last executing test programs: 2m4.734698783s ago: executing program 3 (id=515): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) getpeername$unix(r0, &(0x7f0000000080), &(0x7f0000000100)=0x6e) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x1, @null, @netrom={'nr', 0x0}, 0x8, 'syz0\x00', @null, 0x0, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES8=r0], 0x53) 2m4.734366125s ago: executing program 3 (id=516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="ac000000000101040000000000000000020000072400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100ac1414aa08000200ac1414bb08000740000000000c000d8008000240000000003c0018"], 0xac}}, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="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", 0x15b}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5400ddff", @ANYRES16=r2, @ANYBLOB="000126bd7000fddbdf252600000008004a000aac0f002400f300050008000a007f0001000900000001000d004300050001800600010000000500040008011000b0000800000003000d0000000600"], 0x54}}, 0x40021) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa, 0x0, 0x700}}, 0x14}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r4]) 2m4.542455422s ago: executing program 3 (id=517): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf2512000000180001801400020076657468300000000000000008000000080009"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000002000080080002"], 0x1c}], 0x1}, 0x0) r2 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d00400000000002400128009000140626f6e6400000000141e028008001f00ffffff7f0800070008000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x7c81, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$packet(0x11, 0x3, 0x300) openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x8040, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012c23f5a077eb39f2b17fd7a18bb5b4db893192862398dd582ce2270eb53869dd0b586c003986cd1ec8b66b4f5e2490cee41cd0c476ea0c060000007dc56d999e9a5b61a3", @ANYRES32=0x0, @ANYBLOB="0c009900080000000a000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000001}, 0x4000) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) syz_init_net_socket$ax25(0x3, 0x5, 0x9f) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) prctl$PR_MCE_KILL(0x43, 0x0, 0x0) sendto$packet(r6, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) getcwd(&(0x7f0000000200)=""/197, 0xc5) fchown(r0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) close(r3) ioctl$sock_inet_SIOCSIFPFLAGS(r6, 0x8934, &(0x7f0000000040)={'geneve0\x00', 0x6}) ioctl(r9, 0x8b24, &(0x7f0000000040)) 2m3.591017961s ago: executing program 3 (id=523): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="a400000010000d042bbd7000fcdbdf25000000001a5a266336370f9f8c69efd0f71f8505eb503396ddef0c476edc259de7094670cc97c7faebdd3bd5c1bc059c4e76dc66ba36a852e9243965c2fa6d8f64aeb84a2afe930b3cbe47bd5b0412440198244491ea2bda475c93763cd5d457168b7a45bef63b9937103dc4272adedcff163986017377e01520fa28a8b6a37d26bdde261b536a972156b7b75e94518bd113ed035392ac512aca4f0a31bccf3bb782c595c68a3d5801deea7df0401c8b9aeb0b819969da9f47ae5d41", @ANYRES32=0x0, @ANYBLOB="1000000002020000840012800b0001006261746164760000740002800d0001004241544d414e5f49560000000c0001004241544d414e5f560d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f560d0001004241544d414e5f49560000000d0001004241544d414e5f4956000000"], 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m2.557465849s ago: executing program 3 (id=528): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x4d1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x4048080) (async) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c1}, 0x48040) fsopen(&(0x7f0000000000)='exfat\x00', 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f0000000040)={0x2, 0x0, 0x3, {0xffff, 0x0, 0xf90, 0x5}}) (async) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 2m2.117869868s ago: executing program 3 (id=530): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc854}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc854}, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) r6 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0x80000000) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) (async) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000700000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x44) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="f00000001c00130700000000fedbdf2500000000000000000000000000000000fe800000000000000000000000000024000000004e2100020200000033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000fe320000000000000000000000000000000000000000000000000000000100000000000000fdffffffffffffff080000000000000001000000ecb610846bef86a141c61104294d000000000900000000000000ffffff7f0000000043050000000000000400040000000000fcffffffffffff7ffcffffffffffffffe2eb0000000000000200000000000000000000002cbd700000350000020004005000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1m46.237868461s ago: executing program 32 (id=530): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc854}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc854}, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) r6 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0x80000000) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) (async) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000700000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x44) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="f00000001c00130700000000fedbdf2500000000000000000000000000000000fe800000000000000000000000000024000000004e2100020200000033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000fe320000000000000000000000000000000000000000000000000000000100000000000000fdffffffffffffff080000000000000001000000ecb610846bef86a141c61104294d000000000900000000000000ffffff7f0000000043050000000000000400040000000000fcffffffffffff7ffcffffffffffffffe2eb0000000000000200000000000000000000002cbd700000350000020004005000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1m26.130310971s ago: executing program 4 (id=800): r0 = socket$nl_route(0x10, 0x3, 0x0) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x1010044, &(0x7f0000000000)={[{@nofavordynmods}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000500), 0xffffffffffffffff) socket$inet(0x2, 0x80000, 0x10000) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x5, 0x4000, 0x4, {0x3, 0x0, 0x85, 0x0, 0x2, 0x0, 0x0, 0x1, 0x3fe, 0x6000, 0x0, 0x0, r5, 0x801, 0x10040000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000001240)={0x50, 0x0, r4, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0xc}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r6, 0xc028644b, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x30, r2, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 1m25.968810338s ago: executing program 4 (id=802): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) read$FUSE(r0, &(0x7f0000000e40)={0x2020}, 0x2020) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{r1, r2+60000000}, {0x0, 0x3938700}}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xa}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}]}}]}, 0xfffffffffffffdbf}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000100)={0x1, "ed"}, 0x2) 1m25.965542755s ago: executing program 4 (id=803): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x2, 0x70bd29, 0x25dfdbfd, {0x1c, 0x0, 0x0, r1, 0x80, 0x2c, 0x7}}, 0x1c}}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000840)={'gretap0\x00', 0x0, 0x8000, 0x0, 0x6, 0x9, {{0xd, 0x4, 0x3, 0x8, 0x34, 0x65, 0x0, 0xc, 0x4, 0x0, @broadcast, @remote, {[@ssrr={0x89, 0xf, 0x78, [@loopback, @rand_addr=0x64010100, @private=0xa010100]}, @rr={0x7, 0xf, 0x10, [@multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x26}]}]}}}}}) socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@ipv6_delroute={0x30, 0x19, 0x100, 0x70bd29, 0x25dfdbfb, {0xa, 0xa0, 0x80, 0x9, 0xfc, 0x4, 0xc8, 0x7, 0x3d00}, [@RTA_MARK={0x8, 0x10, 0x800}, @RTA_MULTIPATH={0xc, 0x9, {0xff80, 0x5, 0x4}}]}, 0x30}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000004000034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_netdev_private(r2, 0x89fe, &(0x7f00000007c0)="e0187f15bbd059f5d3c48b70bf25564d3f6749adcfe46b49f0f3bb2189813b8908d156f0596db1d0a1218e2ae271dfa432729507631d25df62b19ec7353e317206ae9ba23aa5912e297b152385ef71749e98b9") sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a0b040000000000000000020000e63f00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000001c08000340000000150900010073797a82000000000900020073797a3200000000140000001100010000000000000000000000000a40cb9bd56a391dc507283358571dc00217ce5f5f6967760bca0114df4e74662da53fb55d9d972075dcfda508161e1272d75a9535afe573b6956965b5d2451659e059c24024c41f77fa5113ad1da6771cbf130fd9abf6887a768dfae5d1eb59cbb9db5839f2a319e4"], 0x94}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x1, 0x0, 0x10, 0xc9, {{0x15, 0x4, 0x2, 0x1, 0x54, 0x68, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @private=0xa010102, {[@ssrr={0x89, 0x17, 0x8, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @loopback, @rand_addr=0x64010102]}, @lsrr={0x83, 0xf, 0xfc, [@loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x17, 0xa, [@empty, @rand_addr=0x64010101, @broadcast, @remote, @remote]}]}}}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc000000080005"], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r9, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r9, 0x4008af60, &(0x7f0000000080)={@my=0x0}) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) r10 = socket(0x2, 0x80805, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x4c, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x5, 0x77}, {@local, 0x4e20, 0x2, 0xcd, 0x0, 0x4}}, 0x44) syz_emit_ethernet(0x36, &(0x7f0000000200)={@multicast, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @rand_addr=0x64010101}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 1m25.869425562s ago: executing program 4 (id=805): r0 = io_uring_setup(0x497c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0xfffffffe, 0xd3}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x200}]}, 0x10) r4 = syz_io_uring_complete(r2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x80000000, 0x0, 0x0, 0x0) r5 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r5, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) read(0xffffffffffffffff, &(0x7f0000000980)=""/4096, 0x1000) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x5e) close_range(r0, 0xffffffffffffffff, 0x0) 1m25.710083759s ago: executing program 4 (id=808): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x2000080, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xd3a, 0x2c, 0x2, 0x76, 0x7, 0x6a, 0x4, 0x8, 0x80000000}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}}}, 0x24}}, 0x0) chdir(&(0x7f0000000000)='./file0\x00') ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000380)={0x60, r1, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 1m25.640882856s ago: executing program 0 (id=810): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x4, 0x0, 0x4a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2a}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48841}, 0x2000c010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301010000000000000000028129d9b400000a08000100"], 0x1c}, 0x1, 0x0, 0x0, 0x20080041}, 0x20008090) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20004004) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa02, 0x870, 0x1, 0x2, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x5, 0x2800, 0x6, 0x2, 0xba2, 0xc, 0x30, {0x8, 0x5}, 0xc1, 0x9}}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 1m25.540653157s ago: executing program 0 (id=811): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17000000000000000100000100010800000000000000000728000000030800ff0f66090000000000000700000000000000010000000000000001000000000000000864c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c9"], 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {&(0x7f0000000880)="3ed8269a24bf45844c983ea0eeeb58f212eeac22d35800c1a94b360b7b20a38c4009daad6421963cbcd5621f4aa4892eb9937191078bfbceee60ee759765c992659367fc8bd35cf5d87272d4c4bbccb6fe258a2bc4cf778776b91c3e1da4690fe0506ba67577475d", 0x68}, {&(0x7f0000000540)="b4e007f06d056aa0367c73", 0xb}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a24", 0x3b}, {0x0}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda268139275cca00007c8f8cff1d2a3a", 0x35}, {&(0x7f0000000ac0)}], 0x8, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000280)={0xff, r3, 0x10, {0xffff, 0x948a}, 0x4}, 0x1) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000900)={0xc8, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x7c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/video#\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x41}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ':&].\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20040844}, 0x8004) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m25.360807421s ago: executing program 0 (id=812): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x2, 0x0, 0xffffffff, 0xfffffff6}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="660a000000001d0061ff7f000000000000018ca0f278da8575c22bb16f2ff1bec3bd2d0000000000f8b9623f000000009504000000008df66f1787b8c862df47991b4384e0a0b61218b7bbd45ae49e467df464247038ae580ed2985cfe45d440b2eb9030b5cc3d8539bfd74f469bf5a725caefc679076dcaa2141f37a32ee67c138f242131bc3bdafc24b73abfe2b1e7eeaa8cfedeb15110761eddaeca5dc9d202ef1301117492da4f28b97ffa5177d8455a8139f1dc73f1d70007a38d35238d388bb62265105f91"], &(0x7f0000000000)='GPL\x00'}, 0x80) r1 = signalfd4(r0, &(0x7f0000000080)={[0x2]}, 0x8, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000000280)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000200)={'wg1\x00', @random="f32a9e040dfb"}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newnexthop={0x24, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15, 0x0, 0xa00}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x44, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r7, @ANYBLOB="6000508011000a004abee339084eeef16f162471f4000000080003000cac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="00000002", @ANYRES16=r2, @ANYBLOB="200029bd7000fedbdf256600000008000300", @ANYRES32=r11, @ANYBLOB="0c009900f40000007d0000000800b70066000000"], 0x30}, 0x1, 0x0, 0x0, 0x44015}, 0x4) 1m25.273504424s ago: executing program 0 (id=813): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_TSC_KHZ_cpu(r2, 0xaea3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, &(0x7f0000000100)}) r4 = syz_open_dev$amidi(&(0x7f0000000100), 0x100000000, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r4, 0x80045700, &(0x7f0000000280)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x400000, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000040)=0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x1a1041, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(0xffffffffffffffff, &(0x7f00000005c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r7, {0x5}}, './file1\x00'}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000002100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) chdir(&(0x7f0000000140)='./bus\x00') r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b40000000000000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m25.12020904s ago: executing program 0 (id=814): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$CDROMEJECT_SW(r0, 0x530f, 0x1) syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000180), 0x422000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x10000}, [@jmp={0x5, 0x0, 0xb, 0x8, 0xf, 0x100, 0xfffffffffffffff0}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback=0x21, r1, 0x8, &(0x7f0000000100)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xe, 0x95b9, 0x3}, 0x10, 0xffffffffffffffff, r2, 0x7, 0x0, &(0x7f00000002c0)=[{0x2, 0x2, 0x6, 0xa}, {0x0, 0x5, 0x9, 0x6}, {0x5, 0x2, 0x2, 0x9}, {0x1, 0x4, 0x8, 0x1}, {0x0, 0x3, 0xa, 0x9}, {0x1, 0x3, 0xe, 0x4}, {0x0, 0x4, 0x4, 0xb}], 0x10, 0x2}, 0x94) 1m24.870000373s ago: executing program 0 (id=815): r0 = socket(0xa, 0x1, 0x0) r1 = io_uring_setup(0x3075, &(0x7f0000001740)={0x0, 0x644a, 0x10, 0x3, 0x2b4}) io_uring_setup(0x17b2, &(0x7f0000004040)={0x0, 0x2a43, 0x21, 0x2, 0x284, 0x0, r1}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x15, 0x0, 'lblcr\x00'}, 0x2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x24, 0x40, 0x107, 0x70bd2b, 0x2000000, {0x1, 0x7c}, [@nested={0x4, 0x106}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @fd}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1m24.803062808s ago: executing program 33 (id=815): r0 = socket(0xa, 0x1, 0x0) r1 = io_uring_setup(0x3075, &(0x7f0000001740)={0x0, 0x644a, 0x10, 0x3, 0x2b4}) io_uring_setup(0x17b2, &(0x7f0000004040)={0x0, 0x2a43, 0x21, 0x2, 0x284, 0x0, r1}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x15, 0x0, 'lblcr\x00'}, 0x2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x24, 0x40, 0x107, 0x70bd2b, 0x2000000, {0x1, 0x7c}, [@nested={0x4, 0x106}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @fd}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1m24.760459259s ago: executing program 4 (id=817): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004084}, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="90000000051405012cbd7000fbdbdf0100000000000800030000000015fd00012ce379552fc2"], 0x90}, 0x1, 0x0, 0x0, 0x20040081}, 0x40010) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0xf170, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, 0xfffffffffffffffc], 0x10000, 0x202}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) setsockopt$sock_attach_bpf(r8, 0x1, 0x34, &(0x7f00000000c0)=r9, 0x4) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='< \x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002d00000008005800000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}}, 0x0) r10 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r10, 0x8982, &(0x7f0000000200)) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) syz_emit_ethernet(0x32, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @remote}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x7}}}}}}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x120, r11, 0xc80, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x120}, 0x1, 0x0, 0x0, 0x20048011}, 0x800) 1m9.760740546s ago: executing program 34 (id=817): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004084}, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="90000000051405012cbd7000fbdbdf0100000000000800030000000015fd00012ce379552fc2"], 0x90}, 0x1, 0x0, 0x0, 0x20040081}, 0x40010) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0xf170, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, 0xfffffffffffffffc], 0x10000, 0x202}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) setsockopt$sock_attach_bpf(r8, 0x1, 0x34, &(0x7f00000000c0)=r9, 0x4) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='< \x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002d00000008005800000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}}, 0x0) r10 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r10, 0x8982, &(0x7f0000000200)) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) syz_emit_ethernet(0x32, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @remote}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x7}}}}}}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x120, r11, 0xc80, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x120}, 0x1, 0x0, 0x0, 0x20048011}, 0x800) 36.967106635s ago: executing program 1 (id=1456): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05002abd7000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="100049000cac180005ac0f0008ac0f00050034"], 0x34}}, 0x810) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r3 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad00000066"], 0x0, 0x8}, 0x94) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4af584f73552a348) (async) io_uring_enter(r3, 0x0, 0x1000002, 0x37, 0x0, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') r5 = open_tree(r4, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0012000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) (async) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f00000001c0)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}, {0x6}, 0x2c, {0x2, 0x4e24, @remote}, 'xfrm0\x00'}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x13, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54, 0x0, 0x4}, 0x20) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002abd7000fcd9df25880000006efd0300", @ANYRES32=r10, @ANYBLOB="0c009900020000002f0000000a000600080211000000000076f3940df83e39b1b7afce5e272c3fd3f92d19e0c97b07f1ff38bf5bb30802e311344b78ba91243d30216267"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x1080) (async) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async) sendto$inet(r7, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00') 36.963942608s ago: executing program 1 (id=1457): r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x2, 0x109080) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000002c0)={0xf000000, 0x1, 0x6, r1, 0x0, &(0x7f0000000280)={0x980901, 0xa, '\x00', @p_u16=0x0}}) 36.889309366s ago: executing program 1 (id=1458): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r0}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x68, &(0x7f0000000200)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 36.889008075s ago: executing program 1 (id=1459): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000180)={0xc, r2}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x8000000000000400}) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) r4 = eventfd(0x7) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f00000000c0)=r4) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000240)) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000a40)={0x28, 0x10000, r2, r2, 0x7ffffffffffffffe, 0xfffffffffffdfffe}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}], 0x20) 36.830026316s ago: executing program 1 (id=1461): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSBRK(r0, 0x5427) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'pim6reg\x00', {0x4}, 0xfa}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000040)={0x2, 'veth0_to_hsr\x00', {0x7}, 0xfff}) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={'veth1_virt_wifi\x00', {0x2, 0x4e21, @rand_addr=0x64010102}}) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000100)=""/92) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0xfffffffe}}, './file0\x00'}) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x4e21, 0x10000, @mcast1, 0x695e}, {0xa, 0x4e22, 0x40c, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x0, {[0x9, 0x4, 0x6, 0xfff, 0xfffffff8, 0xbb, 0x4, 0x275]}}, 0x5c) recvfrom$inet(r3, &(0x7f0000000280)=""/171, 0xab, 0x10002, &(0x7f0000000340)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000380)=0xffffffffffffffff) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f00000003c0)) r4 = socket$netlink(0x10, 0x3, 0x1) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000440)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x9}) io_uring_enter(r3, 0x4a58, 0x1a88, 0x20, &(0x7f0000000480)={[0xe27]}, 0x8) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f00000004c0)={0x101, 0x4, 0x9, @local, 'ipvlan0\x00'}) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000500)=""/82) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000580)={0x0, 0x0, 0xffffffffffffffff}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f00000005c0)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0}, &(0x7f0000000640)=0xc) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000601, r6, &(0x7f0000000680)={0xffffffffffffffff, 0x4448, 0x1}) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000007c0)={'nr0\x00', {0x2, 0x4e22, @multicast1}}) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000800), &(0x7f0000000840)=0x4) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2) 36.749833121s ago: executing program 1 (id=1463): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0xe, 0x8000, &(0x7f0000000200)={0x11, 0xf8, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0xce20, @empty}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000540)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0xc, 0x11, 0x0, @local, @ipv4={'\x00', '\xff\xff', @loopback}, {[], {0x4e1d, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x100, @void}}}}}}}}, 0x0) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) (async) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0xe, 0x8000, &(0x7f0000000200)={0x11, 0xf8, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) shutdown(r1, 0x1) (async) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) (async) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) (async) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r4, &(0x7f0000000140)={0x2, 0xce20, @empty}, 0x10) (async) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) (async) syz_emit_ethernet(0x42, &(0x7f0000000540)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0xc, 0x11, 0x0, @local, @ipv4={'\x00', '\xff\xff', @loopback}, {[], {0x4e1d, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x100, @void}}}}}}}}, 0x0) (async) 21.136925753s ago: executing program 35 (id=1463): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0xe, 0x8000, &(0x7f0000000200)={0x11, 0xf8, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0xce20, @empty}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000540)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0xc, 0x11, 0x0, @local, @ipv4={'\x00', '\xff\xff', @loopback}, {[], {0x4e1d, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x100, @void}}}}}}}}, 0x0) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) (async) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0xe, 0x8000, &(0x7f0000000200)={0x11, 0xf8, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) shutdown(r1, 0x1) (async) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) (async) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) (async) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r4, &(0x7f0000000140)={0x2, 0xce20, @empty}, 0x10) (async) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) (async) syz_emit_ethernet(0x42, &(0x7f0000000540)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0xc, 0x11, 0x0, @local, @ipv4={'\x00', '\xff\xff', @loopback}, {[], {0x4e1d, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x100, @void}}}}}}}}, 0x0) (async) 3.417238832s ago: executing program 6 (id=1932): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d793000000000000000000000140004002e657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newnexthop={0x28, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x6}]}, @NHA_RES_GROUP={0x4}]}, 0x28}}, 0x40000) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/softnet_stat\x00') read$FUSE(r5, &(0x7f00000001c0)={0x2020}, 0x2020) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000022c0), r5) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000002400)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002300)={0xb0, r6, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x43446052}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x24000092}, 0x40041) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x0, @local}, 0x2}}, 0x26) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r9, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}]}, 0x3c}}, 0x20) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r11 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r11, 0x29, 0x5, 0x0, &(0x7f0000000100)) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000002280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002240)={&(0x7f00000022c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20048810}, 0xa14049b57c1f6811) 3.331734122s ago: executing program 6 (id=1935): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x48401) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000280)=ANY=[@ANYBLOB='\r\x00\x00\x00\b']) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="340100001700010029bd700000000000ac1414bb00000000000000000000000000000000000000002001000000000000000000000000000120010000000000000000000000000001e000000200000000000000000000000000000000000000000200008084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000300000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000200000000400000000000060000000000000000000000000000000000000000000000000000000000000000000000000009000000ba6b6e000201000000000000000400000000000000000000000000000c000800080008000101"], 0x134}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x48401) (async) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000280)=ANY=[@ANYBLOB='\r\x00\x00\x00\b']) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="340100001700010029bd700000000000ac1414bb00000000000000000000000000000000000000002001000000000000000000000000000120010000000000000000000000000001e000000200000000000000000000000000000000000000000200008084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000300000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000200000000400000000000060000000000000000000000000000000000000000000000000000000000000000000000000009000000ba6b6e000201000000000000000400000000000000000000000000000c000800080008000101"], 0x134}}, 0x0) (async) 3.249450405s ago: executing program 6 (id=1937): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f00000000c0)=0xfffffff7, 0x4) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r2) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r4, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "4b13420a19476e5f7e9a1ca4ca688869ffe6fc7b18"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x40) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, r3, 0x21, 0x0, 0x3, {0x7}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_bridge\x00'}]}, 0x28}}, 0x2) 3.186796764s ago: executing program 6 (id=1938): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x3f}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000000}, 0x1) (async) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x3f}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000000}, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000180)={0x84, r0}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000180)={0x84, r0}) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f00000001c0)=""/65) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000240)=0x4) (async) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000240)=0x4) close_range(r0, r0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={0x41c, r4, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x178, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x1b, 0x2, "9fa83e8eaf6f2534183f2a110d8ea70ff372f31abec6c6"}, @NL80211_BAND_6GHZ={0xfd, 0x3, "c54d74e4e6a48abb7ac97fdb52763f44a72edfd25d2141262842c1a7e47ee4c41153973c34168622d4c408e9e6b4cb70ef37a906389529ff23d40d8390f059785ce611fd0ecb8f670f845a5622e975e48edefdcb254f9b2b210d5796f45f47a29ba7cda1ceeb8e9a8b2014d02608c3dc5cbea1793a52b3794e3889a9232e4af03543f4aa8ae975834ac6fb57be18a24ea1dee80bfc0c3c4fb17a602206588a21bb9cf90aef1467c5a95e0fd8073912d2b5ead8fb5827a6b2615a5407bdde84c28b6c982ce86c4bbd287c07d7f63b8a0ae1e7c0f2ee616cbfb02dfe799389b4efd685b76ca630cdbd64a6d47fbb020765d9e369c445e720eeaa"}, @NL80211_BAND_6GHZ={0x57, 0x3, "1a65ac01a0e0fb4a726a3d687bedfbfc17eda04c00e26f9eb59b553ddae06b7db315669698343464880a9279d510be96de478a0fdd3ce0a61ab26cd9e75b5f74e92a2f689b30c649cbcef1d384064225cad785"}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x284, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x88, 0x0, "95f793fa2fa2e7a5e7c1cead820b743a66403406a530f7c426c8c95628fa92820d79a4c756f936b11eb9a10df40416a4ebe1fe43d1d764cf99561488364353916c49b7d15446cbd43249cc423d43498650bd0628e7eb812109095d4afee52b693ec0948a978c2b25c290d3b048aa1c3cec95232bc7cd77bc46e7c9c6ede393a1b07defab"}, @NL80211_BAND_60GHZ={0xa6, 0x2, "c218fe02ebe094ca9c3f862dc346b106b520618e22320d1e15ef412d2840548d80416433cbc96e05e3aa42a9997d504fff6de6e54e77811e597cd68764d8d01f51a0640088c89dbbee515a9846a01955ccae3318e9724cc299ea5e29b71ccb8f153fe78518116c6c03913923db8e4b840f91a17484e3603bea174c6a11fbd3ce9b514a7f2f7ec3da9fc2d9010008e60dea106f29eff31e2b51889ee1650d4a489c8e"}, @NL80211_BAND_6GHZ={0x81, 0x3, "69dc705d32cbdb1edd751a789507fe643de455cfe52f5e006698e28d663c0650d896cf1f6c1a6f5d6bda99d438a9cef259adf688b96cb0a3957d5ece0b342d1b1c522b11c77dd93cde0c3af2cd4b86ddcb661f72586031c9328fc145a2ab44ff1fce933fb057ef12533d792009436bb5863839901cd7ad76b0132f3a95"}, @NL80211_BAND_6GHZ={0xcb, 0x3, "3c864fe607efdb956bf0a94d30914f436e9205c90e777b75bddb8a028bff413cc975c54490cf7f9edd94117c8c917409c63e766ed7b97382b3d4ec79b29c7c54236f9e3db939ec23d9ac806486d2af93da03d7d8beef4dfa1d6180df78298a634c4c8199886af18e245f9afb76ef05587136346d6f187c8a4439ae89fd72dc977b1e45b465fa0967466c41bc37a898450c8ef814a7edcf489f7ed72cc83bc310ac17f851e6cb0a75ea11fb349a4a0739b7c553dc3e0aede50e0e9fe903f9fedeee4ddf347afabd"}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x41c}, 0x1, 0x0, 0x0, 0x8040800}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={0x41c, r4, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x178, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x1b, 0x2, "9fa83e8eaf6f2534183f2a110d8ea70ff372f31abec6c6"}, @NL80211_BAND_6GHZ={0xfd, 0x3, "c54d74e4e6a48abb7ac97fdb52763f44a72edfd25d2141262842c1a7e47ee4c41153973c34168622d4c408e9e6b4cb70ef37a906389529ff23d40d8390f059785ce611fd0ecb8f670f845a5622e975e48edefdcb254f9b2b210d5796f45f47a29ba7cda1ceeb8e9a8b2014d02608c3dc5cbea1793a52b3794e3889a9232e4af03543f4aa8ae975834ac6fb57be18a24ea1dee80bfc0c3c4fb17a602206588a21bb9cf90aef1467c5a95e0fd8073912d2b5ead8fb5827a6b2615a5407bdde84c28b6c982ce86c4bbd287c07d7f63b8a0ae1e7c0f2ee616cbfb02dfe799389b4efd685b76ca630cdbd64a6d47fbb020765d9e369c445e720eeaa"}, @NL80211_BAND_6GHZ={0x57, 0x3, "1a65ac01a0e0fb4a726a3d687bedfbfc17eda04c00e26f9eb59b553ddae06b7db315669698343464880a9279d510be96de478a0fdd3ce0a61ab26cd9e75b5f74e92a2f689b30c649cbcef1d384064225cad785"}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x284, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x88, 0x0, "95f793fa2fa2e7a5e7c1cead820b743a66403406a530f7c426c8c95628fa92820d79a4c756f936b11eb9a10df40416a4ebe1fe43d1d764cf99561488364353916c49b7d15446cbd43249cc423d43498650bd0628e7eb812109095d4afee52b693ec0948a978c2b25c290d3b048aa1c3cec95232bc7cd77bc46e7c9c6ede393a1b07defab"}, @NL80211_BAND_60GHZ={0xa6, 0x2, "c218fe02ebe094ca9c3f862dc346b106b520618e22320d1e15ef412d2840548d80416433cbc96e05e3aa42a9997d504fff6de6e54e77811e597cd68764d8d01f51a0640088c89dbbee515a9846a01955ccae3318e9724cc299ea5e29b71ccb8f153fe78518116c6c03913923db8e4b840f91a17484e3603bea174c6a11fbd3ce9b514a7f2f7ec3da9fc2d9010008e60dea106f29eff31e2b51889ee1650d4a489c8e"}, @NL80211_BAND_6GHZ={0x81, 0x3, "69dc705d32cbdb1edd751a789507fe643de455cfe52f5e006698e28d663c0650d896cf1f6c1a6f5d6bda99d438a9cef259adf688b96cb0a3957d5ece0b342d1b1c522b11c77dd93cde0c3af2cd4b86ddcb661f72586031c9328fc145a2ab44ff1fce933fb057ef12533d792009436bb5863839901cd7ad76b0132f3a95"}, @NL80211_BAND_6GHZ={0xcb, 0x3, "3c864fe607efdb956bf0a94d30914f436e9205c90e777b75bddb8a028bff413cc975c54490cf7f9edd94117c8c917409c63e766ed7b97382b3d4ec79b29c7c54236f9e3db939ec23d9ac806486d2af93da03d7d8beef4dfa1d6180df78298a634c4c8199886af18e245f9afb76ef05587136346d6f187c8a4439ae89fd72dc977b1e45b465fa0967466c41bc37a898450c8ef814a7edcf489f7ed72cc83bc310ac17f851e6cb0a75ea11fb349a4a0739b7c553dc3e0aede50e0e9fe903f9fedeee4ddf347afabd"}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x41c}, 0x1, 0x0, 0x0, 0x8040800}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000007c0)={0x0, 0x0}) fcntl$lock(r0, 0x5, &(0x7f0000000800)={0x0, 0x2, 0x2, 0x3a29ba73, r5}) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000880)=0x1) r6 = syz_io_uring_setup(0x2a7e, &(0x7f00000008c0)={0x0, 0xa908, 0x0, 0x3, 0x20f}, &(0x7f0000000940), &(0x7f0000000980)) io_uring_register$IORING_UNREGISTER_NAPI(r6, 0x1c, &(0x7f00000009c0), 0x1) (async) io_uring_register$IORING_UNREGISTER_NAPI(r6, 0x1c, &(0x7f00000009c0), 0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r7, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x5}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000b80), r3) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b80), r3) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000d80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x170, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x7f}}}]}, 0x170}, 0x1, 0x0, 0x0, 0x8000}, 0x40081) sendmsg$nl_route(r3, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)=@RTM_GETNSID={0x2c, 0x5a, 0x80a, 0x70bd29, 0x25dfdbfd, {}, [@NETNSA_FD={0x8, 0x3, r3}, @NETNSA_NSID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000004) (async) sendmsg$nl_route(r3, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)=@RTM_GETNSID={0x2c, 0x5a, 0x80a, 0x70bd29, 0x25dfdbfd, {}, [@NETNSA_FD={0x8, 0x3, r3}, @NETNSA_NSID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000004) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000f00)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000ec0)="b2aa", 0x2, r6}, 0x68) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001140)={&(0x7f0000000fc0)={0x170, r8, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x170}, 0x1, 0x0, 0x0, 0xc800}, 0x800) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) accept$ax25(r9, &(0x7f00000011c0)={{0x3, @netrom}, [@netrom, @netrom, @remote, @bcast, @null, @netrom, @null, @rose]}, &(0x7f0000001240)=0x48) (async) accept$ax25(r9, &(0x7f00000011c0)={{0x3, @netrom}, [@netrom, @netrom, @remote, @bcast, @null, @netrom, @null, @rose]}, &(0x7f0000001240)=0x48) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001280), 0x4000, 0x0) ioctl$XFS_IOC_DIOINFO(r10, 0x800c581e, &(0x7f00000012c0)) ioctl$FITHAW(r3, 0xc0045878) 3.119707359s ago: executing program 6 (id=1940): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (rerun: 32) ioctl$EVIOCGMASK(r2, 0x80045b10, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 1.294447863s ago: executing program 7 (id=1968): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x100, 0x1fffe, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x8003, 0x2000000}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x24044005}, 0x4054) 1.294093839s ago: executing program 7 (id=1969): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r5}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @mcast1, 0x0, 0x6, 0x0, 0x100, 0x6, 0x2180105, r5}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000340)="b9250800000f322e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7c}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000002c00075000000000ffdbdf25037c00000800018004000000100002800c0001"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 1.099441629s ago: executing program 7 (id=1970): sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf2512000000180001801400020076657468300000000000000008000000080009"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x2, 0x2, 0x1) sendto$inet6(r1, &(0x7f0000000080)="1d5d10", 0x3, 0x20000048, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002500)={r4, r2, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@ldst={0x6, 0x0, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.099149842s ago: executing program 7 (id=1971): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x842, 0x0) write$fb(r2, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) r6 = syz_io_uring_complete(0x0) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000000140)) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@empty, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x9, 0x0, 0x0, 0x500, 0x1, 0x4d30356, r7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', r7, 0x29, 0x86, 0x0, 0x2, 0x2e, @private2, @mcast2, 0x7800, 0x80, 0x5, 0x9}}) r8 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec}) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r8, 0x0, 0xec, 0xd, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 729.356177ms ago: executing program 7 (id=1972): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) getpid() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x38}}, 0x4048000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) socket$l2tp6(0xa, 0x2, 0x73) userfaultfd(0x801) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x400080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000040), &(0x7f0000000180)=0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'veth1_to_batadv\x00'}) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={[&(0x7f0000000180)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, 0x0) 459.948223ms ago: executing program 5 (id=1976): syz_emit_ethernet(0x3b6, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 399.651446ms ago: executing program 5 (id=1977): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@rdma_args={0x24, 0x114, 0x1, {{0x800, 0x3}, {0x0}, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/176, 0xb0}], 0x1, 0x0, 0x9}}], 0x48, 0x8000}, 0x4000000) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x78, 0x10, 0x503, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1244c}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @private=0xa010101}, @IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa0100fe}, @IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0x64010102}, @vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x2d616b45}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x5}, @IFLA_VTI_FWMARK={0x8, 0x6, 0xe}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x4}, @IFLA_VTI_IKEY={0x8, 0x2, 0x9}]]}}}]}, 0x78}}, 0x0) 399.10468ms ago: executing program 7 (id=1978): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') pread64(r0, &(0x7f0000001880)=""/4096, 0x1000, 0x7) r1 = syz_open_dev$ndb(&(0x7f0000000900), 0x0, 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async, rerun: 32) ioctl$NBD_DO_IT(r1, 0xab03) (rerun: 32) 339.678412ms ago: executing program 5 (id=1979): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r4}) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$DVD_READ_STRUCT(r5, 0x5390, &(0x7f00000008c0)=@bca={0x3, 0xbc, "ff8cda1977343eb68a624f88ea18981624f76cf38d66c6e2816fea1ab0c454af42f5eb77065e3dc9d5be2ad17ba3211b9bc933cd2c2b46c1b227c31fd4fac56631fd855d65689647fb228c2612dd78456461f8061dc34219bcab825a005c53652977d0900e81cc6ce19e57a780c4813ca62188fa205dda049e6924df344cbfbd6113aeb9babf66c5f057c87d780d1f982ac13b375ccf3717efe1bcf2768420e4036e84f36f177ea772d0003cc2871782f04e47ef25b935e6e2ce3305"}) (async) ioctl$DVD_READ_STRUCT(r5, 0x5390, &(0x7f00000008c0)=@bca={0x3, 