 0x2}, {&(0x7f0000000300)="2799f6c97a1f71e93f91f65b6adccc", 0xf, 0x3}, {&(0x7f0000000340)="cdbf0e49331f407b530e19945afa1c8dedb4425a8dedb07a6feb476bb8b2bb4eefb2df19ddd17727c98d37ebf528d21120fda1305ddbc52142822ab7becfb7b4dffb49752afa225ffc6172035fb20cfcf65dda05e9f1bdc79b0d06326b54d416b351cd2f58f6afe58024f9fc3095dc84bed52baf604c71b4cb89aee65772a47a54", 0x81, 0x1}]}, 0x5, 0x1}, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff2424852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff0e0b5a293e3877adc1660edbc9a0307a25720a70e419dc44febf7ddc73fd4a5a0b6c28667f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e000000000000000000140000001100"], 0x80}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001080)=ANY=[@ANYBLOB="c92752ede134aaaaaaaaaaaa810047048864"], 0x0) ppoll(&(0x7f000000a200)=[{r1, 0x220}], 0x1, &(0x7f000000a280), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYRES32=r3], 0x124}}, 0x0) 2m5.231106747s ago: executing program 8 (id=7198): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000000000)=0x2, 0x4) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000040)=0x6, 0x4) r1 = syz_open_dev$sndpcmp(&(0x7f0000001840), 0x1, 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x2840, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r3, 0x0, 0x97, 0x8000000}) r4 = syz_clone(0x41000000, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0) r5 = syz_open_procfs$userns(r4, &(0x7f00000001c0)) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x4, 0xd, 0x300000, {r5}}, 0x20) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r3, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r3}) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000a40)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) stat(&(0x7f0000000d40)='./file0\x00', 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r1, 0x80184153, 0x0) 2m3.124953956s ago: executing program 8 (id=7208): syz_emit_ethernet(0x138, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaa9aaaaaaaaaaaaaaca5ae712d9fb86d70758aa0086dd60000000010260d9b291b42b543067e2214904ef0600fe8000"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a40000009078000013123efa89eaad891c443df3a310ceb7813d000068c089edf513c945bfb413b1604dbfbd7758bf9cb7fcd186c406fe13e4fac7ce69e9a8545549dcbcd2f76da7a42689d29bdd74ae693919010762c615fc89e531de8d578cdee2b90bea7de8d5a6d563db3e1974e4582307ca50f6369807068f7d53f4b99f6dca461723543d91dd9b8771298b63155968ba4ac5d4f3288a01d935eb3fedf355c549ff3fa8ff32cb4a6338ec875fb3650238e4e8f4081df50ce4bdc7f6344e9ca419341ff77f4945ab1f23a29cacfd4bafcd9434984dce38cf1f5bcf9a68ae4262b6002ed2e1c048edca0c7484d770ba3f66bb312d"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x1a, 0x0, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x3, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_NAT_SRC={0x4c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000}, 0x51) 1m47.834639461s ago: executing program 38 (id=7208): syz_emit_ethernet(0x138, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaa9aaaaaaaaaaaaaaca5ae712d9fb86d70758aa0086dd60000000010260d9b291b42b543067e2214904ef0600fe8000"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a40000009078000013123efa89eaad891c443df3a310ceb7813d000068c089edf513c945bfb413b1604dbfbd7758bf9cb7fcd186c406fe13e4fac7ce69e9a8545549dcbcd2f76da7a42689d29bdd74ae693919010762c615fc89e531de8d578cdee2b90bea7de8d5a6d563db3e1974e4582307ca50f6369807068f7d53f4b99f6dca461723543d91dd9b8771298b63155968ba4ac5d4f3288a01d935eb3fedf355c549ff3fa8ff32cb4a6338ec875fb3650238e4e8f4081df50ce4bdc7f6344e9ca419341ff77f4945ab1f23a29cacfd4bafcd9434984dce38cf1f5bcf9a68ae4262b6002ed2e1c048edca0c7484d770ba3f66bb312d"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x1a, 0x0, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x3, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_NAT_SRC={0x4c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000}, 0x51) 1m30.474418315s ago: executing program 2 (id=7521): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4c050) recvmmsg(r1, &(0x7f0000001840), 0x0, 0x40010100, &(0x7f00000018c0)) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x1, &(0x7f0000000040)={0x4b5a9da54893e123, 0xf, 0x8, 0x2, 0x4}, 0x8, 0xea, 0x8, 0x0, 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x101d0}}], 0x400000000000181, 0x9200000000000000) 1m30.323358345s ago: executing program 2 (id=7524): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000080)={0x3dc, r1, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x184, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x99}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x31}, 0x94}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8a7}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xb, @private1, 0x3}}}}]}, @TIPC_NLA_BEARER={0x138, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x80000000, @dev={0xfe, 0x80, '\x00', 0x3f}, 0xffff}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @private0, 0xff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x100, @rand_addr=' \x01\x00', 0x5}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbe9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x9, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6gre0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x701}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4e4f6141}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x144, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x56}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_MATCH={0xb, 0x5b, "c0456d249f4f0d"}, @NL80211_ATTR_FRAME_MATCH={0x2f, 0x5b, "e7370c895f5ec56d11642e931f765aaf03a40933f24a9d4dad78a9128f2731737f93ed24d5ffd8582fcccc"}, @NL80211_ATTR_FRAME_MATCH={0xc6, 0x5b, "d3c7c008844c5a23a847fc9c6613e553febe085aec6ec7f6fc9ee74e9e08061f78f61743347eeacd13daefd67f9c2a06983e596183dbbc4f41e7419d84752eea3782a0b72b421d79e035d7d79b0474ccea2639e31fec2311c678bd66dd506e12bbedd20c30dc24c00cd95a3a80f08887bddcfbb9ba8e63f3358ea23bba3f12f4b6e7a68391ed7b1280454df221e5b7b4801b05329ae6e7b7b9a98455ec00417ce6b4710938061b17da1ef7cea0bf57ba73152339e9efc67a8f2731f297c9f3e7acd8"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xd}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xd5d4}]}, 0x144}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) (async) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r2, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x440c5}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff}) recvmmsg$unix(r4, &(0x7f00000023c0)=[{{&(0x7f0000000940)=@abs, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000009c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001a00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000001a80), 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001b00)=""/14, 0xe}, {&(0x7f0000001b40)=""/94, 0x5e}, {&(0x7f0000001bc0)=""/109, 0x6d}], 0x3, &(0x7f0000001c80)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f0000001dc0)=@abs, 0x6e, &(0x7f0000002280)=[{&(0x7f0000001e40)=""/74, 0x4a}, {&(0x7f0000001ec0)=""/51, 0x33}, {&(0x7f0000001f00)=""/80, 0x50}, {&(0x7f0000001f80)=""/7, 0x7}, {&(0x7f0000001fc0)=""/36, 0x24}, {&(0x7f0000002000)=""/186, 0xba}, {&(0x7f00000020c0)=""/137, 0x89}, {&(0x7f0000002180)=""/247, 0xf7}], 0x8, &(0x7f0000002300)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0xa0}}], 0x3, 0x2102, 0x0) sendmsg$NL80211_CMD_TESTMODE(r10, &(0x7f0000002900)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000028c0)={&(0x7f00000024c0)={0x3e8, r2, 0x302, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x30, 0x43}}}}, [@NL80211_ATTR_TESTDATA={0xa4, 0x45, "f42fc2150e855a3e78ad3617b250cc67763d42936c4c77198a9b4da898cca42660431a083941e224b1048d6c75609416b1646f1e7a6d54b2eb5268850be6be962d4b59a82bbf496a3e93559a017177074468b4d322c157f5c05330a155a42c3a89c196540b7143be6572dd82bbc02d2415a1b64fca926731dd3979a8ae60f971032926279d4441fcf630281d7fd07c11e6d89affcd61890133f3ebceea3cbb20"}, @NL80211_ATTR_TESTDATA={0xe9, 0x45, "1c328f5d7c47cdbc174888eb82a2af151921b410fae3310c9baf29bb3637ff54b04f58df22de6c36af7e43b2bd2d15267777332936cd3bc94652db553ee3cf8048e7bdd28e6f2bb7b85289786b73e6004cd94a096441e443e7121957f1363f16042c6b15f31addfe06a915fba30ff2f35d505455c0329177b46f87ab59c470d430554ab1be0ef959102da0e54740cd6b6f5ed427d57bd0a6bf16b6c8a74fdf1b971a807d5c02f2a077dfea1186d64325c9d10205376fbd00e6401ef09df4c1dced2dd45887cdb15b8e15a58f55cd033ed8a9fe24709404424a6020b489367fa77ee1413378"}, @NL80211_ATTR_TESTDATA={0x4a, 0x45, "ea811db0fffd88f76e895298eaaed0e066fc9d4f68356e6ade4cf013d62874af45c472b071161026440662861c521cd4d11dd6b0807077de0e7d739b058c4ea66621f7d7441f"}, @NL80211_ATTR_TESTDATA={0x87, 0x45, "a58082a37695f97e323a7e3ef04efaccf5fc28db4c90352df5dfc93f4494712c39c0b34ca46aa5914eface703906e23a57b263355b9f5e410bddf6d33701e37c691fd3b08e90ae81378ca19f6ad7e0f48e66086cee94259b4e59fdc8a20257d07c42ca415a59316a6ccc89fc9a7cf030f0284d14065be58c7661769e2daa93b6a6416c"}, @NL80211_ATTR_TESTDATA={0xa2, 0x45, "63427e381ceabf8a685d7e6184094039f577c922011f995682ef58c0978f0fe56389ad8c91e5f49958fcc590d304a3d4596934a9b9847b65f761d89f93addcf96a3b1b4d098bc40ff2f33894391f5fa65df6c29a7fa1944010b235469ad0e3f32f7c8304c6c222b34167be8b21e86818b14db057b72cd495769077cd8ebe3c194016cf8319fc8effb6675a3e75635b07346e722abe383787150d5ad3d187"}, @NL80211_ATTR_TESTDATA={0xbf, 0x45, "8c622e4481489ecf471abbaa70afdf6a1c37efd507dc1e6b929fb2f15b36d6f5156d1a2be862866dbca5d4f8aebfcbd63812a93be0415daad263a5e43617cf57122d0e89cecb42adcd3f31b746169360dc6133180241a4053d9bfb90a3cd8c91488791bc505667b3bb1989b9eeb8973f6bae6174f9ef08d825f4de718f40298830fa79aa8322d49f0164fb7e4437b18307618cb3b00fc56ce0b31f3aeedae790acac25f245e1735e75d7d2a6cb6c4153bcc68cab5011e4d588fbfb"}]}, 0x3e8}}, 0x80) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000002a40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x4c, r2, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x1d}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4ebd5ddeb8"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "b299139bae8cd91c673ad80f77"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008884}, 0x40000000) (async) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r13, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x20, r2, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x80}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x2800) ioctl$FS_IOC_FIEMAP(r10, 0xc020660b, &(0x7f0000002b80)={0x6, 0x4, 0x2, 0x5, 0x7, 0x0, [{0x3, 0x6, 0xe0, '\x00', 0x1000}, {0xeea, 0xfffffffffffffffe, 0x5, '\x00', 0x2200}, {0x5, 0x3, 0x3ff}, {0x0, 0x1, 0x3, '\x00', 0xc}, {0x542, 0x5, 0x6, '\x00', 0x480}, {0x4, 0x3, 0x1, '\x00', 0x801}, {0x2, 0x8, 0x1, '\x00', 0x800}]}) (async) socket$netlink(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_JOIN_IBSS(r9, &(0x7f0000002e00)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d80)={0x18, r2, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) (async) r15 = semget$private(0x0, 0x2, 0x0) semctl$SETALL(r15, 0x0, 0x11, &(0x7f0000002e40)=[0x1, 0x7]) (async) r16 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002ec0), r9) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000002f00)={0x11, 0x0, 0x0}, &(0x7f0000002f40)=0x14) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000002f80)={@loopback, 0x0}, &(0x7f0000002fc0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000003080)={'ip6tnl0\x00', &(0x7f0000003000)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x0, 0x5, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x20, 0x80, 0xffff, 0xfff}}) sendmsg$MPTCP_PM_CMD_REMOVE(r11, &(0x7f0000003180)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003140)={&(0x7f00000030c0)={0x7c, r16, 0x400, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r17}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r18}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3c}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r19}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20008001}, 0x4fbdb009c5035785) (async) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, &(0x7f00000031c0)={0x8, 0x8, 0xfffffffffffffff7, 0x1, 0xfff, 0x10}) (async) semctl$GETZCNT(r15, 0x0, 0xf, &(0x7f0000003200)=""/4) socket$pppoe(0x18, 0x1, 0x0) (async) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000003240)={{{@in=@dev={0xac, 0x14, 0x14, 0x27}, @in=@empty, 0x4e22, 0x4, 0x4e23, 0x0, 0xa, 0x20, 0x80, 0x5a, r19, r12}, {0x3, 0x100, 0x2, 0x7, 0x8, 0x4, 0x40, 0xb}, {0x9, 0x1, 0x7, 0x9}, 0x401, 0x0, 0x1, 0x1, 0x3, 0x1}, {{@in=@loopback, 0x4d6, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00', 0x3501, 0x0, 0x0, 0xee, 0x8, 0x2, 0xfffff828}}, 0xe8) (async) r20 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000003340), &(0x7f0000003380)=0x10, 0x80000) setsockopt$sock_timeval(r20, 0x1, 0x43, &(0x7f00000033c0)={0x77359400}, 0x10) ioctl$TUNSETDEBUG(r13, 0x400454c9, &(0x7f0000003400)=0x7f) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast1, @in=@broadcast, 0x4e22, 0xa8, 0x4e20, 0x0, 0xa, 0x80, 0xb0, 0x62, 0x0, r14}, {0x1, 0x7, 0x2, 0x1000, 0x62, 0x7, 0x6, 0x400}, {0x3, 0x100000000, 0x4, 0xfffffffffffffffb}, 0xd452, 0x6e6bb1, 0x1, 0x1, 0x2, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x2b}, 0x2, @in=@multicast2, 0x34ff, 0x0, 0x1, 0xd, 0xa, 0x3, 0xe}}, 0xe8) 1m29.417799734s ago: executing program 2 (id=7528): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc010000000000000000000000000000000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a0}}, 0x0) 1m29.334753652s ago: executing program 2 (id=7529): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r2, &(0x7f0000002480)={0x2020}, 0x2020) write$UHID_INPUT(r1, &(0x7f00000000c0)={0x18, {"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", 0xffffffffffffffb2}}, 0x1006) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) dup(r0) (async) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') (async) read$FUSE(r2, &(0x7f0000002480)={0x2020}, 0x2020) (async) write$UHID_INPUT(r1, &(0x7f00000000c0)={0x18, {"a2e3ad2119c70e0d8a267fd5d89dcd939b324d078b089b3b0838721a0890e0878f0e1ac6e7049b3d63959b509a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32320d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70d998ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f0000000c558cdc0a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5af098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000108000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62437264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d637545c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4953a9737d214060005ea6f1783e287b3bee96e3a726eafe2fd12a78d1f48c13b64df07847754b8010000009bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f577dcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b2fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2010891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57ccb938e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f794c9eee11987f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b4907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d847dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e7832b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859add50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195301000000aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d0d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb4d600000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de4f8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3442bab515b0000348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de0000d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bdc8f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d8872fe174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62f46fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f980000000203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0xffffffffffffffb2}}, 0x1006) (async) 1m29.20380266s ago: executing program 2 (id=7530): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x79, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) setsockopt$sock_int(r4, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r7 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x7ff}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r9, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000280)='2', 0x1}], 0x1) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m28.633740457s ago: executing program 2 (id=7535): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x503, 0x70bd28, 0xfffffffe, {0x0, 0xcf, 0x0, 0x0, 0x808b}, [@IFLA_ADDRESS={0xa}]}, 0x2c}}, 0x4000010) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x503, 0x70bd28, 0xfffffffe, {0x0, 0xcf, 0x0, 0x0, 0x808b}, [@IFLA_ADDRESS={0xa}]}, 0x2c}}, 0x4000010) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902, 0xfffffff2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}], [{@subj_role}]}}) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r8 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r7) r9 = add_key$keyring(&(0x7f0000001a80), &(0x7f0000001ac0)={'syz', 0x1}, 0x0, 0x0, r8) add_key$keyring(&(0x7f0000001b00), &(0x7f0000001b40)={'syz', 0x2}, 0x0, 0x0, r8) (async) r10 = add_key$keyring(&(0x7f0000001b00), &(0x7f0000001b40)={'syz', 0x2}, 0x0, 0x0, r8) keyctl$KEYCTL_MOVE(0x1e, r7, r9, r10, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRESHEX=r6], 0x15) r11 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000440), 0x48000, 0x0) ioctl$FBIOPUTCMAP(r11, 0x4605, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000480)=[0xb, 0x81, 0x9, 0x4, 0x2], &(0x7f00000004c0)=[0x9, 0x9], &(0x7f0000000500)=[0x5, 0x4, 0x7], &(0x7f0000000540)=[0x40, 0xc, 0x6]}) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, r3, {0x7, 0x29, 0x80, 0x0, 0x0, 0x2, 0xf04c, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) (async) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, r3, {0x7, 0x29, 0x80, 0x0, 0x0, 0x2, 0xf04c, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r12 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r12, 0x400c0930, 0xffffffffffffffff) 1m13.669576493s ago: executing program 39 (id=7535): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x503, 0x70bd28, 0xfffffffe, {0x0, 0xcf, 0x0, 0x0, 0x808b}, [@IFLA_ADDRESS={0xa}]}, 0x2c}}, 0x4000010) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x503, 0x70bd28, 0xfffffffe, {0x0, 0xcf, 0x0, 0x0, 0x808b}, [@IFLA_ADDRESS={0xa}]}, 0x2c}}, 0x4000010) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902, 0xfffffff2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}], [{@subj_role}]}}) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r8 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r7) r9 = add_key$keyring(&(0x7f0000001a80), &(0x7f0000001ac0)={'syz', 0x1}, 0x0, 0x0, r8) add_key$keyring(&(0x7f0000001b00), &(0x7f0000001b40)={'syz', 0x2}, 0x0, 0x0, r8) (async) r10 = add_key$keyring(&(0x7f0000001b00), &(0x7f0000001b40)={'syz', 0x2}, 0x0, 0x0, r8) keyctl$KEYCTL_MOVE(0x1e, r7, r9, r10, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRESHEX=r6], 0x15) r11 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000440), 0x48000, 0x0) ioctl$FBIOPUTCMAP(r11, 0x4605, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000480)=[0xb, 0x81, 0x9, 0x4, 0x2], &(0x7f00000004c0)=[0x9, 0x9], &(0x7f0000000500)=[0x5, 0x4, 0x7], &(0x7f0000000540)=[0x40, 0xc, 0x6]}) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, r3, {0x7, 0x29, 0x80, 0x0, 0x0, 0x2, 0xf04c, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) (async) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, r3, {0x7, 0x29, 0x80, 0x0, 0x0, 0x2, 0xf04c, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r12 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r12, 0x400c0930, 0xffffffffffffffff) 1m9.107489822s ago: executing program 0 (id=7746): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x1) listen(0xffffffffffffffff, 0x3) r1 = syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400b430000004309b402f9e1bb93f2fe1c0dc3cf14bf2ee7cc040f15b6ff7e170c65925fea1d26ff0ee0cb5ccf5656b434b6bb6f77a3b6f1e543d401f794029f7e3995b967bd284761"], &(0x7f0000000a40)=ANY=[@ANYBLOB="0003b3000000b303a024ed40c12bb607717dc58b7b7966eecaede8b2e1bc01bd838e62ce813ce340d9f69180fb1ad5bd1d86051a1040d8d950b34fb7fd87c1b7c863cfa1fc4c26250fcdc4ccd35e0c40b7dd4dbe7ff4a96daac9cc2bfbd9ba04eee0853354394f0aac47b0ea34b12dc968a31fc5e2811c4ccab13bdf3e551d3808a419829f9cf4e81fed20c3eea7cb88fd1cb53f30358ceeda6104e7cbc8716409419a08d6f9476959168792c900ee47b6a955750f68264ef9c96eb18d7ddaba89c8bed7d80bc8f9ad3a049a2284c23a827f98f5751cfac291"], &(0x7f0000000200)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x5, [@generic={0xb, 0x10, 0x1, "86fc13abc036ca92"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x6e, 0x22, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x24, 0x4, 0x7, 0x7f}, @ssp_cap={0x14, 0x10, 0xa, 0x10, 0x2, 0x9, 0xf, 0x5, [0xff0180, 0x3f00]}, @ptm_cap={0x3}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x43, 0x0, 0x7f, 0xa7, "66164676", "5273baf5"}}, &(0x7f00000000c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x4, 0x3, 0xff, 0x10, 0x7, 0x918f}}}, &(0x7f0000000980)={0x84, &(0x7f0000000500)={0x20, 0xb, 0x87, "6d1cb8356e094d91ab579dc88092c3f2d172711bfd267e15d5c9201aff060d6eb7f8396dfcf3259d2c89a48f02fbf50802229e8e96780754590b1bc5165aef0766e87bcc65bc78d3ce78dac978d3a39cfbada1a725f2b8745597b4d10bc29993a8e7cee7ef9b34cfb4d7c7a590ff77348c973d704f06922685f8deecaff16795de7ea703778b03"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x54}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000300)=ANY=[@ANYBLOB="0000c0000000000000005a1394511b0f3d5d9bf61e47a1ecc85d85fbefbdf1635964bb2b9192d8f3e9faf121fe76e31cb427a2"], &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x3338}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000740)={0x40, 0xb, 0x2, "baaf"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, &(0x7f0000000800)={0x40, 0x17, 0x6}, &(0x7f0000000840)={0x40, 0x19, 0x2, "033c"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x4}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x39}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x3}}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090536443a"], 0x0) r4 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000100)=0x9) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000b40)) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x13, r5, 0xfb2b000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a00008c060001000001000008000500", @ANYRES32=r8], 0x50}}, 0x2) 1m7.794766018s ago: executing program 0 (id=7763): openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='xfs\x00', 0x0, &(0x7f0000000140)='grpquota') ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xaadc, 0x8000000000000001, 0x2f}) getsockname$unix(r0, &(0x7f0000000080), &(0x7f0000000100)=0x6e) 1m7.723162004s ago: executing program 0 (id=7764): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040), 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000001c0)={"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"}) (async, rerun: 32) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 32) shutdown(r1, 0x0) (async, rerun: 64) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xf0, 0x16, 0x633, 0x0, 0x80000000, {{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@remote, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0x3, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0x2, 0x4, 0x18}}, 0xf0}}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r9, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r10, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r9, 0x3ba0, &(0x7f0000000180)={0x48, 0x15, r11}) r12 = openat$cgroup_int(r8, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) (async) r13 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r13, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async) sendfile(r12, r12, 0x0, 0x9) (async) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1m7.524818836s ago: executing program 0 (id=7770): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x0, 0x9000, 0x2000, &(0x7f0000010000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f00000002c0)=[@nested_amd_inject_event={0x180, 0x38, {0x1, 0xa5, 0x5, 0x6, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x89, 