0xbc, "ff8cda1977343eb68a624f88ea18981624f76cf38d66c6e2816fea1ab0c454af42f5eb77065e3dc9d5be2ad17ba3211b9bc933cd2c2b46c1b227c31fd4fac56631fd855d65689647fb228c2612dd78456461f8061dc34219bcab825a005c53652977d0900e81cc6ce19e57a780c4813ca62188fa205dda049e6924df344cbfbd6113aeb9babf66c5f057c87d780d1f982ac13b375ccf3717efe1bcf2768420e4036e84f36f177ea772d0003cc2871782f04e47ef25b935e6e2ce3305"}) close_range(r0, r5, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) (async) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x9, 0x3, 0x5}) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08020000000001300c000b400000000000000006140000001100010000"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08020000000001300c000b400000000000000006140000001100010000"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 209.004214ms ago: executing program 2 (id=1980): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000140)=[0x0, 0x3], 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x40}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r3 = socket$can_j1939(0x1d, 0x2, 0x7) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) r5 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1000000, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) file_getattr(r5, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x18, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 208.282711ms ago: executing program 5 (id=1981): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) (async) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x8) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x8) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000680), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000680), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fadvise64(r1, 0x6, 0x3, 0x2) 207.19689ms ago: executing program 2 (id=1982): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82840) ioctl$CEC_ADAP_G_LOG_ADDRS(r2, 0x805c6103, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x1, 0x10000, 0x0, 0x1ff, 0xffffffffffffffff, 0x6, 0x0, 0x6, 0xffffffffffffffff], 0x8000000, 0x80a05}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) ioctl$BLKSECTGET(r4, 0x1267, &(0x7f0000000000)) 139.432342ms ago: executing program 5 (id=1983): prctl$PR_GET_NO_NEW_PRIVS(0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x2c020400) mount$bind(&(0x7f0000002380)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x29101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002740)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000791208000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) vmsplice(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000140)="5814ec053ec665e3f73738b127afb1c4f0d99d7422eca7b4a7e10c10b3c0aefd1ef8da56799e8c4d0bd8e7822bce86fb5785b3c8f4b6cae7d4bdce9df84c439bfed23e97d9c3056a513a61c7faeb1e19fea6345f57164abe2fa969a30461b41c76f6d0d6848269cda1846be547d62d4c32644fa5e010b3dd60487bb4648b93b3855a9ce9434e379c53916c1e35eae631675ee31ce04ee8799392f0e65913e8724c86a33f48e8dfda4188692cd7048d59ce62741eeebc9061bdd38785d9ec5a2b0ccaa96f8cdffd549fc4d2686e10bb997164cc0a661f416f96b1487b633bc6f1f80e652b8f7f34ea214798b1c53504c7f6dcaf70bce664761f9c1b", 0xfb}, {&(0x7f0000000240)="dd3b0d217ea27999", 0x8}, {&(0x7f0000000280)="ba9744cf8745fec84bb0015b48fca0c09d67130601d78195784a09c608731fd262663912fb8dcdd60bc207d4710c1790b5745ba2c07e0174467211684734534afece773781054fe921d7735484518e77de930a48ad39ff164e621760f8b2c80c8bac65f37c3a16d962f17f3e365f76f63a74f563094ed6478f23", 0x7a}, {&(0x7f0000000300)="dd77a21a35405a618371953568f45cab2852cdd539f514a8289e30df4b415889da0680e473fc9f51cec35e5c24caac4fd04d3bad3d063fc6d45675155215fb0b63b60de390dcc93bbb789d27", 0x4c}, {&(0x7f0000000380)="fbb5cc69a9a6e9a1d4f348feba575ed1ee3f4f66d70c26", 0x17}, {&(0x7f00000003c0)="79ff119c48af41fda3f0863292568501de4548f0dac0cbd120f8ac00edfa013913fb8139e28444a9a0f471d8fac88b55b70161ab19fe8de83775dca5ede38496880b0eba19c2ddb9cc040f176b4d063b599f79da9413f16f5919f9d33e5da417f9a6b4c22c53b2b32bc4f58ea6f1a77c5d63d5271539ba6848c6b08fbbbafa722ad8b3c3850308ad5aaa189c5f26a179590fb3b86a1ecb846a4fddbca0c4ea05a55bfb5817785a", 0xa7}, {&(0x7f0000000480)="71b82e8c9efd8143d4cc42b76216798d2e9c34e032c12745653ea257a2480ab0ea87775e546e44b92f32a94c151c71d1a69284dc6d", 0x35}, {&(0x7f00000004c0)="c5ba3226afe8c4fe8898f5685cef41d33a1051c24e97085ed5c8dbd487065aa6e2d638adba68d3e156be653a960af3ffa250e5308e1b3f2c5ab30997e4dfcf41b966df97502d8ff38031d9d9542d45dda5f1c6c181994865c6d9470b8425c71bcd6c113840fc7ee9be570929a9758e9770394998f7c7db149cc0dca152ce32364ee9967b77678ff5359c17473ae0251a24563bc58a642de65b3a5d2d36a645a814d7825e355b28e62dc395bc917b07a223bc898d76287fbd1152ae", 0xbb}], 0x8, 0x2) r2 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000740)={0x53, 0xfffffffffffffffe, 0xa, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="a1f872478e76a81b1332", 0x0, 0xffff140f, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000000600)={{r1}, "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"}) 138.935723ms ago: executing program 2 (id=1984): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x7f9) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x20002, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000340)={0x2}) write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x5}, {0x5}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x43}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x4}, 0x50) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xffff, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x402c894}, 0x4048000) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r1) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000052294294e2746a4c2367ffba63093610417aa7be96c5d02729d060d54bce228ca34a6ec0593ff53aa5f021f96e5964becefd07d289de291f2357e4d9e2d7fdadf9c03447e8c0e0b1ac64d550792e8938e419483c3b67b5635c13303256c3b8baa3583a7d101e30622e00"/118, @ANYRES16=r6, @ANYBLOB="000428bd7000fcdbdf250200000014000b00ff010000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x100080f0}, 0x8c0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r3}, @ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x11}, 0x94) listen(r0, 0xda90) 138.783403ms ago: executing program 2 (id=1985): r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="87dfe96cca19685b2e259d47142cb00ce989560a970cca5caa35cf0613647974d71e3239029d0891d863bd556f4c7e5ad740072a6265a02a90e83eff77644225924d0c69d79f79d8b6b221ca7616a2f870d4f3c3e2a583acc21b819a1aef6e91e198f6bfe13cf877b7f7129e5f1715f00d57ae839b07866e8f1ffa62d250d83443a287c8b20e99dad0f25c7766af0a8d70258acb36d4844d20116761fd4122223798eb241404c5f1b7283c4c7a7fdd0aaf413e7b817ee0ef49e68d65f362c241b22276e6540bff282d47e3d83d79a654ae3c6ed2fa54e57c4fdf748f47ac282c0c8e8d3e10382869"], 0x6f4}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f004b432352ecb83c7cec4c01"], 0x114}], 0x1, 0x0, 0x0, 0x20008801}, 0x8040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000140)) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) truncate(&(0x7f0000000040)='./bus\x00', 0x9472) dup3(r3, r0, 0x0) finit_module(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@uuid_on}]}) 64.218851ms ago: executing program 5 (id=1986): r0 = userfaultfd(0x801) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000893000/0x3000)=nil, 0x3000}, 0x1}) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000040)={0x21, &(0x7f00000000c0)=[{0x2, '\x00', @data=0x3256, 0x14}, {0xb, '\x00', @data=0x4}]}) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000d8d000/0x4000)=nil) 63.705725ms ago: executing program 6 (id=1987): r0 = memfd_secret(0x80000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) modify_ldt$write(0x1, &(0x7f0000000040)={0xc, 0x0, 0x400}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, &(0x7f00000000c0)) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r2, @ANYBLOB="00042fbd7000fddbdf25050000000c001600ff01000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(r4, 0x188c2) ioctl$TCSBRK(r4, 0x5409, 0x8) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000280)={0x2, 0xca, 0x7fffffff, 0x7, 0x6, "5277581d613337ee1aea7fb18a27fea94526a1", 0x99c1, 0x5}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb080045009a8d00000000002f"], 0x3e) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a010200000000000000000100ffff0900030073797a320000000014000480080002400000000008000140000000050900010073717a310000000038000000050a4f010000000000000000010020000c00024000000000000000010900010073797a31000000000c0004800800014000000005140000001100010000000000000000000000000a"], 0xc0}}, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r9, 0x29, 0xcf, &(0x7f0000000000)=0x42c8, 0x4) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r10, &(0x7f0000000040)="07000000010001", 0x7) ioctl$KDGKBENT(r4, 0x4b46, &(0x7f0000000100)={0xd, 0x6, 0xf67}) 63.459873ms ago: executing program 2 (id=1988): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x2, 0x2, 0x0, 0x2000, &(0x7f0000f8b000/0x2000)=nil}) (async) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) (async) prctl$PR_SET_MM_MAP(0x49, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000280)={0x5, 0x0, 0x10000, 0x2000, &(0x7f0000d6c000/0x2000)=nil, 0x7}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x2000, &(0x7f0000c7d000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10001, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) (async) r6 = add_key$fscrypt_provisioning(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)={0x2, 0x0, @a}, 0x48, 0xffffffffffffffff) keyctl$describe(0x6, r6, &(0x7f0000000840)=""/59, 0x3b) (async) request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='#\x00', 0xfffffffffffffff9) 0s ago: executing program 2 (id=1989): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) removexattr(&(0x7f0000000100)='./cgroup\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="717365722e255b240200000000000000095a30d205693b3d23c5f8466eab1c6b0006e04cba8efe1a2b25a2a791f31e3f95239555a3dc7253f46c9d080ec779d69d5d5a659b567e2c3fc529b7592a8b7ede88"]) readv(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x6) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="bbf7c12bd679612159513cc60e08ce185d3a0dcbbda7525e9b6f6f7f006f64653d3030303030303030301530d35b2379254370e13220d9c56fcc", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=r0]) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) read$FUSE(r2, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x40000, 0x400000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, 0x793}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000400)={0x3, 0x0, [{0x30c, 0x0, 0x401}, {0xa, 0x0, 0x3}, {0x6, 0x0, 0x7f}, {0xfffffffe, 0x0, 0x9}, {0x5, 0x0, 0x8001}, {0x7, 0x0, 0x4}, {0x4, 0x0, 0x4}, {0x0, 0x0, 0x7}, {0x2}, {0x8, 0x0, 0x1ff}, {0x6, 0x0, 0x9}, {0x80000001, 0x0, 0xc49}, {0x8, 0x0, 0x9}, {0x5, 0x0, 0x2}, {0x1, 0x0, 0x285}, {0x4, 0x0, 0x5}]}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f00000003c0)={0x0, @time={0xc12, 0x1}, 0x54, {0x8, 0x4}, 0xb, 0x0, 0x8}) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8300, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000000)={'vlan0\x00', 0x400}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000040)={'wlan0\x00', 0xa00}) syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r1) r8 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) dup2(r5, r8) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000140)=0xffffffc0) kernel console output (not intermixed with test programs): slave_0: entered promiscuous mode [ 157.765515][ T9762] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.769078][ T9762] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.771751][ T9762] bridge_slave_1: entered allmulticast mode [ 157.774700][ T9762] bridge_slave_1: entered promiscuous mode [ 157.798892][ T9762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.799309][ T9804] netlink: 'syz.2.988': attribute type 1 has an invalid length. [ 157.803478][ T9762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.839357][ T9762] team0: Port device team_slave_0 added [ 157.848074][ T9804] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 157.851523][ T9804] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 157.857453][ T9804] bond2: (slave vxcan3): making interface the new active one [ 157.860207][ T9804] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 157.864850][ T9762] team0: Port device team_slave_1 added [ 157.920534][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.988'. [ 157.932630][ T9814] netlink: 4 bytes leftover after parsing attributes in process `syz.5.990'. [ 157.959529][ T1276] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.970977][ T9812] bond2 (unregistering): (slave vxcan3): Releasing backup interface [ 157.975355][ T9812] bond2 (unregistering): Released all slaves [ 157.991828][ T9762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.993867][ T9762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.003550][ T9762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.010246][ T9762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.012537][ T9762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.023130][ T9762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.062609][ T9762] hsr_slave_0: entered promiscuous mode [ 158.065894][ T9762] hsr_slave_1: entered promiscuous mode [ 158.069123][ T9762] debugfs: 'hsr0' already exists in 'hsr' [ 158.071736][ T9762] Cannot create hsr debugfs directory [ 158.219082][ T9824] batman_adv: batadv0: Adding interface: dummy0 [ 158.221818][ T9824] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.232639][ T9824] batman_adv: batadv0: Interface activated: dummy0 [ 158.285094][ T1276] bridge_slave_1: left allmulticast mode [ 158.289407][ T1276] bridge_slave_1: left promiscuous mode [ 158.291937][ T1276] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.298998][ T1276] bridge_slave_0: left allmulticast mode [ 158.301265][ T1276] bridge_slave_0: left promiscuous mode [ 158.303600][ T1276] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.487080][ T24] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 158.570776][ T1276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.575805][ T1276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.581155][ T1276] bond0 (unregistering): Released all slaves [ 158.590263][ T1276] bond1 (unregistering): Released all slaves [ 158.597072][ T1276] bond2 (unregistering): Released all slaves [ 158.640400][ T24] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 158.643358][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.648134][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 158.651163][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.654676][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.659647][ T24] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 158.664184][ T24] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 158.667055][ T24] usb 7-1: Product: syz [ 158.668432][ T24] usb 7-1: Manufacturer: syz [ 158.681645][ T9762] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 158.683273][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 158.686622][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 158.690444][ T24] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 158.692461][ T24] cdc_wdm 7-1:1.0: Unknown control protocol [ 158.696590][ T9762] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 158.720034][ T9762] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 158.729380][ T9762] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 158.766905][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 158.791500][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.999'. [ 158.812429][ T9841] team0: Port device team_slave_1 removed [ 158.832289][ T9762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.842758][ T9762] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.849488][ T6478] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.852585][ T6478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.863116][ T6478] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.866041][ T6478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.886389][ T9824] cdc_wdm 7-1:1.0: Error submitting int urb - -90 [ 158.899307][ T9762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.909782][ T9824] can0: slcan on ttynull. [ 159.026115][ T9862] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1001'. [ 159.030299][ T9824] batadv0: mtu less than device minimum [ 159.033650][ T9824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 159.037469][ T9862] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1001'. [ 159.038887][ T9824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 159.045759][ T9824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 159.050797][ T9824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 159.055742][ T9824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 159.060803][ T9824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 159.065767][ T9824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 159.119140][ T9762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.123439][ T9866] netlink: 'syz.5.1002': attribute type 16 has an invalid length. [ 159.127841][ T9866] netlink: 'syz.5.1002': attribute type 17 has an invalid length. [ 159.153790][ T9866] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.159298][ T9866] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.198198][ T1276] hsr_slave_0: left promiscuous mode [ 159.202376][ T9823] can0 (unregistered): slcan off ttynull. [ 159.205600][ T1276] hsr_slave_1: left promiscuous mode [ 159.210431][ T6007] usb 7-1: USB disconnect, device number 11 [ 159.216292][ T1276] veth1_macvtap: left promiscuous mode [ 159.221375][ T1276] veth0_macvtap: left promiscuous mode [ 159.224179][ T1276] veth1_vlan: left promiscuous mode [ 159.225966][ T1276] veth0_vlan: left promiscuous mode [ 159.247617][ T5928] Bluetooth: hci1: command tx timeout [ 159.257229][ T5928] Bluetooth: hci3: command tx timeout [ 159.381637][ T1276] team0 (unregistering): Port device team_slave_1 removed [ 159.389161][ T1276] team0 (unregistering): Port device team_slave_0 removed [ 159.620177][ T9762] veth0_vlan: entered promiscuous mode [ 159.625024][ T9762] veth1_vlan: entered promiscuous mode [ 159.643383][ T9762] veth0_macvtap: entered promiscuous mode [ 159.651369][ T9762] veth1_macvtap: entered promiscuous mode [ 159.659765][ T9762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.669556][ T9762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.682118][ T6476] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.685181][ T6476] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.690811][ T6476] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.693902][ T6476] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.752284][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.755063][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.776158][ T6476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.777585][ T1276] IPVS: stop unused estimator thread 0... [ 159.780180][ T6476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.121332][ T9908] syzkaller0: entered promiscuous mode [ 160.123624][ T9908] syzkaller0: entered allmulticast mode [ 160.138586][ T9919] syzkaller1: entered promiscuous mode [ 160.140503][ T9919] syzkaller1: entered allmulticast mode [ 160.313539][ T9924] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 160.380647][ T9933] lo speed is unknown, defaulting to 1000 [ 160.389184][ T9937] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 160.401214][ T9937] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 160.493374][ T9941] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 160.497632][ T9941] block device autoloading is deprecated and will be removed. [ 160.715514][ T9950] program syz.5.1018 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.720474][ T9951] program syz.5.1018 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.723452][ T9951] ata1.00: invalid command format 0 [ 160.727408][ T9950] ata1.00: invalid command format 0 [ 160.765047][ T9950] block nbd5: NBD_DISCONNECT [ 160.783804][ T9953] bridge0: port 3(syz_tun) entered disabled state [ 160.790568][ T9955] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1019'. [ 160.791851][ T9953] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.852281][ T9953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.860787][ T9953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.933431][ T9953] veth0_macvtap: left allmulticast mode [ 161.337021][ T5928] Bluetooth: hci3: command tx timeout [ 162.114652][ T6476] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.119591][ T6476] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.123510][ T6476] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.132887][ T6476] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.340624][ T9992] xt_hashlimit: size too large, truncated to 1048576 [ 162.381515][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 162.381532][ T40] audit: type=1400 audit(1771874952.450:892): avc: denied { map } for pid=9997 comm="syz.1.1031" path="/dev/video4" dev="devtmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 162.399867][ T40] audit: type=1400 audit(1771874952.470:893): avc: denied { getopt } for pid=9999 comm="syz.5.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 162.473188][ T40] audit: type=1400 audit(1771874952.540:894): avc: denied { read write } for pid=10011 comm="syz.2.1035" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 162.485929][ T40] audit: type=1400 audit(1771874952.540:895): avc: denied { open } for pid=10011 comm="syz.2.1035" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 162.527442][ T40] audit: type=1326 audit(1771874952.600:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10020 comm="syz.5.1039" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a3139c629 code=0x0 [ 162.547043][ T40] audit: type=1400 audit(1771874952.610:897): avc: denied { write } for pid=10025 comm="syz.6.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 162.584072][ T40] audit: type=1400 audit(1771874952.650:898): avc: denied { getopt } for pid=10027 comm="syz.1.1040" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 162.590738][ T40] audit: type=1400 audit(1771874952.650:899): avc: denied { append } for pid=10027 comm="syz.1.1040" name="frontend0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 162.600128][ T40] audit: type=1400 audit(1771874952.650:900): avc: denied { bind } for pid=10030 comm="syz.6.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 162.606208][ T40] audit: type=1400 audit(1771874952.650:901): avc: denied { name_bind } for pid=10030 comm="syz.6.1042" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 162.671627][ T1122] sr 2:0:0:0: [sr0] tag#2 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 162.675591][ T1122] sr 2:0:0:0: [sr0] tag#2 Sense Key : Illegal Request [current] [ 162.680121][ T1122] sr 2:0:0:0: [sr0] tag#2 Add. Sense: Invalid command operation code [ 162.683587][ T1122] sr 2:0:0:0: [sr0] tag#2 CDB: ATA command pass through(16) 85 07 42 65 13 cb [ 162.776136][T10054] (syz.5.1044,10054,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 162.781035][T10054] (syz.5.1044,10054,3):ocfs2_fill_super:1177 ERROR: status = -22 [ 162.914566][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1052'. [ 162.918370][T10113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1052'. [ 162.919023][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1052'. [ 162.922291][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1052'. [ 162.922322][T10113] netlink: 'syz.1.1052': attribute type 12 has an invalid length. [ 162.926976][ C3] net_ratelimit: 16 callbacks suppressed [ 162.926987][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 162.928576][T10114] netlink: 'syz.1.1052': attribute type 7 has an invalid length. [ 162.937743][T10114] netlink: 'syz.1.1052': attribute type 13 has an invalid length. [ 162.970598][ T5928] Bluetooth: hci0: unexpected event for opcode 0x0c03 [ 162.983331][T10124] Bluetooth: hci0: invalid len left 7, exp >= 86 [ 163.104103][T10132] raw_sendmsg: syz.6.1060 forgot to set AF_INET. Fix it! [ 163.264832][T10145] pim6reg: entered allmulticast mode [ 163.270076][T10147] pim6reg: left allmulticast mode [ 163.407057][ T5928] Bluetooth: hci3: command tx timeout [ 163.416944][T10156] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000) [ 163.510462][T10162] netlink: 'syz.5.1066': attribute type 10 has an invalid length. [ 163.518287][T10162] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 163.523523][T10164] netlink: 'syz.1.1065': attribute type 4 has an invalid length. [ 163.527458][T10158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.562550][T10168] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.966998][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 164.314907][T10189] all: renamed from bridge_slave_0 [ 164.420985][T10200] netlink: 'syz.2.1076': attribute type 1 has an invalid length. [ 164.437718][T10200] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.524060][T10193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.643540][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1079'. [ 164.847880][T10221] lo speed is unknown, defaulting to 1000 [ 165.007181][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 165.097573][T10229] bridge0: port 3(syz_tun) entered blocking state [ 165.099852][T10229] bridge0: port 3(syz_tun) entered disabled state [ 165.103825][T10229] syz_tun: entered allmulticast mode [ 165.109400][T10229] syz_tun: entered promiscuous mode [ 165.111647][T10229] bridge0: port 3(syz_tun) entered blocking state [ 165.113740][T10229] bridge0: port 3(syz_tun) entered forwarding state [ 165.130031][T10229] 8021q: adding VLAN 0 to HW filter on device bond3 [ 165.230619][T10244] overlayfs: workdir and upperdir must be separate subtrees [ 165.235426][T10244] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1089'. [ 165.346354][T10262] netlink: 'syz.6.1091': attribute type 4 has an invalid length. [ 165.367762][T10262] netlink: 'syz.6.1091': attribute type 4 has an invalid length. [ 165.497076][ T5928] Bluetooth: hci3: command tx timeout [ 165.564332][T10274] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1095'. [ 165.687577][T10280] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1098'. [ 165.691677][T10280] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1098'. [ 165.996911][ T34] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 166.046884][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 166.060721][T10286] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1100'. [ 166.142744][T10290] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 166.147945][ T34] usb 11-1: Using ep0 maxpacket: 8 [ 166.167987][ T34] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.172025][ T34] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 166.175032][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.180541][ T34] usb 11-1: config 0 descriptor?? [ 166.330203][T10300] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 166.393392][ T34] iowarrior 11-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 166.408245][T10303] program syz.2.1106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.614594][ T2306] usb 11-1: USB disconnect, device number 2 [ 167.083026][T10325] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 167.085833][T10325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.096917][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 167.169829][T10327] netlink: 'syz.5.1113': attribute type 8 has an invalid length. [ 167.183194][T10330] usb usb7: usbfs: process 10330 (syz.6.1114) did not claim interface 0 before use [ 167.346323][T10341] Mount JFS Failure: -5 [ 167.348429][T10341] jfs_mount failed w/return code = -5 [ 167.392580][ T40] kauditd_printk_skb: 49 callbacks suppressed [ 167.392633][ T40] audit: type=1400 audit(1771874957.460:951): avc: denied { map } for pid=10338 comm="syz.2.1117" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 167.415761][ T40] audit: type=1400 audit(1771874957.480:952): avc: denied { sqpoll } for pid=10345 comm="syz.6.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 167.540493][ T40] audit: type=1400 audit(1771874957.610:953): avc: denied { write } for pid=10359 comm="syz.5.1122" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 167.599666][ T40] audit: type=1400 audit(1771874957.670:954): avc: denied { listen } for pid=10361 comm="syz.2.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 167.606097][ T40] audit: type=1400 audit(1771874957.670:955): avc: denied { ioctl } for pid=10361 comm="syz.2.1124" path="socket:[33747]" dev="sockfs" ino=33747 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 167.615789][ T40] audit: type=1400 audit(1771874957.670:956): avc: denied { watch_mount } for pid=10363 comm="syz.5.1125" path="/104" dev="tmpfs" ino=561 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 167.666352][T10368] netlink: 'syz.2.1127': attribute type 1 has an invalid length. [ 167.682041][T10368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10368 comm=syz.2.1127 [ 167.698505][T10368] 8021q: adding VLAN 0 to HW filter on device bond5 [ 167.703047][T10368] bond4: (slave bond5): making interface the new active one [ 167.705774][T10368] bond4: (slave bond5): Enslaving as an active interface with an up link [ 167.730054][T10366] (syz.5.1126,10366,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 167.732933][T10366] (syz.5.1126,10366,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 167.772659][ T40] audit: type=1400 audit(1771874957.840:957): avc: denied { setopt } for pid=10374 comm="syz.5.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 167.808446][ T40] audit: type=1400 audit(1771874957.880:958): avc: denied { accept } for pid=10376 comm="syz.5.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 168.069069][ T6013] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 168.126995][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 168.133577][T10395] __nla_validate_parse: 3 callbacks suppressed [ 168.133589][T10395] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1132'. [ 168.219696][ T6013] usb 7-1: not running at top speed; connect to a high speed hub [ 168.228399][ T6013] usb 7-1: config 131 has an invalid interface number: 154 but max is 0 [ 168.231898][ T6013] usb 7-1: config 131 has an invalid interface number: 165 but max is 0 [ 168.235388][ T6013] usb 7-1: config 131 contains an unexpected descriptor of type 0x1, skipping [ 168.250180][ T6013] usb 7-1: config 131 has 2 interfaces, different from the descriptor's value: 1 [ 168.254125][ T6013] usb 7-1: config 131 has no interface number 0 [ 168.258236][ T6013] usb 7-1: config 131 has no interface number 1 [ 168.261019][ T6013] usb 7-1: config 131 interface 154 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 168.266730][ T6013] usb 7-1: too many endpoints for config 131 interface 165 altsetting 101: 174, using maximum allowed: 30 [ 168.271674][ T6013] usb 7-1: config 131 interface 165 altsetting 101 endpoint 0x2 has invalid maxpacket 13105, setting to 64 [ 168.276668][ T6013] usb 7-1: config 131 interface 165 altsetting 101 has a duplicate endpoint with address 0x2, skipping [ 168.282318][ T6013] usb 7-1: config 131 interface 165 altsetting 101 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 168.290802][ T6013] usb 7-1: config 131 interface 165 altsetting 101 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 168.295941][ T6013] usb 7-1: config 131 interface 165 altsetting 101 has a duplicate endpoint with address 0x88, skipping [ 168.300735][ T6013] usb 7-1: config 131 interface 165 altsetting 101 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 168.305753][ T6013] usb 7-1: config 131 interface 165 altsetting 101 has a duplicate endpoint with address 0x9, skipping [ 168.312724][ T6013] usb 7-1: config 131 interface 165 altsetting 101 has an invalid descriptor for endpoint zero, skipping [ 168.317654][ T6013] usb 7-1: config 131 interface 165 altsetting 101 has an invalid descriptor for endpoint zero, skipping [ 168.322722][ T6013] usb 7-1: config 131 interface 165 altsetting 101 has a duplicate endpoint with address 0x5, skipping [ 168.327959][ T6013] usb 7-1: config 131 interface 165 altsetting 101 has a duplicate endpoint with address 0x5, skipping [ 168.332704][ T6013] usb 7-1: config 131 interface 165 altsetting 101 has 16 endpoint descriptors, different from the interface descriptor's value: 174 [ 168.339357][ T6013] usb 7-1: config 131 interface 154 has no altsetting 0 [ 168.342289][ T6013] usb 7-1: config 131 interface 165 has no altsetting 0 [ 168.347730][ T6013] usb 7-1: New USB device found, idVendor=2100, idProduct=9e5e, bcdDevice=e1.ac [ 168.351744][ T6013] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.355156][ T6013] usb 7-1: Product: ê¯êˆ¢é”¿ä¶™ì¬Œí‡ªïµæ­©ë¾¶à¬¨â‹¸î¯ì ‘ç—ꪹ墔悗؞耮ë¼ê©¬ìªå’•蕱皡㶱埃섺ꀖ꾡㉻䘀ۨåžê€‹â¹èŽ˜æºŸê¸‚ã˜Ÿä«‡ç „ã‰šë‡•é¤äŸ½ã»¦è‹â…žî€¹åŸí‚£å²ãšœé‘使‰§ë¼ë†±ç‡íš²ì‘拓ꪖ辨팉Ḭè«é¡Žë¥¦ã™‘é¸„è¾ºá¼¼æ·æ½ºê…èªë†—ì€³ã·±á­™êžæ“¦ë¿ çž…苜ê“ᕫ躩孴亅⻇ᣎ䰸뤮뼯䒺逷ꄯâ™ë‡© [ 168.368448][ T6013] usb 7-1: Manufacturer: ä¹ã·­è–‘㻬㛴棺ꋿ뻔ꘘʲè„è¹å‘€îª²î­‹ç¬…襒列ڛ놅튊泌æ£ã™’ [ 168.373253][ T6013] usb 7-1: SerialNumber: syz [ 168.542975][T10418] cgroup: subsys name conflicts with all [ 168.565373][T10418] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.572678][T10418] cgroup: subsys name conflicts with all [ 168.598180][ T6013] ftdi_sio 7-1:131.154: FTDI USB Serial Device converter detected [ 168.609243][ T6013] ftdi_sio ttyUSB0: unknown device type: 0xe1ac [ 168.616946][ T6013] ftdi_sio 7-1:131.165: FTDI USB Serial Device converter detected [ 168.622142][ T6013] ftdi_sio ttyUSB1: unknown device type: 0xe1ac [ 168.651555][ T6013] usb 7-1: USB disconnect, device number 12 [ 168.662710][ T6013] ftdi_sio 7-1:131.154: device disconnected [ 168.674759][ T6013] ftdi_sio 7-1:131.165: device disconnected [ 168.803235][T10434] netlink: 'syz.6.1145': attribute type 1 has an invalid length. [ 168.806105][T10434] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1145'. [ 168.812278][T10434] netlink: 658 bytes leftover after parsing attributes in process `syz.6.1145'. [ 168.815450][T10434] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1145'. [ 168.853335][T10438] ptrace attach of "/syz-executor exec"[9762] was attempted by ""[10438] [ 168.958907][ T40] audit: type=1400 audit(1771874959.030:959): avc: denied { remount } for pid=10439 comm="syz.1.1143" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 168.968018][T10440] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 169.017494][ T40] audit: type=1400 audit(1771874959.090:960): avc: denied { unmount } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 169.049680][T10443] netlink: 'syz.1.1147': attribute type 4 has an invalid length. [ 169.054186][T10443] netlink: 'syz.1.1147': attribute type 4 has an invalid length. [ 169.112773][T10445] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 169.116334][T10445] SELinux: failed to load policy [ 169.123037][T10445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1148'. [ 169.126938][T10445] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1148'. [ 169.131220][T10445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1148'. [ 169.135214][T10445] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1148'. [ 169.167017][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 169.250498][T10457] 9pnet: Found fid 0 not clunked [ 169.348356][T10462] lo speed is unknown, defaulting to 1000 [ 169.635175][T10482] o2cb: This node has not been configured. [ 169.643170][T10482] o2cb: Cluster check failed. Fix errors before retrying. [ 169.646236][T10482] (syz.1.1160,10482,2):user_dlm_register:674 ERROR: status = -22 [ 169.652562][T10482] (syz.1.1160,10482,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 170.084296][T10494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10494 comm=syz.2.1163 [ 170.119125][ T5928] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 170.206877][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 171.246905][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 171.252278][ T5928] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 171.255892][ T5928] Bluetooth: hci1: Injecting HCI hardware error event [ 171.260598][ T63] Bluetooth: hci1: hardware error 0x00 [ 172.296955][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 172.586748][T10475] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 172.591137][T10512] netlink: 'syz.2.1166': attribute type 11 has an invalid length. [ 172.594395][T10512] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1166'. [ 172.649808][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 172.649828][ T40] audit: type=1400 audit(1771874962.720:973): avc: denied { setopt } for pid=10530 comm="syz.1.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 172.679001][T10531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1168'. [ 172.683646][ T40] audit: type=1400 audit(1771874962.750:974): avc: denied { write } for pid=10530 comm="syz.1.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 172.695444][ T40] audit: type=1400 audit(1771874962.750:975): avc: denied { getopt } for pid=10533 comm="syz.5.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 172.754387][ T40] audit: type=1400 audit(1771874962.820:976): avc: denied { ioctl } for pid=10541 comm="syz.2.1172" path="socket:[38107]" dev="sockfs" ino=38107 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 172.815882][ T40] audit: type=1400 audit(1771874962.880:977): avc: denied { mounton } for pid=10558 comm="syz.1.1175" path="/syzcgroup/unified/syz1" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 172.832930][T10559] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 172.835597][T10559] UDF-fs: Scanning with blocksize 2048 failed [ 172.846853][T10559] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 172.851721][T10559] UDF-fs: Scanning with blocksize 4096 failed [ 172.926532][T10574] comedi comedi2: Minor 48 is invalid! [ 173.103216][T10580] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 173.220630][T10592] nfs: Unknown parameter 'ac€' [ 173.327417][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 173.344225][ T63] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 173.531126][ T40] audit: type=1400 audit(1771874963.600:978): avc: granted { setsecparam } for pid=10629 comm="syz.2.1193" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 173.542642][ T40] audit: type=1400 audit(1771874963.610:979): avc: denied { remount } for pid=10629 comm="syz.2.1193" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 173.641505][ T40] audit: type=1400 audit(1771874963.710:980): avc: denied { bind } for pid=10636 comm="syz.2.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 173.685903][T10634] __nla_validate_parse: 1 callbacks suppressed [ 173.685937][T10634] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1195'. [ 173.718280][T10638] syzkaller0: entered promiscuous mode [ 173.720223][T10638] syzkaller0: entered allmulticast mode [ 173.845926][T10649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.849824][T10649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.866144][T10654] input: syz0 as /devices/virtual/input/input20 [ 173.992896][T10659] xt_cgroup: path and classid specified [ 173.998920][T10659] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1202'. [ 174.002786][T10659] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 174.005862][T10659] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 174.130235][T10663] geneve2: entered promiscuous mode [ 174.132043][T10663] geneve2: entered allmulticast mode [ 174.135568][T10088] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.141177][T10088] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.145375][T10088] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.149529][T10088] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.367622][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 174.623813][T10685] netlink: 'syz.2.1209': attribute type 8 has an invalid length. [ 174.633363][ T40] audit: type=1400 audit(1771874964.700:981): avc: denied { mounton } for pid=10684 comm="syz.2.1209" path="/305/file0" dev="tmpfs" ino=1612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 174.638253][T10685] 9pnet_fd: p9_fd_create_unix (10685): problem connecting socket: ./file0: -111 [ 174.649969][T10685] QAT: Invalid ioctl -2144835806 [ 174.694941][T10687] netlink: 'syz.2.1210': attribute type 29 has an invalid length. [ 174.702616][T10687] netlink: 'syz.2.1210': attribute type 29 has an invalid length. [ 174.707877][T10687] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1210'. [ 174.815529][T10690] lo speed is unknown, defaulting to 1000 [ 174.918627][T10692] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode [ 175.085766][ T40] audit: type=1400 audit(1771874965.150:982): avc: denied { append } for pid=10697 comm="syz.2.1213" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 175.147961][T10700] lo speed is unknown, defaulting to 1000 [ 175.386218][T10707] netlink: 'syz.1.1216': attribute type 1 has an invalid length. [ 175.389026][T10707] netlink: 'syz.1.1216': attribute type 2 has an invalid length. [ 175.407651][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 175.415152][T10707] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 175.420183][T10707] qnx6: wrong signature (magic) in superblock #1. [ 175.422957][T10707] qnx6: unable to read the first superblock [ 175.431511][T10705] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 175.736946][ T55] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 175.887513][ T55] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 175.891070][ T55] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.893895][ T55] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.906890][ T55] usb 7-1: config 0 interface 0 has no altsetting 0 [ 175.913078][ T55] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.916073][ T55] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.926862][ T55] usb 7-1: config 0 interface 0 has no altsetting 0 [ 175.930688][ T55] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.933731][ T55] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.937278][ T55] usb 7-1: config 0 interface 0 has no altsetting 0 [ 175.940961][ T55] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.944320][ T55] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.951747][ T55] usb 7-1: config 0 interface 0 has no altsetting 0 [ 175.954711][ T55] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.957781][ T55] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.961232][ T55] usb 7-1: config 0 interface 0 