0x2}}, @nested_amd_vmload={0x182, 0x18, 0x1}], 0x70}) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f00000003c0)={0x280000000000000, 0xeeee0000, 0xafb, 0x0, 0x1c}) symlinkat(&(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x3, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0xf3) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000240)="36670f09fe0b0f00da440f20c0663508000000440f22c02e0f01bcaf000f002fbaf80c66b8625dae8a66efbafc0cb81762efbaa10066b80c00000066ef0f01c90f019aa508", 0x45}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @sint={0xcf5, 0x8}}]}) umount2(0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x6}, 0x94) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@getchain={0x3c, 0x11, 0x22ad71c78b4c7572, 0x70bd27, 0xfffffffe, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3}}, [{0x8, 0xb, 0xfffffffe}, {0x8, 0xb, 0x800}, {0x8, 0xb, 0x8}]}, 0x3c}}, 0x0) ioctl$TIOCGPTLCK(r6, 0x80045439, &(0x7f0000000080)) 1m7.519604956s ago: executing program 0 (id=7772): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x181603, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) socket$nl_route(0x10, 0x3, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r3, 0x400454cc, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) move_pages(r5, 0x6, &(0x7f0000000280)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f00000000c0), &(0x7f00000000c0)=[0x0], 0x2) statx(r2, &(0x7f0000000240)='./file0\x00', 0x800, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r6, r7) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={[&(0x7f0000000180)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, 0x0) 1m7.196792789s ago: executing program 0 (id=7776): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r2 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000006) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000018000000000002002000000300000018001680140002000000000000000000000000000000000100"/57], 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) write$nci(r6, &(0x7f0000000380)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x0, 0x2, 0x1, 0x1, {0x1, 0xff, 0x7, 0xffff, 0x60, 0x5, 0x8, 0x3}}, 0x11) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000113680)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000115680)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000115880)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {0x0, r11}], 0xed, "b00e2243f744bc"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000440)={{0x0, 0x4, 0x7, 0x2, 0x3400000000, 0x10001, 0xa2c1, 0x5, 0x80000000, 0x7, 0x9, 0x100, 0x1, 0x5, 0x8}, 0x20, [0x0, 0x0, 0x0, 0x0]}) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000061001000100bd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006a8000014001280090001007663616e000000000400028008000a00", @ANYRES32=r12, @ANYBLOB], 0x3c}}, 0x440b0) r13 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) ioctl$KVM_CAP_SPLIT_IRQCHIP(r13, 0x4068aea3, &(0x7f00000003c0)={0x79, 0x0, 0x195}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x6, 0x17}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24008805}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000000c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 1m7.107903681s ago: executing program 40 (id=7776): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r2 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000006) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000018000000000002002000000300000018001680140002000000000000000000000000000000000100"/57], 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) write$nci(r6, &(0x7f0000000380)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x0, 0x2, 0x1, 0x1, {0x1, 0xff, 0x7, 0xffff, 0x60, 0x5, 0x8, 0x3}}, 0x11) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000113680)={0x0, 0x0, "c517cdc3701ab966e0d2bfc5530357dbe533d41393c8801c149d37326457531d4bb50faa2ef502e7242c680d0c7cca8e0c23defc161da3f99bb9e5b49fc8d0d051f93d11783c0c5d813e6878c342d7f29eccf3ff65da873cf29e39c37eac98395801035d73ba35269809039782a8ad4b5eabd412aab3baa849992491b2d3a25ddad0849b876afadfd7a100177f7befb1bd91a112f1fb46949e07f8aba3f921aa634a2e47aa87da8d3df7ca82288b1f87f1b0a0d20e4f061cfffa6b1734cc6aab1e17cb6ca85ce410ced1848ec0cc66b242f01ed6a62b881555d8e5b2447c61d5f8366fe7dc0e68bd4e7cdc77754282f2d5bdb1d45d85801d2e37e73302eb2d05", "21c1d4b63c6a1c035cfd16c4ed928eb188685b774ab0946b1c377514166d70e7e4b43eb513b43fd25f96afdcb295ea3ea4e4127261fd4c01d5160e024987012da9921179c8cbaa5655e2961f7f1a7567ba9c22c11b037ca689677ce675ba831e68a2ea45274d6ba998eae97bd971a2851d51b8981d991c54424aecc95d9672f4c79bac8bfe5ac68270efce02ba006c700a02541c861c51573a5a9531c10ca18d84e94a86be52c6ade607770eae02e17bc0874e594c8e56f0c67f582ba6286fa7093ebdf7b28506160d8dfe4a0093181f4176f03bf9a71df1335ee4ad97cb285774c88fda65931d74d0c564607d863fa10f1717d8c79497b31e2bdab2815fa9ae03f48cc38aec85078f9f8dc0a3135b3a0542534d485651a887c21089d030d7ae872b0186868308c7ab71c8a4d9b9c7647132f503872be468be0c292cfc92a3c20612b3ae700cc33c9c31c8ab120b966d4daad71486fa3637bc488a76e596e738d8d45689a2eec241fa8cbe57cca98f97b13122075ac4849e0df03e07c78e814db31254a0bd4a012960be147bd681746e0be43ea527b8407a2139c09e53b43e7de8470eb29ec485ca1b7d3288d08dffa1f25e7187795c8c8a2b929fb066b0063eee7bbd74f25591ed726f2da38a52fd8252bdf865414caa98c8e12f5b24d118b3a6ac71d0139aa83571ae4d966b296d3b486f0f24786c8cc918c9e70fc4c8b5874c97f2a516be5e1adba94b61a331ff7bbd53fba8c385589c3b5c0938dfbadec8e36226631b1adadf685428c3cbc14eae54b3b416db5e69ba0c28d39d9d1028ae40809ab25104085cde008f1b02ba44781f8b92d1dda8f3f73f875ecdfbd4edb82f2261147fa3fd9334d20c7709734770a1344ca0393659df796fa0d5c53c90734bf0e635bb9997e434bdcdf09cb1cd2531c685b59d0a4bd7406fc15e02d7ae1e001c5d0770d10e965db8593fb8c91cf81a0a082ab51a6b0e319863a84354ab6844dda498d4e4062475140e792109362390a714da0e0ea9d4385f398a3afc46c51dff49f7c007cf1a8796e3ea5c904122b5fbc8f7ec64f2e38f07e00ea20db6f12593f5ce763e1973d08fd79612a543750e9af13e336cae259a34d5f18a13d909b97a4aae2ec99b662a39a609ccf7da1f3ed49e200b390b0d3d4c02bf8ef418c377e38d19aaf8d3398071885123ddb238c657586147e9b72688b8b3107bab69476dac4f1cbe63af8396cc4802e0570ff3fa826fa96ad04b8556445bdda8e122cf9ca2bad22442fe055141147a8e8ca002a540f36d60a00256f15de9c9834074d337e575f5c26047e808081ad3699845fcc9d831e401a708cadee72f3ed6a002f4cd7093aa18785c659af0ef2f51d2eb5d9966e4fe5d59831315b31cd507a257ea35e447d1250f380a924dda0f0baf6a52a95ca571af0181f1544735379e9a0e2969c4ad66bc712f0e60c190b09ba2aea950961b6e2a03c9450570403e4718e432f0cc0fe393c55a2194c7d7604388952cc7b2e08cfbd86264475a95cbdbe4ab81cbb0a5b1bab46e7cbc8be36de9fb3061338707068636c1eb0268804d19d864fecfb8fc6f20a50492d0d31a57417b26269a685512a11600ebdfa00528bcbf1ff35621e68bc344b0b3d97e07279ef790768250b995318dfd0a2d24deb18bb73be1823ff3457168fce0568079eb84c7b8945fc9b6539db557867067d516a85750741e2aecb187ff3b3c9deb5f39b21e10a3291a11cde17258d5d53bc6b56ce245364d7f9ca097f53eb7d1e2a3b887d5c889b0bb9ae5dc70e6787953abdde7bacd6b6f07631643be97deaaad87ee00bb93283472ee6381287f61a6c469d305470bf286f42fef5330273e5a14e961487d3b74da05a71df23d999280ce52125c8a4db22b11a9a193caf2eafa2a44f15c1c07607d94a89216ad98fe849c9a867a9fed55f528557e45a0a9917bdafe92f35d4e7399c1f630dcceca9ec6a6c5a56a1b85e0a0e51783dc3d7d2a2486aad12097de5ec8f441f2c5cf52ed00db3e961cb7ba085a106a648e05c67d7cb676028e3ef00138dba13a2f288f85990a91f496ee0e2540aee674b64d38ee53b969b66eb74a4bf68ed45682d3849181f8c9071ad4edac46e3ec3510e077a916e9b655410de4eb7741edfc409a4b2f15baab26f8fca9006f26b15c452359ef80942614762cb79743a1ec65be4b8976c6daec5d8e02b06099c81c07dcdd8e1a5296f4bba5f0a4a4596bf38d49d6443cf176eaf1049f67715922d7cc2d2a482cdf5bdd5ec1c7ddf70fd08259a214bc47313062e38b6a4671252bfb650345bbf8bf144d362829483eeb10977f810ee6af01bb1845abd7903f3fa8a48af636f05f669e06082d00474c928171125b3ea1c585ba5285b6cb19aa0e6da6fca6344c0e79e34927924c18ed8f6216f19b4ff1c9e5fc0390dbf23cc0b9354ac1df33bb5f58b362d26fbd14a98e96c0878bb638188e59e126758daaa06cdd1a989a32865e10892068ffab4b70fd00791ec30deaa5cef59b420c7dee662b6a875e653d7aa2b08ea530edb19008ca25794e119daac95656aacf6bc7a0d6c22f527464f988266226139f7b9fa6d97aaa96fd7a34b36356184b619deb26f224f50c8b82878e151e942f71c7cd28182df307b33d14a2c27f8a39c4198f334cff73e7c5173af366f4b91e629e1f937ae3148e7c8d83a761bd29e7527d331ccf331affebb0a94c40c4eb1d60c3e74b6a44e6c596c890c8712db9b063937bb3735e3c2204dc4e289cefcaabafa1be2c963fb7ffbca93f32d0ab136ac4c77fa10d16e4e05b9145e16ca3e48ff7ed2a66d681af662690aad282061d58cdeef49db58ea5199dc509e15d9f382b02bd54ec7295aecfdf68ed2087394f1f3c1fbab3a58067640723898a675b44f82a80fd7e2741cca4b687f4c213ac41833c1efcd6d1b7b09a2f9c4a8cfe82bf0d1986b61297659786d447e88b0a1f2b2e2e73694cedbc67e0a6ddf1dec94d0d6d8d6e81d69d3411f24d25cdb7a3d0cabb286d70cd973ede4f4dd796032356a69faff1d02676edebd8a511a1b0ba40e117ac654e7f2c43001b6b5a1b9ef9f8b1e48d4322d8763b26a849c2f5e63db6aedc21002a58a48c1cb2f3c010bca8cd0a17712a7072c243e096c41998955acc52ad371ae83051c13a1c03026437f2e4f94992ed10be8d1dae64626978f4e327bb293bce7d69a57e263a5d5d800a39200c2686cd35412f3600b775dc66ce6617f2bde1ced7fffbe03baa7614b4fc996b8377b18837a742079658ff56145370645fd4d31dbdbd375d8c8e84ea42541bc70f14f3f932a56467783826e6d4631b5764e683a731577f757f302107ce469b933f932dd9bfd949ed3586a4b3c897acbfe94f7a0a5de70208bb70578b9f6f673276fba9d9fe7997bdb72d61eb825f597901750a7692a7e9a640603c9e9ac712e05480924c0c27fad7d9fe95a00d7ef411431381786a15fd6b48b12ad1510b05d2e61fa3ee2942859894cff00763d33b3306cf30005dbd71352ba6adff0dff8a14eab44c56ad63136650b7a986aac6f51ccb4cc7c60ae0f1a81d9a140cb6b8b9ce441cec221ae8ae8c44bc02ed26f138f2d16fb90180a89f6c580493c30402be30c3a15fa0fa6d3eb2dff853b54684a7acd5473e312a45be26e8f2ea453781f654f457c2fe83933fe7c3b31e2fbdc45a3820dc02e797e8340a8115fd2fc73103538366a3d793a4ec2e445f980e275580ebb27cb2e78c6459b1523daa2e3e30f3f0b713d077888429cfad72f74c4db31ca9b5b219a6afd0314758e7c9ac7780e219861bfcc189290c802d15a72529a4e63e0e82f4fb98f9e462b87fdb877ed7cc017fd081034f074a0f5e95d6f788f4dbd08e0e8d14bcc08064e7e1a7860a862ae2d2b5c00127d4ab5d0ed0b74fb0c7406b2b971a9bd6daa61382bc11c425a3bea701588fea9f801b1850675d0af3f46f67aa661c177bbf75ca3f377d13aacebe430a429a2a7443ec80021d1e2c595fcf10defbbb47d04c2f78cee3fab8ed3969a1f668354fefb7636c8a4b5c623a1aa8b17e2f2540672912652121109f3af6e5675ea7aa3829c71e34c1f6f164fe2e48f51165347bd78f8428d8bb734c0ac0c103626405ea8fce6bf00a5293bf81af9453c58b318d35c0e1b55d315c39a0687b2cbea8ac4c4b1437a9807fcd9d0f92d846ff09c22d18099e8bb04e1c756cc53826d13b5bb3d5e1e71ae95c33a41f2a96b551f9dadeeb5110067fb5207667f02651cb37e78c8e537e389149cc29e664ff2c57dd2c52a8107bebbd4a6e5216c2a794ebbde326c3d1b17f12175c1f431ab502ba83d1f9009cec63c97a38ae15f9c655874e55465a0157099a2f3ee0e6e602c5123b43f7e8e5791726b01d2b2ce373b9c42a5169aae4b28030786aa47fe25534edbe2f3f2fe16081079f57121bf3e9edce6b51402816b55622240e379072e9b6d718a82ae0c933773955b9f666bc5e0c9671052fe8154264202c70bad1b26d964aa1952f304df553e3f597cb40770488aa8789b42174a7a5687c611afefba19b08c0904335801fb9be7daf95ce13e65bada3e156d10437e3eb495c43cbecb0eaa28423e7172e933a57938b72d4121b4ec9217063621420bd7877026e2a849adc03e5dd975cbf9bd71f5af544a9c97d8647539eb67cb491a801647098f6fd01b516dfb97b20a7346affed9fdbf6101b34d23b8621014aab4af9a072c0a3f0c9556315621106da653eea41b6496711c8d47bd33c6bcc934387e7deffcdf26c4e9e51dfc6284351f8343c413d8f483d89578d7ca8cec04bf9b0e864aa4b068a5a9354eb83ccff9de1f48ea037b9064fb5f3f972431d6ecc4935955782135536cc3d0752b9d67b188e10471ae55ef43a5363fe80f085e793ba809f3f58d1e6e92983b7cfc7f1dd34dac9c6791b9b10e3630042b2f8b90a54b4e0afb0e1adc31708f8c0e11eb8e5562c109e5f9567038cf0134fa76fb2b6831f9d8ceb520c226865e0dafaafa62344c97eefd5b0a3d7a5b05884b03229ac94681b56edf705d6820f7d900981b7c01b4042f61ddadc5e2e24d3f171938f5d08c11dc73392be058dc66d2dad1a717211502b001916dab1ca41958d4aa1f0658513f688b76a9cad663d20b1a725e57c477f00d2563016909a003a5c340589f9f4d10a4c996181a9fe4044da5f76a96badaec32b2112bf44cde0e1e1aa31ddce56a77b23cc811e9f0814c82e3d6a2b02e7e470e6b283aef6c9ef916859bb64ba2e98be89b2bf64404a6f40222dbf20674715c120f65273c4cfd7f7ee0910f008928afdedd5b0ac0ef9993b18ebddd9833eccee3569a6486921239f69c61007ce27bb4d3d0f19671a71233bb5e5d79f00acd6029224b6928326f10f6764afd11bcbe9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000115680)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000115880)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {0x0, r11}], 0xed, "b00e2243f744bc"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000440)={{0x0, 0x4, 0x7, 0x2, 0x3400000000, 0x10001, 0xa2c1, 0x5, 0x80000000, 0x7, 0x9, 0x100, 0x1, 0x5, 0x8}, 0x20, [0x0, 0x0, 0x0, 0x0]}) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000061001000100bd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006a8000014001280090001007663616e000000000400028008000a00", @ANYRES32=r12, @ANYBLOB], 0x3c}}, 0x440b0) r13 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) ioctl$KVM_CAP_SPLIT_IRQCHIP(r13, 0x4068aea3, &(0x7f00000003c0)={0x79, 0x0, 0x195}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x6, 0x17}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24008805}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000000c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 2.931781222s ago: executing program 4 (id=8630): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = epoll_create1(0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0xff06, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="0200000001"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r8}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x2, 0x9, 0x3, 0x0, 0x7], 0xeeee8000, 0x202}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0x6000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0xa4, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0xc000, 0x9, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x7, 0x15, 0x7, 0x3, 0x9, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0x4, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0x3000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0x0, 0x1500, 0x3000, [0x9, 0x204, 0x5b, 0x8]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.842446923s ago: executing program 4 (id=8631): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) mkdir(0x0, 0x13b) lsetxattr$security_ima(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f0000000100)=@sha1={0x1, "0efedc43060ab5aaebe8efe5c83f3aede83f609d"}, 0x15, 0x0) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='.\x00', 0x0, 0x200800, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)=0xffffffff) r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000080)="8faad3d43f56cd29a5ad574e9b8d5a466dfedab361250592fe0d37ea508b2b0d2dcee2e9620800b4164527ddaf3fdd89d935263195022be13d20c5f01be468e929c153729b50e01bd4e84884a25b653c9792f5", 0x53, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r2, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 2.783700525s ago: executing program 4 (id=8633): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x1) listen(0xffffffffffffffff, 0x3) r1 = syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400b430000004309b402f9e1bb93f2fe1c0dc3cf14bf2ee7cc040f15b6ff7e170c65925fea1d26ff0ee0cb5ccf5656b434b6bb6f77a3b6f1e543d401f794029f7e3995b967bd284761"], &(0x7f0000000a40)=ANY=[@ANYBLOB="0003b3000000b303a024ed40c12bb607717dc58b7b7966eecaede8b2e1bc01bd838e62ce813ce340d9f69180fb1ad5bd1d86051a1040d8d950b34fb7fd87c1b7c863cfa1fc4c26250fcdc4ccd35e0c40b7dd4dbe7ff4a96daac9cc2bfbd9ba04eee0853354394f0aac47b0ea34b12dc968a31fc5e2811c4ccab13bdf3e551d3808a419829f9cf4e81fed20c3eea7cb88fd1cb53f30358ceeda6104e7cbc8716409419a08d6f9476959168792c900ee47b6a955750f68264ef9c96eb18d7ddaba89c8bed7d80bc8f9ad3a049a2284c23a827f98f5751cfac291"], &(0x7f0000000200)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x5, [@generic={0xb, 0x10, 0x1, "86fc13abc036ca92"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x6e, 0x22, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x24, 0x4, 0x7, 0x7f}, @ssp_cap={0x14, 0x10, 0xa, 0x10, 0x2, 0x9, 0xf, 0x5, [0xff0180, 0x3f00]}, @ptm_cap={0x3}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x43, 0x0, 0x7f, 0xa7, "66164676", "5273baf5"}}, &(0x7f00000000c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x4, 0x3, 0xff, 0x10, 0x7, 0x918f}}}, &(0x7f0000000980)={0x84, &(0x7f0000000500)={0x20, 0xb, 0x87, "6d1cb8356e094d91ab579dc88092c3f2d172711bfd267e15d5c9201aff060d6eb7f8396dfcf3259d2c89a48f02fbf50802229e8e96780754590b1bc5165aef0766e87bcc65bc78d3ce78dac978d3a39cfbada1a725f2b8745597b4d10bc29993a8e7cee7ef9b34cfb4d7c7a590ff77348c973d704f06922685f8deecaff16795de7ea703778b03"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x54}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000300)=ANY=[@ANYBLOB="0000c0000000000000005a1394511b0f3d5d9bf61e47a1ecc85d85fbefbdf1635964bb2b9192d8f3e9faf121fe76e31cb427a2"], &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x3338}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000740)={0x40, 0xb, 0x2, "baaf"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, &(0x7f0000000800)={0x40, 0x17, 0x6}, &(0x7f0000000840)={0x40, 0x19, 0x2, "033c"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x4}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x39}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x3}}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090536443a"], 0x0) r4 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000100)=0x9) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000b40)) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x13, r5, 0xfb2b000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a00000006fe0f000001000008000500", @ANYRES32=r8], 0x50}}, 0x2) 1.873741925s ago: executing program 7 (id=8644): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x81, 0x60, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xa34a}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xd53f, 0x2, 0xb4}, {0x6, 0x24, 0x1a, 0xb8b, 0x14}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x3, 0x46}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x8, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf8, 0x18, 0x1}}}}}}}]}}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x83e}}, {0xc1, &(0x7f0000000600)=@string={0xc1, 0x3, "6a5477196df678ea1620bcd37a96eb68b2cb2f8c391099fc557cf06eee92285944f210414eae4f9f0300814bf425364e3fdceeab83f619a5505f8d4a726dc602d5317e4bf7d75769234c27df16a1024c16b06f0fe5fc65c37824178b086b8226f153ceae1f1041215283bf92c67281b7ed754eb0d3bca778e8d10b02be176d11c6c3e154f801a4d9620f758e49e9cb8d59c58e6dc16048ddf784db39a6a6adbddac15685d5126fc497a03f43836034d47033d5c664ed3e75be1d5f467395cb"}}]}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x440100) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r5 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x40085) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x20007d9, "000064640000001503fe00", '\x00', '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000ffdbdf25260000000c00018008000100", @ANYRES64=r6], 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x4000080) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="4000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="30a9050000180100200012800b00010065727370616e00001000020500cc000000b65d8289573bfd6200e93d6c57e5f199eb8ee50053b2a1ab79ac34a113bffd5048398b84f045998c1b5a9c939b2a7f42317bad851436f550d9ead6861ebbacdaf64e4872c8b6ab25da4045e34cac27a6bcf575238eb17279e6867a4dda8ce5cea2fb557321d677d4a8ce993fa1dd3b21d6f135e4b41f6abbc471afe718801e4e616af19fdd8f141fd6f35efd797dc5f9ce493b7f8e7f2b99326d32e430cc85aa7e69a9021027db762f89b4cbca94e7"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8936, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2000078, r1}) r7 = socket(0x1d, 0x2, 0x6) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r8, 0x0, 0x15, &(0x7f0000000140)=0xf, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r7, 0x6a, 0x3, 0x20000000, 0x4) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') r10 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r10, 0x28, 0x6, &(0x7f0000000200)=""/59, &(0x7f0000000000)=0x3b) pread64(r9, &(0x7f0000001880)=""/4096, 0x1000, 0x7) ioctl$FICLONE(r9, 0x40049409, r3) r11 = socket(0x1f, 0x1, 0x10000) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES16=r6], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x54, r4, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x40) r12 = socket(0x2, 0x80805, 0x0) getsockopt$WPAN_WANTLQI(r12, 0x0, 0x3, 0x0, &(0x7f0000000200)) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) sendmsg$NL80211_CMD_SET_NOACK_MAP(r12, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r13, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3b97}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x4041) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl(r11, 0x9, &(0x7f0000000000)) 1.502975437s ago: executing program 3 (id=8647): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001400), 0x20000, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000001b40)) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={@remote, @mcast1, @mcast1, 0x10004, 0x6, 0x2, 0x100, 0x4, 0x82d1818d}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESDEC], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r3 = socket$inet(0xa, 0x801, 0x84) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001) (async) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) listen(r3, 0x8) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6erspan0\x00'}) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x9, 0x7, 0xfffff001}, 0x10) (async) ioctl$CDROMEJECT_SW(r0, 0x530f, 0x0) 1.5028494s ago: executing program 4 (id=8648): r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0x6, [0xc, 0x8, 0x8, 0x7fff, 0x5, 0x800, 0x7, 0xfffa, 0x4, 0xb7, 0x2, 0x10, 0x400, 0xa, 0x8, 0x2, 0x7, 0x9, 0x7f, 0x7, 0x4, 0x0, 0x97, 0x5d3, 0xfff0, 0x5, 0x81, 0x1, 0x4, 0x6, 0xb, 0x5, 0x6, 0x7685, 0x98bd, 0x0, 0x8000, 0x8, 0x3, 0x2, 0x0, 0x5, 0xe9da, 0xf, 0x8, 0x6, 0x0, 0x5e00], 0x6}) 1.4338001s ago: executing program 4 (id=8649): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$kcm(0x10, 0x100000000002, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1c, "f42a97b96d025891dd3f75fdda624457ad3d5c36389c308570204262"}}) 1.364751492s ago: executing program 3 (id=8650): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x9, 0xfe, 0x9, 0x8, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x5, 0x0, 0xffffffff, 0x81, 0x2}}]}}}]}, 0x78}}, 0x20040084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x1f}, 0x0) 1.183568081s ago: executing program 3 (id=8651): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32"], 0x64}}, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) (async) socket(0x1e, 0x4, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="03dde730c759816e0c000000998feed70af863f397423f32474815216ff2586909fd3ed0aad51c511c54c71ab7f833717cd687d7163352db09e1626ce9738f96aa2c35002bfc026dacfe10e61e4d20d77fee40e94c0a540e1f", @ANYRESOCT=r1, @ANYRESHEX=r5, @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (rerun: 32) r7 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x48081) (rerun: 32) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) socket(0x200000000000011, 0x2, 0xd) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) (async) recvmmsg(r7, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000440)='cgroup.stat\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200), 0xf000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="764623142ff6660b29c77f1870", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e636500"], 0x60}, 0x1, 0x0, 0x0, 0x4000411}, 0x44084) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r8, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000400)=0x4) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@svm={0xc, 0x1, 