has no altsetting 0 [ 175.964115][ T55] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.967440][ T55] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.970896][ T55] usb 7-1: config 0 interface 0 has no altsetting 0 [ 175.973664][ T55] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.976578][ T55] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.980119][ T55] usb 7-1: config 0 interface 0 has no altsetting 0 [ 175.982933][ T55] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.986254][ T55] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.989691][ T55] usb 7-1: config 0 interface 0 has no altsetting 0 [ 175.993372][ T55] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 175.997306][ T55] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 176.000315][ T55] usb 7-1: Product: syz [ 176.001596][ T55] usb 7-1: Manufacturer: syz [ 176.003075][ T55] usb 7-1: SerialNumber: syz [ 176.007693][ T55] usb 7-1: config 0 descriptor?? [ 176.014151][ T55] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 176.218171][ T55] usb 7-1: USB disconnect, device number 13 [ 176.222908][ T55] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 176.446974][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 176.537137][T10719] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 176.736953][T10725] delete_channel: no stack [ 176.739290][T10725] delete_channel: no stack [ 176.740907][T10725] delete_channel: no stack [ 176.742581][T10725] delete_channel: no stack [ 176.745184][T10725] delete_channel: no stack [ 176.747722][T10725] delete_channel: no stack [ 176.749588][T10725] delete_channel: no stack [ 176.751278][T10725] delete_channel: no stack [ 176.753138][T10725] delete_channel: no stack [ 176.754894][T10725] delete_channel: no stack [ 176.756665][T10725] delete_channel: no stack [ 176.760833][T10725] delete_channel: no stack [ 176.762482][T10725] delete_channel: no stack [ 176.764368][T10725] delete_channel: no stack [ 176.766375][T10725] delete_channel: no stack [ 176.768391][T10725] delete_channel: no stack [ 176.770421][T10725] delete_channel: no stack [ 176.772301][T10725] delete_channel: no stack [ 176.774323][T10725] delete_channel: no stack [ 176.776587][T10725] delete_channel: no stack [ 176.929370][T10738] fuse: Bad value for 'fd' [ 176.957937][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1227'. [ 177.333136][T10760] gfs2: not a GFS2 filesystem [ 177.337324][T10760] xt_hashlimit: size too large, truncated to 1048576 [ 177.389324][T10762] program syz.5.1234 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.486890][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 178.028297][T10773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10373 sclass=netlink_route_socket pid=10773 comm=syz.6.1237 [ 178.045775][T10773] netlink: 'syz.6.1237': attribute type 1 has an invalid length. [ 178.073646][T10773] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1237'. [ 178.079463][T10773] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1237'. [ 178.352067][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 178.352115][ T40] audit: type=1400 audit(1771874968.420:993): avc: denied { read write } for pid=9188 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.376215][ T40] audit: type=1400 audit(1771874968.420:994): avc: denied { open } for pid=9188 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.387921][ T40] audit: type=1400 audit(1771874968.420:995): avc: denied { ioctl } for pid=9188 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.410122][ T40] audit: type=1400 audit(1771874968.440:996): avc: denied { create } for pid=10782 comm="syz.5.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 178.440292][ T40] audit: type=1400 audit(1771874968.460:997): avc: denied { write } for pid=10782 comm="syz.5.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 178.449290][ T40] audit: type=1400 audit(1771874968.460:998): avc: denied { create } for pid=10784 comm="syz.6.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 178.455865][ T40] audit: type=1400 audit(1771874968.460:999): avc: denied { setopt } for pid=10784 comm="syz.6.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 178.462928][ T40] audit: type=1400 audit(1771874968.460:1000): avc: denied { ioctl } for pid=10784 comm="syz.6.1239" path="socket:[39783]" dev="sockfs" ino=39783 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 178.472901][ T40] audit: type=1400 audit(1771874968.460:1001): avc: denied { write } for pid=10784 comm="syz.6.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 178.483030][ T40] audit: type=1400 audit(1771874968.550:1002): avc: denied { allowed } for pid=10787 comm="syz.5.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 178.486501][T10788] vlan0: entered promiscuous mode [ 178.527014][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 178.696950][T10804] netlink: 348 bytes leftover after parsing attributes in process `syz.5.1246'. [ 178.893125][T10822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=10822 comm=syz.2.1252 [ 178.899579][T10824] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 178.907012][T10826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=10826 comm=syz.2.1252 [ 179.096589][T10848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.354314][T10873] hpfs: Bad magic ... probably not HPFS [ 179.359116][T10873] hpfs: Bad magic ... probably not HPFS [ 179.388940][T10875] ufs: You didn't specify the type of your ufs filesystem [ 179.388940][T10875] [ 179.388940][T10875] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 179.388940][T10875] [ 179.388940][T10875] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 179.406100][T10875] ufs: ufstype=old is supported read-only [ 179.409944][T10875] ufs: ufs_fill_super(): bad magic number [ 179.470561][T10881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1269'. [ 179.474318][T10881] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1269'. [ 179.478638][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1269'. [ 179.566923][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 179.897216][ T39] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 180.060004][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.064806][ T39] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 180.072586][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.078951][ T39] usb 6-1: config 0 descriptor?? [ 180.147940][T10897] /dev/sr0: Can't open blockdev [ 180.217534][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1278'. [ 180.243839][T10907] netlink: 'syz.5.1277': attribute type 1 has an invalid length. [ 180.249293][T10906] netlink: 'syz.5.1277': attribute type 1 has an invalid length. [ 180.305501][T10906] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 180.414922][T10921] Cannot find set identified by id 65535 to match [ 180.449242][T10907] veth3: entered promiscuous mode [ 180.454260][T10907] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 180.506518][ T39] usbhid 6-1:0.0: can't add hid device: -71 [ 180.507307][T10924] lo speed is unknown, defaulting to 1000 [ 180.510761][ T39] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 180.522759][ T39] usb 6-1: USB disconnect, device number 12 [ 180.607051][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 180.676968][ T1328] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 180.836926][ T1328] usb 11-1: Using ep0 maxpacket: 8 [ 180.840810][ T1328] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 180.844072][ T1328] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 180.856895][ T1328] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 180.860276][ T1328] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 180.864366][ T1328] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.886896][ T1328] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 180.890611][ T1328] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.026994][ T39] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 181.106904][ T1328] usb 11-1: usb_control_msg returned -32 [ 181.109088][ T1328] usbtmc 11-1:16.0: can't read capabilities [ 181.176849][ T39] usb 6-1: Using ep0 maxpacket: 32 [ 181.179869][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.183602][ T39] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 181.186566][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.193021][ T39] usb 6-1: config 0 descriptor?? [ 181.198647][ T39] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 181.206159][ T39] ldusb 6-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 181.410284][T10891] usbtmc 11-1:16.0: send_request_dev_dep_msg_in returned -90 [ 181.646990][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 181.722111][ T39] usb 6-1: USB disconnect, device number 13 [ 181.732751][ T39] ldusb 6-1:0.0: LD USB Device #1 now disconnected [ 181.802979][T10955] macsec2: entered promiscuous mode [ 181.805312][T10955] macsec2: entered allmulticast mode [ 181.813818][ T24] usb 11-1: USB disconnect, device number 3 [ 181.857013][T10959] vivid-002: disconnect [ 181.859846][T10959] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 181.861498][T10961] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1295'. [ 181.863837][T10958] vivid-002: reconnect [ 181.908537][T10953] IPVS: length: 528 != 8 [ 182.044067][T10969] binder: 10960:10969 ioctl c0306201 0 returned -14 [ 182.051026][T10969] binder: 10960:10969 ioctl c0306201 0 returned -14 [ 182.281580][T10973] xt_hashlimit: invalid rate [ 182.353645][T10982] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1301'. [ 182.404784][T10984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1301'. [ 182.455466][T10982] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1301'. [ 182.687019][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 182.794573][T11003] netlink: 992 bytes leftover after parsing attributes in process `syz.5.1307'. [ 182.961932][T11028] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 183.012279][T11037] binder_alloc: binder_alloc_mmap_handler: 11034 200000ffc000-200000ffd000 already mapped failed -16 [ 183.131501][T11043] bond0: entered promiscuous mode [ 183.133128][T11043] bond_slave_0: entered promiscuous mode [ 183.135055][T11043] bond_slave_1: entered promiscuous mode [ 183.138693][T11043] gretap0: entered promiscuous mode [ 183.141215][T11043] debugfs: 'hsr1' already exists in 'hsr' [ 183.143071][T11043] Cannot create hsr debugfs directory [ 183.144803][T11043] hsr1: entered promiscuous mode [ 183.541325][T11074] syz_tun: left allmulticast mode [ 183.543236][T11074] syz_tun: left promiscuous mode [ 183.545092][T11074] bridge0: port 3(syz_tun) entered disabled state [ 183.555554][T11074] bridge_slave_1: left allmulticast mode [ 183.558441][T11074] bridge_slave_1: left promiscuous mode [ 183.561075][T11074] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.727542][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 183.755074][ T40] kauditd_printk_skb: 171 callbacks suppressed [ 183.755114][ T40] audit: type=1400 audit(1771874973.820:1174): avc: denied { search } for pid=11082 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.769202][ T40] audit: type=1400 audit(1771874973.820:1175): avc: denied { search } for pid=11082 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.772374][T11087] xt_hashlimit: invalid rate [ 183.789024][ T40] audit: type=1400 audit(1771874973.820:1176): avc: denied { search } for pid=11082 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1906 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.794731][T11081] netlink: 'syz.6.1330': attribute type 3 has an invalid length. [ 183.816924][ T40] audit: type=1400 audit(1771874973.820:1177): avc: denied { search } for pid=11082 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.843886][ T40] audit: type=1400 audit(1771874973.830:1178): avc: denied { read open } for pid=11085 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.856365][ T40] audit: type=1400 audit(1771874973.830:1179): avc: denied { getattr } for pid=11085 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.867800][ T40] audit: type=1400 audit(1771874973.840:1180): avc: denied { add_name } for pid=11082 comm="dhcpcd-run-hook" name="resolv.conf.lapb8.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.875050][ T40] audit: type=1400 audit(1771874973.840:1181): avc: denied { create } for pid=11082 comm="dhcpcd-run-hook" name="resolv.conf.lapb8.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 183.894821][ T40] audit: type=1400 audit(1771874973.840:1182): avc: denied { write open } for pid=11082 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb8.ipv4ll" dev="tmpfs" ino=6303 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 183.906111][ T40] audit: type=1400 audit(1771874973.840:1183): avc: denied { append } for pid=11082 comm="dhcpcd-run-hook" name="resolv.conf.lapb8.ipv4ll" dev="tmpfs" ino=6303 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 183.922856][T11102] __nla_validate_parse: 4 callbacks suppressed [ 183.922867][T11102] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1337'. [ 183.929231][T11096] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1335'. [ 183.978660][T11107] ªªªªªª: renamed from vlan0 [ 183.989530][T11113] cgroup: Unknown subsys name 'subj_role' [ 184.034129][T11115] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1342'. [ 184.034718][T11118] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1345'. [ 184.040643][T11115] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 184.045010][T11115] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1342'. [ 184.050546][T11115] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11115 comm=syz.2.1342 [ 184.053855][T11121] overlayfs: missing 'lowerdir' [ 184.181833][T11134] fuse: Bad value for 'fd' [ 184.245260][T11140] MTD: Couldn't look up './bus': -15 [ 184.647224][ T34] usb 11-1: new low-speed USB device number 4 using dummy_hcd [ 184.708971][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1360'. [ 184.766963][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 184.796956][ T34] usb 11-1: Invalid ep0 maxpacket: 16 [ 184.909305][T11179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1363'. [ 184.933097][ T34] usb 11-1: new low-speed USB device number 5 using dummy_hcd [ 184.948005][T11179] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11179 comm=syz.2.1363 [ 185.086323][T11187] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 13 out of range (51000000..2150000000) [ 185.086940][ T34] usb 11-1: Invalid ep0 maxpacket: 16 [ 185.093079][ T34] usb usb11-port1: attempt power cycle [ 185.374037][T11222] sctp: [Deprecated]: syz.2.1373 (pid 11222) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.374037][T11222] Use struct sctp_sack_info instead [ 185.426940][ T34] usb 11-1: new low-speed USB device number 6 using dummy_hcd [ 185.447594][ T63] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 185.447626][ T34] usb 11-1: Invalid ep0 maxpacket: 16 [ 185.589242][ T34] usb 11-1: new low-speed USB device number 7 using dummy_hcd [ 185.607624][ T34] usb 11-1: Invalid ep0 maxpacket: 16 [ 185.610071][ T34] usb usb11-port1: unable to enumerate USB device [ 185.807035][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 185.833033][T11257] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 185.835776][T11257] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 185.898338][T11258] 9p: Bad value for 'dfltuid' [ 185.900248][T11258] 9p: Bad value for 'dfltuid' [ 186.326712][T11268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1387'. [ 186.333884][T11270] syz.1.1388 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 186.339953][T11270] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1388'. [ 186.343145][T11270] netlink: Conntrack attr has 4 unknown bytes [ 186.391831][ T39] hid_parser_main: 5 callbacks suppressed [ 186.391851][ T39] hid-generic 00A0:0086:0003.0003: unknown main item tag 0x0 [ 186.398817][ T39] hid-generic 00A0:0086:0003.0003: unknown main item tag 0x0 [ 186.402130][ T39] hid-generic 00A0:0086:0003.0003: unknown main item tag 0x0 [ 186.406526][ T39] hid-generic 00A0:0086:0003.0003: unknown main item tag 0x0 [ 186.411316][ T39] hid-generic 00A0:0086:0003.0003: unknown main item tag 0x0 [ 186.414646][ T39] hid-generic 00A0:0086:0003.0003: unknown main item tag 0x0 [ 186.419264][ T39] hid-generic 00A0:0086:0003.0003: unknown main item tag 0x0 [ 186.424131][ T39] hid-generic 00A0:0086:0003.0003: unknown main item tag 0x0 [ 186.427888][ T39] hid-generic 00A0:0086:0003.0003: unknown main item tag 0x0 [ 186.431353][ T39] hid-generic 00A0:0086:0003.0003: unknown main item tag 0x0 [ 186.442435][ T39] hid-generic 00A0:0086:0003.0003: hidraw1: HID v0.05 Device [syz1] on syz0 [ 186.506564][T11284] fido_id[11284]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 186.520381][ T5930] udevd[5930]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 186.546820][T11288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.550702][T11288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.649013][T11301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1396'. [ 186.846954][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 186.868751][T11316] cgroup: Setting release_agent not allowed [ 187.117042][T11342] team0: Device gtp0 is of different type [ 187.710047][T11370] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20004 [ 187.735765][T11372] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 187.887083][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 187.999300][T11383] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 188.329952][T11392] netlink: 'syz.6.1429': attribute type 10 has an invalid length. [ 188.333965][T11392] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 188.345472][T11392] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 188.356989][T11392] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 188.417775][T11397] overlayfs: overlapping lowerdir path [ 188.669873][T11403] binder: 11402:11403 ioctl c0306201 2000000003c0 returned -14 [ 188.936906][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 189.035684][ T40] kauditd_printk_skb: 86 callbacks suppressed [ 189.035698][ T40] audit: type=1400 audit(1771874979.100:1270): avc: denied { write } for pid=11418 comm="syz.1.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 189.057869][ T5975] IPVS: starting estimator thread 0... [ 189.145234][ T40] audit: type=1400 audit(1771874979.210:1271): avc: denied { read } for pid=11439 comm="syz.5.1442" dev="nsfs" ino=4026533190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 189.154457][ T40] audit: type=1400 audit(1771874979.210:1272): avc: denied { open } for pid=11439 comm="syz.5.1442" path="net:[4026533190]" dev="nsfs" ino=4026533190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 189.164256][ T40] audit: type=1400 audit(1771874979.210:1273): avc: denied { create } for pid=11439 comm="syz.5.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 189.168327][T11443] __nla_validate_parse: 6 callbacks suppressed [ 189.168338][T11443] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.1441'. [ 189.171655][ T40] audit: type=1400 audit(1771874979.210:1274): avc: denied { setopt } for pid=11439 comm="syz.5.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 189.174203][T11443] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.1441'. [ 189.174334][T11432] IPVS: using max 43 ests per chain, 103200 per kthread [ 189.176547][ T40] audit: type=1400 audit(1771874979.210:1275): avc: denied { create } for pid=11438 comm="syz.6.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 189.198065][ T40] audit: type=1400 audit(1771874979.210:1276): avc: denied { write } for pid=11438 comm="syz.6.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 189.205553][ T40] audit: type=1400 audit(1771874979.210:1277): avc: denied { create } for pid=11439 comm="syz.5.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 189.214255][ T40] audit: type=1400 audit(1771874979.240:1278): avc: denied { checkpoint_restore } for pid=11438 comm="syz.6.1441" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 189.231151][ T40] audit: type=1400 audit(1771874979.300:1279): avc: denied { read write } for pid=11446 comm="syz.1.1444" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 189.231498][T11447] fuse: Unknown parameter '000000000000000000030x0000000000000005' [ 189.411294][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1448'. [ 189.488343][T11479] befs: Unknown parameter 'discard' [ 189.552092][T11484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1452'. [ 189.557708][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1452'. [ 189.562199][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1452'. [ 189.966967][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 190.223410][T11528] netlink: 'syz.2.1465': attribute type 1 has an invalid length. [ 190.244599][T11528] 8021q: adding VLAN 0 to HW filter on device bond6 [ 190.336878][T11537] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1468'. [ 190.338649][T11535] erofs (device nullb0): cannot find valid erofs superblock [ 190.550151][T11545] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1471'. [ 190.591898][T11547] netlink: 'syz.6.1472': attribute type 89 has an invalid length. [ 190.594870][T11547] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1472'. [ 190.652726][T11549] veth0_to_team: entered promiscuous mode [ 190.655575][T11549] veth0_to_team: left promiscuous mode [ 190.976928][ T7161] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 191.006953][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 191.107054][ T7161] usb 11-1: device descriptor read/64, error -71 [ 191.250502][T11555] ucma_write: process 579 (syz.5.1475) changed security contexts after opening file descriptor, this is not allowed. [ 191.278929][T11555] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 191.292685][T11555] bond2: (slave lo): Enslaving as an active interface with an up link [ 191.301534][T11555] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 191.314762][T11557] netlink: 'syz.2.1476': attribute type 1 has an invalid length. [ 191.327543][T11557] bond7: entered promiscuous mode [ 191.329983][T11557] 8021q: adding VLAN 0 to HW filter on device bond7 [ 191.338222][T11555] cgroup: Invalid name [ 191.338652][T11557] 8021q: adding VLAN 0 to HW filter on device bond7 [ 191.340172][T11555] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1475'. [ 191.342832][T11557] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 191.346977][ T7161] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 191.348166][T11557] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 191.355992][T11557] bond7: (slave vti0): making interface the new active one [ 191.358630][T11557] vti0: entered promiscuous mode [ 191.362778][T11557] bond7: (slave vti0): Enslaving as an active interface with an up link [ 191.409049][T11568] netlink: 'syz.5.1479': attribute type 1 has an invalid length. [ 191.418562][T11568] ufs: You didn't specify the type of your ufs filesystem [ 191.418562][T11568] [ 191.418562][T11568] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 191.418562][T11568] [ 191.418562][T11568] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 191.429825][T11568] ufs: failed to set blocksize [ 191.486980][ T7161] usb 11-1: device descriptor read/64, error -71 [ 191.561500][T11585] 9p: Bad value for 'rfdno' [ 191.597009][ T7161] usb usb11-port1: attempt power cycle [ 191.671923][T11593] program syz.5.1486 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.824222][ T63] Bluetooth: hci0: SCO packet for unknown connection handle 1 [ 191.825088][ T63] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 191.936922][ T7161] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 191.957831][ T7161] usb 11-1: device descriptor read/8, error -71 [ 191.970182][T11615] wg1: entered promiscuous mode [ 191.971958][T11615] wg1: entered allmulticast mode [ 192.042310][T11621] IPVS: set_ctl: invalid protocol: 11608 172.20.20.11:21 [ 192.046953][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 192.197111][ T7161] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 192.217770][ T7161] usb 11-1: device descriptor read/8, error -71 [ 192.330014][ T7161] usb usb11-port1: unable to enumerate USB device [ 192.471893][T11634] loop2: detected capacity change from 0 to 7 [ 192.476233][T11634] Dev loop2: unable to read RDB block 7 [ 192.478352][T11634] loop2: AHDI p1 p2 p3 [ 192.480084][T11634] loop2: partition table partially beyond EOD, truncated [ 192.483592][T11634] loop2: p1 start 1601398130 is beyond EOD, truncated [ 192.486487][T11634] loop2: p2 start 1702059890 is beyond EOD, truncated [ 192.583595][T11644] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11644 comm=syz.5.1505 [ 192.792920][T11656] openvswitch: netlink: Unknown key attributes 2 [ 192.985307][T11676] team0 (unregistering): Port device team_slave_0 removed [ 192.989173][ T5975] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 193.000250][T11676] team0 (unregistering): Port device team_slave_1 removed [ 193.087055][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 194.039166][ T40] kauditd_printk_skb: 189 callbacks suppressed [ 194.039186][ T40] audit: type=1400 audit(1771874984.110:1469): avc: denied { name_bind } for pid=11698 comm="syz.5.1519" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 194.049484][ T40] audit: type=1400 audit(1771874984.110:1470): avc: denied { node_bind } for pid=11698 comm="syz.5.1519" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 194.074814][ T40] audit: type=1400 audit(1771874984.140:1471): avc: denied { allowed } for pid=11710 comm="syz.2.1523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 194.110509][ T40] audit: type=1400 audit(1771874984.180:1472): avc: denied { write } for pid=11717 comm="syz.2.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 194.116927][ T40] audit: type=1400 audit(1771874984.180:1473): avc: denied { read } for pid=11717 comm="syz.2.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 194.127062][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 194.208957][ T40] audit: type=1400 audit(1771874984.270:1474): avc: denied { name_bind } for pid=11717 comm="syz.2.1525" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 194.282766][T11730] __nla_validate_parse: 13 callbacks suppressed [ 194.282780][T11730] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1526'. [ 194.404921][T11739] netlink: 'syz.5.1528': attribute type 16 has an invalid length. [ 194.409267][T11739] netlink: 'syz.5.1528': attribute type 2 has an invalid length. [ 194.412123][T11739] netlink: 64102 bytes leftover after parsing attributes in process `syz.5.1528'. [ 194.416580][ T40] audit: type=1400 audit(1771874984.480:1475): avc: denied { write } for pid=11736 comm="syz.5.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 194.441596][ T40] audit: type=1400 audit(1771874984.510:1476): avc: denied { read write } for pid=9188 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.452414][ T40] audit: type=1400 audit(1771874984.510:1477): avc: denied { open } for pid=9188 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.462133][ T40] audit: type=1400 audit(1771874984.510:1478): avc: denied { ioctl } for pid=9188 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.513989][T11750] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1533'. [ 194.791566][T11770] futex_wake_op: syz.5.1539 tries to shift op by -1; fix this program [ 194.867571][T11775] syzkaller0: entered promiscuous mode [ 194.869873][T11775] syzkaller0: entered allmulticast mode [ 194.897142][ T7161] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 194.905153][T11762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1537'. [ 194.927627][T11776] netlink: 'syz.5.1540': attribute type 1 has an invalid length. [ 194.931039][T11776] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1540'. [ 195.064080][ T7161] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 195.068196][ T7161] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 195.072102][ T7161] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.079223][ T7161] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 195.082939][ T7161] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.086114][ T7161] usb 11-1: Product: syz [ 195.088503][ T7161] usb 11-1: Manufacturer: syz [ 195.090529][ T7161] usb 11-1: SerialNumber: syz [ 195.098633][ T7161] hub 11-1:1.0: bad descriptor, ignoring hub [ 195.101359][ T7161] hub 11-1:1.0: probe with driver hub failed with error -5 [ 195.176910][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 195.311372][T11757] vxfs: unable to read disk superblock at 1 [ 195.314247][T11757] vxfs: unable to read disk superblock at 8 [ 195.316370][T11757] vxfs: can't find superblock. [ 195.322535][ T7161] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 195.581504][T11807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.584517][T11807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.771761][T11812] overlayfs: missing 'lowerdir' [ 195.940103][T11757] usb 11-1: reset high-speed USB device number 12 using dummy_hcd [ 196.066914][ T6013] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 196.122821][T11757] usb 11-1: device firmware changed [ 196.130711][ T7161] usb 11-1: USB disconnect, device number 12 [ 196.148494][ T7161] usblp0: removed [ 196.206979][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 196.217044][ T6013] usb 10-1: Using ep0 maxpacket: 32 [ 196.221330][ T6013] usb 10-1: config 0 has no interfaces? [ 196.223759][ T6013] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 196.228005][ T6013] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.239583][ T6013] usb 10-1: config 0 descriptor?? [ 196.276981][ T7161] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 196.429804][ T7161] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 196.433889][ T7161] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 196.438178][ T7161] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.446562][ T7161] usb 11-1: language id specifier not provided by device, defaulting to English [ 196.447246][ T6007] usb 10-1: USB disconnect, device number 5 [ 196.468483][ T7161] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 196.472429][ T7161] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.480349][ T7161] hub 11-1:1.0: bad descriptor, ignoring hub [ 196.483023][ T7161] hub 11-1:1.0: probe with driver hub failed with error -5 [ 196.688964][ T7161] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 196.717501][ T7161] usb 11-1: USB disconnect, device number 13 [ 196.722682][ T7161] usblp0: removed [ 197.246972][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 197.341374][T11840] macsec3: entered promiscuous mode [ 197.415968][T11840] macsec3: entered promiscuous mode [ 197.504225][T11840] macsec3: entered promiscuous mode [ 197.575094][T11840] macsec3: entered promiscuous mode [ 197.644830][T11840] macsec3: entered promiscuous mode [ 197.705487][T11840] macsec3: entered promiscuous mode [ 197.775113][T11840] macsec3: entered promiscuous mode [ 197.854446][T11840] macsec3: entered promiscuous mode [ 197.925354][T11840] macsec3: entered promiscuous mode [ 197.993059][T11840] macsec3: entered promiscuous mode [ 198.052900][T11840] macsec3: entered promiscuous mode [ 198.114775][T11840] macsec3: entered promiscuous mode [ 198.287003][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 198.295201][T11864] lo speed is unknown, defaulting to 1000 [ 198.382910][T11871] veth1_macvtap: left promiscuous mode [ 198.384743][T11871] macsec0: entered promiscuous mode [ 198.386471][T11871] macsec0: entered allmulticast mode [ 198.465340][T11876] 9p: Bad value for 'rfdno' [ 198.609085][T11885] cgroup: none used incorrectly [ 199.327544][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 199.329856][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.442439][ T40] kauditd_printk_skb: 148 callbacks suppressed [ 199.442451][ T40] audit: type=1400 audit(1771874989.510:1627): avc: denied { read } for pid=11888 comm="syz.6.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 199.708157][ T40] audit: type=1400 audit(1771874989.780:1628): avc: denied { create } for pid=11892 comm="syz.6.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 199.717415][ T40] audit: type=1400 audit(1771874989.780:1629): avc: denied { write } for pid=11892 comm="syz.6.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 199.725983][ T40] audit: type=1400 audit(1771874989.790:1630): avc: denied { map } for pid=11892 comm="syz.6.1577" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42891 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 199.740873][ T40] audit: type=1400 audit(1771874989.790:1631): avc: denied { read write } for pid=11892 comm="syz.6.1577" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42891 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 199.751576][ T40] audit: type=1400 audit(1771874989.790:1632): avc: denied { read } for pid=11892 comm="syz.6.1577" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 199.765279][ T40] audit: type=1400 audit(1771874989.790:1633): avc: denied { read open } for pid=11892 comm="syz.6.1577" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 199.775895][ T40] audit: type=1400 audit(1771874989.790:1634): avc: denied { ioctl } for pid=11892 comm="syz.6.1577" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 199.855049][ T40] audit: type=1400 audit(1771874989.920:1635): avc: denied { create } for pid=11894 comm="syz.6.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 199.863245][ T40] audit: type=1400 audit(1771874989.920:1636): avc: denied { write } for pid=11894 comm="syz.6.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 199.954692][T11899] geneve3: entered promiscuous mode [ 199.956769][T11899] geneve3: entered allmulticast mode [ 200.092937][T11908] tmpfs: Bad value for 'mpol' [ 200.224122][T11922] bridge0: port 3(syz_tun) entered blocking state [ 200.226447][T11922] bridge0: port 3(syz_tun) entered disabled state [ 200.228879][T11922] syz_tun: entered allmulticast mode [ 200.233206][T11922] syz_tun: entered promiscuous mode [ 200.235329][T11922] bridge0: port 3(syz_tun) entered blocking state [ 200.237699][T11922] bridge0: port 3(syz_tun) entered forwarding state [ 200.332421][T11934] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 200.376951][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 200.442377][T11944] overlayfs: failed to clone upperpath [ 200.647716][T11946] loop5: detected capacity change from 0 to 7 [ 200.652755][T11946] Dev loop5: unable to read RDB block 7 [ 200.655037][T11946] loop5: unable to read partition table [ 200.657582][T11946] loop5: partition table beyond EOD, truncated [ 200.660116][T11946] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 200.940806][T11953] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1598'. [ 200.956054][ T63] Bluetooth: hci3: Malformed HCI Event [ 201.406923][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 201.443331][T11978] 9p: Bad value for 'rfdno' [ 201.582177][T11990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=11990 comm=syz.5.1609 [ 201.582533][T11989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1793 sclass=netlink_route_socket pid=11989 comm=syz.5.1609 [ 201.593939][T11989] IPv6: NLM_F_REPLACE set, but no existing node found! [ 202.007035][ T6013] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 202.125486][T12005] Bluetooth: MGMT ver 1.23 [ 202.186964][ T6013] usb 10-1: Using ep0 maxpacket: 32 [ 202.198084][ T6013] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 202.201758][ T6013] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 202.205466][ T6013] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 202.209726][ T6013] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 202.213964][ T6013] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 202.218625][ T6013] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 202.224476][ T6013] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 202.230042][ T6013] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.236142][ T6013] usb 10-1: config 0 descriptor?? [ 202.446904][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 202.450117][ T6013] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 202.521471][ T39] usb 10-1: USB disconnect, device number 6 [ 202.527731][ T39] usblp0: removed [ 202.579939][T12026] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12026 comm=syz.5.1623 [ 202.598758][T12026] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1623'. [ 203.017891][T12050] bond3: option xmit_hash_policy: invalid value (6) [ 203.019647][T12054] fuse: Bad value for 'fd' [ 203.023413][T12050] bond3 (unregistering): Released all slaves [ 203.054632][T12051] bond3: option xmit_hash_policy: invalid value (6) [ 203.057675][T12056] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1633'. [ 203.065594][T12051] bond3 (unregistering): Released all slaves [ 203.134977][T12064] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 203.141683][T12062] lo speed is unknown, defaulting to 1000 [ 203.296468][T12079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=12079 comm=syz.6.1641 [ 203.304006][T12079] ALSA: mixer_oss: invalid OSS volume '' [ 203.319512][T12079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=12079 comm=syz.6.1641 [ 203.371356][T12093] tmpfs: Bad value for 'mpol' [ 203.421484][T12093] lo speed is unknown, defaulting to 1000 [ 203.487047][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 203.499411][T12101] program syz.6.1646 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.503381][T12101] ata1.00: invalid transfer count 0 [ 203.607162][ T39] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 203.752346][T12115] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1651'. [ 203.766993][ T39] usb 10-1: Using ep0 maxpacket: 8 [ 203.770024][ T39] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 203.773108][ T39] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 203.776231][ T39] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 203.783192][ T39] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 203.787667][ T39] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.791880][ T39] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 203.794885][ T39] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.092582][T12126] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 204.336027][T12139] cgroup: none used incorrectly [ 204.375506][T12145] netlink: zone id is out of range [ 204.377781][T12145] netlink: get zone limit has 4 unknown bytes [ 204.380865][T12145] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1659'. [ 204.471334][T12147] ocfs2: Unknown parameter 'aá”' [ 204.474008][ T40] kauditd_printk_skb: 234 callbacks suppressed [ 204.474023][ T40] audit: type=1400 audit(1771874994.540:1871): avc: denied { ioctl } for pid=12144 comm="syz.6.1659" path="socket:[46448]" dev="sockfs" ino=46448 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 204.501086][ T40] audit: type=1400 audit(1771874994.570:1872): avc: denied { create } for pid=12148 comm="syz.2.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 204.527224][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 204.544990][ T40] audit: type=1400 audit(1771874994.610:1873): avc: denied { create } for pid=12150 comm="syz.2.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 204.554133][ T40] audit: type=1400 audit(1771874994.620:1874): avc: denied { setopt } for pid=12150 comm="syz.2.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 204.592705][ T40] audit: type=1400 audit(1771874994.660:1875): avc: denied { execmem } for pid=12155 comm="syz.2.1662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 204.608790][ T40] audit: type=1400 audit(1771874994.680:1876): avc: denied { create } for pid=12157 comm="syz.6.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 204.619169][ T40] audit: type=1400 audit(1771874994.680:1877): avc: denied { shutdown } for pid=12157 comm="syz.6.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 204.619207][ T40] audit: type=1400 audit(1771874994.680:1878): avc: denied { create } for pid=12157 comm="syz.6.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 204.619239][ T40] audit: type=1400 audit(1771874994.680:1879): avc: denied { getopt } for pid=12157 comm="syz.6.