0x1080, {0x200000}, {"12fe148c5ace31d3413c269bd3e04df0a18f381115e2a53c59640c233630993416b65ef7fab14129b24de49966e170382b29be6ed777a8c2a678f964b6224e65bb45fb36dc37044e5b725a7e58d5aa1ae09f20ea5bd997eea2b81a15b99a07a11b47fe0be9c3da8b8c75fa807e0d4a028e1854d5760c4ea801b546ded03d4a67ddf5bc3ee435ac09f68e2960b5c2a98943583b3c4e547b284844ddc1d24f475fab825bc1382f76bc9f0a28310bcb46aeb6e7d46dbce8c5d001b67220bfe6271e73e7a1e4635a983331dcec102e36203e8ea078fa88b25132e68904c5c8317ff63930b5397585257466ef67b440fb55288c53efeeb262d9a97e1afa543423e9ebce1ca7bcb569117a9ff777ca838b4f7bf604822c2c4b0f71c239ee63301da0826d69053d9d7d286cb079053e1986ffa707bcfe4645626b1a55b5390d14c3ed877edbf71d268ea346f2536a42eb3bf466b3d556fecb80607e0cffc7a4f3ea04353e2cc6bed1a43fe09fa6ff76934120a448fa5d78fc985f015d157d252b5ad77a898887d12d673a1920652aa5c89f911c6af802c24d126d86f7d7b68eaff329276729880395d0d38828a29e58a5f8e23ad1df39695ac71d4ec6976e1cc94e0b78f5fffcf6ddaf412fdafff542ca9403783ac7afbb9c5c8e09af0864c4276288fc476f02e4e4fb42e7dd12bf04f0c533eca337419b58c2a5fcf3552f50014a4f64475aacba175a87efcc3933d6c2d08d0221dc08c82a1c791d21251f0352bf9d6666c963ff3bdbd679261b52176d2fbe7ebc06abec6331db134b32a4c8f1a05e45ce14d9af0b7d1b778b76d1b4aada61a3633d485782cac42ea5f0af5da6ed0c0765c862b0cdfd54a2bb329a9a8441dba5c4773ddba076e09945acc936a72d75375aa7f1582a3dc2124f42aee3079c9202a448f75f49d52ae1921ac9e1c717054c61652edff95160c8f851560f64590e0ac68713e4dc2dbe764042b858f2ac99fd81cfea222c3552aac3c018ec2913509a904ad473022c5742e520dec58015fce06ef70694f048658498d9691987d1eccb5583ac513960238a2cbad391533825df6ffff87acbce7e45071c873b1c47f9064b1cc869a3dd2a89a53f59f2bce9ee00eac2c16b22c24fabfa0e364e3a73fd2b07dec4ebb28c0dbd032ae11b48ec25f7af7140217188a54202b2e6e4c346c9ea99be038c11e5269a9285cb06d794c62fbf0afafdc0944564261cba33e8f569020be7f48efcdc6e16dcaa95cab725c4480fcab4da58c9e391134aeae3bca7d47df359ee37bb955818c7894fc2a6f42411dd9c661dedec1b1c34fc5cb51cbc7eb921b864f9605ad06cc8bff549f9688f4d368c45e5881c0d5e1c40b94b991351e2f8df48e6bb8c36b0bf40e64447008dda23171c02da3d4578a70fc6a765113166d871b953a75dce5c5b4f67180db1f853f4de8641220de84c2dca12788a3572f6bea9685242e91c45dd7538508928bfee054812a618e40c05889a822487bf6229c89a7e5dc7b1ccffb35ed25db0c270459b0ac3a8e6f474eacfc22ed2e07cd9c92ef10d98e3178599973203e82f13ab114545791ae699d4f3d4c55b8dd66497e70cc7d3241a3ab1668a46200df2865ccfcc6fe72f6ad25694322ec103f975a4804ebbb6180b34dd2fc3b712db841aeda391cd08fab4d70ce48e993dfa9c0798874f26f3e8e8b11bc10de45902a228c4e381846831f6b4fd8c9f625a798bd40d53c47468e65c68b5520ae57661780f4aac89e93872247e9e86f26d23eee0d90331221a7665d8051fd79271f08dbe6a5e93cc0751b3a50726c7adb15ecb721cbbbeda08c2636fe083288fe52305252433f4c5a8cb95879593df06f5626163dac25039dabb15d26f27f125675f023983a0d120ce2e6fa62c3565d81c78592e9c8ec5c9475cfd080a7fa0a5a354820a055b49c9266cd866625c8db51e6d2030281af72d0eae1cf811227a322db81877c56581aacd32f5e769e5ac74c0945a81f0b264ae905a99bc77905abe134a0af01f6d53f28fdc27a1b176e0e2aa9bd6224d05866194591ae0db719e6959a0148e633757924924b47c2d1641dec81742f80b2bcfcb7612650e65cbd937352c129e4f1d1c1d794ec1af3ffac99df4c832094d8c3d057820f3077d96660f4230cae304ebe1ce88386352f32154d4ef260d4a3c24804b3100b20e7674ee87a2fb5834026af24b20ed4a7f7c3ea0684830bd1877062bd40d8f8721be46531fec3aaa62f1b5e66855dd965318e8ce01ec0ec5146bea7943d922d5cc758991b44035860a27f083a350897e0bf156ac6bb71cdfb77dfc1af23279afc182a73a03ee6ff748ef17203f40b4c6010416ab14b4523fd7daee2d1c282bfaa7b368980a471e451df1364e6f7239418e30625f1cede52a86c9e99b45ff27bf3f264a0d12e593cbeacd5e4bcbdaaf3fb3b5ce4564c5e77679254b431e656e3eee2e94a087fed509c855dbf73eb2a67c3865f9fd07f838268742d06cd7d39159f58d6fbd80afd04c4df6f01e0b0d72d4ca146125004c3ccdd27b8c3a08c27120156db52f382df2c9360e20a604b462f7660b031451e21c862d41552e66b30749b335cf4885dfaaa9cc632390140c7fb405c04438c143db1a846622d700debbb59b73f07b40f179cc2f73feb780948dc7ddf33c3642130ca8a2c6e5cb8b65b3f85f8f19e5918ebd4203eb71c2c2bec701445462ae2f6650d2d10b4050fbfb56873628f63c1274b78bc378ab0efc4b97d127dc1841b583a14de1abb60095cb70424c0dd10703716ff030e213b2c2b2d88d229bb4002c8006c3f304c48c597af7a751d62f00731ddd5e3bdea7f510515b56a7d3da09601b5957fa7bb98988994c62f4c8bfb81151032845f496c2fbb3fb320b6b6d51681c86f39a527c52b3642752af3bb3cb7ea060cb3009d21e842c76ed4e2baf93f74f6fead461deeb1c1719715d32e43a4a7df4bbd64a5e73a8b474b789adfe6c3d4e12b3f659a0280835ff87319c26537bf10ebe1f6f47f16039420da9bdc7c46a67fec40954f349e881469b3e52e2c4d93e6b40aa0cb831eb79b033759d2f822ec24cd6b9091746cf5245e8bf8ba7829b6910b2c386f1a8a6d892aa9f1ef7f728213accf6adf1efe81e206446b06dcd81ea09ab74d22e5a501f4a7b33a3b93cbf2050276d2cfc05e43b619910cad5b7ee9b784eb20a2404cd0e41f8ac678244b5c55db5382a0cc31e3c4c020a106ce5507e60764831c928fcc2dada935728dca6f67c89f22e90dcc222733b5955798037fbe770c1f89d482c62a4db077e8117916517d9f17b4df184f36a651ce2cb3691cd593840af591c9ec29452d6562fec3382a47cfea6b635473a0e6944f96b7e1c0e9a5faae777ac357a09ca9b93c1279fb8bee139abaa50b3d25a587b5eedfff25c3035d329faf8fe4b79ada6416733a6f5c59981003b1fe4f2c3636844e6b562d96b1839dc9a2b524f064ba804c369c576849419e65ef286628d2e1d909938e9a2ed6a3ff564718475e6fe5883e7b0e08d93ac725a9dbac00418a90a4d884bcb7c625412dfeebfc3ac3ca6ee7278051d3f6e4a5af25b200023957721a3a495b96c51202de439080fb60d74df23512169f1cb4222ff315ff46c0426e8655e2b4d15e7ad6c05e1528e9aaf95d60d55a6003dbedb748685f6c3230af5b1377ef5356ec453b799715d43df491239f7eb2c52eb2453b4f939e2b6ea25891a950f403e36abe9719569b1e9436c19d5b14ad39ba20235b127392b105dcdb9064e5e40c70083efea0cc92f7c2abfa8842af1e44e62470496b114161017bcd6df8a7bb1b19ab19be3df73e4d458aa4d1066b12403748d6172da04a26052d737e8cf573f5ad434a30360d7bf2cc97036ebe454049fe866f7be333f4df3cb1024513a48c1ee4cce3db92b8b893470378d473ad0b70d17521b5e2925be110994fc3196f5136f2df131d04c9b02f892cd3596189bccb6f33848ce1ed321262f1a54254cf0d20c739d3f145159827e3fe838c9a2a11d4b9e3d54da680ac68df034c05facc54441798c71e6998a5205041cb75d347c33bb9224fc7dc45d8f9990e25322a5dd3caab3616d857d2235a490c5b9e04372b637bac09e1801712bd45c7ec66f4f3182cf8212c32d4f70668db538d5378766f0a5ded9756b38fe4d22e78fdc8a506183b2a79a87b4f0ceb3d9a46a932d0f76af345516af429a15bb1ee3c2ee467ce5cd329ed33749ea863a1d6a1c72cba9f6f7f719b56d4eaeb18b918622eb94d8e34661cf1d3a21b82c3d986c79b666b86eeeb7b4e5503ef54a6f7cf8d3a0d22eef329078308bf8f855780e18553c00f4ffbb89f3c20a182f3f216485c0ebc63050856fa45d783d339058970c2e73d70cfdd1609f1f0f9ab20b198796e9f28552ed6d9aaef25033c928ce72ca962233d7b2e383b0c3e66441b98a759b7b3d5a02c935a00cb351e1b6cc6c45a704c17673c7462d76f5836cb6dc17a1a9b7ae1e3e6ebfcc1e672ca3fa5400c584f155d3c5f532bf8e5e8749b246338a98abea0db67d9b5e6931910edc95412d6cf9c9d3767cb36ed7fb4e81edd2849dff2e84293d50b4e5df3f8744ab4cfefe8afd989f9150806f34d3855e83159797eb2422c129e9bef77b08a07a18dd2db5512ea61685bd32a8a8d4b4eb36cf3c5454435941e1692089684fc930b2d91fc82645e4068352f2a61ddaa265fc9ab6cae54f3d0c58345a8fbd97c56befef6bebd4bcaccf1a34f06dd69b1bab7c808423a7317fae1fcdec1d2fddd93b253b408abe24312d560afa84ecca507a598739d807c6c7b828ea211175e19432ff43b21d43d01256f6cf8029d8548270b4d8f39c60fb290e6746d3b9cbb60ad5c6395b5689e18150bf5cba5e09734195aec1e1f0f9445001990a37ab4cff4421d4054b37a74f081e89ea382e8266af556b6b2fd10fbf1b6fb1b22766cf4480cca322771563b80ec89bf3886fa57d5889b6d6205b7c506ce7d1131f0382f801d4cee9a34ccfc05caa28198f9dd1f074d87865ff14452db9f6770870d9433088a4b9e9a9e1bfe87068b8919d759f179163456df7028a148c61eb5085907a55238cec37b821e7581be602502b73442be5741d7a80f20dbf5085b36195bf8b10bdd4d7b918f09c5e97371c0e84a0037f1bcf8595b7385d5ef65f1c889b72b578c248d0d196512e44c7bcb8e37315d380f9c37221a738dd2e9742a77b3e24865092b5010d6fffcad3d3350b38a773d9da50bce0e0c0f2407c67d43d2df6695059a70abd7d34ac861c7728b37c8ee76e326485db5e7ae6b3e4aa0be8be8a45e2d4476522d8b1d7d6d0368f36f7e09d5c53b137a9bac421cd11d64d365bbfa7d7d22152ddb79ca44cd12431dc03d3ad610941b41b02743bf7b9ce1327c478f9ce63ff506eba936c0d0e0130732a7747d492b175773d86a80f4311adb96d767db5275c3daf446b82ff23b41db16cc0ba6400b4a6a283cea346091a44d0c148a67ce5a5fd514a30d121b4d6d643e50a3e933ffbf3a4140e6d33f59f79a13c97edf0ccafcea8a55ddd7e426579b10f2fb94c57debfe3869c7ca16b501ff0127231ac99ece9b2dd0d7bf489feb27697e814c0a2fc0e36853016314982f203f756d650b31675f8216a7f1671aabddf37b2e333a1d30092f7553b734dd5a012d58d03c9026563c98d7cbeb7c53ba0da68e7639a6544fc3d157412d3ffde9dd60ab1ab546628777004114e024f6196aaf1b9c81a1968cf14bfa896e89dd3bd3c13af1fada62b15b96639"}}) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000240)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c0baf80c66b8c0f6a78a66efbafc0ced6635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x64}], 0x1, 0x48, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.083717377s ago: executing program 3 (id=8652): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r0 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file7\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x1, 0x5000003a, r1, 0x0) (async, rerun: 64) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) (async, rerun: 64) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) (async) read$FUSE(r2, &(0x7f0000000f40)={0x2020}, 0x2020) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x200480, 0x0) (async) r4 = add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140)={0x2, 0x0, @a}, 0x48, 0xfffffffffffffffb) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f00000001c0)={@id={0x2, 0x0, @b}, 0x0, r4}) 552.692778ms ago: executing program 4 (id=8658): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x1) listen(0xffffffffffffffff, 0x3) r1 = syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400b430000004309b402f9e1bb93f2fe1c0dc3cf14bf2ee7cc040f15b6ff7e170c65925fea1d26ff0ee0cb5ccf5656b434b6bb6f77a3b6f1e543d401f794029f7e3995b967bd284761"], &(0x7f0000000a40)=ANY=[@ANYBLOB="0003b3000000b303a024ed40c12bb607717dc58b7b7966eecaede8b2e1bc01bd838e62ce813ce340d9f69180fb1ad5bd1d86051a1040d8d950b34fb7fd87c1b7c863cfa1fc4c26250fcdc4ccd35e0c40b7dd4dbe7ff4a96daac9cc2bfbd9ba04eee0853354394f0aac47b0ea34b12dc968a31fc5e2811c4ccab13bdf3e551d3808a419829f9cf4e81fed20c3eea7cb88fd1cb53f30358ceeda6104e7cbc8716409419a08d6f9476959168792c900ee47b6a955750f68264ef9c96eb18d7ddaba89c8bed7d80bc8f9ad3a049a2284c23a827f98f5751cfac291"], &(0x7f0000000200)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x5, [@generic={0xb, 0x10, 0x1, "86fc13abc036ca92"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x6e, 0x22, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x24, 0x4, 0x7, 0x7f}, @ssp_cap={0x14, 0x10, 0xa, 0x10, 0x2, 0x9, 0xf, 0x5, [0xff0180, 0x3f00]}, @ptm_cap={0x3}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x43, 0x0, 0x7f, 0xa7, "66164676", "5273baf5"}}, &(0x7f00000000c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x4, 0x3, 0xff, 0x10, 0x7, 0x918f}}}, &(0x7f0000000980)={0x84, &(0x7f0000000500)={0x20, 0xb, 0x87, "6d1cb8356e094d91ab579dc88092c3f2d172711bfd267e15d5c9201aff060d6eb7f8396dfcf3259d2c89a48f02fbf50802229e8e96780754590b1bc5165aef0766e87bcc65bc78d3ce78dac978d3a39cfbada1a725f2b8745597b4d10bc29993a8e7cee7ef9b34cfb4d7c7a590ff77348c973d704f06922685f8deecaff16795de7ea703778b03"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x54}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000300)=ANY=[@ANYBLOB="0000c0000000000000005a1394511b0f3d5d9bf61e47a1ecc85d85fbefbdf1635964bb2b9192d8f3e9faf121fe76e31cb427a2"], &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x3338}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000740)={0x40, 0xb, 0x2, "baaf"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, &(0x7f0000000800)={0x40, 0x17, 0x6}, &(0x7f0000000840)={0x40, 0x19, 0x2, "033c"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x4}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x39}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x3}}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090536443a"], 0x0) r4 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000100)=0x9) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000b40)) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x13, r5, 0xfb2b000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060118000001000008000500", @ANYRES32=r8], 0x50}}, 0x2) 552.313483ms ago: executing program 7 (id=8659): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x9, 0xfe, 0x9, 0x8, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x5, 0x0, 0xffffffff, 0x81, 0x2}}]}}}]}, 0x78}}, 0x20040084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x20}, 0x0) 551.644809ms ago: executing program 9 (id=8660): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400017e) mkdir(&(0x7f0000000140)='./control\x00', 0x8) rmdir(&(0x7f0000000280)='./control\x00') r1 = openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8000002) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000006111c000000000006000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 442.121454ms ago: executing program 9 (id=8661): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x51, 0x3, 0x0, {0x20, 0x1}, {0x46, 0x2}, @const={0x9518, {0x0, 0x0, 0x2bf5, 0xa6}}}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x5, 0x4) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) 373.468149ms ago: executing program 7 (id=8662): r0 = syz_clone(0x808a000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) r2 = fanotify_init(0x81, 0x40000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='c 8:', @ANYRESOCT=r3], 0x53) move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f00004e5000/0x2000)=nil], &(0x7f00000000c0)=[0xb, 0x1, 0x3, 0xe, 0x3, 0x7], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) fanotify_mark(r2, 0x105, 0x40001032, r1, 0x0) read$FUSE(r2, &(0x7f0000002300)={0x2020}, 0x2020) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000100, 0x0, 0x0) 373.266792ms ago: executing program 9 (id=8663): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d00000009"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) 293.361742ms ago: executing program 7 (id=8664): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x806}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) 293.008119ms ago: executing program 9 (id=8665): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc010000000000000000000000000000000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a0}}, 0x0) 243.616681ms ago: executing program 7 (id=8666): mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='.\x00', 0x0, 0x200800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xf3c342ad85829738) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000140)=0x8, 0x4) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) mount$tmpfs(0x0, 0x0, &(0x7f0000000000), 0x2000000, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r5, 0xaea2, 0x800000080000000) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r6, 0xaea2, 0x8) ioctl$KVM_RUN(r6, 0xae80, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40086602, &(0x7f0000000000)) fstat(r3, &(0x7f0000000340)) r7 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000240), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r8}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 243.488949ms ago: executing program 3 (id=8667): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x3, 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000400)={0x23, 0x1, 0x1, 0x2, 0x0, 0x5, 0x0}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) 243.026329ms ago: executing program 9 (id=8668): socket$packet(0x11, 0x3, 0x300) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x3, 0x8, 0x3, 0xb, 0x6, 0x6, 0xa, 0xd7, 0x2, 0x1, 0x3ff, 0x2, 0x6, 0x80, 0x3, 0x9, [0x800, 0x1]}}) 143.736764ms ago: executing program 3 (id=8669): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xfff1}}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f0000000180)='./file1\x00') (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0x7, 0x2, 0x7e71, 0x1, 0x6, 0x95}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001980)='./file1\x00', 0x1b5) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) (async) sendmsg$kcm(r1, &(0x7f00000008c0)={&(0x7f0000000180)=@l2tp={0x2, 0x0, @private=0xa010101, 0x3}, 0x80, &(0x7f0000000640)=[{&(0x7f00000002c0)="3e9af0e7fa671566f0a498258eed9a5f8f342352e4bc794803474fe7a6817eabf122079985bd53104246f76fba9ba5c105ba1569259b090e64794bc86bd62fa45550de9a4c376a9e763bdab78c", 0x4d}, {&(0x7f00000000c0)="b1c86e2bab1e44d4ac1ad58b181e3be4ab59f1e777c41446124ce3d94d8356d316207a779bc68522f1208ae9bc4d6540a9c0e14ba75f1a6493163c8b6d", 0x3d}, {&(0x7f0000000900)="678f5967ea85a89c55f1d9c0240e90f8c6ff8ccd754bfb2fddbffd850000000079d12e2582b848195977287ab9cf1f1f40f1eb7553954bc101b6b13838909fce91d7f427fac853b633b799e7eece230ec2c14ae0d7d263ec5be8f1c92a336109bf1e97fac06703001f506632492de150e3040aad28dff2487b85fd58b31db887be25cf01b6b896a5662d1d2d9ccae8811a871888d153e2013de9460cb68d46a2f265ff7160e9a9cd2c42b985a2f4228206cea346a89c6652766fe2443426ce9903bffddaa7918a59a9f93d5a4c49f8ac36ae", 0xd2}, {&(0x7f0000000400)}, {&(0x7f0000000440)="95ee4d68a310ba32d637f1f68bdef6e0af8b4c325e5dc659e0594b80db0e3d32dd54f0ecedfa55098d26fdcc135545198f2151558133a30aef5bde0d1fe245f7f7aefaea4ee139424ea9548125ac7c9e10bb080ae872011a368dce3b9c85ca3d6dbc1d68bd631803925256255e3b6723a4dae875c7809a7455cc8a80bf649cc6d5af41b50d649073cfd32eacbebb4828d77dd1c60e901ab1b2b654eec47d14a2b81c1fa81a847b360c4d8329a523472b41685a9a3329b99acb369d8a15f2b890783951319749e738f4a5e603bc1b1aaa579168687d5c43dc61c481c272bb386e216bb6ca4ab172ea248c6eb1a38c191f249e", 0xf2}, {&(0x7f0000000540)="b761f6b52f52e93ac5aba3aac7b95a277d2cc2929ddee4b3fa9b3561bd3b8c0293f8b499eb9de19a240384ce49eadb6681b0aa165aa24fc72af5e3b35bffe20ff594dac6e0373f120ac400b435e25710969cc8a6f96a42866baab0cd2653503b2d7c8579b848cabcff", 0x69}, {&(0x7f0000000600)="58f8b9d2569dac387b627b557210", 0xe}], 0x7, &(0x7f00000006c0)=[{0x80, 0x109, 0x2, "724115b5a7faaeff9642f7353bdbef7ba14a4d58133bf0ea76eeb037d3e938c1c2fa46b5586a34385667f705365b53aadf9e3d38b04915e6a8a651f181087d60e8a3a9b23e9ad6d36b614e3c52144ff6023e6c725f9758922383be3acd3f66e8b96d54533af760fa40"}, {0x58, 0x10c, 0x6c, "79798b94914abd8779c9999555445386a859c101b1215d8def7239a1f7f5d08b189d5e312a55a285e55a6ab0534f521a44fab1d294ae6d3091030fb852a04eb6ca056291"}, {0x108, 0x10d, 0xb, "c36fae6481cc8f67f5d7b8e925b4dd45654f73d3fdce5e3f9f1b8ef661f55f52bc6aaed3a8b2e013935b8b561698b07d0684fb3d8993a4ee374c958dc317b7d7b7c573acbeb75ba5d7f9502f32394de79119e90e5ee74245070e253eccaf30fee1276a5d6e3e99577061741caa58822d920597f02faadbabf4ceb1d249c1a9e444d82edc9c50c74e8c27109e5405d6a408dd950f5b9e054221a14d65f6b3f78d0efceb25a302962cd00bbd6f8a5a2436f5f9a33f328dae5b435ced93fe07ca9e9740b11eede1c197adad20db827a9c7d58fb180565f231702e21bdb0e7456a1efa8988a276855aabe0bb82c256f5aef673eef204bf"}], 0x1e0}, 0x44001) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc513, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfd, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) 143.60167ms ago: executing program 9 (id=8670): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x9, 0xfe, 0x9, 0x8, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x5, 0x0, 0xffffffff, 0x81, 0x2}}]}}}]}, 0x78}}, 0x20040084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0xa1}, 0x0) 0s ago: executing program 7 (id=8671): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4818}, 0xc080) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c0000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) kernel console output (not intermixed with test programs): 8273] tipc: Resetting bearer [ 586.987412][ T8273] tipc: Disabling bearer [ 587.071305][ T8290] netlink: 252 bytes leftover after parsing attributes in process `syz.7.7831'. [ 587.085470][ T8290] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7831'. [ 587.174132][ T8298] netlink: 76 bytes leftover after parsing attributes in process `syz.9.7834'. [ 587.249197][ T8306] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 587.257442][ T8308] Bluetooth: MGMT ver 1.23 [ 587.292062][ T8295] fuse: Unknown parameter ')}0x0000000000000008' [ 587.353034][T11884] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 587.369756][ T8316] vlan0: entered promiscuous mode [ 587.401590][ T8314] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8314 comm=syz.4.7836 [ 587.554006][T11884] usb 12-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x36, changing to 0x6 [ 587.557722][T11884] usb 12-1: config 0 interface 0 has no altsetting 0 [ 587.569714][T11884] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 587.572758][T11884] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 587.575919][ T8334] sp0: Synchronizing with TNC [ 587.580067][T11884] usb 12-1: Product: syz [ 587.582968][T11884] usb 12-1: Manufacturer: syz [ 587.584486][T11884] usb 12-1: SerialNumber: syz [ 587.592833][T11884] usb 12-1: config 0 descriptor?? [ 587.598004][T11884] usb 12-1: selecting invalid altsetting 0 [ 587.678402][ T8347] xt_hashlimit: size too large, truncated to 1048576 [ 587.770270][ T8356] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 587.803695][ T8292] netlink: 'syz.7.7832': attribute type 1 has an invalid length. [ 587.828642][T11884] usb 12-1: USB disconnect, device number 11 [ 588.030113][ T8371] Invalid option length (1048180) for dns_resolver key [ 588.288986][ T8375] syzkaller0: entered promiscuous mode [ 588.291283][ T8375] syzkaller0: entered allmulticast mode [ 588.492386][ T63] Bluetooth: hci4: command tx timeout [ 588.529076][ T8376] tipc: Started in network mode [ 588.532053][ T8376] tipc: Node identity 6e8233e58563, cluster identity 4711 [ 588.564820][ T8376] tipc: Enabled bearer , priority 10 [ 588.601012][ T8374] tipc: Resetting bearer [ 588.616517][ T8374] tipc: Disabling bearer [ 588.987837][ T8387] __nla_validate_parse: 3 callbacks suppressed [ 588.987852][ T8387] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7858'. [ 589.145548][ T8390] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 589.148080][ T8390] IPv6: NLM_F_CREATE should be set when creating new route [ 589.150977][ T8390] xt_cgroup: invalid path, errno=-2 [ 589.273757][ T8399] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7859'. [ 589.303019][ T39] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 589.454355][ T39] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 589.457605][ T39] usb 12-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config [ 589.460959][ T39] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 589.463962][ T39] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 589.467564][ T39] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1394, setting to 1024 [ 589.475405][ T39] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 589.478368][ T39] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 589.480906][ T39] usb 12-1: Product: syz [ 589.482347][ T39] usb 12-1: Manufacturer: syz [ 589.500970][ T8387] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 589.504174][ T39] cdc_wdm 12-1:1.0: skipping garbage [ 589.507705][ T39] cdc_wdm 12-1:1.0: skipping garbage [ 589.523013][ T39] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 589.524975][ T39] cdc_wdm 12-1:1.0: Unknown control protocol [ 589.593213][ T8403] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7862'. [ 589.597547][ T8403] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7862'. [ 589.760922][ C3] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 589.763246][ C3] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 589.765425][ C3] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 589.767535][ C3] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 589.769698][ C3] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 589.771815][ C3] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 589.774008][ C3] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 589.776117][ C3] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 589.778315][ C3] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 589.780545][ C3] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 589.782689][ C3] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 589.784824][ C3] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 589.786998][ C3] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 589.789143][ C3] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 589.791271][ C3] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 589.793395][ C3] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 589.795592][ C3] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 589.797720][ C3] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 589.799928][ C3] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 589.802057][ C3] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 589.806500][ T5682] usb 12-1: USB disconnect, device number 12 [ 589.808539][ C3] cdc_wdm 12-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 589.933605][ T8413] netlink: 'syz.9.7865': attribute type 6 has an invalid length. [ 589.935477][ T8416] netlink: 'syz.4.7866': attribute type 1 has an invalid length. [ 589.937041][ T8413] netlink: 