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 204.649791][ T40] audit: type=1400 audit(1771874994.720:1880): avc: denied { read } for pid=12157 comm="syz.6.1663" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 204.757939][T12156] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 204.920549][T12172] usbtmc 10-1:16.0: simple control status returned ec [ 204.943035][T12171] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1668'. [ 205.088279][ T34] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 205.236924][ T34] usb 11-1: Using ep0 maxpacket: 16 [ 205.240240][ T34] usb 11-1: config index 0 descriptor too short (expected 65, got 36) [ 205.243760][ T34] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 205.248852][ T34] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 205.253458][ T34] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.259352][ T34] usb 11-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 205.263202][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.269929][ T34] usb 11-1: config 0 descriptor?? [ 205.277866][ T34] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input22 [ 205.478510][ T34] usb 11-1: USB disconnect, device number 14 [ 205.566991][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 205.844071][ T5928] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 205.848448][ T5928] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 205.851632][ T5928] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 205.855203][ T5928] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 205.861029][ T5928] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 205.886615][T12178] lo speed is unknown, defaulting to 1000 [ 206.084717][T12178] chnl_net:caif_netlink_parms(): no params data found [ 206.086051][T12191] fuse: Bad value for 'max_read' [ 206.150423][T12178] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.152801][T12178] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.155314][T12178] bridge_slave_0: entered allmulticast mode [ 206.159289][T12178] bridge_slave_0: entered promiscuous mode [ 206.163958][T12178] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.167279][T12178] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.170375][T12178] bridge_slave_1: entered allmulticast mode [ 206.174299][T12178] bridge_slave_1: entered promiscuous mode [ 206.201371][T12178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.208561][T12178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.236310][T12178] team0: Port device team_slave_0 added [ 206.241130][T12178] team0: Port device team_slave_1 added [ 206.264759][T12178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.267931][T12178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.278806][T12178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.284964][T12178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.288069][T12178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.298915][T12178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.330710][T12178] hsr_slave_0: entered promiscuous mode [ 206.333850][T12178] hsr_slave_1: entered promiscuous mode [ 206.337905][T12178] debugfs: 'hsr0' already exists in 'hsr' [ 206.340418][T12178] Cannot create hsr debugfs directory [ 206.371711][ T7161] usb 10-1: USB disconnect, device number 7 [ 206.479191][T12178] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 206.486344][T12178] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 206.493445][T12178] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 206.500888][T12178] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 206.546171][T12221] 9pnet_fd: p9_fd_create_unix (12221): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 206.565974][T12178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.606932][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 206.622395][T12178] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.637945][T10090] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.641048][T10090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.649106][T10085] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.651967][T10085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.787680][T12178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.984467][T12178] veth0_vlan: entered promiscuous mode [ 207.005417][T12178] veth1_vlan: entered promiscuous mode [ 207.028223][T12178] veth0_macvtap: entered promiscuous mode [ 207.034215][T12178] veth1_macvtap: entered promiscuous mode [ 207.054200][T12178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.067812][T12178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.081950][T10087] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.089113][T10087] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.096098][T10087] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.106560][T10087] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.209892][T10087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.212814][T10087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.244515][T10090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.247439][T10090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.652147][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 207.887012][ T5928] Bluetooth: hci4: command tx timeout [ 208.113413][T12290] lo speed is unknown, defaulting to 1000 [ 208.207528][T12293] xt_hashlimit: size too large, truncated to 1048576 [ 208.687048][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 208.696929][ T55] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 208.847106][ T55] usb 12-1: Using ep0 maxpacket: 8 [ 208.853700][ T55] usb 12-1: config 0 has an invalid interface number: 55 but max is 0 [ 208.856712][ T55] usb 12-1: config 0 has no interface number 0 [ 208.859958][ T55] usb 12-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 208.864444][ T55] usb 12-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 208.870538][ T55] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 208.875030][ T55] usb 12-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 208.880379][ T55] usb 12-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 208.883944][ T55] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.892409][ T55] usb 12-1: config 0 descriptor?? [ 208.903969][ T55] ldusb 12-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 208.964888][T12320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.201361][ T39] usb 12-1: USB disconnect, device number 2 [ 209.210093][ T39] ldusb 12-1:0.55: LD USB Device #0 now disconnected [ 209.266471][T12323] 9p: Bad value for 'rfdno' [ 209.459522][T12324] netlink: 'syz.7.1709': attribute type 12 has an invalid length. [ 209.525773][ T40] kauditd_printk_skb: 186 callbacks suppressed [ 209.525790][ T40] audit: type=1400 audit(1771874999.590:2067): avc: denied { create } for pid=12325 comm="syz.2.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 209.540237][ T40] audit: type=1400 audit(1771874999.610:2068): avc: denied { setopt } for pid=12325 comm="syz.2.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 209.551684][ T40] audit: type=1400 audit(1771874999.620:2069): avc: denied { write } for pid=12325 comm="syz.2.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 209.561786][ T40] audit: type=1400 audit(1771874999.630:2070): avc: denied { read write } for pid=9188 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.572571][ T40] audit: type=1400 audit(1771874999.630:2071): avc: denied { open } for pid=9188 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.582789][ T40] audit: type=1400 audit(1771874999.630:2072): avc: denied { ioctl } for pid=9188 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.605584][ T40] audit: type=1400 audit(1771874999.670:2073): avc: denied { create } for pid=12327 comm="syz.5.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 209.624074][ T40] audit: type=1400 audit(1771874999.670:2074): avc: denied { read } for pid=12325 comm="syz.2.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 209.648763][ T40] audit: type=1400 audit(1771874999.710:2075): avc: denied { getopt } for pid=12327 comm="syz.5.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 209.649666][T12328] netlink: 'syz.5.1711': attribute type 1 has an invalid length. [ 209.669228][ T40] audit: type=1400 audit(1771874999.710:2076): avc: denied { ioctl } for pid=12327 comm="syz.5.1711" path="socket:[46690]" dev="sockfs" ino=46690 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 209.726985][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 209.862271][T12350] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1717'. [ 209.865139][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1716'. [ 209.883269][ T10] Process accounting resumed [ 209.966909][ T5928] Bluetooth: hci4: command tx timeout [ 210.207372][ T29] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 210.368908][ T29] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.373137][ T29] usb 12-1: config 0 has no interfaces? [ 210.377681][ T29] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.382008][ T29] usb 12-1: config 0 has no interfaces? [ 210.397003][ T29] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.401252][ T29] usb 12-1: config 0 has no interfaces? [ 210.406634][ T29] usb 12-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 210.416855][ T29] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 210.420336][ T29] usb 12-1: Product: syz [ 210.422041][ T29] usb 12-1: Manufacturer: syz [ 210.423980][ T29] usb 12-1: SerialNumber: syz [ 210.435806][ T29] usb 12-1: config 0 descriptor?? [ 210.459245][T12375] netlink: 'syz.2.1724': attribute type 1 has an invalid length. [ 210.485365][T12375] 8021q: adding VLAN 0 to HW filter on device bond8 [ 210.655935][T12364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.662192][T12364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.669383][T12364] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1721'. [ 210.675261][T12364] f2fs: Unknown parameter 'YÀl§ŠºÌíL„ ž¾í<χ [ 210.675261][T12364] €Ôî³eævUÜF®j.ì8föÇMK‘)‰¸±¢…ò3#Û Ê„ú¨ëåŽ"}ïR“Å”±Õ3Ö].ÏøuŸÏÊ„5' [ 210.686286][ T29] usb 12-1: USB disconnect, device number 3 [ 210.766954][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 210.869867][T12403] veth0_to_team: entered promiscuous mode [ 210.873820][T12403] veth0_to_team: left promiscuous mode [ 210.910568][T12404] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1729'. [ 210.910594][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1729'. [ 211.069342][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1733'. [ 211.072617][T12416] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1733'. [ 211.150302][T12421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1734'. [ 211.154495][T12421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1734'. [ 211.159475][T12421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1734'. [ 211.226350][ T63] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 211.269177][T12428] netlink: 'syz.2.1738': attribute type 26 has an invalid length. [ 211.558016][T12454] fuse: Invalid rootmode [ 211.664878][T12470] bond9: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 211.671274][T12470] bond9 (unregistering): Released all slaves [ 211.806942][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 211.867159][ T2306] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 212.019827][ T2306] usb 10-1: config 0 has an invalid descriptor of length 135, skipping remainder of the config [ 212.023423][ T2306] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 212.029455][T12486] sctp: [Deprecated]: syz.6.1753 (pid 12486) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.029455][T12486] Use struct sctp_sack_info instead [ 212.030763][ T2306] usb 10-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 212.039696][ T2306] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.042486][ T2306] usb 10-1: Product: syz [ 212.043992][ T2306] usb 10-1: Manufacturer: syz [ 212.045600][ T2306] usb 10-1: SerialNumber: syz [ 212.047186][ T63] Bluetooth: hci4: command tx timeout [ 212.051606][ T2306] usb 10-1: config 0 descriptor?? [ 212.135095][T12499] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 212.140290][T12499] overlayfs: failed to set uuid (187/file1, err=-13); falling back to uuid=null. [ 212.144907][T12499] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 212.151964][T12500] overlay: filesystem on ./bus not supported as upperdir [ 212.245546][T12510] futex_wake_op: syz.6.1759 tries to shift op by -1; fix this program [ 212.268638][ T2306] usb 10-1: USB disconnect, device number 8 [ 212.746978][ T39] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 212.846966][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 212.906901][ T39] usb 11-1: Using ep0 maxpacket: 8 [ 212.910741][ T39] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 212.915303][ T39] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 212.919658][ T39] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.925673][ T39] usb 11-1: config 0 descriptor?? [ 212.947083][ T24] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 212.985069][T12569] team0: No ports can be present during mode change [ 213.118763][ T24] usb 12-1: config 0 has no interfaces? [ 213.121254][ T24] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.125385][ T24] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.139943][ T39] iowarrior 11-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 213.144467][ T24] usb 12-1: config 0 descriptor?? [ 213.338780][ T39] usb 11-1: USB disconnect, device number 15 [ 213.351907][T12561] ipt_REJECT: ECHOREPLY no longer supported. [ 213.363187][ T55] usb 12-1: USB disconnect, device number 4 [ 213.470274][T12584] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 213.507021][T12586] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 213.675438][T12594] wireguard: wg2: Could not create IPv4 socket [ 213.678578][T12595] wireguard: wg2: Could not create IPv4 socket [ 213.886902][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 213.996568][T12618] kvm: user requested TSC rate below hardware speed [ 214.104890][T12627] could not open pipe file descriptor [ 214.127103][ T63] Bluetooth: hci4: command tx timeout [ 214.168246][T12630] overlayfs: missing 'lowerdir' [ 214.195080][T12630] fuse: Bad value for 'rootmode' [ 214.428771][T12641] team0: Port device vlan0 added [ 214.559396][ T40] kauditd_printk_skb: 259 callbacks suppressed [ 214.559448][ T40] audit: type=1400 audit(1771875004.630:2336): avc: denied { create } for pid=12647 comm="syz.6.1803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 214.573526][ T40] audit: type=1400 audit(1771875004.630:2337): avc: denied { connect } for pid=12647 comm="syz.6.1803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 214.582659][ T40] audit: type=1400 audit(1771875004.650:2338): avc: denied { watch watch_reads } for pid=12647 comm="syz.6.1803" path="/201" dev="tmpfs" ino=1092 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 214.682315][ T6013] libceph: connect (1)[c::]:6789 error -101 [ 214.684480][ T6013] libceph: mon0 (1)[c::]:6789 connect error [ 214.694493][ T40] audit: type=1400 audit(1771875004.760:2339): avc: denied { watch watch_reads } for pid=12658 comm="syz.2.1800" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 214.721099][ T6013] libceph: connect (1)[c::]:6789 error -101 [ 214.723310][ T6013] libceph: mon0 (1)[c::]:6789 connect error [ 214.740491][ T40] audit: type=1400 audit(1771875004.810:2340): avc: denied { create } for pid=12664 comm="syz.2.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 214.747226][ T40] audit: type=1400 audit(1771875004.810:2341): avc: denied { write } for pid=12664 comm="syz.2.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 214.754633][ T40] audit: type=1400 audit(1771875004.810:2342): avc: denied { nlmsg_write } for pid=12664 comm="syz.2.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 214.836682][ T40] audit: type=1400 audit(1771875004.900:2343): avc: denied { getopt } for pid=12668 comm="syz.2.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 214.927105][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 214.954875][ T6013] libceph: connect (1)[c::]:6789 error -101 [ 214.958113][ T6013] libceph: mon0 (1)[c::]:6789 connect error [ 214.969934][ T40] audit: type=1400 audit(1771875005.040:2344): avc: denied { create } for pid=12676 comm="syz.7.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 214.976760][ T40] audit: type=1400 audit(1771875005.040:2345): avc: denied { read write } for pid=12676 comm="syz.7.1811" name="qrtr-tun" dev="devtmpfs" ino=1340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 214.977335][ T6013] libceph: connect (1)[c::]:6789 error -101 [ 214.989309][ T6013] libceph: mon0 (1)[c::]:6789 connect error [ 215.012689][T12677] veth1_to_team: entered promiscuous mode [ 215.091306][T12676] veth1_to_team: left promiscuous mode [ 215.119486][T12685] __nla_validate_parse: 70 callbacks suppressed [ 215.119532][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1814'. [ 215.187234][T12690] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1815'. [ 215.352795][T12710] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1823'. [ 215.389869][T12710] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12710 comm=syz.7.1823 [ 215.477329][ T6013] libceph: connect (1)[c::]:6789 error -101 [ 215.479982][ T6013] libceph: mon0 (1)[c::]:6789 connect error [ 215.489378][T12655] ceph: No mds server is up or the cluster is laggy [ 215.494952][T12661] ceph: No mds server is up or the cluster is laggy [ 215.498677][ T6013] libceph: connect (1)[c::]:6789 error -101 [ 215.501453][ T6013] libceph: mon0 (1)[c::]:6789 connect error [ 215.573057][T12724] netlink: 'syz.5.1824': attribute type 2 has an invalid length. [ 215.575904][T12724] netlink: 'syz.5.1824': attribute type 1 has an invalid length. [ 215.582263][T12724] netlink: 'syz.5.1824': attribute type 1 has an invalid length. [ 215.753328][T12731] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1827'. [ 215.817123][T12738] TCP: TCP_TX_DELAY enabled [ 215.967095][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 216.112393][T12748] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 216.116340][T12748] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 216.379921][T12754] hpfs: Bad magic ... probably not HPFS [ 216.384381][T12754] hpfs: Bad magic ... probably not HPFS [ 216.640463][T12761] netlink: 212328 bytes leftover after parsing attributes in process `syz.5.1837'. [ 216.643832][T12761] netlink: Unknown conntrack attr (type=2304, max=9) [ 216.652324][T12761] tipc: Started in network mode [ 216.654046][T12761] tipc: Node identity ac141441, cluster identity 4711 [ 216.657379][T12761] tipc: Enabled bearer , priority 10 [ 216.756116][T12777] Can't find a SQUASHFS superblock on nullb0 [ 216.759245][T12777] Can't find a SQUASHFS superblock on nullb0 [ 216.792481][T12781] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 216.837710][T12788] Cannot find add_set index 2 as target [ 216.842082][T12788] SELinux: syz.5.1847 (12788) set checkreqprot to 1. This is no longer supported. [ 217.006943][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 217.024560][T12806] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 217.194672][T12820] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode [ 217.208987][T12820] bond2: (slave lo): Releasing backup interface [ 217.211630][T12820] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 217.229784][T12820] bridge_slave_0: left allmulticast mode [ 217.232124][T12820] bridge_slave_0: left promiscuous mode [ 217.234703][T12820] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.241439][T12820] bridge_slave_1: left allmulticast mode [ 217.243991][T12820] bridge_slave_1: left promiscuous mode [ 217.246599][T12820] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.256213][T12820] bond0: (slave bond_slave_0): Releasing backup interface [ 217.260184][T12823] netlink: 'syz.5.1857': attribute type 10 has an invalid length. [ 217.263365][T12820] bond0: (slave bond_slave_1): Releasing backup interface [ 217.269326][T12820] team0: Port device team_slave_0 removed [ 217.274243][T12820] team0: Port device team_slave_1 removed [ 217.279314][T12820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.281874][T12820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.285280][T12820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.287902][T12820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.291801][T12820] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 217.299726][T12823] mac80211_hwsim hwsim14 wlan1: left allmulticast mode [ 217.427367][ T34] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 217.512347][T12831] netlink: 165 bytes leftover after parsing attributes in process `syz.5.1860'. [ 217.590010][ T34] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 217.594214][ T34] usb 11-1: config 0 interface 0 has no altsetting 0 [ 217.599671][ T34] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 217.603492][ T34] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 217.606924][ T34] usb 11-1: Product: syz [ 217.608680][ T34] usb 11-1: Manufacturer: syz [ 217.610670][ T34] usb 11-1: SerialNumber: syz [ 217.616204][ T34] usb 11-1: config 0 descriptor?? [ 217.625384][ T34] usb 11-1: selecting invalid altsetting 0 [ 217.647058][ T24] tipc: Node number set to 2886997057 [ 217.825053][ T6013] usb 11-1: USB disconnect, device number 16 [ 218.046963][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 218.135667][T12846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1866'. [ 218.136652][T12845] ceph: No mds server is up or the cluster is laggy [ 218.318029][T12856] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 218.392228][T12864] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1872'. [ 218.397348][T12863] [U]  [ 218.774576][T12883] overlayfs: missing 'lowerdir' [ 218.831740][T12889] openvswitch: netlink: IPv4 tun info is not correct [ 219.086924][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 219.169971][T12911] tmpfs: Bad value for 'nr_inodes' [ 219.213244][T12915] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1888'. [ 219.264880][T12916] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1888'. [ 219.500938][T12921] overlay: ./file1 is not a directory [ 219.614871][ T40] kauditd_printk_skb: 197 callbacks suppressed [ 219.614888][ T40] audit: type=1400 audit(1771875009.680:2543): avc: denied { connect } for pid=12927 comm="syz.5.1895" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 219.625823][ T40] audit: type=1400 audit(1771875009.680:2544): avc: denied { setopt } for pid=12927 comm="syz.5.1895" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 219.636613][T12930] 9pnet_virtio: no channels available for device syz [ 219.639940][ T40] audit: type=1400 audit(1771875009.690:2545): avc: denied { create } for pid=12927 comm="syz.5.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 219.663119][ T40] audit: type=1400 audit(1771875009.690:2546): avc: denied { wake_alarm } for pid=12927 comm="syz.5.1895" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 219.670883][ T40] audit: type=1400 audit(1771875009.720:2547): avc: denied { create } for pid=12929 comm="syz.7.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 219.677589][ T40] audit: type=1400 audit(1771875009.720:2548): avc: denied { write } for pid=12929 comm="syz.7.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 219.684017][ T40] audit: type=1400 audit(1771875009.720:2549): avc: denied { read } for pid=12929 comm="syz.7.