9 bytes leftover after parsing attributes in process `syz.9.7865'. [ 589.937074][ T8417] netlink: 9 bytes leftover after parsing attributes in process `syz.9.7865'. [ 589.937209][ T8417] 0·: renamed from hsr0 (while UP) [ 589.949094][ T8417] 0·: entered allmulticast mode [ 589.950709][ T8417] hsr_slave_0: entered allmulticast mode [ 589.952615][ T8417] hsr_slave_1: entered allmulticast mode [ 589.956046][ T8417] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 589.961333][ T8413] 1·: renamed from 70· (while UP) [ 589.964846][ T8413] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 590.083016][ T8420] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7867'. [ 590.213010][ T5249] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 590.373032][ T5249] usb 14-1: Using ep0 maxpacket: 8 [ 590.376258][ T5249] usb 14-1: config 179 has an invalid interface number: 65 but max is 0 [ 590.379012][ T5249] usb 14-1: config 179 has no interface number 0 [ 590.381209][ T5249] usb 14-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 590.385023][ T5249] usb 14-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 590.388686][ T5249] usb 14-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 590.392365][ T5249] usb 14-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 590.396180][ T5249] usb 14-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 590.400473][ T5249] usb 14-1: config 179 interface 65 has no altsetting 0 [ 590.402742][ T5249] usb 14-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 590.405917][ T5249] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.410760][ T8412] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 590.412987][ T5993] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 590.421007][ T5249] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:179.65/input/input64 [ 590.463185][ T5321] input input64: unable to receive magic message: -110 [ 590.533508][ C0] xpad 14-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 590.562979][ T5993] usb 9-1: Using ep0 maxpacket: 8 [ 590.566111][ T5993] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 590.569639][ T5993] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 590.572443][ T5993] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.573241][ T63] Bluetooth: hci4: command tx timeout [ 590.579532][ T5993] usb 9-1: config 0 descriptor?? [ 590.593317][ T5321] input input64: unable to receive magic message: -32 [ 590.615731][ T8412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8412 comm=syz.9.7865 [ 590.625960][ C0] xpad 14-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 590.649538][ T8413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.652411][ T8413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.693371][ T5321] input input64: unable to receive magic message: -32 [ 590.704314][ C0] xpad 14-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 590.704316][ T5973] usb 14-1: USB disconnect, device number 7 [ 590.709431][ C0] xpad 14-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 590.726898][ T8442] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7873'. [ 590.785791][ T5993] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 590.808883][ T5682] usb 9-1: USB disconnect, device number 23 [ 590.885028][ T40] kauditd_printk_skb: 85 callbacks suppressed [ 590.885041][ T40] audit: type=1400 audit(590.775:47622): avc: denied { search } for pid=8448 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 590.885130][ T40] audit: type=1400 audit(590.775:47623): avc: denied { read write } for pid=8448 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 590.885417][ T40] audit: type=1400 audit(590.775:47624): avc: denied { open } for pid=8448 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 590.885516][ T40] audit: type=1400 audit(590.775:47625): avc: denied { lock } for pid=8448 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 590.886230][ T40] audit: type=1400 audit(590.775:47626): avc: denied { read } for pid=8448 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 syzkaller syzkaller login: [ 591.051214][ T8454] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 591.097970][ T40] audit: type=1400 audit(590.985:47627): avc: denied { mount } for pid=8453 comm="syz.4.7877" name="/" dev="hugetlbfs" ino=177896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 591.116829][ T40] audit: type=1400 audit(591.005:47628): avc: denied { unmount } for pid=7997 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 591.139126][ T8456] vcan0: tx address claim with dest, not broadcast [ 591.171999][ T8461] syzkaller0: entered promiscuous mode [ 591.174163][ T8461] syzkaller0: entered allmulticast mode [ 591.197219][ T8461] tipc: Enabled bearer , priority 10 [ 591.201366][ T8460] tipc: Resetting bearer [ 591.222340][ T8460] tipc: Disabling bearer [ 591.309937][ T8467] NILFS (nbd9): device size too small [ 591.337794][ T8469] bond1: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 591.343041][ T8469] bond1 (unregistering): Released all slaves [ 591.458150][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7884'. [ 591.462548][ T8477] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7884'. [ 591.608406][ T8496] syzkaller0: entered promiscuous mode [ 591.610814][ T8496] syzkaller0: entered allmulticast mode [ 591.630059][ T8496] tipc: Enabled bearer , priority 10 [ 591.633142][ T8495] tipc: Resetting bearer [ 591.645545][ T8495] tipc: Disabling bearer [ 591.654924][ T40] audit: type=1400 audit(591.545:47629): avc: denied { setopt } for pid=8497 comm="syz.3.7891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 591.661275][ T40] audit: type=1400 audit(591.545:47630): avc: denied { connect } for pid=8497 comm="syz.3.7891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 592.023542][ T8518] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 592.026840][ T8518] block device autoloading is deprecated and will be removed. [ 592.132186][ T8514] md: could not open device unknown-block(0,0). [ 592.134441][ T8514] md: md_import_device returned -6 [ 592.173426][ T8518] md: could not open device unknown-block(0,0). [ 592.175618][ T8518] md: md_import_device returned -6 [ 592.286733][ T40] audit: type=1400 audit(592.175:47631): avc: denied { setopt } for pid=8529 comm="syz.3.7898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 592.345877][ T8537] syzkaller0: entered promiscuous mode [ 592.348133][ T8537] syzkaller0: entered allmulticast mode [ 592.390126][ T8537] tipc: Enabled bearer , priority 0 [ 592.394386][ T8536] tipc: Resetting bearer [ 592.413143][ T8536] tipc: Disabling bearer [ 592.467427][ T8539] overlayfs: upper fs does not support file handles, falling back to index=off. [ 592.619988][ T8554] netlink: 'syz.3.7906': attribute type 1 has an invalid length. [ 592.636859][ T8554] bond2: entered promiscuous mode [ 592.638843][ T8554] 8021q: adding VLAN 0 to HW filter on device bond2 [ 592.843619][ T8568] syzkaller0: entered promiscuous mode [ 592.845448][ T8568] syzkaller0: entered allmulticast mode [ 592.860708][ T8571] program syz.4.7911 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 592.890137][ T8568] tipc: Enabled bearer , priority 10 [ 592.895042][ T8567] tipc: Resetting bearer [ 592.916290][ T8567] tipc: Disabling bearer [ 592.929649][ T8575] vxcan1 speed is unknown, defaulting to 1000 [ 593.046636][ T8581] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 593.050801][ T8581] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 593.057992][ T8581] overlay: Unknown parameter 'fsmagic' [ 593.122977][T11884] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 593.281765][T11884] usb 14-1: config 0 has an invalid interface number: 249 but max is 0 [ 593.284726][T11884] usb 14-1: config 0 has no interface number 0 [ 593.286843][T11884] usb 14-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 593.289926][T11884] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.294824][T11884] usb 14-1: config 0 descriptor?? [ 593.298255][T11884] port100 14-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 593.474336][ T8599] netlink: 'syz.4.7920': attribute type 11 has an invalid length. [ 593.476935][ T8599] netlink: 'syz.4.7920': attribute type 11 has an invalid length. [ 593.508842][ T29] usb 14-1: USB disconnect, device number 8 [ 593.585581][ T8605] syzkaller0: entered promiscuous mode [ 593.587465][ T8605] syzkaller0: entered allmulticast mode [ 593.610976][ T8605] tipc: Enabled bearer , priority 10 [ 593.615783][ T8604] tipc: Resetting bearer [ 593.634060][ T8604] tipc: Disabling bearer [ 593.657050][ T8611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.747330][ T8614] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 593.839413][ T8623] kvm: kvm [8622]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 593.842857][ T8623] kvm: kvm [8622]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 593.952984][ T5973] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 593.955802][ T8630] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.977061][ T8623] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 594.051821][ T8630] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.095073][ T8640] syzkaller0: entered promiscuous mode [ 594.097270][ T8640] syzkaller0: entered allmulticast mode [ 594.104285][ T5973] usb 14-1: config 0 has an invalid interface number: 249 but max is 0 [ 594.107023][ T5973] usb 14-1: config 0 has no interface number 0 [ 594.109171][ T5973] usb 14-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 594.112116][ T5973] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.116480][ T5973] usb 14-1: config 0 descriptor?? [ 594.124437][ T5973] port100 14-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 594.127946][ T8640] tipc: Enabled bearer , priority 10 [ 594.149354][ T8630] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.157997][ T8639] tipc: Resetting bearer [ 594.172391][ T8639] tipc: Disabling bearer [ 594.227155][ T8630] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.320806][ T8573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.323875][ T8573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.387215][ T6425] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.400075][ T6425] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.410810][T24801] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.425755][T24801] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.577939][ T4941] usb 14-1: USB disconnect, device number 9 [ 594.587410][ T8651] __nla_validate_parse: 8 callbacks suppressed [ 594.587425][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7939'. [ 594.800812][ T8654] fuse: Bad value for 'group_id' [ 594.802531][ T8654] fuse: Bad value for 'group_id' [ 594.865670][ T8659] syzkaller0: entered promiscuous mode [ 594.867779][ T8659] syzkaller0: entered allmulticast mode [ 594.908139][ T8659] tipc: Enabled bearer , priority 0 [ 594.911241][ T8658] tipc: Resetting bearer [ 594.925649][ T8658] tipc: Disabling bearer [ 595.433241][T11884] usb 14-1: new full-speed USB device number 10 using dummy_hcd [ 595.473747][ T5973] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 595.562993][T11884] usb 14-1: device descriptor read/64, error -71 [ 595.613067][ T5973] usb 9-1: device descriptor read/64, error -71 [ 595.823314][T11884] usb 14-1: new full-speed USB device number 11 using dummy_hcd [ 595.853077][ T5973] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 595.963002][T11884] usb 14-1: device descriptor read/64, error -71 [ 595.982967][ T5973] usb 9-1: device descriptor read/64, error -71 [ 596.083187][T11884] usb usb14-port1: attempt power cycle [ 596.093451][ T5973] usb usb9-port1: attempt power cycle [ 596.432990][ T5973] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 596.432990][T11884] usb 14-1: new full-speed USB device number 12 using dummy_hcd [ 596.453624][ T5973] usb 9-1: device descriptor read/8, error -71 [ 596.454154][T11884] usb 14-1: device descriptor read/8, error -71 [ 596.703064][T11884] usb 14-1: new full-speed USB device number 13 using dummy_hcd [ 596.713168][ T5973] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 596.733524][ T5973] usb 9-1: device descriptor read/8, error -71 [ 596.743908][T11884] usb 14-1: device descriptor read/8, error -71 [ 596.746622][ T8696] netlink: 208240 bytes leftover after parsing attributes in process `syz.7.7956'. [ 596.843531][ T5973] usb usb9-port1: unable to enumerate USB device [ 596.863381][T11884] usb usb14-port1: unable to enumerate USB device [ 597.521196][ T8717] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 597.524546][ T8717] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 597.527686][ T8717] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 597.530660][ T8717] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 597.533256][ T8717] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 597.535868][ T8717] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 597.538807][ T8717] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 597.541585][ T8717] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 597.544366][ T8717] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 597.547026][ T8717] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 598.037178][ T8733] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7965'. [ 598.224811][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.227787][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.230406][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.232696][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.235203][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.237569][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.239706][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.242190][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.247498][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.249933][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.252025][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.254401][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.256601][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.258845][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.260931][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.263259][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.265349][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.267412][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.269568][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.271635][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.274009][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.276101][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.278813][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.280917][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.283291][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.285380][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.287458][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.289703][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.291775][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.295757][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.297963][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.300324][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.302413][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.305174][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.373765][ T8745] binder: 8743:8745 ioctl c00c6211 0 returned -14 [ 598.444664][ T8755] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7969'. [ 598.451376][ T8755] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7969'. [ 598.486069][ T8757] sp0: Synchronizing with TNC [ 599.180073][ T8805] comedi: valid board names for 8255 driver are: [ 599.183163][ T8805] 8255 [ 599.184613][ T8805] comedi: valid board names for vmk80xx driver are: [ 599.187404][ T8805] vmk80xx [ 599.188721][ T8805] comedi: valid board names for usbduxsigma driver are: [ 599.190439][ T8806] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7984'. [ 599.191571][ T8805] usbduxsigma [ 599.195943][ T8805] comedi: valid board names for usbduxfast driver are: [ 599.198628][ T8805] usbduxfast [ 599.199727][ T8805] comedi: valid board names for usbdux driver are: [ 599.201848][ T8805] usbdux [ 599.202820][ T8805] comedi: valid board names for ni6501 driver are: [ 599.206140][ T8805] ni6501 [ 599.207125][ T8805] comedi: valid board names for dt9812 driver are: [ 599.209297][ T8805] dt9812 [ 599.210287][ T8805] comedi: valid board names for ni_labpc_cs driver are: [ 599.212523][ T8805] ni_labpc_cs [ 599.214101][ T8805] comedi: valid board names for ni_daq_700 driver are: [ 599.216571][ T8805] ni_daq_700 [ 599.217720][ T8805] comedi: valid board names for labpc_pci driver are: [ 599.220283][ T8805] labpc_pci [ 599.221732][ T8805] comedi: valid board names for adl_pci9118 driver are: [ 599.225217][ T8805] pci9118dg [ 599.226379][ T8805] pci9118hg [ 599.227544][ T8805] pci9118hr [ 599.228667][ T8805] comedi: valid board names for 8255_pci driver are: [ 599.230830][ T8805] 8255_pci [ 599.231960][ T8805] comedi: valid board names for s526 driver are: [ 599.234748][ T8805] s526 [ 599.235697][ T8805] comedi: valid board names for multiq3 driver are: [ 599.237945][ T8805] multiq3 [ 599.239000][ T8805] comedi: valid board names for pcmuio driver are: [ 599.241137][ T8805] pcmuio48 [ 599.242741][ T8805] pcmuio96 [ 599.244528][ T8805] comedi: valid board names for pcmmio driver are: [ 599.246742][ T8805] pcmmio [ 599.247738][ T8805] comedi: valid board names for pcmda12 driver are: [ 599.249994][ T8805] pcmda12 [ 599.251041][ T8805] comedi: valid board names for pcmad driver are: [ 599.253612][ T8805] pcmad12 [ 599.254675][ T8805] pcmad16 [ 599.255710][ T8805] comedi: valid board names for ni_labpc driver are: [ 599.257934][ T8805] lab-pc-1200 [ 599.259102][ T8805] lab-pc-1200ai [ 599.260322][ T8805] lab-pc+ [ 599.261384][ T8805] comedi: valid board names for atmio16 driver are: [ 599.264330][ T8805] atmio16 [ 599.265439][ T8805] atmio16d [ 599.266561][ T8805] comedi: valid board names for ni_at_ao driver are: [ 599.268707][ T8805] at-ao-6 [ 599.269716][ T8805] at-ao-10 [ 599.270827][ T8805] comedi: valid board names for ni_at_a2150 driver are: [ 599.273367][ T8805] ni_at_a2150 [ 599.274516][ T8805] comedi: valid board names for adq12b driver are: [ 599.276604][ T8805] adq12b [ 599.277564][ T8805] comedi: valid board names for mpc624 driver are: [ 599.279651][ T8805] mpc624 [ 599.280620][ T8805] comedi: valid board names for c6xdigio driver are: [ 599.282926][ T8805] c6xdigio [ 599.283966][ T8805] comedi: valid board names for aio_iiro_16 driver are: [ 599.286155][ T8805] aio_iiro_16 [ 599.287260][ T8805] comedi: valid board names for aio_aio12_8 driver are: [ 599.289478][ T8805] aio_aio12_8 [ 599.290578][ T8805] aio_ai12_8 [ 599.291658][ T8805] aio_ao12_4 [ 599.292752][ T8805] comedi: valid board names for fl512 driver are: [ 599.295176][ T8805] fl512 [ 599.296109][ T8805] comedi: valid board names for dmm32at driver are: [ 599.298214][ T8805] dmm32at [ 599.299204][ T8805] comedi: valid board names for dt282x driver are: [ 599.301239][ T8805] dt2821 [ 599.302170][ T8805] dt2821-f [ 599.303266][ T8805] dt2821-g [ 599.304289][ T8805] dt2823 [ 599.305329][ T8805] dt2824-pgh [ 599.306325][ T8805] dt2824-pgl [ 599.307375][ T8805] dt2825 [ 599.308343][ T8805] dt2827 [ 599.309328][ T8805] dt2828 [ 599.310287][ T8805] dt2829 [ 599.311273][ T8805] dt21-ez [ 599.312276][ T8805] dt23-ez [ 599.313384][ T8805] dt24-ez [ 599.314400][ T8805] dt24-ez-pgl [ 599.315580][ T8805] comedi: valid board names for dt2817 driver are: [ 599.317661][ T8805] dt2817 [ 599.318650][ T8805] comedi: valid board names for dt2815 driver are: [ 599.320717][ T8805] dt2815 [ 599.321682][ T8805] comedi: valid board names for dt2814 driver are: [ 599.323963][ T8805] dt2814 [ 599.324938][ T8805] comedi: valid board names for dt2811 driver are: [ 599.327068][ T8805] dt2811-pgh [ 599.328213][ T8805] dt2811-pgl [ 599.329268][ T8805] comedi: valid board names for dt2801 driver are: [ 599.331309][ T8805] dt2801 [ 599.332273][ T8805] comedi: valid board names for das6402 driver are: [ 599.334547][ T8805] das6402-12 [ 599.335668][ T8805] das6402-16 [ 599.336789][ T8805] comedi: valid board names for das1800 driver are: [ 599.338960][ T8805] das-1701st [ 599.340042][ T8805] das-1701st-da [ 599.341215][ T8805] das-1702st [ 599.342299][ T8805] das-1702st-da [ 599.343520][ T8805] das-1702hr [ 599.344919][ T8805] das-1702hr-da [ 599.346075][ T8805] das-1701ao [ 599.347155][ T8805] das-1702ao [ 599.348272][ T8805] das-1801st [ 599.349426][ T8805] das-1801st-da [ 599.350604][ T8805] das-1802st [ 599.351691][ T8805] das-1802st-da [ 599.352917][ T8805] das-1802hr [ 599.354010][ T8805] das-1802hr-da [ 599.355174][ T8805] das-1801hc [ 599.356233][ T8805] das-1802hc [ 599.357322][ T8805] das-1801ao [ 599.358411][ T8805] das-1802ao [ 599.359571][ T8805] comedi: valid board names for das800 driver are: [ 599.361674][ T8805] das-800 [ 599.362683][ T8805] cio-das800 [ 599.364038][ T8805] das-801 [ 599.365060][ T8805] cio-das801 [ 599.366148][ T8805] das-802 [ 599.367159][ T8805] cio-das802 [ 599.368275][ T8805] cio-das802/16 [ 599.369447][ T8805] comedi: valid board names for isa-das08 driver are: [ 599.371637][ T8805] isa-das08 [ 599.372708][ T8805] das08-pgm [ 599.373853][ T8805] das08-pgh [ 599.374919][ T8805] das08-pgl [ 599.375980][ T8805] das08-aoh [ 599.377065][ T8805] das08-aol [ 599.378152][ T8805] das08-aom [ 599.379214][ T8805] das08/jr-ao [ 599.380353][ T8805] das08jr-16-ao [ 599.381521][ T8805] pc104-das08 [ 599.382704][ T8805] das08jr/16 [ 599.383863][ T8805] comedi: valid board names for das16m1 driver are: [ 599.385970][ T8805] das16m1 [ 599.387058][ T8805] comedi: valid board names for dac02 driver are: [ 599.389161][ T8805] dac02 [ 599.390101][ T8805] comedi: valid board names for rti802 driver are: [ 599.392154][ T8805] rti802 [ 599.393395][ T8805] comedi: valid board names for rti800 driver are: [ 599.395462][ T8805] rti800 [ 599.396441][ T8805] rti815 [ 599.397414][ T8805] comedi: valid board names for pcm3724 driver are: [ 599.399507][ T8805] pcm3724 [ 599.400517][ T8805] comedi: valid board names for pcl818 driver are: [ 599.402624][ T8805] pcl818l [ 599.403759][ T8805] pcl818h [ 599.404780][ T8805] pcl818hd [ 599.405814][ T8805] pcl818hg [ 599.406852][ T8805] pcl818 [ 599.407817][ T8805] pcl718 [ 599.408816][ T8805] pcm3718 [ 599.409830][ T8805] comedi: valid board names for pcl816 driver are: [ 599.411886][ T8805] pcl816 [ 599.412860][ T8805] pcl814b [ 599.413992][ T8805] comedi: valid board names for pcl812 driver are: [ 599.415992][ T8805] pcl812 [ 599.416976][ T8805] pcl812pg [ 599.417992][ T8805] acl8112pg [ 599.419034][ T8805] acl8112dg [ 599.420074][ T8805] acl8112hg [ 599.421124][ T8805] a821pgl [ 599.422109][ T8805] a821pglnda [ 599.423441][ T8805] a821pgh [ 599.424482][ T8805] a822pgl [ 599.425457][ T8805] a822pgh [ 599.426436][ T8805] a823pgl [ 599.427428][ T8805] a823pgh [ 599.428437][ T8805] pcl813 [ 599.429422][ T8805] pcl813b [ 599.430407][ T8805] acl8113 [ 599.431418][ T8805] iso813 [ 599.432380][ T8805] acl8216 [ 599.433476][ T8805] a826pg [ 599.434450][ T8805] comedi: valid board names for pcl730 driver are: [ 599.436597][ T8805] pcl730 [ 599.437563][ T8805] iso730 [ 599.438548][ T8805] acl7130 [ 599.439556][ T8805] pcm3730 [ 599.440575][ T8805] pcl725 [ 599.441539][ T8805] p8r8dio [ 599.442547][ T8805] acl7225b [ 599.443759][ T8805] p16r16dio [ 599.444840][ T8805] pcl733 [ 599.445812][ T8805] pcl734 [ 599.447097][ T8805] opmm-1616-xt [ 599.448273][ T8805] pearl-mm-p [ 599.449372][ T8805] ir104-pbf [ 599.450450][ T8805] comedi: valid board names for pcl726 driver are: [ 599.452519][ T8805] pcl726 [ 599.453731][ T8805] pcl727 [ 599.454700][ T8805] pcl728 [ 599.455667][ T8805] acl6126 [ 599.456706][ T8805] acl6128 [ 599.457716][ T8805] comedi: valid board names for pcl724 driver are: [ 599.459804][ T8805] pcl724 [ 599.460782][ T8805] pcl722 [ 599.461749][ T8805] pcl731 [ 599.462712][ T8805] acl7122 [ 599.463799][ T8805] acl7124 [ 599.464797][ T8805] pet48dio [ 599.465821][ T8805] pcmio48 [ 599.466870][ T8805] onyx-mm-dio [ 599.467988][ T8805] comedi: valid board names for pcl711 driver are: [ 599.470095][ T8805] pcl711 [ 599.471062][ T8805] pcl711b [ 599.472075][ T8805] acl8112hg [ 599.473231][ T8805] acl8112dg [ 599.474292][ T8805] comedi: valid board names for amplc_pc263 driver are: [ 599.476494][ T8805] pc263 [ 599.477447][ T8805] comedi: valid board names for amplc_pc236 driver are: [ 599.479654][ T8805] pc36at [ 599.480613][ T8805] comedi: valid board names for amplc_dio200 driver are: [ 599.482790][ T8805] pc212e [ 599.483991][ T8805] pc214e [ 599.485005][ T8805] pc215e [ 599.485976][ T8805] pc218e [ 599.486987][ T8805] pc272e [ 599.487952][ T8805] comedi: valid board names for comedi_parport driver are: [ 599.490262][ T8805] comedi_parport [ 599.491449][ T8805] comedi: valid board names for comedi_test driver are: [ 599.493742][ T8805] comedi_test [ 599.494854][ T8805] comedi: valid board names for comedi_bond driver are: [ 599.497106][ T8805] comedi_bond [ 599.580817][ T8821] syzkaller0: entered promiscuous mode [ 599.582641][ T8821] syzkaller0: entered allmulticast mode [ 599.598738][ T8821] tipc: Enabled bearer , priority 10 [ 599.602199][ T8820] tipc: Resetting bearer [ 599.619538][ T8820] tipc: Disabling bearer [ 599.954203][ T1329] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 600.002293][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 600.002310][ T40] audit: type=1400 audit(599.885:47644): avc: denied { connect } for pid=8832 comm="syz.3.7991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 600.014119][ T40] audit: type=1400 audit(599.895:47645): avc: denied { setopt } for pid=8832 comm="syz.3.7991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 600.104908][ T1329] usb 9-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x36, changing to 0x6 [ 600.108927][ T1329] usb 9-1: config 0 interface 0 has no altsetting 0 [ 600.114189][ T1329] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 600.118060][ T1329] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 600.121521][ T1329] usb 9-1: Product: syz [ 600.124355][ T1329] usb 9-1: Manufacturer: syz [ 600.126422][ T1329] usb 9-1: SerialNumber: syz [ 600.129659][ T40] audit: type=1400 audit(600.015:47646): avc: denied { append } for pid=8840 comm="syz.3.7994" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 600.139783][ T1329] usb 9-1: config 0 descriptor?? [ 600.143823][ T1329] usb 9-1: selecting invalid altsetting 0 [ 600.178456][ T8850] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.7995'. [ 600.256706][ T8852] geneve2: entered promiscuous mode [ 600.345940][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7988'. [ 600.350237][ T5973] usb 9-1: USB disconnect, device number 28 [ 600.351084][ T8861] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7999'. [ 600.689319][ T8864] netlink: 7 bytes leftover after parsing attributes in process `syz.9.8000'. [ 601.197978][ T8885] syzkaller0: entered promiscuous mode [ 601.200437][ T8885] syzkaller0: entered allmulticast mode [ 601.219237][ T8885] tipc: Enabled bearer , priority 10 [ 601.222382][ T8884] tipc: Resetting bearer [ 601.236972][ T8884] tipc: Disabling bearer [ 601.399364][ T8891] loop2: detected capacity change from 0 to 7 [ 601.402483][ T1836] Dev loop2: unable to read RDB block 7 [ 601.404385][ T1836] loop2: AHDI p1 p2 [ 601.405668][ T1836] loop2: partition table partially beyond EOD, truncated [ 601.408230][ T1836] loop2: p1 start 1818582900 is beyond EOD, truncated [ 601.411254][ T8891] Dev loop2: unable to read RDB block 7 [ 601.413274][ T8891] loop2: AHDI p1 p2 [ 601.414618][ T8891] loop2: partition table partially beyond EOD, truncated [ 601.417283][ T8891] loop2: p1 start 1818582900 is beyond EOD, truncated [ 601.793834][ T8899] netlink: 'syz.4.8012': attribute type 1 has an invalid length. [ 601.798344][ T8899] netlink: 'syz.4.8012': attribute type 2 has an invalid length. [ 601.893491][ T8906] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8013'. [ 602.112961][ T1329] usb 14-1: new full-speed USB device number 14 using dummy_hcd [ 602.264672][ T1329] usb 14-1: not running at top speed; connect to a high speed hub [ 602.268076][ T1329] usb 14-1: config 7 has an invalid interface number: 199 but max is 0 [ 602.270772][ T1329] usb 14-1: config 7 has no interface number 0 [ 602.272810][ T1329] usb 14-1: config 7 interface 199 altsetting 4 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 602.276347][ T1329] usb 14-1: config 7 interface 199 altsetting 4 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 602.279894][ T1329] usb 14-1: config 7 interface 199 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 602.283440][ T1329] usb 14-1: config 7 interface 199 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 602.286894][ T1329] usb 14-1: config 7 interface 199 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 602.290444][ T1329] usb 14-1: config 7 interface 199 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 602.294027][ T1329] usb 14-1: config 7 interface 199 altsetting 4 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 602.297909][ T1329] usb 14-1: config 7 interface 199 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 602.301430][ T1329] usb 14-1: config 7 interface 199 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 602.305069][ T1329] usb 14-1: config 7 interface 199 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 602.308755][ T1329] usb 14-1: config 7 interface 199 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 602.313123][ T1329] usb 14-1: config 7 interface 199 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 602.317649][ T1329] usb 14-1: config 7 interface 199 has no altsetting 0 [ 602.321949][ T1329] usb 14-1: New USB device found, idVendor=0421, idProduct=04b9, bcdDevice= 3.50 [ 602.325002][ T1329] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.327595][ T1329] usb 14-1: Product: á ‰ [ 602.329019][ T1329] usb 14-1: Manufacturer: â Š [ 602.330542][ T1329] usb 14-1: SerialNumber: à – [ 602.335267][ T8905] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 602.543722][ T1329] usb-storage 14-1:7.199: USB Mass Storage device detected [ 602.553317][ T1329] usb-storage 14-1:7.199: Quirks match for vid 0421 pid 04b9: 400 [ 602.606617][ T1329] usbhid 14-1:7.199: couldn't find an input interrupt endpoint [ 602.613754][ T1329] usb 14-1: USB disconnect, device number 14 [ 602.697440][ T8910] syzkaller0: entered promiscuous mode [ 602.699267][ T8910] syzkaller0: entered allmulticast mode [ 602.715526][ T8910] tipc: Enabled bearer , priority 10 [ 602.720555][ T8909] tipc: Resetting bearer [ 602.734545][ T8909] tipc: Disabling bearer [ 602.854787][ T8912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=8912 comm=syz.4.8016 [ 603.168547][ T8920] kvm: kvm [8919]: vcpu0, guest rIP: 0x9115 Unhandled WRMSR(0xc2) = 0xa09000007043 [ 603.171746][ T8920] kvm: kvm [8919]: vcpu0, guest rIP: 0x9154 Unhandled WRMSR(0xc2) = 0x7043 [ 603.174872][ T8920] kvm: kvm [8919]: vcpu0, guest rIP: 0x9156 Unhandled WRMSR(0xc2) = 0x7043 [ 603.178050][ T8920] kvm: kvm [8919]: vcpu0, guest rIP: 0x9115 Unhandled WRMSR(0xc1) = 0x4fdf00000000 [ 603.549274][ T8920] kvm: kvm [8919]: vcpu0, guest rIP: 0x9115 Unhandled WRMSR(0x187) = 0xa06000002080 [ 603.552490][ T8920] kvm: kvm [8919]: vcpu0, guest rIP: 0x9115 Unhandled WRMSR(0x186) = 0xa0800000a060 [ 603.555738][ T8920] kvm: kvm [8919]: vcpu0, guest rIP: 0x9154 Unhandled WRMSR(0x186) = 0xa060 [ 603.558841][ T8920] kvm: kvm [8919]: vcpu0, guest rIP: 0x9156 Unhandled WRMSR(0x186) = 0xa060 [ 603.580731][ T8920] kvm: kvm [8919]: vcpu0, guest rIP: 0x9115 Unhandled WRMSR(0x11e) = 0x606000006060 [ 603.602131][ T8920] kvm: kvm [8919]: vcpu0, guest rIP: 0x9115 Unhandled WRMSR(0xc2) = 0xe0800000c060 [ 603.763518][ T8911] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 603.900170][ T8931] netlink: 108 bytes leftover after parsing attributes in process `syz.9.8020'. [ 603.905074][ T8931] netlink: 108 bytes leftover after parsing attributes in process `syz.9.8020'. [ 603.908128][ T8931] netlink: 84 bytes leftover after parsing attributes in process `syz.9.8020'. [ 608.542479][ T40] audit: type=1400 audit(608.425:47647): avc: denied { lock } for pid=8938 comm="syz.3.8023" path="/dev/nmem0" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 608.543144][ T8939] xt_connbytes: Forcing CT accounting to be enabled [ 608.552014][ T8943] syzkaller0: entered promiscuous mode [ 608.552492][ T8939] xt_CT: You must specify a L4 protocol and not use inversions on it [ 608.552999][ T40] audit: type=1400 audit(608.435:47648): avc: denied { setattr } for pid=8938 comm="syz.3.8023" name="nmem0" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 608.554203][ T8943] syzkaller0: entered allmulticast mode [ 608.572721][ T8939] overlayfs: statfs failed on './file0' [ 608.603944][ T8947] syzkaller0: entered promiscuous mode [ 608.605651][ T8946] netlink: 96 bytes leftover after parsing attributes in process `syz.9.8024'. [ 608.606730][ T8947] syzkaller0: entered allmulticast mode [ 608.645098][ T8947] tipc: Enabled bearer , priority 0 [ 608.653698][ T8944] tipc: Resetting bearer [ 608.671809][ T8944] tipc: Disabling bearer [ 608.703644][ T8950] SELinux: failed to load policy [ 608.775676][ T8955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8028'. [ 608.813870][ T40] audit: type=1400 audit(608.705:47649): avc: denied { append } for pid=8954 comm="syz.3.8028" name="nbd3" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 608.821355][ T8956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8028'. [ 608.968707][ T8970] fuse: Bad value for 'fd' [ 608.975207][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8032'. [ 609.046061][ T40] audit: type=1400 audit(608.935:47650): avc: denied { setopt } for pid=8974 comm="syz.3.8033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 609.295945][ T40] audit: type=1400 audit(609.185:47651): avc: denied { ioctl } for pid=8992 comm="syz.3.8040" path="socket:[181547]" dev="sockfs" ino=181547 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 609.304354][ T40] audit: type=1400 audit(609.185:47652): avc: denied { setattr } for pid=8992 comm="syz.3.8040" name="RDS" dev="sockfs" ino=181547 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 609.433565][ T8999] net_ratelimit: 5267 callbacks suppressed [ 609.433582][ T8999] openvswitch: netlink: Message has 4 unknown bytes. [ 609.438916][ T8999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.494093][ T9001] ptrace attach of "/syz-executor exec"[5658] was attempted by "/syz-executor exec"[9001] [ 609.513721][ T9002] syzkaller0: entered promiscuous mode [ 609.515759][ T9002] syzkaller0: entered allmulticast mode [ 609.535640][ T9002] tipc: Enabled bearer , priority 0 [ 609.539043][ T9000] tipc: Resetting bearer [ 609.554690][ T9000] tipc: Disabling bearer [ 609.664340][ T8999] tipc: Enabled bearer , priority 0 [ 609.682746][ T9010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8044'. [ 609.685891][ T9010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8044'. [ 609.718425][ T9001] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 609.868834][ T9018] netlink: 'syz.9.8047': attribute type 1 has an invalid length. [ 609.962720][ T9024] netlink: 'syz.9.8049': attribute type 47 has an invalid length. [ 609.965653][ T9023] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8049'. [ 609.968901][ T9024] netlink: 'syz.9.8049': attribute type 47 has an invalid length. [ 609.970242][ T9023] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8049'. [ 609.971557][ T9024] netlink: 'syz.9.8049': attribute type 47 has an invalid length. [ 609.978214][ T9024] netlink: 'syz.9.8049': attribute type 47 has an invalid length. [ 609.980646][ T9023] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8049'. [ 609.980867][ T9024] netlink: 'syz.9.8049': attribute type 47 has an invalid length. [ 609.984317][ T9023] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8049'. [ 609.990564][ T9024] netlink: 'syz.9.8049': attribute type 47 has an invalid length. [ 609.993747][ T9024] netlink: 'syz.9.8049': attribute type 47 has an invalid length. [ 609.997693][ T9024] netlink: 'syz.9.8049': attribute type 47 has an invalid length. [ 610.000867][ T9024] netlink: 'syz.9.8049': attribute type 47 has an invalid length. [ 610.057190][ T40] audit: type=1400 audit(609.945:47653): avc: denied { create } for pid=9031 comm="syz.9.8051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 610.187514][ T40] audit: type=1400 audit(610.075:47654): avc: denied { unmount } for pid=4195 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 610.223044][ T40] audit: type=1400 audit(610.105:47655): avc: denied { getopt } for pid=9041 comm="syz.9.8056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 610.355950][ T9052] vxcan1 speed is unknown, defaulting to 1000 [ 610.459850][ T9056] team0: Failed to send options change via netlink (err -105) [ 610.462401][ T9056] team0: Port device dummy0 added [ 610.472422][ T9056] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 610.481073][ T9056] team0: Failed to send options change via netlink (err -105) [ 610.484030][ T9056] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 610.487123][ T9056] team0: Port device dummy0 removed [ 610.494602][ T9056] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 610.499925][ T9056] program syz.9.8061 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 610.788409][ T9065] hsr_slave_1 (unregistering): left promiscuous mode [ 610.794634][ T39] tipc: Node number set to 1833320514 [ 610.831910][ T9078] syzkaller0: entered promiscuous mode [ 610.834555][ T9078] syzkaller0: entered allmulticast mode [ 610.866106][ T9078] tipc: Enabled bearer , priority 0 [ 610.869322][ T9077] tipc: Resetting bearer [ 610.917996][ T9077] tipc: Disabling bearer [ 611.061230][ T40] audit: type=1400 audit(610.945:47656): avc: denied { ioctl } for pid=9105 comm="syz.7.8076" path="socket:[180777]" dev="sockfs" ino=180777 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 611.204400][ T9103] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 611.400725][ T9126] syzkaller0: entered promiscuous mode [ 611.402604][ T9126] syzkaller0: entered allmulticast mode [ 611.422482][ T9126] tipc: Enabled bearer , priority 0 [ 611.426702][ T9125] tipc: Resetting bearer [ 611.441531][ T9125] tipc: Disabling bearer [ 611.602171][ T9132] netlink: 'syz.4.8084': attribute type 11 has an invalid length. [ 611.794659][ T9136] syz_tun: entered allmulticast mode [ 611.797604][ T9136] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 611.801108][ T9136] mroute: pending queue full, dropping entries [ 611.805411][ T9135] syz_tun: left allmulticast mode [ 611.913341][ T9143] syzkaller0: entered promiscuous mode [ 611.915779][ T9143] syzkaller0: entered allmulticast mode [ 611.942677][ T9143] Device name not specified. [ 611.942677][ T9143] [ 612.090683][ T9152] syzkaller0: entered promiscuous mode [ 612.092429][ T9152] syzkaller0: entered allmulticast mode [ 612.113510][ T9152] tipc: Enabled bearer , priority 0 [ 612.117360][ T9151] tipc: Resetting bearer [ 612.140155][ T9151] tipc: Disabling bearer [ 612.227227][ T9157] bond1: Removing last ns target with arp_interval on [ 612.540017][ T9178] syzkaller0: entered promiscuous mode [ 612.541868][ T9178] syzkaller0: entered allmulticast mode [ 612.555217][ T9180] syzkaller0: entered promiscuous mode [ 612.557692][ T9180] syzkaller0: entered allmulticast mode [ 612.593158][ T9180] tipc: Enabled bearer , priority 0 [ 612.594422][ T9178] Device name not specified. [ 612.594422][ T9178] [ 612.599136][ T9179] tipc: Resetting bearer [ 612.617496][ T9179] tipc: Disabling bearer [ 612.750331][ T9186] [U] [ 612.751520][ T9186] [U] [ 612.752663][ T9186] [U] [ 612.753796][ T9186] [U] [ 612.755023][ T9186] [U] [ 612.756235][ T9186] [U] [ 612.757606][ T9186] [U] [ 612.758663][ T9186] [U] [ 612.759788][ T9186] [U] [ 612.760940][ T9186] [U] [ 612.762065][ T9186] [U] [ 612.763200][ T9186] [U] [ 612.764617][ T9186] [U] [ 612.765766][ T9186] [U] [ 612.766947][ T9186] [U] [ 612.768147][ T9186] [U] [ 612.823473][ T9185] [U] [ 612.852650][ T9196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=9196 comm=syz.3.8109 [ 612.973971][ T9199] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 612.994567][ T9213] Device name not specified. [ 612.994567][ T9213] [ 613.004474][ T9213] xt_hashlimit: size too large, truncated to 1048576 [ 613.164946][ T6225] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 613.324538][ T6225] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 613.328966][ T6225] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 613.332856][ T6225] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 613.337304][ T6225] usb 9-1: config 0 interface 0 has no altsetting 0 [ 613.341381][ T6225] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 613.346764][ T6225] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 613.351178][ T6225] usb 9-1: config 0 interface 0 has no altsetting 0 [ 613.355550][ T6225] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 613.359405][ T6225] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 613.364068][ T6225] usb 9-1: config 0 interface 0 has no altsetting 0 [ 613.367898][ T6225] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 613.371609][ T6225] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 613.377694][ T6225] usb 9-1: config 0 interface 0 has no altsetting 0 [ 613.381739][ T6225] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 613.385793][ T6225] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 613.390182][ T6225] usb 9-1: config 0 interface 0 has no altsetting 0 [ 613.394170][ T6225] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 613.397701][ T6225] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 613.412853][ T6225] usb 9-1: config 0 interface 0 has no altsetting 0 [ 613.417105][ T6225] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 613.420776][ T6225] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 613.425252][ T6225] usb 9-1: config 0 interface 0 has no altsetting 0 [ 613.430116][ T6225] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 613.430157][ T6225] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 613.430177][ T6225] usb 9-1: config 0 interface 0 has no altsetting 0 [ 613.432202][ T6225] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 613.432217][ T6225] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 613.432228][ T6225] usb 9-1: Product: syz [ 613.432236][ T6225] usb 9-1: Manufacturer: syz [ 613.432243][ T6225] usb 9-1: SerialNumber: syz [ 613.434035][ T6225] usb 9-1: config 0 descriptor?? [ 613.438240][ T6225] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 613.647696][ T9206] loop2: detected capacity change from 0 to 7 [ 613.650238][ T9206] Dev loop2: unable to read RDB block 7 [ 613.652120][ T9206] loop2: unable to read partition table [ 613.654432][ T9206] loop2: partition table beyond EOD, truncated [ 613.656462][ T9206] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 613.665458][ T4752] usb 9-1: USB disconnect, device number 29 [ 613.669309][ T4752] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 613.990879][ T9262] __nla_validate_parse: 37 callbacks suppressed [ 613.990890][ T9262] netlink: 96 bytes leftover after parsing attributes in process `syz.7.8123'. [ 614.213144][ T9269] (syz.4.8126,9269,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 614.216653][ T9269] (syz.4.8126,9269,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 614.220399][ T9269] (syz.4.8126,9269,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 614.223303][ T9269] (syz.4.8126,9269,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 614.511328][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8130'. [ 614.524139][ T13] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.524218][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8130'. [ 614.527053][ T13] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.533661][ T13] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.536773][ T13] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.577332][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 614.577343][ T40] audit: type=1400 audit(614.465:47677): avc: denied { ioctl } for pid=9280 comm="syz.9.8132" path="socket:[180995]" dev="sockfs" ino=180995 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 614.581562][ T9283] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8131'. [ 614.585926][ T9282] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8132'. [ 614.745361][ T9286] syzkaller0: entered promiscuous mode [ 614.747159][ T9286] syzkaller0: entered allmulticast mode [ 614.928987][ T9300] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8137'. [ 614.934913][ T9300] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8137'. [ 614.940885][ T9298] kvm: Disabled LAPIC found during irq injection [ 615.060684][ T9306] ptrace attach of "/syz-executor exec"[5658] was attempted by ""[9306] [ 615.062514][ T40] audit: type=1400 audit(614.945:47678): avc: denied { map } for pid=9305 comm="syz.9.8140" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 615.074586][ T40] audit: type=1400 audit(614.945:47679): avc: denied { execute } for pid=9305 comm="syz.9.8140" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 615.155016][ T9310] netlink: 96 bytes leftover after parsing attributes in process `syz.9.8141'. [ 615.488073][ T9321] pimreg: entered allmulticast mode [ 615.491595][ T9321] pimreg: left allmulticast mode [ 615.716147][ T9332] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 615.731325][ T9332] vxcan1 speed is unknown, defaulting to 1000 [ 615.835800][ T9335] bond1: option downdelay: invalid value (18446744073709551615) [ 615.838401][ T9335] bond1: option downdelay: allowed values 0 - 2147483647 [ 615.841830][ T9335] bond1 (unregistering): Released all slaves [ 615.912982][ T6225] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 615.967418][ T9343] binder: 9342:9343 ioctl c018620c 200000000140 returned -1 [ 615.984077][ T9344] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 616.004195][ T9349] validate_nla: 32 callbacks suppressed [ 616.004208][ T9349] netlink: 'syz.3.8151': attribute type 8 has an invalid length. [ 616.020183][ T9349] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 616.063008][ T6225] usb 9-1: Using ep0 maxpacket: 16 [ 616.142325][ T6225] usb 9-1: unable to get BOS descriptor or descriptor too short [ 616.153861][ T6225] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 616.157088][ T6225] usb 9-1: can't read configurations, error -71 [ 616.186164][ T9361] netlink: 312 bytes leftover after parsing attributes in process `syz.7.8155'. [ 616.283750][ T9368] netlink: 'syz.9.8157': attribute type 1 has an invalid length. [ 616.324252][ T9368] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 616.329687][ T9368] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 616.380978][ T9376] netlink: 'syz.7.8160': attribute type 11 has an invalid length. [ 616.384693][ T9376] netlink: 244 bytes leftover after parsing attributes in process `syz.7.8160'. [ 616.417936][ T9377] macvlan2: entered promiscuous mode [ 616.419738][ T9377] macvlan2: entered allmulticast mode [ 616.422001][ T9377] bond5: entered promiscuous mode [ 616.424497][ T9377] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 616.464290][ T9377] bond5: left promiscuous mode [ 616.569686][ T9380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9380 comm=syz.7.8160 [ 616.631907][ T9392] overlayfs: failed to resolve './file0fscontext=staff_u': -2 [ 616.667049][ T5935] Bluetooth: hci4: command 0x0406 tx timeout [ 616.860193][ T9409] kvm: user requested TSC rate below hardware speed [ 616.934593][ T40] audit: type=1400 audit(616.825:47680): avc: denied { ioctl } for pid=9413 comm="syz.3.8169" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 616.944269][ T9414] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=9414 comm=syz.3.8169 [ 616.950415][ T40] audit: type=1400 audit(616.835:47681): avc: denied { setattr } for pid=9413 comm="syz.3.8169" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 