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 219.690727][ T40] audit: type=1400 audit(1771875009.720:2550): avc: denied { ioctl } for pid=12929 comm="syz.7.1894" path="socket:[49862]" dev="sockfs" ino=49862 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 219.699372][ T40] audit: type=1400 audit(1771875009.740:2551): avc: denied { bind } for pid=12927 comm="syz.5.1895" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 219.713226][ T40] audit: type=1400 audit(1771875009.740:2552): avc: denied { name_bind } for pid=12927 comm="syz.5.1895" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 219.715599][T12931] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 220.126938][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 220.267109][ T2306] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 220.396503][T12955] binder: 12954:12955 ioctl c00c6211 0 returned -14 [ 220.405062][T12955] pimreg: entered allmulticast mode [ 220.431035][ T2306] usb 10-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 220.434599][ T2306] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.437900][ T2306] usb 10-1: Product: syz [ 220.441295][ T2306] usb 10-1: Manufacturer: syz [ 220.443322][ T2306] usb 10-1: SerialNumber: syz [ 220.448197][ T2306] usb 10-1: config 0 descriptor?? [ 220.451856][ T2306] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 220.463769][ T2306] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 220.470393][ T2306] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 220.474033][ T2306] usb 10-1: media controller created [ 220.487115][T12956] pimreg: left allmulticast mode [ 220.488829][ T2306] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 220.534307][ T2306] DVB: Unable to find symbol mt352_attach() [ 220.562468][ T2306] DVB: Unable to find symbol nxt6000_attach() [ 220.565203][ T2306] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 220.572192][ T2306] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input23 [ 220.582192][ T2306] dvb-usb: schedule remote query interval to 1000 msecs. [ 220.585238][ T2306] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 220.594167][ T2306] dvb-usb: bulk message failed: -22 (7/0) [ 220.597170][ T2306] dvb-usb: bulk message failed: -22 (7/0) [ 220.708853][ T6007] usb 10-1: USB disconnect, device number 9 [ 220.760523][ T6007] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 221.166963][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 221.293096][T12979] netlink: 'syz.6.1910': attribute type 1 has an invalid length. [ 221.307666][T12979] support for the xor transformation has been removed. [ 222.115892][T12998] syzkaller1: entered promiscuous mode [ 222.118844][T12998] syzkaller1: entered allmulticast mode [ 222.124606][T12998] __nla_validate_parse: 1 callbacks suppressed [ 222.124621][T12998] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1915'. [ 222.206908][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 222.260521][T13005] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 222.275717][T13005] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 222.279867][T13005] UDF-fs: Scanning with blocksize 2048 failed [ 222.283621][T13005] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 222.288237][T13005] UDF-fs: Scanning with blocksize 4096 failed [ 222.367663][ T2306] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 222.580857][T13023] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 223.246951][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 223.385731][T13038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=13038 comm=syz.7.1927 [ 223.475116][T13049] netlink: 'syz.6.1932': attribute type 11 has an invalid length. [ 223.701979][T13070] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 223.758531][T13075] netlink: 'syz.7.1941': attribute type 1 has an invalid length. [ 223.799008][T13075] bond1: entered promiscuous mode [ 223.801561][T13075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.808990][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1941'. [ 223.917129][T13087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=13087 comm=syz.7.1944 [ 223.967004][ T55] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 223.996278][T13095] sctp: [Deprecated]: syz.7.1947 (pid 13095) Use of struct sctp_assoc_value in delayed_ack socket option. [ 223.996278][T13095] Use struct sctp_sack_info instead [ 224.018847][T13098] overlayfs: failed to clone lowerpath [ 224.137785][ T55] usb 11-1: Using ep0 maxpacket: 8 [ 224.141474][ T55] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 224.144977][ T55] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.149398][ T55] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 224.153478][ T55] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 224.157752][ T55] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.163417][ T55] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 224.167688][ T55] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.239603][T13116] batman_adv: batadv0: Adding interface: gretap2 [ 224.241859][T13116] batman_adv: batadv0: Interface activated: gretap2 [ 224.244117][T13116] batadv0: mtu less than device minimum [ 224.246557][T13116] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 224.250887][T13116] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 224.254915][T13116] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 224.259030][T13116] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 224.263178][T13116] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 224.374873][ T55] usb 11-1: GET_CAPABILITIES returned 0 [ 224.378695][ T55] usbtmc 11-1:16.0: can't read capabilities [ 224.890441][ T40] kauditd_printk_skb: 244 callbacks suppressed [ 224.890452][ T40] audit: type=1400 audit(1771875014.960:2797): avc: denied { create } for pid=13136 comm="syz.7.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 224.899506][ T40] audit: type=1400 audit(1771875014.960:2798): avc: denied { read } for pid=13136 comm="syz.7.1960" name="vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 224.908122][ T40] audit: type=1400 audit(1771875014.960:2799): avc: denied { open } for pid=13136 comm="syz.7.1960" path="/dev/vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 224.953085][ T40] audit: type=1400 audit(1771875015.020:2800): avc: denied { create } for pid=13141 comm="syz.7.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 224.961902][ T40] audit: type=1400 audit(1771875015.040:2801): avc: denied { ioctl } for pid=13141 comm="syz.7.1961" path="socket:[54011]" dev="sockfs" ino=54011 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 224.972380][ T40] audit: type=1400 audit(1771875015.040:2802): avc: denied { connect } for pid=13141 comm="syz.7.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 224.981868][ T40] audit: type=1400 audit(1771875015.040:2803): avc: denied { write } for pid=13141 comm="syz.7.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 224.990507][ T40] audit: type=1400 audit(1771875015.040:2804): avc: denied { create } for pid=13141 comm="syz.7.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 224.997850][ T40] audit: type=1400 audit(1771875015.040:2805): avc: denied { ioctl } for pid=13141 comm="syz.7.1961" path="/dev/video7" dev="devtmpfs" ino=974 ioctlcmd=0x5627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 225.002384][T13142] Invalid source name [ 225.006183][ T40] audit: type=1400 audit(1771875015.070:2806): avc: denied { execmem } for pid=13141 comm="syz.7.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 225.007871][T13142] UBIFS error (pid: 13142): cannot open "/dev/sg0", error -22 [ 225.064718][T13145] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1962'. [ 225.072492][T13144] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1962'. [ 225.122533][T13149] binder: 13148:13149 ioctl f 200000000180 returned -22 [ 225.240228][T13152] netlink: 'syz.7.1964': attribute type 1 has an invalid length. [ 225.243574][T13152] netlink: 'syz.7.1964': attribute type 1 has an invalid length. [ 225.327319][ C3] net_ratelimit: 15 callbacks suppressed [ 225.327339][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 225.396417][T13154] overlayfs: failed to clone upperpath [ 225.739819][T13171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13171 comm=syz.7.1970 [ 225.782381][T13173] lo speed is unknown, defaulting to 1000 [ 226.330343][T13184] sctp: [Deprecated]: syz.7.1972 (pid 13184) Use of int in maxseg socket option. [ 226.330343][T13184] Use struct sctp_assoc_value instead [ 226.367378][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 226.383480][T13186] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 226.555996][T13203] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1979'. [ 226.642582][T13210] overlay: filesystem on ./file0 not supported as upperdir [ 226.720088][T13219] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 226.727213][T13219] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1985'. [ 226.735083][T13219] Invalid ELF header magic: != ELF [ 226.748212][T13219] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 226.750603][ T2306] usb 11-1: USB disconnect, device number 17 [ 226.752269][T13219] overlayfs: missing 'lowerdir' [ 226.839388][T13228] fuse: Bad value for 'fd' [ 226.842693][T13228] netlink: 187976 bytes leftover after parsing attributes in process `syz.2.1989'. [ 226.878158][T13198] [ 226.879065][T13198] ====================================================== [ 226.881814][T13198] WARNING: possible circular locking dependency detected [ 226.884659][T13198] syzkaller #0 Tainted: G L [ 226.887136][T13198] ------------------------------------------------------ [ 226.889920][T13198] syz.7.1978/13198 is trying to acquire lock: [ 226.892358][T13198] ffffffff8e972d48 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0xedc/0x1c50 [ 226.895816][T13198] [ 226.895816][T13198] but task is already holding lock: [ 226.898187][T13198] ffff888028cb9370 (&q->q_usage_counter(io)#56){++++}-{0:0}, at: blk_mq_update_nr_hw_queues+0x88e/0x1190 [ 226.902013][T13198] [ 226.902013][T13198] which lock already depends on the new lock. [ 226.902013][T13198] [ 226.905677][T13198] [ 226.905677][T13198] the existing dependency chain (in reverse order) is: [ 226.908477][T13198] [ 226.908477][T13198] -> #2 (&q->q_usage_counter(io)#56){++++}-{0:0}: [ 226.911361][T13198] blk_alloc_queue+0x610/0x790 [ 226.913442][T13198] blk_mq_alloc_queue+0x174/0x290 [ 226.915382][T13198] __blk_mq_alloc_disk+0x29/0x120 [ 226.917161][T13198] nbd_dev_add+0x492/0xb10 [ 226.918886][T13198] nbd_init+0x291/0x2b0 [ 226.920630][T13198] do_one_initcall+0x11d/0x760 [ 226.922789][T13198] kernel_init_freeable+0x6e5/0x7a0 [ 226.925265][T13198] kernel_init+0x1f/0x1e0 [ 226.927519][T13198] ret_from_fork+0x754/0xd80 [ 226.929767][T13198] ret_from_fork_asm+0x1a/0x30 [ 226.932033][T13198] [ 226.932033][T13198] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 226.935199][T13198] fs_reclaim_acquire+0xc4/0x100 [ 226.937510][T13198] prepare_alloc_pages+0x166/0x5f0 [ 226.939863][T13198] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 226.942564][T13198] __alloc_pages_noprof+0xb/0x1b0 [ 226.944914][T13198] pcpu_populate_chunk+0x118/0x990 [ 226.947287][T13198] pcpu_alloc_noprof+0x833/0x1c50 [ 226.949652][T13198] iommu_dma_init_fq+0x1da/0x7e0 [ 226.951943][T13198] iommu_setup_dma_ops+0x1250/0x1630 [ 226.954409][T13198] bus_iommu_probe+0x264/0x550 [ 226.956625][T13198] iommu_device_register+0x1af/0x280 [ 226.959061][T13198] intel_iommu_init+0x2020/0x2970 [ 226.961391][T13198] pci_iommu_init+0x3c/0x80 [ 226.963531][T13198] do_one_initcall+0x11d/0x760 [ 226.965624][T13198] kernel_init_freeable+0x6e5/0x7a0 [ 226.968012][T13198] kernel_init+0x1f/0x1e0 [ 226.970161][T13198] ret_from_fork+0x754/0xd80 [ 226.972312][T13198] ret_from_fork_asm+0x1a/0x30 [ 226.974541][T13198] [ 226.974541][T13198] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 226.977739][T13198] __lock_acquire+0x14b8/0x2630 [ 226.979997][T13198] lock_acquire+0x1cf/0x380 [ 226.982094][T13198] __mutex_lock+0x1a2/0x1b90 [ 226.984237][T13198] pcpu_alloc_noprof+0xedc/0x1c50 [ 226.986451][T13198] sbitmap_init_node+0x2ff/0x720 [ 226.988803][T13198] sbitmap_queue_init_node+0x40/0x4a0 [ 226.991288][T13198] blk_mq_init_tags+0x184/0x300 [ 226.993532][T13198] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 226.995682][T13198] __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 226.997679][T13198] blk_mq_update_nr_hw_queues+0xaba/0x1190 [ 226.999731][T13198] nbd_start_device+0x1a6/0xbd0 [ 227.001497][T13198] nbd_ioctl+0x4a6/0xd30 [ 227.003091][T13198] blkdev_ioctl+0x5ad/0x6f0 [ 227.004785][T13198] __x64_sys_ioctl+0x18e/0x210 [ 227.006546][T13198] do_syscall_64+0x106/0xf80 [ 227.008197][T13198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.010295][T13198] [ 227.010295][T13198] other info that might help us debug this: [ 227.010295][T13198] [ 227.013525][T13198] Chain exists of: [ 227.013525][T13198] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#56 [ 227.013525][T13198] [ 227.017892][T13198] Possible unsafe locking scenario: [ 227.017892][T13198] [ 227.020301][T13198] CPU0 CPU1 [ 227.022289][T13198] ---- ---- [ 227.024446][T13198] lock(&q->q_usage_counter(io)#56); [ 227.026592][T13198] lock(fs_reclaim); [ 227.028703][T13198] lock(&q->q_usage_counter(io)#56); [ 227.031264][T13198] lock(pcpu_alloc_mutex); [ 227.032752][T13198] [ 227.032752][T13198] *** DEADLOCK *** [ 227.032752][T13198] [ 227.035349][T13198] 4 locks held by syz.7.1978/13198: [ 227.036996][T13198] #0: ffff888028e9b9d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x91/0x1190 [ 227.040906][T13198] #1: ffff888028e9b8d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa4/0x1190 [ 227.044533][T13198] #2: ffff888028cb9370 (&q->q_usage_counter(io)#56){++++}-{0:0}, at: blk_mq_update_nr_hw_queues+0x88e/0x1190 [ 227.048247][T13198] #3: ffff888028cb93a8 (&q->q_usage_counter(queue)#40){+.+.}-{0:0}, at: blk_mq_update_nr_hw_queues+0x88e/0x1190 [ 227.052732][T13198] [ 227.052732][T13198] stack backtrace: [ 227.054710][T13198] CPU: 1 UID: 0 PID: 13198 Comm: syz.7.1978 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.054727][T13198] Tainted: [L]=SOFTLOCKUP [ 227.054730][T13198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.054775][T13198] Call Trace: [ 227.054782][T13198] [ 227.054788][T13198] dump_stack_lvl+0x100/0x190 [ 227.054809][T13198] print_circular_bug.cold+0x178/0x1c7 [ 227.054827][T13198] check_noncircular+0x146/0x160 [ 227.054845][T13198] __lock_acquire+0x14b8/0x2630 [ 227.054864][T13198] lock_acquire+0x1cf/0x380 [ 227.054879][T13198] ? pcpu_alloc_noprof+0xedc/0x1c50 [ 227.054894][T13198] ? __pfx___might_resched+0x10/0x10 [ 227.054907][T13198] __mutex_lock+0x1a2/0x1b90 [ 227.054918][T13198] ? pcpu_alloc_noprof+0xedc/0x1c50 [ 227.054931][T13198] ? __pfx_stack_trace_save+0x10/0x10 [ 227.054944][T13198] ? pcpu_alloc_noprof+0xedc/0x1c50 [ 227.054957][T13198] ? stack_depot_save_flags+0x27/0x9d0 [ 227.054972][T13198] ? __pfx___mutex_lock+0x10/0x10 [ 227.054982][T13198] ? kasan_save_stack+0x3f/0x50 [ 227.054996][T13198] ? kasan_save_stack+0x30/0x50 [ 227.055009][T13198] ? kasan_save_track+0x14/0x30 [ 227.055023][T13198] ? __kasan_kmalloc+0xaa/0xb0 [ 227.055035][T13198] ? blk_mq_init_tags+0x8c/0x300 [ 227.055047][T13198] ? blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 227.055058][T13198] ? __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 227.055068][T13198] ? nbd_ioctl+0x4a6/0xd30 [ 227.055080][T13198] ? blkdev_ioctl+0x5ad/0x6f0 [ 227.055091][T13198] ? pcpu_alloc_noprof+0xedc/0x1c50 [ 227.055104][T13198] pcpu_alloc_noprof+0xedc/0x1c50 [ 227.055120][T13198] sbitmap_init_node+0x2ff/0x720 [ 227.055136][T13198] sbitmap_queue_init_node+0x40/0x4a0 [ 227.055151][T13198] blk_mq_init_tags+0x184/0x300 [ 227.055164][T13198] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 227.055175][T13198] ? lockdep_hardirqs_on+0x78/0x100 [ 227.055186][T13198] __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 227.055197][T13198] blk_mq_update_nr_hw_queues+0xaba/0x1190 [ 227.055210][T13198] ? __mutex_unlock_slowpath+0x15c/0x790 [ 227.055221][T13198] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 227.055236][T13198] nbd_start_device+0x1a6/0xbd0 [ 227.055249][T13198] ? security_capable+0x80/0x260 [ 227.055295][T13198] nbd_ioctl+0x4a6/0xd30 [ 227.055306][T13198] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 227.055320][T13198] ? __pfx_nbd_ioctl+0x10/0x10 [ 227.055331][T13198] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 227.055373][T13198] ? __fget_files+0x215/0x3d0 [ 227.055382][T13198] ? __pfx_nbd_ioctl+0x10/0x10 [ 227.055394][T13198] blkdev_ioctl+0x5ad/0x6f0 [ 227.055403][T13198] ? __pfx_blkdev_ioctl+0x10/0x10 [ 227.055418][T13198] ? selinux_file_ioctl+0x139/0x290 [ 227.055429][T13198] ? selinux_file_ioctl+0xb4/0x290 [ 227.055440][T13198] ? __pfx_blkdev_ioctl+0x10/0x10 [ 227.055456][T13198] __x64_sys_ioctl+0x18e/0x210 [ 227.055470][T13198] do_syscall_64+0x106/0xf80 [ 227.055480][T13198] ? clear_bhb_loop+0x40/0x90 [ 227.055491][T13198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.055502][T13198] RIP: 0033:0x7f8cfbd9c629 [ 227.055514][T13198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.055527][T13198] RSP: 002b:00007f8cf9fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.055562][T13198] RAX: ffffffffffffffda RBX: 00007f8cfc016090 RCX: 00007f8cfbd9c629 [ 227.055569][T13198] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 227.055575][T13198] RBP: 00007f8cfbe32b39 R08: 0000000000000000 R09: 0000000000000000 [ 227.055581][T13198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.055586][T13198] R13: 00007f8cfc016128 R14: 00007f8cfc016090 R15: 00007ffd1fc1edb8 [ 227.055596][T13198] [ 227.290246][T13198] block nbd7: shutting down sockets SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 227.406987][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 227.488495][T13220] bridge0: port 3(syz_tun) entered disabled state [ 227.501217][T13220] syz_tun (unregistering): left allmulticast mode [ 227.504064][T13220] syz_tun (unregistering): left promiscuous mode [ 227.507797][T13220] bridge0: port 3(syz_tun) entered disabled state [ 227.524510][T10453] bridge0: port 3(syz_tun) entered disabled state [ 227.531566][T10453] syz_tun (unregistering): left allmulticast mode [ 227.533709][T10453] syz_tun (unregistering): left promiscuous mode [ 227.536150][T10453] bridge0: port 3(syz_tun) entered disabled state [ 227.830651][T10056] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.834012][T10056] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 227.901568][T10056] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.905801][T10056] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 227.984292][T10056] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.987807][T10056] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 228.080347][T10056] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.084487][T10056] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 228.178413][T10056] bridge_slave_1: left allmulticast mode [ 228.180950][T10056] bridge_slave_1: left promiscuous mode [ 228.183497][T10056] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.188116][T10056] bridge_slave_0: left allmulticast mode [ 228.190125][T10056] bridge_slave_0: left promiscuous mode [ 228.191938][T10056] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.245396][T10056] gretap0 (unregistering): left promiscuous mode [ 228.447035][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 228.527164][T10056] bond0 (unregistering): left promiscuous mode [ 228.529485][T10056] bond_slave_0: left promiscuous mode [ 228.531806][T10056] bond_slave_1: left promiscuous mode [ 228.536725][T10056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.543387][T10056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.549143][T10056] bond0 (unregistering): Released all slaves [ 228.554085][T10056] bond1 (unregistering): Released all slaves [ 228.561869][T10056] bond2 (unregistering): Released all slaves [ 228.893089][T10056] hsr_slave_0: left promiscuous mode [ 228.895739][T10056] hsr_slave_1: left promiscuous mode [ 228.898499][T10056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.901725][T10056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.905220][T10056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.908746][T10056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.915083][T10056] veth0_macvtap: left promiscuous mode [ 228.918993][T10056] veth1_vlan: left promiscuous mode [ 228.958940][T10056] team0 (unregistering): Port device vlan0 removed [ 228.999310][T10056] team0 (unregistering): Port device team_slave_1 removed [ 229.004097][T10056] team0 (unregistering): Port device team_slave_0 removed [ 229.325449][T10056] IPVS: stop unused estimator thread 0... [ 229.487121][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 230.526962][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 231.567069][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 232.607403][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 233.647085][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 234.686989][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 235.727003][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 236.767005][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available