616.998147][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803aff7000: rx timeout, send abort [ 617.007155][ T40] audit: type=1400 audit(616.895:47682): avc: denied { read } for pid=5318 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 617.021779][ T40] audit: type=1400 audit(616.895:47683): avc: denied { search } for pid=5318 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.030908][ T40] audit: type=1400 audit(616.895:47684): avc: denied { search } for pid=5318 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.031133][ T9421] (syz.3.8171,9421,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 617.035129][ T9420] syzkaller0: entered promiscuous mode [ 617.035151][ T9420] syzkaller0: entered allmulticast mode [ 617.039250][ T40] audit: type=1400 audit(616.895:47685): avc: denied { add_name } for pid=5318 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.046687][ T9421] (syz.3.8171,9421,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 617.053205][ T40] audit: type=1400 audit(616.895:47686): avc: denied { create } for pid=5318 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 617.053390][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.069598][ T9421] (syz.3.8171,9421,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 617.072334][ T9421] (syz.3.8171,9421,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 617.073462][ T9420] tipc: Enabled bearer , priority 0 [ 617.083268][ T9417] tipc: Resetting bearer [ 617.102943][ T9417] tipc: Disabling bearer [ 617.303885][ T9436] IPv6: sit1: Disabled Multicast RS [ 617.307191][ T9436] sit1: entered allmulticast mode [ 617.503827][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803aff7000: abort rx timeout. Force session deactivation [ 618.280759][ T9473] netlink: 'syz.7.8186': attribute type 4 has an invalid length. [ 618.390326][ T9476] netlink: 'syz.7.8187': attribute type 9 has an invalid length. [ 618.546947][ T9480] kvm: pic: non byte write [ 618.550429][ T9480] kvm: pic: non byte write [ 618.553849][ T9480] kvm: pic: non byte write [ 618.678737][ T9483] (syz.7.8190,9483,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 618.681898][ T9483] (syz.7.8190,9483,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 618.685003][ T9483] (syz.7.8190,9483,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 618.688513][ T9483] (syz.7.8190,9483,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 618.746322][ T9485] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 618.748245][ T9485] PKCS7: Only support pkcs7_signedData type [ 619.030768][ T9494] syzkaller0: entered promiscuous mode [ 619.033600][ T9494] syzkaller0: entered allmulticast mode [ 619.057020][ T9494] tipc: Enabled bearer , priority 0 [ 619.061328][ T9492] tipc: Resetting bearer [ 619.079393][ T9492] tipc: Disabling bearer [ 619.170135][ T9501] macsec1: entered promiscuous mode [ 619.433810][ T9514] netlink: 'syz.7.8200': attribute type 21 has an invalid length. [ 619.436343][ T9514] IPv6: NLM_F_CREATE should be specified when creating new route [ 619.491332][ T9522] __nla_validate_parse: 2 callbacks suppressed [ 619.491349][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8200'. [ 619.502428][ T9522] : entered promiscuous mode [ 619.603309][ T9522] Invalid option length (1048180) for dns_resolver key [ 620.076264][ T9529] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8204'. [ 620.080260][ T9529] openvswitch: netlink: Flow actions attr not present in new flow. [ 620.642414][ T9550] (syz.7.8209,9550,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 620.653761][ T9550] (syz.7.8209,9550,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 620.660867][ T9550] (syz.7.8209,9550,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 620.671197][ T9550] (syz.7.8209,9550,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 620.969204][ T9565] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8213'. [ 621.003675][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8213'. [ 621.046159][ T9570] netlink: 'syz.7.8215': attribute type 12 has an invalid length. [ 621.049109][ T9570] netlink: 190972 bytes leftover after parsing attributes in process `syz.7.8215'. [ 621.173048][ T9580] (syz.7.8220,9580,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 621.176437][ T9580] (syz.7.8220,9580,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 621.179766][ T9580] (syz.7.8220,9580,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 621.189990][ T9580] (syz.7.8220,9580,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 621.408480][ T9600] FAULT_INJECTION: forcing a failure. [ 621.408480][ T9600] name failslab, interval 1, probability 0, space 0, times 0 [ 621.412546][ T9600] CPU: 1 UID: 0 PID: 9600 Comm: syz.3.8225 Tainted: G L syzkaller #0 PREEMPT(full) [ 621.412564][ T9600] Tainted: [L]=SOFTLOCKUP [ 621.412568][ T9600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 621.412575][ T9600] Call Trace: [ 621.412580][ T9600] [ 621.412585][ T9600] dump_stack_lvl+0x100/0x190 [ 621.412603][ T9600] should_fail_ex.cold+0x5/0xa [ 621.412617][ T9600] should_failslab+0xc2/0x120 [ 621.412631][ T9600] ? tomoyo_realpath_from_path+0xb6/0x690 [ 621.412646][ T9600] __kmalloc_noprof+0xf6/0x9c0 [ 621.412672][ T9600] ? tomoyo_realpath_from_path+0xb6/0x690 [ 621.412687][ T9600] tomoyo_realpath_from_path+0xb6/0x690 [ 621.412705][ T9600] tomoyo_path_number_perm+0x23c/0x580 [ 621.412718][ T9600] ? tomoyo_path_number_perm+0x22e/0x580 [ 621.412732][ T9600] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 621.412759][ T9600] ? find_held_lock+0x2b/0x80 [ 621.412774][ T9600] ? hook_file_ioctl_common+0x146/0x410 [ 621.412784][ T9600] ? __fget_files+0x215/0x3d0 [ 621.412799][ T9600] ? __fget_files+0x21f/0x3d0 [ 621.412814][ T9600] security_file_ioctl+0xd3/0x230 [ 621.412829][ T9600] __x64_sys_ioctl+0xb7/0x210 [ 621.412840][ T9600] do_syscall_64+0xc9/0xf80 [ 621.412856][ T9600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.412880][ T9600] RIP: 0033:0x7f4b7ff9af79 [ 621.412889][ T9600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.412900][ T9600] RSP: 002b:00007f4b80d75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 621.412911][ T9600] RAX: ffffffffffffffda RBX: 00007f4b80215fa0 RCX: 00007f4b7ff9af79 [ 621.412918][ T9600] RDX: 0000200000000380 RSI: 00000000c040565e RDI: 0000000000000003 [ 621.412924][ T9600] RBP: 00007f4b80d75090 R08: 0000000000000000 R09: 0000000000000000 [ 621.412931][ T9600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.412937][ T9600] R13: 00007f4b80216038 R14: 00007f4b80215fa0 R15: 00007ffe49556d28 [ 621.412952][ T9600] [ 621.483087][ T9600] ERROR: Out of memory at tomoyo_realpath_from_path. [ 621.484648][ T9602] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8226'. [ 621.525953][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 621.525971][ T40] audit: type=1400 audit(621.415:47696): avc: denied { read } for pid=9604 comm="syz.3.8227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 621.526017][ T9605] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8227'. [ 621.537732][ T9608] random: crng reseeded on system resumption [ 621.548271][ T9608] Restarting kernel threads ... [ 621.552700][ T9610] (syz.7.8229,9610,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 621.553495][ T9608] Done restarting kernel threads. [ 621.555366][ T9610] (syz.7.8229,9610,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 621.559100][ T9610] (syz.7.8229,9610,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 621.561875][ T9610] (syz.7.8229,9610,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 621.638936][ T9616] veth0: entered promiscuous mode [ 621.641358][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8232'. [ 621.641370][ T9617] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8232'. [ 621.641657][ T9615] kAFS: unable to lookup cell '(,c¾ûL' [ 621.659235][ T9615] kAFS: unable to lookup cell '(,' [ 621.823252][ T9631] FAULT_INJECTION: forcing a failure. [ 621.823252][ T9631] name failslab, interval 1, probability 0, space 0, times 0 [ 621.827463][ T9631] CPU: 3 UID: 0 PID: 9631 Comm: syz.7.8237 Tainted: G L syzkaller #0 PREEMPT(full) [ 621.827482][ T9631] Tainted: [L]=SOFTLOCKUP [ 621.827486][ T9631] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 621.827492][ T9631] Call Trace: [ 621.827498][ T9631] [ 621.827503][ T9631] dump_stack_lvl+0x100/0x190 [ 621.827522][ T9631] should_fail_ex.cold+0x5/0xa [ 621.827536][ T9631] should_failslab+0xc2/0x120 [ 621.827550][ T9631] ? tomoyo_encode2+0xfb/0x3c0 [ 621.827564][ T9631] __kmalloc_noprof+0xf6/0x9c0 [ 621.827585][ T9631] ? tomoyo_encode2+0xfb/0x3c0 [ 621.827599][ T9631] tomoyo_encode2+0xfb/0x3c0 [ 621.827619][ T9631] tomoyo_encode+0x29/0x50 [ 621.827633][ T9631] tomoyo_realpath_from_path+0x18c/0x690 [ 621.827652][ T9631] tomoyo_path_number_perm+0x23c/0x580 [ 621.827664][ T9631] ? tomoyo_path_number_perm+0x22e/0x580 [ 621.827678][ T9631] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 621.827706][ T9631] ? find_held_lock+0x2b/0x80 [ 621.827720][ T9631] ? hook_file_ioctl_common+0x146/0x410 [ 621.827730][ T9631] ? __fget_files+0x215/0x3d0 [ 621.827745][ T9631] ? __fget_files+0x21f/0x3d0 [ 621.827760][ T9631] security_file_ioctl+0xd3/0x230 [ 621.827776][ T9631] __x64_sys_ioctl+0xb7/0x210 [ 621.827787][ T9631] do_syscall_64+0xc9/0xf80 [ 621.827803][ T9631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.827814][ T9631] RIP: 0033:0x7f649e59af79 [ 621.827824][ T9631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.827835][ T9631] RSP: 002b:00007f649f44f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 621.827846][ T9631] RAX: ffffffffffffffda RBX: 00007f649e815fa0 RCX: 00007f649e59af79 [ 621.827853][ T9631] RDX: 0000200000000380 RSI: 00000000c040565e RDI: 0000000000000003 [ 621.827859][ T9631] RBP: 00007f649f44f090 R08: 0000000000000000 R09: 0000000000000000 [ 621.827865][ T9631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.827872][ T9631] R13: 00007f649e816038 R14: 00007f649e815fa0 R15: 00007ffc1d5f2688 [ 621.827886][ T9631] [ 621.827897][ T9631] ERROR: Out of memory at tomoyo_realpath_from_path. [ 621.918403][ T9637] (syz.3.8239,9637,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 621.920925][ T9637] (syz.3.8239,9637,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 621.923410][ T9637] (syz.3.8239,9637,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 621.926271][ T9637] (syz.3.8239,9637,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 622.153367][ T40] audit: type=1400 audit(622.035:47697): avc: denied { shutdown } for pid=9651 comm="syz.9.8246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 622.167208][ T9648] kvm: pic: level sensitive irq not supported [ 622.167761][ T9648] kvm: pic: non byte read [ 622.174938][ T9648] kvm: pic: non byte read [ 622.177470][ T9648] kvm: pic: non byte read [ 622.180043][ T9648] kvm: pic: non byte read [ 622.182333][ T9648] kvm: pic: non byte read [ 622.184958][ T9648] kvm: pic: non byte read [ 622.187523][ T9648] kvm: pic: non byte read [ 622.190293][ T9648] kvm: pic: non byte read [ 622.192089][ T9648] kvm: pic: non byte read [ 622.194565][ T9648] kvm: pic: non byte read [ 622.235768][ T9663] (syz.3.8249,9663,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 622.238589][ T9663] (syz.3.8249,9663,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 622.241300][ T9663] (syz.3.8249,9663,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 622.244673][ T9663] (syz.3.8249,9663,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 622.261550][ T9648] hpfs: Bad magic ... probably not HPFS [ 622.265813][ T9648] hpfs: Bad magic ... probably not HPFS [ 622.313255][ T40] audit: type=1400 audit(622.195:47698): avc: denied { bind } for pid=9665 comm="syz.9.8250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 622.350616][ T9672] (syz.9.8259,9672,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 622.353347][ T9672] (syz.9.8259,9672,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 622.355665][ T9672] (syz.9.8259,9672,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 622.358457][ T9672] (syz.9.8259,9672,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 623.263665][ T9697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8260'. [ 623.331342][ T9712] CIFS mount error: No usable UNC path provided in device string! [ 623.331342][ T9712] [ 623.335632][ T9712] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 623.372161][ T9720] openvswitch: netlink: Flow actions attr not present in new flow. [ 623.571332][ T63] Bluetooth: hci0: unexpected subevent 0x10 length: 248 > 2 [ 623.770157][ T9749] dvmrp6: entered allmulticast mode [ 623.836997][ T40] audit: type=1800 audit(623.725:47699): pid=9757 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.8284" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 623.843856][ T6225] usb 14-1: new high-speed USB device number 15 using dummy_hcd [ 623.864489][ T9757] vxcan1 speed is unknown, defaulting to 1000 [ 623.993858][ T6225] usb 14-1: Using ep0 maxpacket: 32 [ 623.999431][ T6225] usb 14-1: config 0 has an invalid interface number: 119 but max is 0 [ 624.007326][ T6225] usb 14-1: config 0 has no interface number 0 [ 624.014895][ T6225] usb 14-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 624.018039][ T6225] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.021518][ T6225] usb 14-1: Product: syz [ 624.023610][ T6225] usb 14-1: Manufacturer: syz [ 624.025382][ T6225] usb 14-1: SerialNumber: syz [ 624.039372][ T6225] usb 14-1: config 0 descriptor?? [ 624.062331][ T6225] input: bcm5974 as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.119/input/input65 [ 624.142173][ T63] Bluetooth: hci4: unexpected subevent 0x10 length: 248 > 2 [ 624.323515][ T9780] netlink: 'syz.9.8277': attribute type 29 has an invalid length. [ 624.373301][ T40] audit: type=1400 audit(624.265:47700): avc: denied { name_bind } for pid=9781 comm="syz.3.8290" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 624.435526][ T9784] netlink: 'syz.3.8290': attribute type 1 has an invalid length. [ 624.440728][ T9786] netlink: 'syz.3.8290': attribute type 1 has an invalid length. [ 624.459812][ T9784] 8021q: adding VLAN 0 to HW filter on device bond3 [ 624.501147][ T9785] netlink: 'syz.4.8291': attribute type 21 has an invalid length. [ 624.503707][ T9785] IPv6: NLM_F_CREATE should be specified when creating new route [ 624.558910][ T9788] __nla_validate_parse: 3 callbacks suppressed [ 624.558923][ T9788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8291'. [ 624.569592][ T9788] : entered promiscuous mode [ 624.675412][ T9785] Invalid option length (1048180) for dns_resolver key [ 624.776769][ T5993] usb 14-1: USB disconnect, device number 15 [ 624.876897][ T9793] bond0: entered promiscuous mode [ 624.878712][ T9793] bond_slave_0: entered promiscuous mode [ 624.881138][ T9793] bond_slave_1: entered promiscuous mode [ 624.886053][ T9793] batadv0: entered promiscuous mode [ 624.889015][ T9793] debugfs: 'hsr1' already exists in 'hsr' [ 624.890961][ T9793] Cannot create hsr debugfs directory [ 624.894882][ T9793] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 624.898674][ T9793] bond0: left promiscuous mode [ 624.900284][ T9793] bond_slave_0: left promiscuous mode [ 624.902466][ T9793] bond_slave_1: left promiscuous mode [ 624.906837][ T9793] batadv0: left promiscuous mode [ 625.379325][ T40] audit: type=1800 audit(625.265:47701): pid=9802 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.8295" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 625.388562][ T9802] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8295'. [ 625.429052][ T9802] vxcan1 speed is unknown, defaulting to 1000 [ 625.671750][ T9814] random: crng reseeded on system resumption [ 625.688491][ T9814] loop2: detected capacity change from 0 to 7 [ 625.698580][ T1836] Dev loop2: unable to read RDB block 7 [ 625.698609][ T1836] loop2: AHDI p1 p2 p3 [ 625.698634][ T1836] loop2: partition table partially beyond EOD, truncated [ 625.698820][ T1836] loop2: p1 start 1601398130 is beyond EOD, truncated [ 625.698838][ T1836] loop2: p2 start 1702059890 is beyond EOD, truncated [ 625.713686][ T9814] Dev loop2: unable to read RDB block 7 [ 625.713739][ T9814] loop2: AHDI p1 p2 p3 [ 625.713795][ T9814] loop2: partition table partially beyond EOD, truncated [ 625.714001][ T9814] loop2: p1 start 1601398130 is beyond EOD, truncated [ 625.714055][ T9814] loop2: p2 start 1702059890 is beyond EOD, truncated [ 625.764971][ T9816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=9816 comm=syz.3.8297 [ 625.783432][ T9814] Restarting kernel threads ... [ 625.785020][ T9814] Done restarting kernel threads. [ 626.133531][ T63] Bluetooth: hci4: unexpected subevent 0x10 length: 248 > 2 [ 626.350399][ T9838] netlink: 'syz.7.8306': attribute type 9 has an invalid length. [ 626.353014][ T9838] netlink: 'syz.7.8306': attribute type 11 has an invalid length. [ 626.355958][ T9838] netlink: 212316 bytes leftover after parsing attributes in process `syz.7.8306'. [ 626.492418][ T9847] netlink: 'syz.7.8309': attribute type 1 has an invalid length. [ 626.497158][ T9847] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8309'. [ 626.500094][ T9848] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8309'. [ 626.621760][ T9851] nfs4: Bad value for 'source' [ 626.693522][ T9856] veth1_macvtap: left promiscuous mode [ 626.695251][ T9856] macsec0: entered promiscuous mode [ 626.696982][ T9856] macsec0: entered allmulticast mode [ 626.702152][ T9856] veth1_macvtap: entered promiscuous mode [ 626.704260][ T9856] veth1_macvtap: entered allmulticast mode [ 626.708284][ T9856] macsec0: left promiscuous mode [ 626.710079][ T9856] macsec0: left allmulticast mode [ 626.711761][ T9856] veth1_macvtap: left allmulticast mode [ 626.814747][ T9871] xt_CT: No such helper "pptp" [ 626.816991][ T9869] loop6: detected capacity change from 0 to 2640 [ 626.819857][ T1836] buffer_io_error: 11 callbacks suppressed [ 626.819867][ T1836] Buffer I/O error on dev loop6, logical block 0, async page read [ 626.824476][ T1836] Buffer I/O error on dev loop6, logical block 0, async page read [ 626.827048][ T1836] Buffer I/O error on dev loop6, logical block 0, async page read [ 626.829584][ T1836] Buffer I/O error on dev loop6, logical block 0, async page read [ 626.832314][ T1836] Buffer I/O error on dev loop6, logical block 0, async page read [ 626.835238][ T1836] Buffer I/O error on dev loop6, logical block 0, async page read [ 626.837814][ T1836] Buffer I/O error on dev loop6, logical block 0, async page read [ 626.840356][ T1836] Buffer I/O error on dev loop6, logical block 0, async page read [ 626.842817][ T1836] ldm_validate_partition_table(): Disk read failed. [ 626.845204][ T1836] Buffer I/O error on dev loop6, logical block 0, async page read [ 626.847689][ T1836] Buffer I/O error on dev loop6, logical block 0, async page read [ 626.850869][ T1836] Dev loop6: unable to read RDB block 0 [ 626.852807][ T1836] loop6: unable to read partition table [ 626.854748][ T9878] netem: change failed [ 626.857518][ T9869] ldm_validate_partition_table(): Disk read failed. [ 626.859672][ T9869] Dev loop6: unable to read RDB block 0 [ 626.870773][ T9869] loop6: unable to read partition table [ 626.872955][ T9869] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 626.874476][ T40] audit: type=1400 audit(626.745:47702): avc: denied { map } for pid=9868 comm="syz.4.8315" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 626.953638][ T40] audit: type=1800 audit(626.845:47703): pid=9883 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.8318" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 626.954372][ T9883] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8318'. [ 627.262956][ T5993] usb 14-1: new low-speed USB device number 16 using dummy_hcd [ 627.271216][ T9896] syzkaller0: entered promiscuous mode [ 627.273489][ T9896] syzkaller0: entered allmulticast mode [ 627.289156][ T9896] tipc: Enabled bearer , priority 0 [ 627.292231][ T9895] tipc: Resetting bearer [ 627.308510][ T9895] tipc: Disabling bearer [ 627.350222][ T40] audit: type=1400 audit(627.235:47704): avc: denied { map } for pid=9897 comm="syz.3.8324" path="/dev/tty26" dev="devtmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 627.414394][ T5993] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 627.416933][ T5993] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 627.421838][ T5993] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 627.426704][ T5993] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 627.430739][ T5993] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 627.437000][ T5993] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 627.439318][ T5993] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 627.442928][ T5993] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 627.446711][ T5993] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 627.450778][ T5993] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 627.455753][ T5993] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 627.458628][ T5993] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 627.462393][ T5993] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 627.466629][ T5993] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 627.470373][ T5993] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 627.486664][ T5993] usb 14-1: string descriptor 0 read error: -22 [ 627.488887][ T5993] usb 14-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 627.491943][ T5993] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.502681][ T5993] adutux 14-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 627.527206][ T9908] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=37 sclass=netlink_audit_socket pid=9908 comm=syz.3.8327 [ 627.692807][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8335'. [ 627.818752][ T9934] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.821251][ T9934] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.062151][ T9934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.074616][ T9934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.116330][ T9934] vlan0: left promiscuous mode [ 628.369495][ T9934] bond2: left promiscuous mode [ 628.414922][ T9934] geneve2: left promiscuous mode [ 628.433023][T24804] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.435964][T24804] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.438912][T24804] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.445354][T24804] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.448733][ T9941] vxcan1 speed is unknown, defaulting to 1000 [ 628.459306][ T9953] netlink: 'syz.3.8342': attribute type 39 has an invalid length. [ 628.922235][ T9970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8346'. [ 628.998924][ T9975] syzkaller0: entered promiscuous mode [ 629.000753][ T9975] syzkaller0: entered allmulticast mode [ 629.023310][ T9975] tipc: Enabled bearer , priority 0 [ 629.026623][ T9974] tipc: Resetting bearer [ 629.039492][ T9974] tipc: Disabling bearer [ 629.167575][ T9977] netlink: 64 bytes leftover after parsing attributes in process `syz.7.8349'. [ 629.219818][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.349923][ T40] audit: type=1400 audit(629.235:47705): avc: denied { search } for pid=9987 comm="syz.4.8352" name="/" dev="configfs" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 629.597600][ T9998] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.600406][ T9998] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.774506][ T5682] usb 14-1: USB disconnect, device number 16 [ 629.812429][T10009] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8359'. [ 629.884250][ T9998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.892076][ T9998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.205160][T10003] syzkaller0: entered promiscuous mode [ 630.206951][T10003] syzkaller0: entered allmulticast mode [ 630.211757][T10011] tipc: Enabled bearer , priority 0 [ 630.216998][ T6425] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.223756][T10000] tipc: Resetting bearer [ 630.245643][T10000] tipc: Disabling bearer [ 630.262635][ T6425] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.266340][ T6425] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.269034][ T6425] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.281945][T10017] fuse: Unknown parameter 'roo0000000000000100000' [ 630.369439][T10027] syzkaller0: entered promiscuous mode [ 630.371197][T10027] syzkaller0: entered allmulticast mode [ 630.388260][T10027] tipc: Enabled bearer , priority 0 [ 630.392472][T10026] tipc: Resetting bearer [ 630.409473][T10026] tipc: Disabling bearer [ 630.633674][T10031] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 630.744812][T10038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.748514][T10038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.752778][T10038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.756601][T10038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.166490][T10050] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.264604][T10050] tipc: Resetting bearer [ 631.443944][T10050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.449547][T10050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 syzkaller syzkaller login: [ 631.814401][T10058] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8373'. [ 631.870301][T10050] ip6gre1: left promiscuous mode [ 631.873975][T10050] veth5: left promiscuous mode [ 631.876648][T10050] bond3: left promiscuous mode [ 631.878816][T10050] vxcan3: left promiscuous mode [ 631.883702][T10050] ip6erspan0: left promiscuous mode [ 631.936825][T24804] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.939999][T24804] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.944921][T24804] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.948805][T24804] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.952578][T24804] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.958255][T24804] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.966144][T10059] vlan3: entered promiscuous mode [ 631.969073][T24804] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.972767][T24804] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.319926][ T63] Bluetooth: hci0: unexpected subevent 0x10 length: 248 > 2 [ 632.366323][T10091] binder: 10090:10091 unknown command 0 [ 632.368164][T10091] binder: 10090:10091 ioctl c0306201 200000000080 returned -22 [ 632.383012][ T5993] usb 12-1: new low-speed USB device number 13 using dummy_hcd [ 632.544781][ T5993] usb 12-1: config 0 has an invalid interface number: 1 but max is 0 [ 632.547373][ T5993] usb 12-1: config 0 has no interface number 0 [ 632.549496][ T5993] usb 12-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 632.553845][ T5993] usb 12-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 632.557303][ T5993] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 632.560529][ T5993] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.566515][ T5993] usb 12-1: config 0 descriptor?? [ 632.568803][T10082] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 632.574563][ T5993] iowarrior 12-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 632.642066][T10118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8391'. [ 632.685881][ T40] audit: type=1400 audit(632.575:47706): avc: denied { watch_reads } for pid=10123 comm="syz.4.8393" path="/142" dev="tmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 632.774277][ C2] iowarrior 12-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 632.777260][ T5980] usb 12-1: USB disconnect, device number 13 [ 633.009166][T10140] netlink: 'syz.9.8398': attribute type 11 has an invalid length. [ 633.011695][T10140] netlink: 'syz.9.8398': attribute type 11 has an invalid length. [ 633.014281][T10140] netlink: 224 bytes leftover after parsing attributes in process `syz.9.8398'. [ 633.079670][T10149] syzkaller0: entered promiscuous mode [ 633.081533][T10149] syzkaller0: entered allmulticast mode [ 633.099294][T10149] tipc: Enabled bearer , priority 0 [ 633.102552][T10148] tipc: Resetting bearer [ 633.117741][T10148] tipc: Disabling bearer [ 633.318908][ T40] audit: type=1400 audit(633.205:47707): avc: denied { validate_trans } for pid=10170 comm="syz.3.8409" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 633.332987][ T40] audit: type=1400 audit(633.215:47708): avc: denied { map } for pid=10170 comm="syz.3.8409" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 633.341871][ T40] audit: type=1400 audit(633.215:47709): avc: denied { execute } for pid=10170 comm="syz.3.8409" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 633.448037][T10181] xt_cluster: node mask cannot exceed total number of nodes [ 633.629867][T10189] overlay: ./bus is not a directory [ 633.794890][ T63] Bluetooth: hci4: unexpected subevent 0x10 length: 248 > 2 [ 634.259360][T10213] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.8423'. [ 634.298209][T10220] netlink: zone id is out of range [ 634.299998][T10220] netlink: zone id is out of range [ 634.302040][T10220] netlink: set zone limit has 8 unknown bytes [ 634.382623][T10228] netlink: 64 bytes leftover after parsing attributes in process `syz.9.8429'. [ 634.463568][T10233] sctp: [Deprecated]: syz.9.8430 (pid 10233) Use of struct sctp_assoc_value in delayed_ack socket option. [ 634.463568][T10233] Use struct sctp_sack_info instead [ 634.470628][T10233] ata1.00: invalid multi_count 128 ignored [ 634.670367][ T40] audit: type=1400 audit(634.555:47710): avc: denied { read append } for pid=10239 comm="syz.4.8433" name="devices.list" dev="9p" ino=72614167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 634.679504][T10240] netfs: Couldn't get user pages (rc=-14) [ 634.679715][ T40] audit: type=1400 audit(634.565:47711): avc: denied { map } for pid=10239 comm="syz.4.8433" path="/154/file0/devices.list" dev="9p" ino=72614167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 634.684413][T10240] netfs: Zero-sized read [R=30] [ 634.702178][T10238] netlink: 184 bytes leftover after parsing attributes in process `syz.3.8432'. [ 634.868371][T10250] syzkaller0: entered promiscuous mode [ 634.870201][T10250] syzkaller0: entered allmulticast mode [ 634.890876][T10250] tipc: Enabled bearer , priority 0 [ 634.900827][T10248] tipc: Resetting bearer [ 634.919024][T10248] tipc: Disabling bearer [ 635.026985][T10257] ip6tnl2: entered promiscuous mode [ 635.175541][ T63] Bluetooth: hci4: unexpected subevent 0x10 length: 248 > 2 [ 635.200545][T10269] openvswitch: netlink: IP tunnel TTL not specified. [ 635.277525][ T40] audit: type=1400 audit(635.165:47712): avc: denied { ioctl } for pid=10276 comm="syz.9.8445" path="socket:[190161]" dev="sockfs" ino=190161 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 635.411760][T10290] syzkaller0: entered promiscuous mode [ 635.414062][T10290] syzkaller0: entered allmulticast mode [ 635.441836][T10290] tipc: Enabled bearer , priority 0 [ 635.448418][T10289] tipc: Resetting bearer [ 635.462629][T10289] tipc: Disabling bearer [ 635.654025][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8454'. [ 635.657958][T10306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8454'. [ 635.672419][T24804] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.674120][T10309] netlink: 100 bytes leftover after parsing attributes in process `syz.9.8455'. [ 635.676595][T24804] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.683248][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8454'. [ 635.686267][T24804] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.686991][T10306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8454'. [ 635.690497][T24804] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.772424][T10315] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8458'. [ 635.823251][T10320] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8460'. [ 635.826792][T10320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8460'. [ 636.036331][T10333] netlink: 'syz.9.8464': attribute type 1 has an invalid length. [ 636.053730][T10333] 8021q: adding VLAN 0 to HW filter on device bond6 [ 636.084419][T10333] bond6: (slave gretap1): making interface the new active one [ 636.090837][T10339] No source specified [ 636.093952][T10333] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 636.101381][T10333] block nbd0: Unsupported socket: should be TCP or UNIX. [ 636.143023][T10343] netlink: 'syz.4.8468': attribute type 3 has an invalid length. [ 636.208675][T10351] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8472'. [ 636.270437][T10360] FAULT_INJECTION: forcing a failure. [ 636.270437][T10360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.275047][T10360] CPU: 2 UID: 0 PID: 10360 Comm: syz.3.8476 Tainted: G L syzkaller #0 PREEMPT(full) [ 636.275066][T10360] Tainted: [L]=SOFTLOCKUP [ 636.275070][T10360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 636.275076][T10360] Call Trace: [ 636.275081][T10360] [ 636.275086][T10360] dump_stack_lvl+0x100/0x190 [ 636.275123][T10360] should_fail_ex.cold+0x5/0xa [ 636.275136][T10360] _copy_to_user+0x32/0xd0 [ 636.275160][T10360] simple_read_from_buffer+0xcb/0x170 [ 636.275174][T10360] proc_fail_nth_read+0x1af/0x230 [ 636.275189][T10360] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 636.275211][T10360] ? rw_verify_area+0xce/0x6d0 [ 636.275227][T10360] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 636.275241][T10360] vfs_read+0x1e4/0xb30 [ 636.275254][T10360] ? __pfx_vfs_read+0x10/0x10 [ 636.275264][T10360] ? find_held_lock+0x2b/0x80 [ 636.275285][T10360] ? __fget_files+0x215/0x3d0 [ 636.275305][T10360] ? __fget_files+0x21f/0x3d0 [ 636.275328][T10360] ksys_read+0x12a/0x250 [ 636.275342][T10360] ? __pfx_ksys_read+0x10/0x10 [ 636.275354][T10360] ? fput+0x79/0x100 [ 636.275375][T10360] do_syscall_64+0xc9/0xf80 [ 636.275407][T10360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.275423][T10360] RIP: 0033:0x7f4b7ff5b84e [ 636.275440][T10360] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 636.275457][T10360] RSP: 002b:00007f4b80d74fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 636.275474][T10360] RAX: ffffffffffffffda RBX: 00007f4b80d756c0 RCX: 00007f4b7ff5b84e [ 636.275484][T10360] RDX: 000000000000000f RSI: 00007f4b80d750a0 RDI: 0000000000000005 [ 636.275495][T10360] RBP: 00007f4b80d75090 R08: 0000000000000000 R09: 0000000000000000 [ 636.275506][T10360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.275515][T10360] R13: 00007f4b80216038 R14: 00007f4b80215fa0 R15: 00007ffe49556d28 [ 636.275537][T10360] [ 636.287207][ T63] Bluetooth: hci4: unexpected subevent 0x10 length: 248 > 2 [ 636.531149][T10381] syzkaller0: entered promiscuous mode [ 636.531991][T10380] random: crng reseeded on system resumption [ 636.534779][T10381] syzkaller0: entered allmulticast mode [ 636.573393][T10383] bond0: (slave dummy0): Releasing backup interface [ 636.614339][T10383] batadv0: left promiscuous mode [ 636.616535][T10383] bridge0: port 3(batadv0) entered disabled state [ 636.629786][T10383] bridge_slave_0: left allmulticast mode [ 636.632079][T10383] bridge_slave_0: left promiscuous mode [ 636.634794][T10383] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.640348][T10383] bridge_slave_1: left allmulticast mode [ 636.642597][T10383] bridge_slave_1: left promiscuous mode [ 636.645154][T10383] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.650529][T10385] Restarting kernel threads ... [ 636.653461][T10383] bond0: (slave bond_slave_0): Releasing backup interface [ 636.655424][T10385] Done restarting kernel threads. [ 636.694983][T10383] bond0: (slave bond_slave_1): Releasing backup interface [ 636.737067][T10383] team0: Port device team_slave_0 removed [ 636.741486][T10383] team0: Port device team_slave_1 removed [ 636.744514][T10383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.748819][T10383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.753166][T10383] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 636.763049][T10381] tipc: Enabled bearer , priority 0 [ 636.767793][T10379] tipc: Resetting bearer [ 636.789047][T10379] tipc: Disabling bearer [ 637.064884][T10398] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 637.552402][T10434] SELinux: policydb string length 8192 does not match expected length 8 [ 637.555340][T10434] SELinux: failed to load policy [ 637.560253][T10434] batadv_slave_1: entered promiscuous mode [ 637.564490][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8500'. [ 637.588741][T10434] team0 (unregistering): Port device team_slave_0 removed [ 637.593580][T10434] team0 (unregistering): Port device team_slave_1 removed [ 637.723439][ T5973] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 637.733232][T10433] batadv_slave_1: left promiscuous mode [ 637.874550][ T5973] usb 9-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x36, changing to 0x6 [ 637.878297][ T5973] usb 9-1: config 0 interface 0 has no altsetting 0 [ 637.882196][ T5973] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 637.885693][ T5973] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 637.888363][ T5973] usb 9-1: Product: syz [ 637.889762][ T5973] usb 9-1: Manufacturer: syz [ 637.891302][ T5973] usb 9-1: SerialNumber: syz [ 637.895478][ T5973] usb 9-1: config 0 descriptor?? [ 637.900822][ T5973] usb 9-1: selecting invalid altsetting 0 [ 638.105375][ T53] usb 9-1: USB disconnect, device number 32 [ 638.147469][ T40] audit: type=1400 audit(638.035:47713): avc: denied { relabelfrom } for pid=10443 comm="syz.7.8503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 638.156548][ T40] audit: type=1400 audit(638.035:47714): avc: denied { relabelto } for pid=10443 comm="syz.7.8503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 638.366800][T10449] vxcan1 speed is unknown, defaulting to 1000 [ 638.407621][ T39] hid_parser_main: 4086 callbacks suppressed [ 638.407642][ T39] hid-generic 0103:0004:0000.000E: unknown main item tag 0x0 [ 638.413582][ T39] hid-generic 0103:0004:0000.000E: unknown main item tag 0x0 [ 638.416115][ T39] hid-generic 0103:0004:0000.000E: unknown main item tag 0x0 [ 638.418539][ T39] hid-generic 0103:0004:0000.000E: unknown main item tag 0x0 [ 638.420896][ T39] hid-generic 0103:0004:0000.000E: unknown main item tag 0x0 [ 638.423383][ T39] hid-generic 0103:0004:0000.000E: unknown main item tag 0x0 [ 638.425741][ T39] hid-generic 0103:0004:0000.000E: unknown main item tag 0x0 [ 638.428451][ T39] hid-generic 0103:0004:0000.000E: unknown main item tag 0x0 [ 638.430826][ T39] hid-generic 0103:0004:0000.000E: unknown main item tag 0x0 [ 638.433356][ T39] hid-generic 0103:0004:0000.000E: unknown main item tag 0x0 [ 638.439188][ T39] hid-generic 0103:0004:0000.000E: hidraw1: HID v0.09 Device [syz0] on syz1 [ 638.505410][T10451] fido_id[10451]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 638.868314][T10487] syzkaller0: entered promiscuous mode [ 638.870267][T10487] syzkaller0: entered allmulticast mode [ 638.899139][T10487] tipc: Enabled bearer , priority 0 [ 638.906662][T10486] tipc: Resetting bearer [ 638.921548][T10486] tipc: Disabling bearer [ 638.931320][T10489] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 639.293925][T10504] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 639.324687][T10511] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 639.338570][T10511] cramfs: wrong magic [ 639.423704][T10511] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 639.514892][ T40] audit: type=1400 audit(639.405:47715): avc: denied { getopt } for pid=10520 comm="syz.3.8523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 639.543312][ T53] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 639.659083][T10532] syzkaller0: entered promiscuous mode [ 639.660898][T10532] syzkaller0: entered allmulticast mode [ 639.694267][ T53] usb 12-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x36, changing to 0x6 [ 639.698464][ T53] usb 12-1: config 0 interface 0 has no altsetting 0 [ 639.702370][ T53] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 639.705441][ T53] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 639.708167][ T53] usb 12-1: Product: syz [ 639.709691][ T53] usb 12-1: Manufacturer: syz [ 639.711245][ T53] usb 12-1: SerialNumber: syz [ 639.720062][ T53] usb 12-1: config 0 descriptor?? [ 639.727083][ T53] usb 12-1: selecting invalid altsetting 0 [ 639.799503][ T40] audit: type=1400 audit(639.685:47716): avc: denied { write } for pid=10539 comm="syz.4.8529" name="/" dev="9p" ino=72614161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 639.930225][ T5993] usb 12-1: USB disconnect, device number 14 [ 639.990526][T10553] loop2: detected capacity change from 0 to 7 [ 639.997543][ T1836] loop2: [ 639.998615][ T1836] loop2: partition table partially beyond EOD, truncated [ 640.003537][T10553] loop2: [ 640.004754][T10553] loop2: partition table partially beyond EOD, truncated [ 640.158079][T10569] netlink: 'syz.3.8539': attribute type 1 has an invalid length. [ 640.171265][T10569] bond4: entered promiscuous mode [ 640.173410][T10569] 8021q: adding VLAN 0 to HW filter on device bond4 [ 640.228615][T10569] 8021q: adding VLAN 0 to HW filter on device bond4 [ 640.231895][T10569] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 640.239399][T10569] bond4: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 640.253525][T10569] bond4: (slave vxcan3): making interface the new active one [ 640.255813][T10569] vxcan3: entered promiscuous mode [ 640.261422][T10569] vxcan3: left promiscuous mode [ 640.501195][T10591] netlink: 'syz.4.8546': attribute type 3 has an invalid length. [ 640.656642][T10606] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10606 comm=syz.9.8551 [ 640.664323][T10606] mmap: syz.9.8551 (10606): VmData 37597184 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 640.690013][T10609] overlayfs: empty lowerdir [ 640.803069][ T5993] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 640.942998][ T5993] usb 9-1: device descriptor read/64, error -71 [ 641.103025][ T5973] usb 14-1: new high-speed USB device number 17 using dummy_hcd [ 641.192972][ T5993] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 641.255516][ T5973] usb 14-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x36, changing to 0x6 [ 641.260491][ T5973] usb 14-1: config 0 interface 0 has no altsetting 0 [ 641.265771][ T5973] usb 14-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 641.269876][ T5973] usb 14-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 641.272561][ T5973] usb 14-1: Product: syz [ 641.274242][ T5973] usb 14-1: Manufacturer: syz [ 641.275769][ T5973] usb 14-1: SerialNumber: syz [ 641.279568][ T5973] usb 14-1: config 0 descriptor?? [ 641.283880][ T5973] usb 14-1: selecting invalid altsetting 0 [ 641.333074][ T5993] usb 9-1: device descriptor read/64, error -71 [ 641.455454][ T5993] usb usb9-port1: attempt power cycle [ 641.486788][T10623] __nla_validate_parse: 12 callbacks suppressed [ 641.486800][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8557'. [ 641.494783][ T5973] usb 14-1: USB disconnect, device number 17 [ 641.813104][ T5993] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 641.843568][ T5993] usb 9-1: device descriptor read/8, error -71 [ 641.846174][T10648] FAULT_INJECTION: forcing a failure. [ 641.846174][T10648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.850329][T10648] CPU: 1 UID: 0 PID: 10648 Comm: syz.7.8566 Tainted: G L syzkaller #0 PREEMPT(full) [ 641.850348][T10648] Tainted: [L]=SOFTLOCKUP [ 641.850354][T10648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 641.850363][T10648] Call Trace: [ 641.850369][T10648] [ 641.850374][T10648] dump_stack_lvl+0x100/0x190 [ 641.850415][T10648] should_fail_ex.cold+0x5/0xa [ 641.850427][T10648] _copy_from_iter+0x1f4/0x1690 [ 641.850454][T10648] ? __alloc_skb+0x220/0x410 [ 641.850479][T10648] ? __alloc_skb+0x35d/0x410 [ 641.850493][T10648] ? __pfx__copy_from_iter+0x10/0x10 [ 641.850510][T10648] ? netlink_autobind.isra.0+0x110/0x370 [ 641.850526][T10648] netlink_sendmsg+0x808/0xda0 [ 641.850540][T10648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.850550][T10648] ? PageHuge+0x180/0x180 [ 641.850565][T10648] ____sys_sendmsg+0xa54/0xc30 [ 641.850579][T10648] ? __pfx_____sys_sendmsg+0x10/0x10 [ 641.850598][T10648] ___sys_sendmsg+0x190/0x1e0 [ 641.850612][T10648] ? __pfx____sys_sendmsg+0x10/0x10 [ 641.850631][T10648] ? find_held_lock+0x2b/0x80 [ 641.850654][T10648] __sys_sendmsg+0x170/0x220 [ 641.850671][T10648] ? __pfx___sys_sendmsg+0x10/0x10 [ 641.850696][T10648] do_syscall_64+0xc9/0xf80 [ 641.850711][T10648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.850722][T10648] RIP: 0033:0x7f649e59af79 [ 641.850732][T10648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.850742][T10648] RSP: 002b:00007f649f42e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 641.850753][T10648] RAX: ffffffffffffffda RBX: 00007f649e816090 RCX: 00007f649e59af79 [ 641.850760][T10648] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000006 [ 641.850766][T10648] RBP: 00007f649f42e090 R08: 0000000000000000 R09: 0000000000000000 [ 641.850772][T10648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.850778][T10648] R13: 00007f649e816128 R14: 00007f649e816090 R15: 00007ffc1d5f2688 [ 641.850792][T10648] [ 642.083006][ T5993] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 642.113840][ T5993] usb 9-1: device descriptor read/8, error -71 [ 642.223304][ T5993] usb usb9-port1: unable to enumerate USB device [ 642.590319][T10662] input: syz0 as /devices/virtual/input/input66 [ 643.173032][ T1027] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 643.193022][T10684] tipc: Enabling of bearer rejected, already enabled [ 643.199835][ T40] audit: type=1400 audit(643.085:47717): avc: denied { map } for pid=10683 comm="syz.9.8579" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 643.212957][ T40] audit: type=1400 audit(643.085:47718): avc: denied { map } for pid=10683 comm="syz.9.8579" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 643.324821][ T1027] usb 12-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x36, changing to 0x6 [ 643.327609][T10689] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 643.329390][ T1027] usb 12-1: config 0 interface 0 has no altsetting 0 [ 643.333337][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8581'. [ 643.337046][ T1027] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 643.341867][ T1027] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 643.346231][ T1027] usb 12-1: Product: syz [ 643.347602][ T1027] usb 12-1: Manufacturer: syz [ 643.349151][ T1027] usb 12-1: SerialNumber: syz [ 643.353609][ T1027] usb 12-1: config 0 descriptor?? [ 643.361496][ T1027] usb 12-1: selecting invalid altsetting 0 [ 643.562826][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8576'. [ 643.569101][ T1027] usb 12-1: USB disconnect, device number 15 [ 643.980499][T10729] syzkaller0: entered promiscuous mode [ 643.982695][T10729] syzkaller0: entered allmulticast mode [ 644.005870][T10729] tipc: Enabled bearer , priority 0 [ 644.010068][T10728] tipc: Resetting bearer [ 644.028099][T10728] tipc: Disabling bearer [ 644.100533][T10735] SELinux: Context /sbin/dhclient is not valid (left unmapped). [ 644.103004][ T40] audit: type=1400 audit(643.985:47719): avc: denied { relabelfrom } for pid=10734 comm="syz.3.8595" name="L2TP/IP" dev="sockfs" ino=194027 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 644.104383][ T5249] hid (null): global environment stack underflow [ 644.111870][ T40] audit: type=1400 audit(643.995:47720): avc: denied { relabelto } for pid=10734 comm="syz.3.8595" name="L2TP/IP" dev="sockfs" ino=194027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=rawip_socket permissive=1 trawcon="/sbin/dhclient" [ 644.114055][ T5249] hid (null): report_id 0 is invalid [ 644.125894][ T5249] hid (null): unknown global tag 0xc [ 644.134201][ T5249] hid_parser_main: 14 callbacks suppressed [ 644.134221][ T5249] hid-generic 0001:00D8:0008.000F: unknown main item tag 0x3 [ 644.138958][ T5249] hid-generic 0001:00D8:0008.000F: unknown main item tag 0x5 [ 644.141432][ T5249] hid-generic 0001:00D8:0008.000F: global environment stack underflow [ 644.144292][ T5249] hid-generic 0001:00D8:0008.000F: item 0 2 1 11 parsing failed [ 644.147178][ T5249] hid-generic 0001:00D8:0008.000F: probe with driver hid-generic failed with error -22 [ 644.305918][T10748] netlink: 'syz.7.8599': attribute type 17 has an invalid length. [ 644.309026][T10748] netlink: 5 bytes leftover after parsing attributes in process `syz.7.8599'. [ 644.312511][T10748] macvtap0: entered allmulticast mode [ 644.317409][T10748] veth0_macvtap: entered allmulticast mode [ 644.323998][T10748] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 644.400012][T10755] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8601'. [ 644.530844][T10763] netlink: 'syz.3.8605': attribute type 2 has an invalid length. [ 644.534203][T10763] netlink: 46 bytes leftover after parsing attributes in process `syz.3.8605'. [ 644.653088][ T63] Bluetooth: hci2: command 0x0401 tx timeout [ 644.653073][ T4971] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 644.658100][ T4971] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 644.793329][ T39] usb 14-1: new high-speed USB device number 18 using dummy_hcd [ 644.948741][ T39] usb 14-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x36, changing to 0x6 [ 644.954852][ T39] usb 14-1: config 0 interface 0 has no altsetting 0 [ 644.963914][ T39] usb 14-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 644.970650][ T39] usb 14-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 644.974987][ T39] usb 14-1: Product: syz [ 644.977456][ T39] usb 14-1: Manufacturer: syz [ 644.979956][ T39] usb 14-1: SerialNumber: syz [ 644.986659][ T39] usb 14-1: config 0 descriptor?? [ 644.991827][ T39] usb 14-1: selecting invalid altsetting 0 [ 645.209423][ T5993] usb 14-1: USB disconnect, device number 18 [ 645.409930][T10805] FAULT_INJECTION: forcing a failure. [ 645.409930][T10805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.415154][T10805] CPU: 0 UID: 0 PID: 10805 Comm: syz.3.8619 Tainted: G L syzkaller #0 PREEMPT(full) [ 645.415173][T10805] Tainted: [L]=SOFTLOCKUP [ 645.415177][T10805] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 645.415184][T10805] Call Trace: [ 645.415188][T10805] [ 645.415194][T10805] dump_stack_lvl+0x100/0x190 [ 645.415229][T10805] should_fail_ex.cold+0x5/0xa [ 645.415242][T10805] _copy_from_user+0x2e/0xd0 [ 645.415290][T10805] keyctl_dh_compute+0xb0/0x140 [ 645.415307][T10805] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 645.415326][T10805] ? ksys_write+0x1ac/0x250 [ 645.415338][T10805] ? __pfx_ksys_write+0x10/0x10 [ 645.415351][T10805] __do_sys_keyctl+0x464/0x5a0 [ 645.415365][T10805] do_syscall_64+0xc9/0xf80 [ 645.415394][T10805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.415405][T10805] RIP: 0033:0x7f4b7ff9af79 [ 645.415415][T10805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.415425][T10805] RSP: 002b:00007f4b80d75028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 645.415436][T10805] RAX: ffffffffffffffda RBX: 00007f4b80215fa0 RCX: 00007f4b7ff9af79 [ 645.415443][T10805] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000017 [ 645.415450][T10805] RBP: 00007f4b80d75090 R08: 0000200000000180 R09: 0000000000000000 [ 645.415456][T10805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.415462][T10805] R13: 00007f4b80216038 R14: 00007f4b80215fa0 R15: 00007ffe49556d28 [ 645.415475][T10805] [ 645.452584][T10808] vxcan1 speed is unknown, defaulting to 1000 [ 645.533368][ T40] audit: type=1326 audit(645.415:47721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10812 comm="syz.3.8622" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b7ff9af79 code=0x0 [ 645.861207][T10827] netlink: 27 bytes leftover after parsing attributes in process `syz.9.8625'. [ 646.001264][T10832] syzkaller0: entered promiscuous mode [ 646.003345][T10832] syzkaller0: entered allmulticast mode [ 646.031108][T10832] tipc: Enabled bearer , priority 0 [ 646.045095][T10831] tipc: Resetting bearer [ 646.063448][T10831] tipc: Disabling bearer [ 646.603178][ T5993] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 646.675784][ T40] audit: type=1400 audit(646.565:47722): avc: denied { unmount } for pid=7615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 646.706751][T10866] syzkaller0: entered promiscuous mode [ 646.708761][T10866] syzkaller0: entered allmulticast mode [ 646.734890][T10866] tipc: Enabled bearer , priority 0 [ 646.738666][T10865] tipc: Resetting bearer [ 646.754622][T10865] tipc: Disabling bearer [ 646.785534][ T5993] usb 9-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x36, changing to 0x6 [ 646.790239][ T5993] usb 9-1: config 0 interface 0 has no altsetting 0 [ 646.796042][ T5993] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 646.799910][ T5993] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 646.803487][ T5993] usb 9-1: Product: syz [ 646.805376][ T5993] usb 9-1: Manufacturer: syz [ 646.807370][ T5993] usb 9-1: SerialNumber: syz [ 646.812203][ T5993] usb 9-1: config 0 descriptor?? [ 646.826545][ T5993] usb 9-1: selecting invalid altsetting 0 [ 646.893112][ T4971] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 646.895227][ T4971] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 646.903033][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 647.013313][ T5973] usb 14-1: new low-speed USB device number 19 using dummy_hcd [ 647.021878][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8633'. [ 647.032046][ T5993] usb 9-1: USB disconnect, device number 37 [ 647.185300][ T5973] usb 14-1: config index 0 descriptor too short (expected 1307, got 27) [ 647.187983][ T5973] usb 14-1: config 0 has an invalid interface number: 0 but max is -1 [ 647.190814][ T5973] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 647.202782][ T5973] usb 14-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 647.207718][ T5973] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 647.211032][ T5973] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 647.225508][ T5973] usb 14-1: string descriptor 0 read error: -22 [ 647.227661][ T5973] usb 14-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 647.230530][ T5973] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.236154][T10876] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8642'. [ 647.236654][ T5973] usb 14-1: config 0 descriptor?? [ 647.242536][T10868] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 647.246200][ T5973] hub 14-1:0.0: bad descriptor, ignoring hub [ 647.248112][ T5973] hub 14-1:0.0: probe with driver hub failed with error -5 [ 647.252453][ T5973] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/input/input71 [ 647.563322][ T5973] usb 12-1: new low-speed USB device number 16 using dummy_hcd [ 647.670639][ T1746] usb 14-1: USB disconnect, device number 19 [ 647.693900][T10896] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 647.714921][ T5973] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 647.719597][ T5973] usb 12-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 647.723322][T10906] bridge0: port 3(veth0_to_bridge) entered blocking state [ 647.725391][ T5973] usb 12-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 647.727071][T10906] bridge0: port 3(veth0_to_bridge) entered disabled state [ 647.732819][ T5973] usb 12-1: string descriptor 0 read error: -22 [ 647.733834][T10906] veth0_to_bridge: entered allmulticast mode [ 647.737159][ T5973] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 647.739696][T10906] veth0_to_bridge: entered promiscuous mode [ 647.741570][ T5973] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.746847][T10905] syzkaller0: entered promiscuous mode [ 647.748840][T10905] syzkaller0: entered allmulticast mode [ 647.753008][T10887] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 647.778958][T10905] tipc: Enabled bearer , priority 0 [ 647.783917][T10904] tipc: Resetting bearer [ 647.805837][T10904] tipc: Disabling bearer [ 647.961848][ T40] audit: type=1400 audit(647.845:47723): avc: denied { getopt } for pid=10886 comm="syz.7.8644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 648.026284][ T5973] cdc_ncm 12-1:1.0: bind() failure [ 648.030111][ T5973] cdc_ncm 12-1:1.1: CDC Union missing and no IAD found [ 648.033631][ T5973] cdc_ncm 12-1:1.1: bind() failure [ 648.041890][ T5973] usb 12-1: USB disconnect, device number 16 [ 648.273886][T10921] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8654'. [ 648.576622][T10935] syzkaller0: entered promiscuous mode [ 648.579055][T10935] syzkaller0: entered allmulticast mode [ 648.603837][T10935] tipc: Enabled bearer , priority 0 [ 648.607618][T10934] tipc: Resetting bearer [ 648.625130][T10934] tipc: Disabling bearer [ 648.730346][ T40] audit: type=1400 audit(648.615:47724): avc: denied { watch } for pid=10940 comm="syz.7.8662" path="/484/file0" dev="tmpfs" ino=2585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 648.753024][ T40] audit: type=1400 audit(648.615:47725): avc: denied { watch_sb } for pid=10940 comm="syz.7.8662" path="/484/file0" dev="tmpfs" ino=2585 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 648.770665][T10944] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8663'. [ 648.805089][T10946] bridge0: Device is already in use. [ 648.823060][ T39] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 648.928497][T10950] kvm: user requested TSC rate below hardware speed [ 648.968881][T10961] syzkaller0: entered promiscuous mode [ 648.970666][T10961] syzkaller0: entered allmulticast mode [ 648.984389][ T39] usb 9-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x36, changing to 0x6 [ 648.992356][ T39] usb 9-1: config 0 interface 0 has no altsetting 0 [ 648.994502][T10961] tipc: Enabled bearer , priority 0 [ 648.999104][T10958] tipc: Resetting bearer [ 649.000754][ T39] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 649.008443][ T39] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 649.011318][ T39] usb 9-1: Product: syz [ 649.013486][ T39] usb 9-1: Manufacturer: syz [ 649.015601][ T39] usb 9-1: SerialNumber: syz [ 649.026235][ T39] usb 9-1: config 0 descriptor?? [ 649.030819][T10958] tipc: Disabling bearer [ 649.034908][ T39] usb 9-1: selecting invalid altsetting 0 [ 649.133290][ T4971] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 649.135317][ T4971] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 649.139408][ C3] ------------[ cut here ]------------ [ 649.142738][ C3] workqueue: cannot queue hci_cmd_timeout on wq hci4 [ 649.145760][ C3] WARNING: kernel/workqueue.c:2251 at __queue_work+0xcbb/0x10f0, CPU#3: syz.7.8671/10967 [ 649.149475][ C3] Modules linked in: [ 649.152228][ C3] CPU: 3 UID: 0 PID: 10967 Comm: syz.7.8671 Tainted: G L syzkaller #0 PREEMPT(full) [ 649.155707][ C3] Tainted: [L]=SOFTLOCKUP [ 649.157128][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 649.160744][ C3] RIP: 0010:__queue_work+0xcbf/0x10f0 [ 649.162457][ C3] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 15 04 00 00 48 8d 3d d5 8f ec 0e 48 8b 75 18 <67> 48 0f b9 3a e9 77 f7 ff ff e8 02 88 38 00 90 0f 0b 90 e9 ff f5 [ 649.168580][ C3] RSP: 0018:ffffc900006f8bf0 EFLAGS: 00010046 [ 649.170510][ C3] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11005668151 [ 649.173020][ C3] RDX: ffff888042b73978 RSI: ffffffff8a718090 RDI: ffffffff90bb0960 [ 649.173065][ T40] audit: type=1400 audit(649.055:47726): avc: denied { write } for pid=5837 comm="syz-executor" path="pipe:[7490]" dev="pipefs" ino=7490 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 649.175489][ C3] RBP: ffff88802b340a70 R08: 0000000000000005 R09: 0000000000000000 [ 649.175539][ C3] R10: 0000000000000100 R11: 0000000000000000 R12: ffff888042b73800 [ 649.187735][ C3] R13: 1ffff920000df18f R14: ffffffff81ce8a90 R15: 0000000000000001 [ 649.190175][ C3] FS: 00007f649f44f6c0(0000) GS:ffff8880d68bd000(0000) knlGS:0000000000000000 [ 649.192826][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 649.194909][ C3] CR2: 00007f649e64d1ee CR3: 000000002dd4c000 CR4: 0000000000352ef0 [ 649.197435][ C3] Call Trace: [ 649.198551][ C3] [ 649.199515][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 649.201183][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 649.203040][ C3] call_timer_fn+0x19a/0x590 [ 649.204535][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 649.206163][ C3] ? find_held_lock+0x2b/0x80 [ 649.207664][ C3] ? __run_timers+0x560/0xac0 [ 649.209171][ C3] ? __run_timers+0x560/0xac0 [ 649.210680][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 649.212537][ C3] __run_timers+0x570/0xac0 [ 649.213987][ C3] ? __pfx___run_timers+0x10/0x10 [ 649.215593][ C3] run_timer_base+0x114/0x190 [ 649.217111][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 649.218793][ C3] run_timer_softirq+0x1a/0x50 [ 649.220316][ C3] handle_softirqs+0x1ea/0x910 [ 649.221785][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 649.223467][ C3] __irq_exit_rcu+0xef/0x150 [ 649.225129][ C3] irq_exit_rcu+0x9/0x30 [ 649.226579][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 649.228875][ C3] [ 649.229888][ C3] [ 649.231211][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 649.233296][ C3] RIP: 0010:lockdep_unregister_key+0x12b/0x1d0 [ 649.235346][ C3] Code: e8 da dd ff ff 48 83 2d 5a 06 23 14 01 89 c3 e8 2b e0 ff ff 9c 58 f6 c4 02 0f 85 8a 00 00 00 f7 c5 00 02 00 00 74 01 fb 84 db <75> 40 5b 5d 41 5c e9 ea 7e 09 00 9c 58 f6 c4 02 0f 84 16 ff ff ff [ 649.241709][ C3] RSP: 0018:ffffc900049c70a8 EFLAGS: 00000246 [ 649.243716][ C3] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 649.246381][ C3] RDX: 0000000000000000 RSI: ffffffff8dd40a0e RDI: ffffffff8bfa9ca0 [ 649.249085][ C3] RBP: 0000000000000246 R08: 00000000000800fb R09: ffffffff96160cd6 [ 649.251622][ C3] R10: 0000000000000200 R11: 0000000000000000 R12: ffffffff976d0b48 [ 649.254189][ C3] R13: ffff88805ffd0000 R14: ffff88805ffd04c8 R15: 0000000000000002 [ 649.257105][ C3] __qdisc_destroy+0x11a/0x490 [ 649.258833][ C3] qdisc_put+0xb0/0xf0 [ 649.260312][ C3] dev_shutdown+0x1d2/0x440 [ 649.261833][ C3] unregister_netdevice_many_notify+0xd56/0x2580 [ 649.264022][ C3] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 649.266295][ C3] ? unregister_netdevice_queue+0x22e/0x3c0 [ 649.268244][ C3] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 649.270296][ C3] ? batadv_meshif_destroy_vlan+0xdf/0x160 [ 649.272224][ C3] rtnl_dellink+0x472/0xb40 [ 649.273881][ C3] ? __pfx_batadv_meshif_destroy_netlink+0x10/0x10 [ 649.276224][ C3] ? __kasan_slab_free+0x5f/0x80 [ 649.277946][ C3] ? kmem_cache_free+0x143/0x720 [ 649.279732][ C3] ? kfree_skbmem+0x19a/0x210 [ 649.281298][ C3] ? __pfx_rtnl_dellink+0x10/0x10 [ 649.282937][ C3] ? __dev_queue_xmit+0x6dd/0x46f0 [ 649.284677][ C3] ? netlink_deliver_tap+0xa4d/0xcc0 [ 649.286432][ C3] ? netlink_unicast+0x650/0x870 [ 649.288077][ C3] ? ___sys_sendmsg+0x190/0x1e0 [ 649.289742][ C3] ? __sys_sendmsg+0x170/0x220 [ 649.291315][ C3] ? __lock_acquire+0x4a5/0x2630 [ 649.292955][ C3] ? consume_skb+0xd6/0x110 [ 649.294446][ C3] ? find_held_lock+0x2b/0x80 [ 649.296014][ C3] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 649.297814][ C3] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 649.299538][ C3] ? __pfx_rtnl_dellink+0x10/0x10 [ 649.301213][ C3] rtnetlink_rcv_msg+0x95e/0xe90 [ 649.302812][ C3] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 649.304618][ C3] ? ref_tracker_free+0x37e/0x6c0 [ 649.306316][ C3] netlink_rcv_skb+0x159/0x420 [ 649.307884][ C3] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 649.309776][ C3] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 649.311488][ C3] ? netlink_deliver_tap+0x1ae/0xcc0 [ 649.313245][ C3] netlink_unicast+0x5aa/0x870 [ 649.314957][ C3] ? __pfx_netlink_unicast+0x10/0x10 [ 649.317136][ C3] netlink_sendmsg+0x8b0/0xda0 [ 649.318944][ C3] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.321021][ C3] ? PageHuge+0x180/0x180 [ 649.322433][ C3] ____sys_sendmsg+0xa54/0xc30 [ 649.324007][ C3] ? __pfx_____sys_sendmsg+0x10/0x10 [ 649.325711][ C3] ? __pfx___futex_wait+0x10/0x10 [ 649.327329][ C3] ? __pfx_futex_wake_mark+0x10/0x10 [ 649.329175][ C3] ___sys_sendmsg+0x190/0x1e0 [ 649.330764][ C3] ? __pfx____sys_sendmsg+0x10/0x10 [ 649.332467][ C3] ? find_held_lock+0x2b/0x80 [ 649.334040][ C3] __sys_sendmsg+0x170/0x220 [ 649.335528][ C3] ? __pfx___sys_sendmsg+0x10/0x10 [ 649.337174][ C3] ? __x64_sys_futex+0x34f/0x4d0 [ 649.339096][ C3] do_syscall_64+0xc9/0xf80 [ 649.340599][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.342493][ C3] RIP: 0033:0x7f649e59af79 [ 649.343888][ C3] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.350049][ C3] RSP: 002b:00007f649f44f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 649.352816][ C3] RAX: ffffffffffffffda RBX: 00007f649e815fa0 RCX: 00007f649e59af79 [ 649.355467][ C3] RDX: 0000000000048000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 649.358281][ C3] RBP: 00007f649e6316e0 R08: 0000000000000000 R09: 0000000000000000 [ 649.360901][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.363350][ C3] R13: 00007f649e816038 R14: 00007f649e815fa0 R15: 00007ffc1d5f2688 [ 649.365923][ C3] [ 649.366980][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 649.369490][ C3] CPU: 3 UID: 0 PID: 10967 Comm: syz.7.8671 Tainted: G L syzkaller #0 PREEMPT(full) [ 649.372963][ C3] Tainted: [L]=SOFTLOCKUP [ 649.374357][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 649.377955][ C3] Call Trace: [ 649.379059][ C3] [ 649.380029][ C3] dump_stack_lvl+0x100/0x190 [ 649.381614][ C3] vpanic+0x20d/0x630 [ 649.382924][ C3] panic+0xd1/0xd1 [ 649.384167][ C3] ? __pfx_panic+0x10/0x10 [ 649.385622][ C3] ? check_panic_on_warn+0x1f/0x90 [ 649.387314][ C3] check_panic_on_warn.cold+0x19/0x34 [ 649.389141][ C3] ? __queue_work+0xcbb/0x10f0 [ 649.390752][ C3] __warn.cold+0x191/0x2f8 [ 649.392290][ C3] __report_bug+0x296/0x3d0 [ 649.393794][ C3] ? __queue_work+0xcbb/0x10f0 [ 649.395339][ C3] ? __pfx___report_bug+0x10/0x10 [ 649.397031][ C3] ? is_bpf_text_address+0x94/0x1a0 [ 649.398759][ C3] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 649.400830][ C3] ? look_up_lock_class+0x55/0x120 [ 649.402997][ C3] report_bug_entry+0xe1/0x290 [ 649.405052][ C3] ? __queue_work+0xcbf/0x10f0 [ 649.406627][ C3] handle_bug+0x1c9/0x2a0 [ 649.408165][ C3] exc_invalid_op+0x17/0x50 [ 649.409631][ C3] asm_exc_invalid_op+0x1a/0x20 [ 649.411181][ C3] RIP: 0010:__queue_work+0xcbf/0x10f0 [ 649.412895][ C3] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 15 04 00 00 48 8d 3d d5 8f ec 0e 48 8b 75 18 <67> 48 0f b9 3a e9 77 f7 ff ff e8 02 88 38 00 90 0f 0b 90 e9 ff f5 [ 649.419361][ C3] RSP: 0018:ffffc900006f8bf0 EFLAGS: 00010046 [ 649.421762][ C3] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11005668151 [ 649.424871][ C3] RDX: ffff888042b73978 RSI: ffffffff8a718090 RDI: ffffffff90bb0960 [ 649.427455][ C3] RBP: ffff88802b340a70 R08: 0000000000000005 R09: 0000000000000000 [ 649.430623][ C3] R10: 0000000000000100 R11: 0000000000000000 R12: ffff888042b73800 [ 649.433513][ C3] R13: 1ffff920000df18f R14: ffffffff81ce8a90 R15: 0000000000000001 [ 649.436047][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 649.438020][ C3] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 649.439777][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 649.441590][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 649.443438][ C3] call_timer_fn+0x19a/0x590 [ 649.444945][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 649.446628][ C3] ? find_held_lock+0x2b/0x80 [ 649.448420][ C3] ? __run_timers+0x560/0xac0 [ 649.450360][ C3] ? __run_timers+0x560/0xac0 [ 649.451861][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 649.453734][ C3] __run_timers+0x570/0xac0 [ 649.455190][ C3] ? __pfx___run_timers+0x10/0x10 [ 649.456869][ C3] run_timer_base+0x114/0x190 [ 649.458410][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 649.460065][ C3] run_timer_softirq+0x1a/0x50 [ 649.461648][ C3] handle_softirqs+0x1ea/0x910 [ 649.463177][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 649.464866][ C3] __irq_exit_rcu+0xef/0x150 [ 649.466377][ C3] irq_exit_rcu+0x9/0x30 [ 649.467841][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 649.469685][ C3] [ 649.470703][ C3] [ 649.471690][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 649.473662][ C3] RIP: 0010:lockdep_unregister_key+0x12b/0x1d0 [ 649.475645][ C3] Code: e8 da dd ff ff 48 83 2d 5a 06 23 14 01 89 c3 e8 2b e0 ff ff 9c 58 f6 c4 02 0f 85 8a 00 00 00 f7 c5 00 02 00 00 74 01 fb 84 db <75> 40 5b 5d 41 5c e9 ea 7e 09 00 9c 58 f6 c4 02 0f 84 16 ff ff ff [ 649.482975][ C3] RSP: 0018:ffffc900049c70a8 EFLAGS: 00000246 [ 649.485557][ C3] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 649.488750][ C3] RDX: 0000000000000000 RSI: ffffffff8dd40a0e RDI: ffffffff8bfa9ca0 [ 649.491672][ C3] RBP: 0000000000000246 R08: 00000000000800fb R09: ffffffff96160cd6 [ 649.494638][ C3] R10: 0000000000000200 R11: 0000000000000000 R12: ffffffff976d0b48 [ 649.497865][ C3] R13: ffff88805ffd0000 R14: ffff88805ffd04c8 R15: 0000000000000002 [ 649.501003][ C3] __qdisc_destroy+0x11a/0x490 [ 649.502552][ C3] qdisc_put+0xb0/0xf0 [ 649.503862][ C3] dev_shutdown+0x1d2/0x440 [ 649.505339][ C3] unregister_netdevice_many_notify+0xd56/0x2580 [ 649.507340][ C3] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 649.510124][ C3] ? unregister_netdevice_queue+0x22e/0x3c0 [ 649.512383][ C3] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 649.514346][ C3] ? batadv_meshif_destroy_vlan+0xdf/0x160 [ 649.516221][ C3] rtnl_dellink+0x472/0xb40 [ 649.517721][ C3] ? __pfx_batadv_meshif_destroy_netlink+0x10/0x10 [ 649.519797][ C3] ? __kasan_slab_free+0x5f/0x80 [ 649.521442][ C3] ? kmem_cache_free+0x143/0x720 [ 649.523012][ C3] ? kfree_skbmem+0x19a/0x210 [ 649.524517][ C3] ? __pfx_rtnl_dellink+0x10/0x10 [ 649.526108][ C3] ? __dev_queue_xmit+0x6dd/0x46f0 [ 649.527795][ C3] ? netlink_deliver_tap+0xa4d/0xcc0 [ 649.530054][ C3] ? netlink_unicast+0x650/0x870 [ 649.532128][ C3] ? ___sys_sendmsg+0x190/0x1e0 [ 649.533920][ C3] ? __sys_sendmsg+0x170/0x220 [ 649.535480][ C3] ? __lock_acquire+0x4a5/0x2630 [ 649.537090][ C3] ? consume_skb+0xd6/0x110 [ 649.538600][ C3] ? find_held_lock+0x2b/0x80 [ 649.540087][ C3] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 649.541756][ C3] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 649.543399][ C3] ? __pfx_rtnl_dellink+0x10/0x10 [ 649.545013][ C3] rtnetlink_rcv_msg+0x95e/0xe90 [ 649.546588][ C3] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 649.548469][ C3] ? ref_tracker_free+0x37e/0x6c0 [ 649.550072][ C3] netlink_rcv_skb+0x159/0x420 [ 649.551869][ C3] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 649.553672][ C3] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 649.555398][ C3] ? netlink_deliver_tap+0x1ae/0xcc0 [ 649.557145][ C3] netlink_unicast+0x5aa/0x870 [ 649.558892][ C3] ? __pfx_netlink_unicast+0x10/0x10 [ 649.560668][ C3] netlink_sendmsg+0x8b0/0xda0 [ 649.562285][ C3] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.564011][ C3] ? PageHuge+0x180/0x180 [ 649.565444][ C3] ____sys_sendmsg+0xa54/0xc30 [ 649.566999][ C3] ? __pfx_____sys_sendmsg+0x10/0x10 [ 649.568814][ C3] ? __pfx___futex_wait+0x10/0x10 [ 649.570446][ C3] ? __pfx_futex_wake_mark+0x10/0x10 [ 649.572490][ C3] ___sys_sendmsg+0x190/0x1e0 [ 649.574012][ C3] ? __pfx____sys_sendmsg+0x10/0x10 [ 649.575695][ C3] ? find_held_lock+0x2b/0x80 [ 649.577294][ C3] __sys_sendmsg+0x170/0x220 [ 649.578884][ C3] ? __pfx___sys_sendmsg+0x10/0x10 [ 649.580624][ C3] ? __x64_sys_futex+0x34f/0x4d0 [ 649.582416][ C3] do_syscall_64+0xc9/0xf80 [ 649.583943][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.586406][ C3] RIP: 0033:0x7f649e59af79 [ 649.588201][ C3] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.594321][ C3] RSP: 002b:00007f649f44f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 649.596982][ C3] RAX: ffffffffffffffda RBX: 00007f649e815fa0 RCX: 00007f649e59af79 [ 649.599537][ C3] RDX: 0000000000048000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 649.601994][ C3] RBP: 00007f649e6316e0 R08: 0000000000000000 R09: 0000000000000000 [ 649.604478][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.606938][ C3] R13: 00007f649e816038 R14: 00007f649e815fa0 R15: 00007ffc1d5f2688 [ 649.609745][ C3] [ 649.611688][ C3] Kernel Offset: disabled [ 649.613338][ C3] Rebooting in 86400 seconds..